$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/AB52C51AB96B11ECB44AC533C4F9AE02.roa File: AB52C51AB96B11ECB44AC533C4F9AE02.roa (raw, json) Hash identifier: fXxSo682fkgrV8puX+aCaQZxmTNLL+rJcYQD485NwzM= Subject key identifier: D6:19:5C:32:E8:4D:D3:61:02:09:3D:EB:7E:F1:E7:EC:40:FC:AA:3B Certificate issuer: /CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Certificate serial: 0E00 Authority key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/AB52C51AB96B11ECB44AC533C4F9AE02.roa Signing time: Thu 20 Mar 2025 17:56:34 +0000 ROA not before: Thu 20 Mar 2025 17:56:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142128 IP address blocks: 103.137.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3584 (0xe00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D04 Validity Not Before: Mar 20 17:56:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67dc56d2-6b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:35:bb:cb:85:9e:ff:e3:96:b0:73:84:99: 65:4b:dc:a5:bb:6a:97:85:64:f6:42:e4:c6:fd:a9: 13:86:b2:7f:14:c1:04:30:41:9c:64:23:ea:cd:95: 53:55:70:af:54:93:ae:29:2c:4e:2e:a7:61:2c:12: 98:92:e1:af:27:d2:d4:84:3a:12:3f:4c:54:a4:dd: 85:af:3b:09:83:1c:be:cf:68:6b:2b:a9:18:73:90: fd:6a:2c:a6:f0:b2:74:10:c1:8c:b8:e0:19:fb:2f: e0:40:16:1d:aa:f9:df:0c:96:ae:e7:ee:9d:a5:39: d3:56:7d:35:6d:5f:67:a8:b4:6c:08:df:1f:bb:76: 9f:ef:14:a4:cb:32:65:67:44:54:00:b7:e8:8d:98: cb:8d:3e:55:33:be:11:f4:54:9e:63:4b:10:09:4f: b5:6c:39:b7:60:2c:db:f7:7c:35:83:35:05:96:08: d4:75:fa:1c:8a:d8:89:59:7e:b4:d3:f3:ee:eb:47: ee:5a:c3:4d:97:25:7a:ae:f4:29:11:1a:6e:a0:3b: 82:38:10:58:ae:dc:42:08:4e:04:1c:1a:73:fe:6f: 2d:27:3c:1a:0c:a0:6a:47:6a:d9:5c:69:91:4f:ce: f4:96:9d:e3:a2:ad:c0:ba:6e:61:c3:b2:95:3b:63: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:19:5C:32:E8:4D:D3:61:02:09:3D:EB:7E:F1:E7:EC:40:FC:AA:3B X509v3 Authority Key Identifier: keyid:DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/AB52C51AB96B11ECB44AC533C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.222.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:d3:c3:f2:99:ce:ff:a5:28:98:8a:08:66:04:48:c5:07:4c: 51:d0:97:a4:a3:02:2b:80:40:25:87:41:ed:ac:b8:d2:70:dc: 6d:55:f5:13:29:08:48:78:c9:44:71:95:08:f8:c2:bb:9a:55: 62:85:e5:4f:2a:aa:fc:45:03:de:7e:e0:4b:c6:63:a5:06:f7: d5:ff:0e:9d:21:8a:a0:7b:fa:54:56:0b:6f:4b:1f:8f:74:8f: 17:87:d6:7f:13:66:22:26:ad:d0:7f:55:04:79:9c:88:19:d4: b9:f3:58:f2:11:8f:af:c8:6a:c9:96:2c:e3:1c:9d:84:c3:99: ea:29:65:27:dd:2c:73:2e:7c:db:24:3c:78:5a:aa:c2:d3:71: b2:b9:eb:8c:e6:4c:74:9a:7c:43:93:73:4f:d1:65:87:a2:a8: 75:cc:9b:43:47:66:1e:51:39:57:69:49:12:07:5f:54:ba:12: de:d5:53:17:9d:96:dd:0d:ec:0a:a5:7d:46:90:a5:67:9e:7b: 84:6c:a1:17:6d:c7:b3:9f:b9:04:0b:36:cb:8a:21:3f:a4:ab: 37:35:96:7f:23:f4:bd:72:c2:3f:1e:8e:9e:eb:c6:07:c6:52: d8:61:58:ba:a1:a6:d8:34:ca:25:f6:76:16:ff:89:f4:ed:d4: b2:b9:86:b8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMDQxMTAvBgNVBAUTKERGQzIzRTNEOTA1RDBFODM2ODEyMTk1OTZEMDgyMjlB Njk0RkFGMTMwHhcNMjUwMzIwMTc1NjM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RjNTZkMi02YjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKs1u8uFnv/jlrBzhJllS9ylu2qXhWT2QuTG/akThrJ/FMEEMEGcZCPqzZVT VXCvVJOuKSxOLqdhLBKYkuGvJ9LUhDoSP0xUpN2FrzsJgxy+z2hrK6kYc5D9aiym 8LJ0EMGMuOAZ+y/gQBYdqvnfDJau5+6dpTnTVn01bV9nqLRsCN8fu3af7xSkyzJl Z0RUALfojZjLjT5VM74R9FSeY0sQCU+1bDm3YCzb93w1gzUFlgjUdfocitiJWX60 0/Pu60fuWsNNlyV6rvQpERpuoDuCOBBYrtxCCE4EHBpz/m8tJzwaDKBqR2rZXGmR T870lp3joq3Aum5hw7KVO2NWIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNYZXDLo TdNhAgk9637x5+xA/Ko7MB8GA1UdIwQYMBaAFN/CPj2QXQ6DaBIZWW0IIpppT68T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QwNC83QTE3RkU4RUFE RDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERvTm9FaGxaYlFnaW1tbFBy eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4SS1QWkJkRG9Ob0VobFpiUWdpbW1sUHJ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNEMDQvN0ExN0ZFOEVBREQ5MTFFOUI3NDA5QTcyQzRGOUFFMDIvQUI1MkM1MUFC OTZCMTFFQ0I0NEFDNTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnid4wDQYJKoZIhvcNAQELBQADggEBAErTw/KZzv+lKJiK CGYESMUHTFHQl6SjAiuAQCWHQe2suNJw3G1V9RMpCEh4yURxlQj4wruaVWKF5U8q qvxFA95+4EvGY6UG99X/Dp0hiqB7+lRWC29LH490jxeH1n8TZiImrdB/VQR5nIgZ 1LnzWPIRj6/IasmWLOMcnYTDmeopZSfdLHMufNskPHhaqsLTcbK564zmTHSafEOT c0/RZYeiqHXMm0NHZh5ROVdpSRIHX1S6Et7VUxedlt0N7AqlfUaQpWeee4RsoRdt x7OfuQQLNsuKIT+kqzc1ln8j9L1ywj8ejp7rxgfGUthhWLqhptg0yiX2dhb/ifTt 1LK5hrg= -----END CERTIFICATE-----Generated at Sat Apr 5 07:19:17 2025 by rpki-client