$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/DD3C61621DCD11EF88E9EE3DC4F9AE02.roa File: DD3C61621DCD11EF88E9EE3DC4F9AE02.roa (raw, json) Hash identifier: qv769QTOuxRY2vZMEitP1PhQNGQQJL1+VWV0CsKcicw= Subject key identifier: 43:CB:4F:78:11:E2:99:B0:4F:59:4D:9D:AE:44:43:0E:6E:B5:D6:93 Certificate issuer: /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7 Certificate serial: 0696 Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/DD3C61621DCD11EF88E9EE3DC4F9AE02.roa Signing time: Mon 24 Mar 2025 22:33:22 +0000 ROA not before: Mon 24 Mar 2025 22:33:22 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 134424 IP address blocks: 103.162.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D26C6 Validity Not Before: Mar 24 22:33:22 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67e1ddb1-86ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:02:67:63:31:67:19:c6:d6:36:06:b9:6e: 21:42:c6:b6:59:d1:15:2d:9f:92:d7:70:07:6b:57: c8:c4:ce:0c:24:76:c9:56:57:00:b1:52:0c:2f:12: 9d:ed:7b:1e:e7:e7:38:ec:f0:68:f4:e5:2e:24:e2: 3c:c0:6e:5f:5b:0e:6a:4c:2c:0d:bc:eb:a6:68:96: 01:ba:e0:fa:d5:99:60:a3:61:0b:88:76:1d:97:06: 5f:b2:5c:b8:62:b6:84:07:36:8c:02:36:06:50:c3: d5:70:cb:68:04:42:c3:ef:da:33:2f:e1:52:7b:5b: 06:a0:dd:df:3a:99:77:bd:9d:72:97:1b:26:a3:69: 2d:01:0b:77:78:86:8d:62:64:8b:74:53:c6:6e:a7: 04:ac:f3:3f:1d:a4:90:62:64:c3:fc:64:1c:1c:95: f9:dd:56:37:74:0d:36:65:8c:a5:86:b8:01:79:c5: e5:09:cb:75:30:41:77:a9:d9:cd:dc:d5:5d:05:75: a0:2a:da:ec:16:dd:81:67:1e:33:7b:79:cd:5c:55: 01:2c:23:8f:8f:80:44:ff:4f:31:31:a5:6a:41:fe: e8:da:e0:46:72:c8:05:e7:73:a4:b1:52:5b:8e:76: 04:a1:e4:95:87:6d:5b:aa:c8:ee:82:a2:a9:70:4a: ab:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CB:4F:78:11:E2:99:B0:4F:59:4D:9D:AE:44:43:0E:6E:B5:D6:93 X509v3 Authority Key Identifier: keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/DD3C61621DCD11EF88E9EE3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.56.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:49:ec:4b:32:10:83:56:b5:d9:c3:5c:30:61:ea:18:07:4a: 24:0a:ba:99:41:35:2f:96:3b:a6:22:78:46:74:e6:46:21:d7: 51:21:dd:e8:09:df:75:0f:f9:54:51:b0:4c:2a:9c:5e:cc:6d: 42:b0:64:4f:34:44:b5:38:38:e1:a7:13:5e:4c:aa:8a:22:ae: bb:07:5f:31:67:fb:45:33:11:0c:fc:25:c7:15:59:a8:72:1d: 58:b4:3a:9b:6b:e3:4c:84:f3:7c:6e:c0:73:b5:21:2d:de:e4: 97:bd:6b:eb:38:0b:ea:8c:8e:07:a8:9b:ba:8d:b4:2e:d6:41: 82:c9:57:b3:ee:06:1e:d3:d7:1a:b5:a0:51:0a:64:6d:93:89: ea:cf:70:8a:b0:74:63:e6:17:7e:d5:f0:d9:97:4f:02:fd:29: 9f:49:b9:09:29:58:45:d9:62:20:9f:59:cf:11:6e:31:77:19: 81:11:a9:b9:a6:dd:47:e2:86:7c:f9:0d:89:18:55:c2:06:c7: d1:d5:c5:b4:14:cd:17:a5:4c:57:c8:f9:bd:3d:2c:ab:19:38: 1b:f7:38:33:26:35:c5:bb:5e:88:08:03:6b:ae:3b:d4:a3:26: 25:ff:6c:02:24:5a:9e:9e:44:f6:a5:25:18:4c:3e:b3:4f:48: 2d:97:42:bd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2QzYxMTAvBgNVBAUTKEQyOUI2NEU2MzQ0NjVBQjQxMzIwNTRCQjdFODNDOUQ1 RjE4MzQ5RjcwHhcNMjUwMzI0MjIzMzIyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2UxZGRiMS04NmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTgCZ2MxZxnG1jYGuW4hQsa2WdEVLZ+S13AHa1fIxM4MJHbJVlcAsVIMLxKd 7Xse5+c47PBo9OUuJOI8wG5fWw5qTCwNvOumaJYBuuD61Zlgo2ELiHYdlwZfsly4 YraEBzaMAjYGUMPVcMtoBELD79ozL+FSe1sGoN3fOpl3vZ1ylxsmo2ktAQt3eIaN YmSLdFPGbqcErPM/HaSQYmTD/GQcHJX53VY3dA02ZYylhrgBecXlCct1MEF3qdnN 3NVdBXWgKtrsFt2BZx4ze3nNXFUBLCOPj4BE/08xMaVqQf7o2uBGcsgF53OksVJb jnYEoeSVh21bqsjugqKpcEqrMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEPLT3gR 4pmwT1lNna5EQw5utdaTMB8GA1UdIwQYMBaAFNKbZOY0Rlq0EyBUu36DydXxg0n3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjZDNi81OEU5OUU5NDZG NzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dyUVRJRlM3Zm9QSjFmR0RT ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBwdGs1alJHV3JRVElGUzdmb1BKMWZHRFNmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI2QzYvNThFOTlFOTQ2Rjc5MTFFQkE0RDIyMjg3QzRGOUFFMDIvREQzQzYxNjIx RENEMTFFRjg4RTlFRTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnojgwDQYJKoZIhvcNAQELBQADggEBAHpJ7EsyEINWtdnD XDBh6hgHSiQKuplBNS+WO6YieEZ05kYh11Eh3egJ33UP+VRRsEwqnF7MbUKwZE80 RLU4OOGnE15MqooirrsHXzFn+0UzEQz8JccVWahyHVi0Optr40yE83xuwHO1IS3e 5Je9a+s4C+qMjgeom7qNtC7WQYLJV7PuBh7T1xq1oFEKZG2TierPcIqwdGPmF37V 8NmXTwL9KZ9JuQkpWEXZYiCfWc8RbjF3GYERqbmm3Ufihnz5DYkYVcIGx9HVxbQU zRelTFfI+b09LKsZOBv3ODMmNcW7XogIA2uuO9SjJiX/bAIkWp6eRPalJRhMPrNP SC2XQr0= -----END CERTIFICATE-----Generated at Sat Apr 5 21:41:51 2025 by rpki-client