$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/111C77744E1811EDADB36913C4F9AE02.roa File: 111C77744E1811EDADB36913C4F9AE02.roa (raw, json) Hash identifier: AKQfVSoyvedil4fBrswJw8Fk2im5oq9KA2WJlwXE+SY= Subject key identifier: A0:40:06:1B:3F:B2:4E:5A:1E:F2:6F:92:36:82:3D:99:87:0F:1F:F8 Certificate issuer: /CN=A91D0C14/serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC Certificate serial: 01DA Authority key identifier: A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/111C77744E1811EDADB36913C4F9AE02.roa Signing time: Mon 07 Apr 2025 02:08:52 +0000 ROA not before: Mon 07 Apr 2025 02:08:52 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 58876 IP address blocks: 103.8.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 00:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C14, serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC Validity Not Before: Apr 7 02:08:52 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67f333b4-3c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b9:c7:58:3f:40:46:f1:53:f3:39:92:3c:4a: 90:47:5e:24:79:61:b4:16:42:17:57:dc:77:46:c2: 03:33:c8:04:a1:8c:cf:c9:22:c0:8a:b8:a1:55:5a: fb:be:33:db:54:51:64:de:fc:da:54:71:33:7f:e0: 88:d6:f2:5d:7c:b7:ea:1d:08:af:34:28:46:d4:49: d8:06:b8:8b:66:fe:8c:c1:05:e2:f8:75:46:d4:c7: a0:92:b0:10:93:01:24:b7:33:c5:b9:5f:c3:db:46: 32:cf:ed:d5:11:19:67:df:cc:18:5b:dc:f7:ef:92: 31:42:cc:c7:de:a9:55:ca:fd:16:e3:06:26:de:67: 6b:ae:9b:f1:3f:5f:2a:2d:d3:9d:ca:37:b3:0f:f6: 23:2b:31:6d:ab:87:46:cc:0a:cc:c9:7c:6a:6d:16: 5a:b5:77:1c:0a:2c:34:a5:1d:b6:0d:9c:c4:0f:91: bd:cc:33:15:aa:11:c0:62:0e:87:03:11:b4:34:4d: d8:13:c3:c1:c7:c2:de:87:9e:fc:bf:be:43:8b:92: e7:10:12:70:71:cc:65:f2:cc:42:e2:cd:61:15:3f: 1a:3c:d8:62:1c:b0:4d:58:6d:69:be:c2:e5:df:04: 14:a5:e0:a7:14:54:96:db:d5:22:ff:5a:2c:c8:20: b1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:40:06:1B:3F:B2:4E:5A:1E:F2:6F:92:36:82:3D:99:87:0F:1F:F8 X509v3 Authority Key Identifier: keyid:A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/111C77744E1811EDADB36913C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.8.231.0/24 Signature Algorithm: sha256WithRSAEncryption 07:dc:28:50:14:54:fc:16:b8:51:d0:e8:c0:17:64:56:b4:27: e4:46:1b:bc:54:22:75:f1:4a:a3:72:60:4a:d0:11:60:58:b6: e9:e6:59:92:28:ee:ad:8a:d8:1b:50:81:d3:79:6a:29:33:b1: 47:8d:a9:2e:55:9f:31:a9:51:16:a4:50:8e:e6:d0:c2:8f:90: 1b:09:b4:39:67:28:ce:fa:27:26:bb:70:9f:1e:39:50:75:33: 13:17:bd:d0:ca:e0:a5:79:a2:3a:04:91:7c:72:1f:51:bc:7c: 34:35:85:e1:41:7d:16:ee:e7:1c:61:8f:aa:b1:29:c8:ac:94: c4:7d:90:f5:6a:87:06:7f:10:50:88:be:3c:ac:1a:a0:d2:55: 19:f8:3a:39:ba:de:9f:9f:fb:51:f8:18:35:ca:91:5d:6b:fe: 0b:3b:9a:72:0b:1c:08:35:2e:67:35:4d:1b:dd:d6:05:3d:96: 7e:d6:27:fe:59:01:f4:e1:b9:1a:12:4f:c6:5a:84:06:fc:19: de:ae:aa:4b:f3:6a:eb:0f:e5:ac:08:57:9a:9c:40:22:56:a6: fa:da:1d:7d:a0:e0:54:8b:eb:4a:68:9b:82:d9:6b:5a:42:31: 16:8b:59:be:83:7a:95:49:98:e2:89:cb:1a:e5:da:8a:cf:b9: 2b:a1:e5:ab -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDMTQxMTAvBgNVBAUTKEE3MDdFOEVENkM3NEJBRjM2MURENDA3MjcxQzZBMzRE NDQwMjIyQUMwHhcNMjUwNDA3MDIwODUyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YzMzNiNC0zYzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprnHWD9ARvFT8zmSPEqQR14keWG0FkIXV9x3RsIDM8gEoYzPySLAirihVVr7 vjPbVFFk3vzaVHEzf+CI1vJdfLfqHQivNChG1EnYBriLZv6MwQXi+HVG1MegkrAQ kwEktzPFuV/D20Yyz+3VERln38wYW9z375IxQszH3qlVyv0W4wYm3mdrrpvxP18q LdOdyjezD/YjKzFtq4dGzArMyXxqbRZatXccCiw0pR22DZzED5G9zDMVqhHAYg6H AxG0NE3YE8PBx8Leh578v75Di5LnEBJwccxl8sxC4s1hFT8aPNhiHLBNWG1pvsLl 3wQUpeCnFFSW29Ui/1osyCCxvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKBABhs/ sk5aHvJvkjaCPZmHDx/4MB8GA1UdIwQYMBaAFKcH6O1sdLrzYd1AcnHGo01EAiKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEMxNC8xODhDMUMyNjRF MTMxMUVEQjEyRjNDNkZDNEY5QUUwMi9wd2ZvN1d4MHV2TmgzVUJ5Y2NhalRVUUNJ cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B3Zm83V3gwdXZOaDNVQnljY2FqVFVRQ0lxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDBDMTQvMTg4QzFDMjY0RTEzMTFFREIxMkYzQzZGQzRGOUFFMDIvMTExQzc3NzQ0 RTE4MTFFREFEQjM2OTEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnCOcwDQYJKoZIhvcNAQELBQADggEBAAfcKFAUVPwWuFHQ 6MAXZFa0J+RGG7xUInXxSqNyYErQEWBYtunmWZIo7q2K2BtQgdN5aikzsUeNqS5V nzGpURakUI7m0MKPkBsJtDlnKM76Jya7cJ8eOVB1MxMXvdDK4KV5ojoEkXxyH1G8 fDQ1heFBfRbu5xxhj6qxKcislMR9kPVqhwZ/EFCIvjysGqDSVRn4Ojm63p+f+1H4 GDXKkV1r/gs7mnILHAg1Lmc1TRvd1gU9ln7WJ/5ZAfThuRoST8ZahAb8Gd6uqkvz ausP5awIV5qcQCJWpvraHX2g4FSL60pom4LZa1pCMRaLWb6DepVJmOKJyxrl2orP uSuh5as= -----END CERTIFICATE-----Generated at Sun Apr 13 04:55:19 2025 by rpki-client