$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/25B713A4FE6B11EBB5DD176BC4F9AE02.roa File: 25B713A4FE6B11EBB5DD176BC4F9AE02.roa (raw, json) Hash identifier: DeWvXrtTOlNASLEtVwCRq5xJVs2BWXsb8zrs6Aq/kZY= Subject key identifier: 36:24:6C:04:C7:49:C4:27:13:25:81:D3:58:20:BB:46:2D:A2:6F:D6 Certificate issuer: /CN=A91D23C7/serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Certificate serial: 04E4 Authority key identifier: 82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/25B713A4FE6B11EBB5DD176BC4F9AE02.roa Signing time: Sat 04 Jan 2025 23:12:32 +0000 ROA not before: Sat 04 Jan 2025 23:12:32 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 142628 IP address blocks: 103.171.42.0/24 maxlen: 24 2001:df7:3680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 23:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23C7, serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Validity Not Before: Jan 4 23:12:32 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6779c060-9e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:3b:2e:83:4a:c9:65:0d:95:3d:36:36:64: 16:b0:32:2a:6d:e3:0a:84:9d:cb:6c:dd:da:2e:a3: 4c:51:94:b7:68:e9:f7:a2:e0:3d:a9:ba:84:90:39: 7b:e9:51:3a:2f:a6:e1:61:1b:31:ed:47:14:30:8d: e7:d9:da:ad:af:e5:87:59:70:24:99:45:d5:55:0f: c0:6b:43:bc:6a:3e:90:4d:a1:63:4b:c6:88:f6:af: 1b:33:ce:17:7e:73:8f:45:93:39:cb:a0:70:d3:e9: 70:c6:06:f8:8a:ea:e3:a1:12:e7:6a:4d:43:77:42: 9a:f0:07:22:34:c2:89:3c:a0:71:bb:ef:34:f0:a5: 9c:a8:57:9d:c6:a5:f0:5d:68:eb:f5:7b:ce:77:c2: 42:b5:5d:1b:3d:3b:19:0c:af:4b:c1:dd:9b:8f:4c: e8:27:3f:6d:5c:d2:9b:aa:ef:9c:32:9b:6a:bc:22: 53:9c:f6:6c:e6:cd:98:fc:0e:18:d8:06:10:8b:3b: 5d:e7:59:bf:91:95:ee:d5:c0:bd:d7:4b:0a:c5:a4: a7:a5:b7:a3:fd:72:3f:10:80:f1:32:c5:0f:f2:ee: 1b:60:b9:57:03:1e:72:c9:9a:96:d5:d7:86:24:31: 2f:be:4c:48:d0:8d:bd:91:9d:1e:b0:3f:45:6f:65: b2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:24:6C:04:C7:49:C4:27:13:25:81:D3:58:20:BB:46:2D:A2:6F:D6 X509v3 Authority Key Identifier: keyid:82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/25B713A4FE6B11EBB5DD176BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.42.0/24 IPv6: 2001:df7:3680::/48 Signature Algorithm: sha256WithRSAEncryption 40:07:1a:d5:87:67:df:40:0c:a9:32:ca:a4:d6:41:3d:b3:df: 05:06:54:36:43:d7:a5:a7:e3:42:c9:cc:18:6c:a8:e0:75:94: cf:f1:1b:06:a8:b4:07:ef:1e:16:87:9d:f5:d4:03:ee:95:99: 51:55:3d:25:87:21:07:df:b9:a7:34:68:ab:59:21:62:2f:a7: d2:d2:41:4c:67:fc:71:ea:96:16:02:9a:13:1d:39:0a:09:24: 85:fe:26:98:78:c4:03:82:3e:84:cc:47:d6:2f:1b:6f:00:6f: bd:17:67:57:78:3b:b9:43:46:8c:32:15:e7:34:d1:c3:ac:67: e7:e2:27:11:1b:93:0b:f2:8a:d9:a7:49:82:45:a4:41:84:c4: e4:16:ec:40:d2:d8:a4:27:e5:2c:f6:c7:05:f5:ff:6b:fc:8c: 9b:83:a4:0e:8e:3d:3b:14:18:7f:0a:91:6e:d6:f8:18:6c:bf: de:db:c6:df:62:af:fb:d1:7e:11:5d:82:2f:94:6a:9f:e0:23: 7b:ec:b5:26:5d:00:a0:16:4f:b5:62:05:19:b6:60:ce:03:8b: cd:47:b1:3b:f4:06:8b:23:ec:d7:19:55:0e:ec:95:05:2f:0d: 7d:5e:dd:d5:5d:d3:04:01:d3:81:11:7a:14:90:fc:52:f2:88: 53:a9:a9:ce -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzQzcxMTAvBgNVBAUTKDgyNkI1NTkyQUMzOEIwMTJCN0U3QzI3MzBERDA2MDdF MTBEQjgxMDIwHhcNMjUwMTA0MjMxMjMyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc5YzA2MC05ZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEU7LoNKyWUNlT02NmQWsDIqbeMKhJ3LbN3aLqNMUZS3aOn3ouA9qbqEkDl7 6VE6L6bhYRsx7UcUMI3n2dqtr+WHWXAkmUXVVQ/Aa0O8aj6QTaFjS8aI9q8bM84X fnOPRZM5y6Bw0+lwxgb4iurjoRLnak1Dd0Ka8AciNMKJPKBxu+808KWcqFedxqXw XWjr9XvOd8JCtV0bPTsZDK9Lwd2bj0zoJz9tXNKbqu+cMptqvCJTnPZs5s2Y/A4Y 2AYQiztd51m/kZXu1cC910sKxaSnpbej/XI/EIDxMsUP8u4bYLlXAx5yyZqW1deG JDEvvkxI0I29kZ0esD9Fb2WyLQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDYkbATH ScQnEyWB01ggu0Ytom/WMB8GA1UdIwQYMBaAFIJrVZKsOLASt+fCcw3QYH4Q24EC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNDNy83QjJGNTM4QUZF NjgxMUVCODhDQzBFNDFDNEY5QUUwMi9nbXRWa3F3NHNCSzM1OEp6RGRCZ2ZoRGJn UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtdFZrcXc0c0JLMzU4SnpEZEJnZmhEYmdRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDIzQzcvN0IyRjUzOEFGRTY4MTFFQjg4Q0MwRTQxQzRGOUFFMDIvMjVCNzEzQTRG RTZCMTFFQkI1REQxNzZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnqyowDwQCAAIwCQMHACABDfc2gDANBgkqhkiG9w0BAQsF AAOCAQEAQAca1Ydn30AMqTLKpNZBPbPfBQZUNkPXpafjQsnMGGyo4HWUz/EbBqi0 B+8eFoed9dQD7pWZUVU9JYchB9+5pzRoq1khYi+n0tJBTGf8ceqWFgKaEx05Cgkk hf4mmHjEA4I+hMxH1i8bbwBvvRdnV3g7uUNGjDIV5zTRw6xn5+InERuTC/KK2adJ gkWkQYTE5BbsQNLYpCflLPbHBfX/a/yMm4OkDo49OxQYfwqRbtb4GGy/3tvG32Kv +9F+EV2CL5Rqn+Aje+y1Jl0AoBZPtWIFGbZgzgOLzUexO/QGiyPs1xlVDuyVBS8N fV7d1V3TBAHTgRF6FJD8UvKIU6mpzg== -----END CERTIFICATE-----Generated at Sun Apr 13 03:46:56 2025 by rpki-client