$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/98DE3894CCE411EFA6203F26C4F9AE02.roa File: 98DE3894CCE411EFA6203F26C4F9AE02.roa (raw, json) Hash identifier: opp1b6SM1IxplVnDxWHP5Nnt6hlioVS0Y++1Phnrf9Q= Subject key identifier: 2E:D7:9F:7B:A2:03:A0:0E:76:97:65:66:BE:FE:40:96:27:FF:A5:A5 Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 085E Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/98DE3894CCE411EFA6203F26C4F9AE02.roa Signing time: Wed 26 Feb 2025 06:17:47 +0000 ROA not before: Wed 26 Feb 2025 06:17:47 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135030 IP address blocks: 103.111.164.0/23 maxlen: 23 103.111.164.0/24 maxlen: 24 103.111.165.0/24 maxlen: 24 103.111.166.0/24 maxlen: 24 2402:9f40::/32 maxlen: 32 2402:9f40:1::/48 maxlen: 48 2402:9f40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2142 (0x85e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D Validity Not Before: Feb 26 06:17:47 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67beb20b-b61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:37:45:81:a7:28:ce:dc:64:e9:23:9b:ee:3f: f7:32:b8:b2:be:68:e8:54:34:47:bd:50:6f:e3:93: 7d:17:e4:e8:fb:0c:2f:a1:cd:4a:bd:d7:df:b8:a6: 13:67:1d:22:92:15:9b:9f:13:3d:ea:59:32:fd:61: 52:a7:1c:a2:16:86:19:a4:5a:3d:f9:01:cc:5a:20: ae:61:e2:cc:11:fa:b1:04:70:a9:f7:d0:4f:a7:67: 7b:92:68:d1:a3:76:15:f9:c1:a3:5d:96:38:fc:56: 49:2c:f6:c3:54:ff:9d:d7:fb:37:c3:d0:d7:f3:23: 80:fc:5d:6f:85:9b:79:3a:91:db:73:f0:ee:41:72: 07:dc:28:88:b3:49:17:aa:9f:16:fe:59:79:2e:e9: 53:89:b9:54:bb:cc:7b:98:0b:6b:c8:8f:c8:dd:59: 05:d4:b0:ca:12:4c:3b:47:1b:b7:5d:9f:1b:ff:15: 43:07:15:6c:74:95:d7:a5:94:fb:02:4c:b4:f2:15: ba:11:05:be:2a:a8:64:33:75:1c:5f:cc:fc:d7:d5: 9a:7f:0d:a7:cf:5d:1d:56:4c:09:61:e3:69:e7:13: c0:55:3d:00:01:b6:00:25:9f:58:42:2d:6c:fe:02: d8:84:5f:39:a1:44:ed:62:36:96:aa:d7:df:8b:05: 1f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D7:9F:7B:A2:03:A0:0E:76:97:65:66:BE:FE:40:96:27:FF:A5:A5 X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/98DE3894CCE411EFA6203F26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.164.0-103.111.166.255 IPv6: 2402:9f40::/32 Signature Algorithm: sha256WithRSAEncryption 13:1e:23:31:25:48:fe:be:b9:46:a5:da:b4:10:39:d9:1e:6e: c6:bf:d2:c2:c6:d2:43:06:37:e3:c2:36:ad:fd:96:c3:70:49: d7:f9:15:08:7e:09:52:67:d2:4b:11:07:2e:65:a3:dd:57:b8: 65:5c:c4:64:84:f0:18:03:2a:65:a9:66:8c:e1:14:02:5a:0f: 3e:84:15:f3:6c:5a:5c:8a:f4:9d:4e:18:7b:97:fb:f2:e1:e5: e4:98:7b:f7:5e:a2:33:a3:af:88:b0:87:ab:d8:71:46:d3:6a: a6:01:30:16:a3:9f:81:1b:1c:25:05:49:c7:7d:50:78:c7:4e: ed:e0:51:da:28:52:62:1a:e6:59:a0:e0:28:76:af:a2:bf:73: 4f:d7:04:d6:e3:08:6a:72:6e:fd:8b:7b:7b:2e:63:fe:fd:e9: ea:73:6e:8e:52:58:1b:36:c9:a8:03:22:90:1d:01:12:38:96: 2c:e6:e4:e6:c7:17:af:4b:2a:52:6d:38:aa:28:5e:ef:54:0e: 96:24:d1:d9:45:6b:a2:9a:81:ae:69:b4:f9:ff:3b:32:b2:11: 94:be:3e:72:07:bd:05:7d:ba:85:fc:16:97:1b:5a:2f:e2:74: ae:7e:dc:c0:8b:44:87:d5:1d:de:20:44:21:18:cd:c5:94:63: 30:f4:54:92 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjUwMjI2MDYxNzQ3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JlYjIwYi1iNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDdFgacoztxk6SOb7j/3MriyvmjoVDRHvVBv45N9F+To+wwvoc1KvdffuKYT Zx0ikhWbnxM96lky/WFSpxyiFoYZpFo9+QHMWiCuYeLMEfqxBHCp99BPp2d7kmjR o3YV+cGjXZY4/FZJLPbDVP+d1/s3w9DX8yOA/F1vhZt5OpHbc/DuQXIH3CiIs0kX qp8W/ll5LulTiblUu8x7mAtryI/I3VkF1LDKEkw7Rxu3XZ8b/xVDBxVsdJXXpZT7 Aky08hW6EQW+KqhkM3UcX8z819Wafw2nz10dVkwJYeNp5xPAVT0AAbYAJZ9YQi1s /gLYhF85oUTtYjaWqtffiwUfEQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFC7Xn3ui A6AOdpdlZr7+QJYn/6WlMB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDU2MEQvNjhDM0Y0OUE0MUVFMTFFQTlDRUExRjc1QzRGOUFFMDIvOThERTM4OTRD Q0U0MTFFRkE2MjAzRjI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEAmdvpAMEAGdvpjANBAIAAjAHAwUAJAKfQDANBgkqhkiG 9w0BAQsFAAOCAQEAEx4jMSVI/r65RqXatBA52R5uxr/SwsbSQwY348I2rf2Ww3BJ 1/kVCH4JUmfSSxEHLmWj3Ve4ZVzEZITwGAMqZalmjOEUAloPPoQV82xaXIr0nU4Y e5f78uHl5Jh7916iM6OviLCHq9hxRtNqpgEwFqOfgRscJQVJx31QeMdO7eBR2ihS YhrmWaDgKHavor9zT9cE1uMIanJu/Yt7ey5j/v3p6nNujlJYGzbJqAMikB0BEjiW LObk5scXr0sqUm04qihe71QOliTR2UVropqBrmm0+f87MrIRlL4+cge9BX26hfwW lxtaL+J0rn7cwItEh9Ud3iBEIRjNxZRjMPRUkg== -----END CERTIFICATE-----Generated at Sat Apr 5 23:02:43 2025 by rpki-client