$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/147D51CA85B111ECB675B552C4F9AE02.roa File: 147D51CA85B111ECB675B552C4F9AE02.roa (raw, json) Hash identifier: e9cwg8d7bC8r2DHgx/kL7/A4+KHztZ7rWF6Yv+XqYD8= Subject key identifier: 6F:D5:7D:12:82:5D:A0:3A:9A:D0:31:0F:48:49:DA:6C:0E:F9:1C:56 Certificate issuer: /CN=A91DFC30/serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93 Certificate serial: 03BE Authority key identifier: 94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/147D51CA85B111ECB675B552C4F9AE02.roa Signing time: Thu 27 Mar 2025 08:53:52 +0000 ROA not before: Thu 27 Mar 2025 08:53:52 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138992 IP address blocks: 103.181.42.0/23 maxlen: 23 103.181.43.0/24 maxlen: 24 2001:df5:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 958 (0x3be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC30 Validity Not Before: Mar 27 08:53:52 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e51220-d524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5e:b5:89:9a:8b:fb:c3:3e:3d:68:e7:de:80: 8c:65:c4:67:3d:91:ec:67:63:c3:cb:52:7f:0a:08: e1:76:3f:fa:4a:37:90:09:65:58:1d:1f:05:1b:ba: cf:fa:af:f6:5d:07:18:7a:53:a6:f8:7b:2e:ec:7c: c2:fe:80:ed:79:74:eb:cf:40:19:14:02:d0:49:1a: 7d:e8:13:e4:93:aa:6b:1d:7b:08:d6:f6:e0:e3:94: 00:25:a3:af:0e:8f:5d:c8:1a:28:37:75:f4:29:fa: cf:5a:a8:9c:a9:82:25:93:0b:98:eb:29:ad:d4:cf: cc:89:91:9c:28:4b:3c:d6:69:3e:e7:0f:ae:02:36: 4e:83:48:c6:cc:91:b1:11:3f:01:0b:27:08:ee:b3: 16:9d:e2:dc:f7:dd:21:55:b0:2e:58:5c:ba:d9:5d: 1b:d4:f3:0b:f2:be:c0:1a:a6:c7:96:79:45:21:5a: ea:e0:7a:a5:62:76:ab:36:98:5d:49:8a:8f:2e:cb: fc:3e:c1:7a:39:92:3b:c3:69:b2:60:6f:fb:09:a8: 96:a4:23:00:55:8c:96:db:b4:84:54:d8:3b:cc:a8: f6:28:12:d7:23:67:4f:19:fa:b6:d2:41:31:9c:41: ea:12:aa:2f:f5:79:4b:f9:21:b8:a3:cc:13:ea:58: 9a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D5:7D:12:82:5D:A0:3A:9A:D0:31:0F:48:49:DA:6C:0E:F9:1C:56 X509v3 Authority Key Identifier: keyid:94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/147D51CA85B111ECB675B552C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.42.0/23 IPv6: 2001:df5:840::/48 Signature Algorithm: sha256WithRSAEncryption c9:d9:86:d4:ec:fb:75:1e:86:89:52:74:84:4f:bb:ae:fa:82: 67:5e:31:10:80:24:10:ac:e1:d2:1f:2b:e9:fa:ed:cc:de:9d: 7f:5a:ba:de:8c:c2:48:36:3c:d7:a0:f7:c0:31:e2:50:09:1a: 7e:b9:55:31:b4:67:e6:0c:6a:3e:ad:bd:fb:09:bd:62:9b:1f: 50:88:37:c3:e5:df:35:36:82:14:c1:84:a7:70:41:ad:f7:66: 78:5b:7f:1e:e0:f3:63:77:98:90:cf:c9:30:5a:4f:0c:26:3e: 52:e7:70:da:17:73:0c:56:48:b5:76:49:a4:2f:9a:68:19:ee: 56:64:3e:b1:1f:b4:90:ae:d7:cb:b8:ba:80:25:58:4a:52:42: fb:3b:18:09:06:3b:5d:bb:0f:e0:d8:86:a4:de:e8:c0:8d:33: 9b:c9:95:9f:7e:e9:c0:1d:88:88:52:0f:9b:42:d5:b2:6c:48: b7:35:0e:40:47:e2:0f:4e:e2:02:a5:b8:84:46:38:1f:65:70: 33:69:78:dd:db:0f:02:bd:14:b2:b7:b9:06:6a:01:c7:b4:6e: 7a:0d:02:d9:cf:15:64:d8:5e:b7:f7:1a:26:77:1d:a4:ac:07: 0f:c4:18:12:31:21:1f:06:8b:9f:33:fa:ee:45:fe:33:9b:30: ab:09:5b:34 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDMzAxMTAvBgNVBAUTKDk0N0NCNjc0QTg1OENEOTFBRUE1NTI2QkEzNjY4QTEx RTQ5RUNCOTMwHhcNMjUwMzI3MDg1MzUyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U1MTIyMC1kNTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo161iZqL+8M+PWjn3oCMZcRnPZHsZ2PDy1J/Cgjhdj/6SjeQCWVYHR8FG7rP +q/2XQcYelOm+Hsu7HzC/oDteXTrz0AZFALQSRp96BPkk6prHXsI1vbg45QAJaOv Do9dyBooN3X0KfrPWqicqYIlkwuY6ymt1M/MiZGcKEs81mk+5w+uAjZOg0jGzJGx ET8BCycI7rMWneLc990hVbAuWFy62V0b1PML8r7AGqbHlnlFIVrq4HqlYnarNphd SYqPLsv8PsF6OZI7w2myYG/7CaiWpCMAVYyW27SEVNg7zKj2KBLXI2dPGfq20kEx nEHqEqov9XlL+SG4o8wT6lia2QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFG/VfRKC XaA6mtAxD0hJ2mwO+RxWMB8GA1UdIwQYMBaAFJR8tnSoWM2RrqVSa6NmihHknsuT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkMzMC8xMTJBRjFBQzg1 QUQxMUVDQjM2RjQxNERDNEY5QUUwMi9sSHkyZEtoWXpaR3VwVkpybzJhS0VlU2V5 NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xIeTJkS2hZelpHdXBWSnJvMmFLRWVTZXk1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZDMzAvMTEyQUYxQUM4NUFEMTFFQ0IzNkY0MTREQzRGOUFFMDIvMTQ3RDUxQ0E4 NUIxMTFFQ0I2NzVCNTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFntSowDwQCAAIwCQMHACABDfUIQDANBgkqhkiG9w0BAQsF AAOCAQEAydmG1Oz7dR6GiVJ0hE+7rvqCZ14xEIAkEKzh0h8r6frtzN6df1q63ozC SDY816D3wDHiUAkafrlVMbRn5gxqPq29+wm9YpsfUIg3w+XfNTaCFMGEp3BBrfdm eFt/HuDzY3eYkM/JMFpPDCY+Uudw2hdzDFZItXZJpC+aaBnuVmQ+sR+0kK7Xy7i6 gCVYSlJC+zsYCQY7XbsP4NiGpN7owI0zm8mVn37pwB2IiFIPm0LVsmxItzUOQEfi D07iAqW4hEY4H2VwM2l43dsPAr0Usre5BmoBx7Rueg0C2c8VZNhet/caJncdpKwH D8QYEjEhHwaLnzP67kX+M5swqwlbNA== -----END CERTIFICATE-----Generated at Sun Apr 6 10:11:38 2025 by rpki-client