$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/1D5C353C1D4C11F0B392EC38C4F9AE02.roa File: 1D5C353C1D4C11F0B392EC38C4F9AE02.roa (raw, json) Hash identifier: 8WU3b7Y/r3U4uy9yNzlOEZ0xCTY6Z02v2SjnlAk9SvQ= Subject key identifier: 84:C8:94:8A:60:2E:8F:6E:5B:E7:8A:64:5D:1A:8B:09:1A:4B:A8:6F Certificate issuer: /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Certificate serial: 0D59 Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/1D5C353C1D4C11F0B392EC38C4F9AE02.roa Signing time: Sat 19 Apr 2025 18:28:39 +0000 ROA not before: Sat 19 Apr 2025 18:28:39 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 139302 IP address blocks: 103.141.4.0/24 maxlen: 24 103.141.5.0/24 maxlen: 24 2001:df1:39c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 11:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3417 (0xd59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9FF0, serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Validity Not Before: Apr 19 18:28:39 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6803eb57-6cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:1d:d9:db:0d:77:2e:08:e8:22:b4:26:1e: a0:8c:f3:84:71:9d:07:58:ec:8c:aa:4d:5d:f4:84: 28:5c:38:e9:33:f0:85:8e:4d:62:ac:10:7f:9d:76: 21:09:e5:27:f7:42:00:ec:bf:fc:fa:b9:2b:86:1e: 2f:06:a2:2c:98:82:7a:49:e3:7c:58:72:fa:5c:ce: 0a:7a:f7:5c:72:62:88:80:38:b5:99:1f:70:94:de: 3c:f8:47:1a:e1:fa:3c:c6:88:22:3f:e0:79:0f:ea: 12:9b:3e:9b:e3:e6:aa:38:81:90:37:7f:8e:fd:d1: c9:a2:94:9a:21:29:02:69:dc:e2:cf:04:4e:82:6b: 12:df:bf:aa:1e:5b:0d:dd:c5:27:d7:e5:c1:8f:9f: dc:03:2e:7f:f8:e2:74:43:57:18:89:ae:03:67:b8: 1b:f3:3f:ef:17:34:07:3e:e0:08:7a:ad:f4:6c:c5: 29:d1:fe:6c:3a:3c:cf:65:d0:fb:80:50:54:4a:bb: 57:ba:fc:a3:07:65:8d:e4:24:b7:75:36:69:83:e2: 57:76:8d:a0:fd:33:d4:ed:d3:f0:d6:d5:e9:20:b2: 2b:e8:80:e8:ab:d3:45:5e:ba:50:3a:72:cc:d4:fe: 10:e1:61:84:10:b7:d4:da:2d:27:54:40:05:20:d5: f6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C8:94:8A:60:2E:8F:6E:5B:E7:8A:64:5D:1A:8B:09:1A:4B:A8:6F X509v3 Authority Key Identifier: keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/1D5C353C1D4C11F0B392EC38C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.4.0/23 IPv6: 2001:df1:39c0::/48 Signature Algorithm: sha256WithRSAEncryption 30:2a:f7:f7:b6:d0:7c:65:f6:0b:a2:42:e2:9f:c0:8b:c2:06: 7d:07:79:bf:ef:a9:be:7d:47:5b:db:f3:91:c3:29:c5:57:b7: bd:e2:b2:e9:23:b7:e7:54:3e:73:23:a3:97:4c:c6:e8:6b:ab: 1c:96:42:da:36:cd:26:c5:a6:7d:0c:d4:1d:a4:35:78:d8:f3: ae:ff:28:ac:7b:2f:a8:f5:4b:83:36:45:10:5a:0c:97:11:87: ee:b6:5d:ba:d3:b2:57:6c:73:75:d0:0e:24:38:de:e5:d9:38: fe:b0:78:97:71:02:05:0a:ac:4e:0b:38:d9:ba:b3:98:6b:45: 7a:ba:8e:77:9d:2c:f2:5b:b9:c9:98:7c:a0:0c:ee:2b:c2:b3: be:e4:4a:65:ad:17:40:c5:04:38:e4:85:64:0f:75:aa:04:aa: e3:57:57:20:92:f3:f5:73:87:bf:af:c4:56:26:11:8c:b5:11: fd:68:fd:3a:f8:7c:ef:6a:06:40:cf:15:85:03:2b:2c:5e:18: 2b:52:50:58:43:a3:8e:41:7c:cc:8f:7b:3e:e4:19:e6:9e:84: d6:03:d7:ce:77:79:b1:10:d4:f8:1d:f1:d1:13:53:ed:13:86: fe:90:68:d5:a1:6d:5a:68:2d:a2:d2:3d:85:26:2d:c0:46:1a: ab:42:11:3f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGRjAxMTAvBgNVBAUTKEU3REUzMUZBREVEMzc5NDE0RDY3RkJCQ0Y1MUQ5NzY1 MTRFMzQyMjUwHhcNMjUwNDE5MTgyODM5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAzZWI1Ny02Y2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOYd2dsNdy4I6CK0Jh6gjPOEcZ0HWOyMqk1d9IQoXDjpM/CFjk1irBB/nXYh CeUn90IA7L/8+rkrhh4vBqIsmIJ6SeN8WHL6XM4KevdccmKIgDi1mR9wlN48+Eca 4fo8xogiP+B5D+oSmz6b4+aqOIGQN3+O/dHJopSaISkCadzizwROgmsS37+qHlsN 3cUn1+XBj5/cAy5/+OJ0Q1cYia4DZ7gb8z/vFzQHPuAIeq30bMUp0f5sOjzPZdD7 gFBUSrtXuvyjB2WN5CS3dTZpg+JXdo2g/TPU7dPw1tXpILIr6IDoq9NFXrpQOnLM 1P4Q4WGEELfU2i0nVEAFINX2wQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFITIlIpg Lo9uW+eKZF0aiwkaS6hvMB8GA1UdIwQYMBaAFOfeMfre03lBTWf7vPUdl2UU40Il MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUZGMC85NDMzMEZFNkQ0 NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVVRk5aX3U4OVIyWFpSVGpR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU5NHgtdDdUZVVGTlpfdTg5UjJYWlJUalFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlGRjAvOTQzMzBGRTZENDY5MTFFOThGMDE5ODJDQzRGOUFFMDIvMUQ1QzM1M0Mx RDRDMTFGMEIzOTJFQzM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjQQwDwQCAAIwCQMHACABDfE5wDANBgkqhkiG9w0BAQsF AAOCAQEAMCr397bQfGX2C6JC4p/Ai8IGfQd5v++pvn1HW9vzkcMpxVe3veKy6SO3 51Q+cyOjl0zG6GurHJZC2jbNJsWmfQzUHaQ1eNjzrv8orHsvqPVLgzZFEFoMlxGH 7rZdutOyV2xzddAOJDje5dk4/rB4l3ECBQqsTgs42bqzmGtFerqOd50s8lu5yZh8 oAzuK8KzvuRKZa0XQMUEOOSFZA91qgSq41dXIJLz9XOHv6/EViYRjLUR/Wj9Ovh8 72oGQM8VhQMrLF4YK1JQWEOjjkF8zI97PuQZ5p6E1gPXznd5sRDU+B3x0RNT7ROG /pBo1aFtWmgtotI9hSYtwEYaq0IRPw== -----END CERTIFICATE-----Generated at Tue Apr 22 18:27:29 2025 by rpki-client