$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/F23D65727CAF11ED87752A6BC4F9AE02.roa File: F23D65727CAF11ED87752A6BC4F9AE02.roa (raw, json) Hash identifier: 4R+T9ichUclKYc2esjqc1J6rnOewSsSbS/PRV1Yw9jc= Subject key identifier: 79:4D:A3:D3:88:35:E6:44:6A:C3:06:B7:10:6E:AA:B4:B3:25:7F:54 Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Certificate serial: 0A0A Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/F23D65727CAF11ED87752A6BC4F9AE02.roa Signing time: Thu 06 Mar 2025 13:07:12 +0000 ROA not before: Thu 06 Mar 2025 13:07:12 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 40627 IP address blocks: 103.44.68.0/22 maxlen: 24 2400:db60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2570 (0xa0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFBE1 Validity Not Before: Mar 6 13:07:12 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67c99e00-be80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:76:8d:a0:11:cc:63:a7:e2:5c:e5:9b:8d:88: b3:4f:69:3d:8d:a7:1e:9a:89:34:e7:08:17:1e:3c: 29:67:4a:0d:b3:59:b9:25:2a:17:0e:f6:4b:1e:23: 23:c2:13:a1:5b:da:1a:e2:5b:27:8b:b0:fa:dc:2f: ab:82:8f:68:87:ed:72:91:b2:94:f1:e9:c9:2d:78: 07:8b:fa:58:a7:fe:cb:1d:76:69:6f:99:ed:28:0e: 2b:69:67:e0:5a:72:9d:33:f8:9a:b6:6d:68:e8:69: 03:61:f8:bd:5f:fd:c6:f7:6d:49:51:51:6e:a8:b9: a5:d9:63:81:9c:94:da:1a:50:14:c4:b8:97:34:32: 5c:4a:b5:03:85:e5:eb:79:43:32:f1:22:9e:58:78: 64:f0:ec:78:63:cd:4f:55:61:2e:8a:a9:d4:f4:f0: 09:a3:61:74:da:31:dd:b2:98:76:ce:43:85:7a:be: 14:f8:61:f5:f5:9d:7e:da:5a:78:8b:2b:60:f6:12: 08:1e:e1:23:d6:ff:a7:16:ed:bf:84:00:d2:74:5a: 54:50:b9:f9:e4:2a:ac:62:7c:f5:52:27:15:b5:3f: be:cf:e2:23:9a:a2:f0:b7:03:eb:f8:6f:2a:3f:be: 86:08:e4:a9:55:c0:d3:bc:c7:c0:24:24:08:e3:b1: 7a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4D:A3:D3:88:35:E6:44:6A:C3:06:B7:10:6E:AA:B4:B3:25:7F:54 X509v3 Authority Key Identifier: keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/F23D65727CAF11ED87752A6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.44.68.0/22 IPv6: 2400:db60::/32 Signature Algorithm: sha256WithRSAEncryption 25:4c:a3:4c:c7:a5:1f:c1:dd:4c:a8:e2:18:f8:b0:5f:60:1a: cc:ab:b0:5a:6d:bc:e9:42:7d:60:27:51:62:f1:ff:d2:3c:c6: de:c9:18:27:26:d6:4d:55:a2:6f:73:c2:eb:60:9f:77:bf:87: cc:a4:7d:e7:13:94:a2:73:62:f9:8c:4e:b0:a5:ab:e9:19:83: ca:7a:49:22:24:f8:89:84:73:ff:09:3e:52:b2:04:d5:b0:8d: a6:70:52:fa:03:53:6e:36:b8:90:5f:ef:e3:7a:58:a0:a9:07: f3:ae:e2:91:06:9f:28:49:01:68:07:a9:a0:af:01:2b:ba:79: 64:f1:9c:2c:92:ce:4d:6a:28:89:af:2d:4e:59:28:f5:a1:c6: df:bc:00:bd:c3:2b:c1:27:e9:a7:8b:55:24:f8:95:e0:3b:da: 47:5f:3e:37:4a:36:f4:9d:38:c3:7d:81:6e:f6:f5:cf:12:86: c5:0c:c6:f2:eb:c1:99:54:62:79:8f:d6:5f:a2:f3:fd:22:93: 3d:3d:15:84:6d:c6:95:ce:b2:25:a6:ee:c4:a3:e8:e8:fc:ca: a5:c6:d0:d7:48:9b:f6:27:6f:2f:e4:dc:ce:4d:06:1d:6e:86: 7d:94:02:26:b1:d7:55:6d:49:67:40:55:83:e2:21:78:b9:c2: be:5c:44:35 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCRTExMTAvBgNVBAUTKDE4MDc5RUU0Mzk4RDY3MUJENjQ3RkNBODJBMjc5NEU1 MEEzMDQ3QkQwHhcNMjUwMzA2MTMwNzEyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M5OWUwMC1iZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXaNoBHMY6fiXOWbjYizT2k9jacemok05wgXHjwpZ0oNs1m5JSoXDvZLHiMj whOhW9oa4lsni7D63C+rgo9oh+1ykbKU8enJLXgHi/pYp/7LHXZpb5ntKA4raWfg WnKdM/iatm1o6GkDYfi9X/3G921JUVFuqLml2WOBnJTaGlAUxLiXNDJcSrUDheXr eUMy8SKeWHhk8Ox4Y81PVWEuiqnU9PAJo2F02jHdsph2zkOFer4U+GH19Z1+2lp4 iytg9hIIHuEj1v+nFu2/hADSdFpUULn55CqsYnz1UicVtT++z+IjmqLwtwPr+G8q P76GCOSpVcDTvMfAJCQI47F65QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFHlNo9OI NeZEasMGtxBuqrSzJX9UMB8GA1UdIwQYMBaAFBgHnuQ5jWcb1kf8qConlOUKMEe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkJFMS9BN0U3MUVGNjZF QTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4dldSX3lvS2llVTVRb3dS NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBZWU1RG1OWnh2V1JfeW9LaWVVNVFvd1I3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZCRTEvQTdFNzFFRjY2RUE2MTFFQUI1NDZCOTYxQzRGOUFFMDIvRjIzRDY1NzI3 Q0FGMTFFRDg3NzUyQTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnLEQwDQQCAAIwBwMFACQA22AwDQYJKoZIhvcNAQELBQAD ggEBACVMo0zHpR/B3Uyo4hj4sF9gGsyrsFptvOlCfWAnUWLx/9I8xt7JGCcm1k1V om9zwutgn3e/h8ykfecTlKJzYvmMTrClq+kZg8p6SSIk+ImEc/8JPlKyBNWwjaZw UvoDU242uJBf7+N6WKCpB/Ou4pEGnyhJAWgHqaCvASu6eWTxnCySzk1qKImvLU5Z KPWhxt+8AL3DK8En6aeLVST4leA72kdfPjdKNvSdOMN9gW729c8ShsUMxvLrwZlU YnmP1l+i8/0ikz09FYRtxpXOsiWm7sSj6Oj8yqXG0NdIm/Ynby/k3M5NBh1uhn2U Aiax11VtSWdAVYPiIXi5wr5cRDU= -----END CERTIFICATE-----Generated at Sat Apr 5 07:14:15 2025 by rpki-client