$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/D41A1814442211EBBF7D9D65C4F9AE02.roa File: D41A1814442211EBBF7D9D65C4F9AE02.roa (raw, json) Hash identifier: hsjXTWdh2kRzdeWF4Q+QGn60PDeZ8kmbCtOiIhRsRRM= Subject key identifier: 7D:9B:78:AC:97:EE:63:5E:A7:96:28:94:22:8D:7A:C2:99:5B:3E:69 Certificate issuer: /CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8 Certificate serial: 06E8 Authority key identifier: 1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/D41A1814442211EBBF7D9D65C4F9AE02.roa Signing time: Tue 25 Mar 2025 07:33:07 +0000 ROA not before: Tue 25 Mar 2025 07:33:07 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 141216 IP address blocks: 103.156.154.0/24 maxlen: 24 103.156.155.0/24 maxlen: 24 2407:d3c0::/32 maxlen: 32 2407:d3c0:2001::/48 maxlen: 48 2407:d3c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1768 (0x6e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1257 Validity Not Before: Mar 25 07:33:07 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67e25c33-1e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:03:5f:81:55:73:88:8a:a4:95:1f:94:c4: f8:80:4f:3c:4f:d1:15:3c:ce:08:99:ba:d6:ef:68: 13:c4:c0:0b:55:fa:ba:02:83:df:26:8a:bc:f4:b1: 4b:a3:b8:fa:0e:47:9b:ce:c2:97:66:02:9e:bc:31: af:ec:81:e5:5d:bc:66:cd:18:03:f5:22:24:20:40: f1:e5:f0:b7:59:8c:f9:6f:29:55:5e:cc:f7:5c:b2: de:ea:98:20:b6:b6:02:10:1b:47:ae:4b:56:c8:0b: da:59:b1:be:a6:1b:d4:5a:ce:c7:57:00:dd:42:03: b0:7a:2d:8d:c4:a4:0e:10:f7:3d:25:21:3d:43:97: 99:be:e5:a7:cf:32:55:af:9c:69:3b:a8:b7:0d:70: cf:de:65:c5:a6:11:b3:13:b2:63:2e:3b:15:d5:c4: 14:84:ad:1f:da:5f:1a:bc:1a:09:25:bf:e2:9f:83: fc:c4:9d:84:f7:ad:7f:d3:2b:b3:c1:ac:19:16:69: cc:43:19:b5:d0:06:fe:71:a6:72:3e:3c:8b:16:cd: 9b:0f:4d:4a:95:6e:54:28:f3:b9:03:d5:3a:c9:e6: 5d:50:24:80:ac:81:50:cb:0a:d3:10:6a:05:71:a2: 82:fa:09:b4:85:57:ca:c5:c4:65:b1:2f:44:76:39: 07:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9B:78:AC:97:EE:63:5E:A7:96:28:94:22:8D:7A:C2:99:5B:3E:69 X509v3 Authority Key Identifier: keyid:1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/D41A1814442211EBBF7D9D65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.154.0/23 IPv6: 2407:d3c0::/32 Signature Algorithm: sha256WithRSAEncryption b9:3b:af:27:07:c0:0d:29:0c:db:03:64:4d:de:b5:d0:1b:e9: 5f:d9:3c:55:96:d2:7c:80:fb:50:43:bc:da:80:e9:9b:e7:3d: aa:cd:c1:1d:78:bf:19:ae:23:e0:67:78:b1:92:52:c4:e7:14: 12:6a:a0:2e:6e:7a:db:25:c7:0d:58:2a:d4:d3:b0:43:92:f2: 5b:5e:84:5f:87:e9:f8:6f:8d:c4:a9:b7:3e:26:41:00:44:a6: 85:6f:e7:d1:4b:5c:7c:11:e1:2e:ad:c9:2a:ed:26:e1:34:3a: d8:30:01:a3:81:75:a2:1d:f5:65:a4:46:f0:1a:70:d3:12:11: 71:5b:8c:bc:56:9f:45:1d:21:c1:c4:63:b0:ea:d0:2f:f6:c1: 1b:e3:4c:7e:87:ea:a8:13:6d:fd:3c:cb:aa:32:6e:bf:2d:52: b2:22:14:73:7e:33:72:f5:f5:2a:4c:ee:90:ce:22:3e:c2:7d: b5:74:2e:5e:38:b4:96:30:17:b2:65:d0:2b:58:ff:87:f4:07: 59:dd:f4:a6:fe:8d:5e:cf:ee:83:4f:2f:0c:72:2f:d7:af:44: 91:bf:6a:a0:88:e7:9f:7d:a4:7d:54:ba:a9:16:12:a1:83:75: c0:cc:fd:2b:e2:d6:2f:72:aa:f9:57:96:a8:22:fd:be:2a:c5: 9e:7f:8d:a6 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEyNTcxMTAvBgNVBAUTKDFFRDc4MkJFNjJENzEwMTc2NjhCMjhBMzI2ODlFNDcw RURBMjAxRjgwHhcNMjUwMzI1MDczMzA3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2UyNWMzMy0xZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqEDX4FVc4iKpJUflMT4gE88T9EVPM4ImbrW72gTxMALVfq6AoPfJoq89LFL o7j6DkebzsKXZgKevDGv7IHlXbxmzRgD9SIkIEDx5fC3WYz5bylVXsz3XLLe6pgg trYCEBtHrktWyAvaWbG+phvUWs7HVwDdQgOwei2NxKQOEPc9JSE9Q5eZvuWnzzJV r5xpO6i3DXDP3mXFphGzE7JjLjsV1cQUhK0f2l8avBoJJb/in4P8xJ2E961/0yuz wawZFmnMQxm10Ab+caZyPjyLFs2bD01KlW5UKPO5A9U6yeZdUCSArIFQywrTEGoF caKC+gm0hVfKxcRlsS9EdjkHRwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFH2beKyX 7mNep5YolCKNesKZWz5pMB8GA1UdIwQYMBaAFB7Xgr5i1xAXZosooyaJ5HDtogH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTI1Ny9BOTBGMUVFNjQ0 MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVCZG1peWlqSm9ua2NPMmlB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZUN2bUxYRUJkbWl5aWpKb25rY08yaUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTEyNTcvQTkwRjFFRTY0NDIwMTFFQjg1NkNEMTYyQzRGOUFFMDIvRDQxQTE4MTQ0 NDIyMTFFQkJGN0Q5RDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnnJowDQQCAAIwBwMFACQH08AwDQYJKoZIhvcNAQELBQAD ggEBALk7rycHwA0pDNsDZE3etdAb6V/ZPFWW0nyA+1BDvNqA6ZvnParNwR14vxmu I+BneLGSUsTnFBJqoC5uetslxw1YKtTTsEOS8ltehF+H6fhvjcSptz4mQQBEpoVv 59FLXHwR4S6tySrtJuE0OtgwAaOBdaId9WWkRvAacNMSEXFbjLxWn0UdIcHEY7Dq 0C/2wRvjTH6H6qgTbf08y6oybr8tUrIiFHN+M3L19SpM7pDOIj7CfbV0Ll44tJYw F7Jl0CtY/4f0B1nd9Kb+jV7P7oNPLwxyL9evRJG/aqCI5599pH1UuqkWEqGDdcDM /Svi1i9yqvlXlqgi/b4qxZ5/jaY= -----END CERTIFICATE-----Generated at Sat Apr 5 07:14:20 2025 by rpki-client