$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/315EA0CCA9B111EC9C177A56C4F9AE02.roa File: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (raw, json) Hash identifier: Za7LOD1x/AWq47LZxakqACtbC+NnfwEUEJeBoexu1ug= Subject key identifier: 3E:A6:1D:E8:E2:3A:41:93:E7:99:DA:D7:66:50:25:93:71:8D:89:46 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 1127 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/315EA0CCA9B111EC9C177A56C4F9AE02.roa Signing time: Wed 02 Apr 2025 17:46:35 +0000 ROA not before: Wed 02 Apr 2025 17:46:35 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 38136 IP address blocks: 103.135.102.0/23 maxlen: 24 2404:7ac0:4000::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 17:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4391 (0x1127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3 Validity Not Before: Apr 2 17:46:35 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ed77fb-93d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:f2:ee:f9:22:53:37:f5:23:04:72:52:76: b2:d5:5b:90:0b:ab:06:5b:b7:bb:a1:1f:93:f8:03: da:52:cf:d6:a6:c8:9b:4b:7d:7d:fa:08:db:92:cb: ed:db:bf:29:ff:f6:f6:ec:75:2a:aa:86:be:1b:35: 83:fe:a3:17:97:47:e8:da:d2:ea:7e:9a:75:c7:9e: 15:d6:83:6d:a3:e8:7c:ff:eb:1a:79:2e:99:7d:33: 78:59:e2:d3:e2:8f:e0:65:f7:4f:71:c8:5d:07:11: f0:28:ca:55:03:16:6c:8c:92:d4:b1:ee:8e:2b:93: 22:35:13:86:a4:c4:b4:63:6b:c4:f7:7d:a6:a9:67: 3a:0a:6f:12:1b:5a:e0:4e:7a:64:a3:fd:be:3d:e9: 4f:98:f9:83:da:69:55:d9:1f:01:bb:e9:10:f6:8e: 10:22:48:ee:a8:54:e0:82:bb:f2:22:7a:b7:02:2d: d5:89:82:07:9a:22:33:a1:a6:2a:34:26:84:1b:c8: 24:16:3b:ef:c7:df:4a:6c:fc:11:54:cb:b6:9f:e2: 4d:6c:bb:95:90:7d:4e:46:5f:d2:53:78:86:f1:97: 62:e3:10:20:39:8d:2d:f9:35:30:c4:98:99:47:ea: 6f:ff:35:b4:d2:7e:c3:ec:d5:80:80:54:a1:2b:f0: f7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A6:1D:E8:E2:3A:41:93:E7:99:DA:D7:66:50:25:93:71:8D:89:46 X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/315EA0CCA9B111EC9C177A56C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.102.0/23 IPv6: 2404:7ac0:4000::/34 Signature Algorithm: sha256WithRSAEncryption 4b:41:8a:c8:bf:2d:f3:d7:58:43:16:42:b9:e6:d7:78:b2:ae: e3:96:de:22:6b:10:77:1c:d8:89:9d:26:ad:bc:36:e5:38:fa: 03:17:0a:56:ce:8f:b1:f4:88:3a:43:e0:b3:d1:1a:53:e5:09: 21:37:c1:70:85:49:2d:48:ac:1e:bb:91:7d:42:90:df:04:cf: 2f:50:57:21:1f:98:69:10:f8:4e:65:9b:cd:e8:20:55:a2:20: a1:96:7f:ea:6c:4b:6a:be:1a:a0:45:c9:f7:70:c9:00:2a:43: de:64:98:df:9d:15:04:b3:78:4a:0c:27:7b:07:49:da:46:8f: 79:44:db:24:70:81:4b:cb:50:7f:88:6f:5e:e4:d9:d8:3f:d9: 3e:f2:0c:c9:d8:be:b1:10:8e:98:a3:14:e8:4c:09:29:a5:f6: ae:97:91:b6:63:3a:54:02:8f:fc:ad:0e:ed:3c:28:64:9e:cb: a8:01:0c:1c:bd:dc:28:ee:63:a0:96:f6:05:d8:c0:82:f7:63: e6:94:b6:9c:cf:f2:43:0e:ff:19:0c:c6:de:fb:0a:2a:03:42: 6c:5e:89:e3:9e:06:6d:26:4b:8d:a7:22:6b:f5:f3:da:63:80: 83:ee:df:c3:50:30:8e:e1:5f:1d:b1:28:ab:9b:3c:06:39:a8: 84:03:bd:44 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICEScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjUwNDAyMTc0NjM1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkNzdmYi05M2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8Hy7vkiUzf1IwRyUnay1VuQC6sGW7e7oR+T+APaUs/WpsibS319+gjbksvt 278p//b27HUqqoa+GzWD/qMXl0fo2tLqfpp1x54V1oNto+h8/+saeS6ZfTN4WeLT 4o/gZfdPcchdBxHwKMpVAxZsjJLUse6OK5MiNROGpMS0Y2vE932mqWc6Cm8SG1rg Tnpko/2+PelPmPmD2mlV2R8Bu+kQ9o4QIkjuqFTggrvyInq3Ai3ViYIHmiIzoaYq NCaEG8gkFjvvx99KbPwRVMu2n+JNbLuVkH1ORl/SU3iG8Zdi4xAgOY0t+TUwxJiZ R+pv/zW00n7D7NWAgFShK/D3sQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFD6mHeji OkGT55na12ZQJZNxjYlGMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE2QTMvNzcyN0NFNUMzOEM3MTFFOUE3QjVDMjMzQzRGOUFFMDIvMzE1RUEwQ0NB OUIxMTFFQzlDMTc3QTU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAFnh2YwDgQCAAIwCAMGBiQEesBAMA0GCSqGSIb3DQEBCwUA A4IBAQBLQYrIvy3z11hDFkK55td4sq7jlt4iaxB3HNiJnSatvDblOPoDFwpWzo+x 9Ig6Q+Cz0RpT5QkhN8FwhUktSKweu5F9QpDfBM8vUFchH5hpEPhOZZvN6CBVoiCh ln/qbEtqvhqgRcn3cMkAKkPeZJjfnRUEs3hKDCd7B0naRo95RNskcIFLy1B/iG9e 5NnYP9k+8gzJ2L6xEI6YoxToTAkppfaul5G2YzpUAo/8rQ7tPChknsuoAQwcvdwo 7mOglvYF2MCC92PmlLacz/JDDv8ZDMbe+woqA0JsXonjngZtJkuNpyJr9fPaY4CD 7t/DUDCO4V8dsSirmzwGOaiEA71E -----END CERTIFICATE-----Generated at Fri Apr 11 20:45:38 2025 by rpki-client