$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/51BBEE10B2BE11EFA108946DC4F9AE02.roa File: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (raw, json) Hash identifier: syHq3DbE7eogaPpFVFVsQfYoWLCn9NostuRXmVIHm9Y= Subject key identifier: 32:21:BC:CE:B2:F4:DF:37:C8:68:61:8C:0D:98:A1:98:95:AC:62:4B Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: 86 Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/51BBEE10B2BE11EFA108946DC4F9AE02.roa Signing time: Tue 25 Feb 2025 07:58:35 +0000 ROA not before: Tue 25 Feb 2025 07:58:35 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 140065 IP address blocks: 103.147.223.0/24 maxlen: 24 103.164.2.0/24 maxlen: 24 203.17.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76 Validity Not Before: Feb 25 07:58:35 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67bd782b-fe71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:68:ed:87:f8:58:fe:be:52:76:22:84:80: 2f:2a:73:6d:54:37:97:3b:ba:22:06:fb:55:02:de: ec:08:8f:02:90:65:d1:63:7c:b9:6a:91:9b:1a:bf: 50:05:0f:96:78:10:74:9c:a8:e8:b0:92:78:76:45: 4f:97:62:5d:9b:23:77:e8:37:2e:94:dd:9b:f1:3f: 50:ce:e4:60:4e:47:ba:fc:11:00:98:ac:f4:95:32: 2e:75:8d:ac:63:94:49:e0:a8:0f:dd:e7:96:0d:21: c0:e5:8b:97:09:90:f8:e9:c2:eb:bc:9d:1e:e6:d4: 4d:9f:40:ba:63:3b:65:ea:6a:6c:82:bc:99:7f:b1: 20:9c:5b:9a:bc:85:1d:46:5d:7e:a9:64:a5:a0:a8: f2:9c:6a:22:5d:67:8f:39:53:f1:ed:42:f1:39:52: 0b:50:2e:cb:14:cc:f8:2a:b6:98:42:65:4e:08:0e: b5:86:13:e5:cb:b8:15:49:ef:ff:1d:cd:07:7f:13: 1c:5d:9c:25:51:3c:6e:8d:40:24:b8:f2:19:8d:4d: 5c:38:c5:e7:a8:1e:1c:a4:ad:16:ce:d4:9a:9c:d8: b3:1d:fa:9f:9c:08:02:48:a9:81:33:98:01:fd:33: 54:a8:bb:88:1b:89:ff:ea:b9:1e:3f:a5:90:11:c3: ed:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:21:BC:CE:B2:F4:DF:37:C8:68:61:8C:0D:98:A1:98:95:AC:62:4B X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/51BBEE10B2BE11EFA108946DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.223.0/24 103.164.2.0/24 203.17.240.0/22 Signature Algorithm: sha256WithRSAEncryption d2:1b:84:41:8a:a8:5b:1f:84:57:fe:1c:81:81:86:7e:38:6b: c5:c6:a9:eb:16:63:a3:ea:30:ac:b8:8c:52:e8:c5:b0:90:50: e0:16:8f:3d:e1:46:73:ef:79:39:cd:af:e4:1b:81:78:d5:59: 85:15:56:8f:c7:1e:03:2f:62:e3:f8:ae:8e:cc:87:a8:80:81: e1:f0:aa:ad:ef:41:84:d5:d9:5f:4f:e5:75:c1:e8:a9:9f:56: 4d:f2:83:69:d4:db:3b:e7:9b:f1:1c:45:c8:f3:27:b0:cb:7b: 13:ef:97:ab:36:d0:2b:df:0b:f6:e8:f3:13:dc:4e:c0:8e:82: 61:f2:bf:93:8e:ae:2d:8b:a0:cc:0e:c2:ea:50:d0:cc:86:f4: 5f:00:dd:ea:b1:74:92:ee:a7:bb:24:ea:64:cd:4e:24:28:ac: 82:fa:7e:d2:40:8d:5e:9e:44:83:93:02:b1:ab:78:ca:41:2a: 6f:de:73:1c:32:56:0e:95:ab:d8:bb:9e:31:09:08:7f:51:cd: 7e:fe:85:6d:e7:e4:95:16:cf:6e:07:1e:0b:11:d6:22:a3:a7: 2a:53:1a:4a:4b:87:f7:ae:10:48:51:3a:2e:e2:da:92:63:31: f5:f5:cf:34:98:25:8d:c3:d2:6a:e4:a3:c7:83:05:96:50:bf: 6e:97:71:6e -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjUwMjI1MDc1ODM1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JkNzgyYi1mZTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4Vo7Yf4WP6+UnYihIAvKnNtVDeXO7oiBvtVAt7sCI8CkGXRY3y5apGbGr9Q BQ+WeBB0nKjosJJ4dkVPl2JdmyN36DculN2b8T9QzuRgTke6/BEAmKz0lTIudY2s Y5RJ4KgP3eeWDSHA5YuXCZD46cLrvJ0e5tRNn0C6Yztl6mpsgryZf7EgnFuavIUd Rl1+qWSloKjynGoiXWePOVPx7ULxOVILUC7LFMz4KraYQmVOCA61hhPly7gVSe// Hc0HfxMcXZwlUTxujUAkuPIZjU1cOMXnqB4cpK0WztSanNizHfqfnAgCSKmBM5gB /TNUqLuIG4n/6rkeP6WQEcPtFwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDIhvM6y 9N83yGhhjA2YoZiVrGJLMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNDNzYvQjQ5OTJENTIzNDU4MTFFRkI0MkY5RDM3QzRGOUFFMDIvNTFCQkVFMTBC MkJFMTFFRkExMDg5NDZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnk98DBABnpAIDBALLEfAwDQYJKoZIhvcNAQELBQADggEB ANIbhEGKqFsfhFf+HIGBhn44a8XGqesWY6PqMKy4jFLoxbCQUOAWjz3hRnPveTnN r+QbgXjVWYUVVo/HHgMvYuP4ro7Mh6iAgeHwqq3vQYTV2V9P5XXB6KmfVk3yg2nU 2zvnm/EcRcjzJ7DLexPvl6s20CvfC/bo8xPcTsCOgmHyv5OOri2LoMwOwupQ0MyG 9F8A3eqxdJLup7sk6mTNTiQorIL6ftJAjV6eRIOTArGreMpBKm/ecxwyVg6Vq9i7 njEJCH9RzX7+hW3n5JUWz24HHgsR1iKjpypTGkpLh/euEEhROi7i2pJjMfX1zzSY JY3D0mrko8eDBZZQv26XcW4= -----END CERTIFICATE-----Generated at Sat Apr 5 07:12:37 2025 by rpki-client