$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa File: 7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (raw, json) Hash identifier: p2Z1EgqQ+6pJLOz3jzYs7kxwvH11aaW9ezRiUjRkGPg= Subject key identifier: 96:4E:17:5E:85:31:BF:5D:30:FB:83:08:65:96:FC:86:B1:67:8F:13 Certificate issuer: /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Certificate serial: 05FB Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa Signing time: Mon 10 Mar 2025 00:56:50 +0000 ROA not before: Mon 10 Mar 2025 00:56:49 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142053 IP address blocks: 103.165.184.0/24 maxlen: 24 2001:df6:7080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1531 (0x5fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5998 Validity Not Before: Mar 10 00:56:49 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67ce38d1-fe0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b7:cf:96:32:22:1f:27:81:58:04:67:28:e2: ed:6b:22:e3:31:42:92:89:77:64:4d:60:b6:63:5f: 6e:85:14:7c:c0:b3:d1:8c:eb:79:2b:1a:d1:04:82: 9a:89:ab:c9:96:40:16:88:7d:8d:97:67:8f:bf:35: 51:87:4b:39:41:7a:cb:f0:3b:34:3f:b8:a8:07:7f: dc:84:b4:ce:a3:44:98:06:fb:bb:8a:0e:f9:48:c4: c2:e9:7a:86:8d:28:3c:f2:23:c9:54:2d:cc:50:41: 11:97:a7:ef:70:a1:75:6a:ee:80:c1:3b:a9:1f:48: 87:95:a6:c4:30:f5:e1:fd:86:c3:11:ff:1d:a3:b5: 63:82:d7:25:0b:20:9a:17:47:f4:fa:a5:1f:f7:13: c9:01:00:a1:10:7b:1f:2d:00:0f:53:95:fa:1d:95: 8e:a9:bb:ef:ac:f6:46:56:69:eb:74:87:6a:0d:5a: 37:f9:94:7a:af:a8:89:4e:05:bd:cf:08:70:39:f8: 04:44:16:f6:93:55:b7:3f:d9:e1:65:c7:d2:38:53: c7:f4:a5:1c:41:0b:1a:be:2b:47:b6:c1:b1:71:10: 5b:b9:66:f5:49:f0:f8:29:c2:4f:70:cc:12:56:c4: 0e:95:a1:a7:50:97:2b:57:01:c2:cc:db:f9:34:1d: 60:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4E:17:5E:85:31:BF:5D:30:FB:83:08:65:96:FC:86:B1:67:8F:13 X509v3 Authority Key Identifier: keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.184.0/24 IPv6: 2001:df6:7080::/48 Signature Algorithm: sha256WithRSAEncryption 0c:84:16:cf:53:6f:3e:cf:07:01:61:b2:8d:50:ab:21:9f:0c: ad:6d:5f:cc:2b:01:2a:49:cd:3a:da:38:ff:a0:2c:5f:3e:cd: 68:b8:9f:0c:d9:67:d4:a6:cd:e8:8c:9c:8d:99:97:44:6a:31: 80:1c:1c:6b:a8:a5:f5:55:84:57:3e:4b:79:aa:f3:7a:43:9b: 90:b2:b6:b9:b0:b3:8d:d1:4e:1c:ca:4e:ed:0d:e3:49:6d:ee: 23:41:85:9e:36:cf:3d:6a:96:fd:26:e7:6b:ae:c8:d2:35:ec: 36:51:ec:04:ef:35:a6:97:df:b6:1c:7d:e7:7e:4e:35:7f:47: 2c:7d:6a:9d:3d:3e:d8:a3:e6:56:03:b6:a4:2c:5f:75:79:86: ed:3b:65:c8:9e:9a:bf:65:35:d2:3b:d8:63:02:41:5b:5a:8a: 3a:bd:45:3c:1b:66:5b:31:58:2b:7a:89:f4:b4:ac:57:c7:22: 97:16:96:82:13:48:47:2d:0c:1a:29:ee:3a:17:72:5f:fb:e1: e0:2a:e9:66:df:03:06:b1:00:78:13:a8:31:79:4f:bc:9e:7b: bf:e3:73:fc:2d:30:a5:a4:1c:31:78:bf:9a:82:ad:6c:ed:b8: db:b8:27:1a:e2:39:c2:2d:9b:87:d8:a3:97:ff:4b:f6:25:39: 36:ca:4b:0a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU5OTgxMTAvBgNVBAUTKDYwMURDNTRCMUY1MjA1MDgwRUZEOUFBNkNGQTVBNTFD NEE3OUREMkIwHhcNMjUwMzEwMDA1NjQ5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NlMzhkMS1mZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rfPljIiHyeBWARnKOLtayLjMUKSiXdkTWC2Y19uhRR8wLPRjOt5KxrRBIKa iavJlkAWiH2Nl2ePvzVRh0s5QXrL8Ds0P7ioB3/chLTOo0SYBvu7ig75SMTC6XqG jSg88iPJVC3MUEERl6fvcKF1au6AwTupH0iHlabEMPXh/YbDEf8do7VjgtclCyCa F0f0+qUf9xPJAQChEHsfLQAPU5X6HZWOqbvvrPZGVmnrdIdqDVo3+ZR6r6iJTgW9 zwhwOfgERBb2k1W3P9nhZcfSOFPH9KUcQQsavitHtsGxcRBbuWb1SfD4KcJPcMwS VsQOlaGnUJcrVwHCzNv5NB1gNwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJZOF16F Mb9dMPuDCGWW/IaxZ48TMB8GA1UdIwQYMBaAFGAdxUsfUgUIDv2aps+lpRxKed0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTk5OC8yQzU5MkUyODlG MUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JRZ09fWnFtejZXbEhFcDUz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCM0ZTeDlTQlFnT19acW16NldsSEVwNTNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU5OTgvMkM1OTJFMjg5RjFGMTFFQkIzMEQ1NzQzQzRGOUFFMDIvNzQzOERERjBG RDRBMTFFRjg1RDNBQzFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnpbgwDwQCAAIwCQMHACABDfZwgDANBgkqhkiG9w0BAQsF AAOCAQEADIQWz1NvPs8HAWGyjVCrIZ8MrW1fzCsBKknNOto4/6AsXz7NaLifDNln 1KbN6IycjZmXRGoxgBwca6il9VWEVz5LearzekObkLK2ubCzjdFOHMpO7Q3jSW3u I0GFnjbPPWqW/Sbna67I0jXsNlHsBO81ppffthx9535ONX9HLH1qnT0+2KPmVgO2 pCxfdXmG7TtlyJ6av2U10jvYYwJBW1qKOr1FPBtmWzFYK3qJ9LSsV8cilxaWghNI Ry0MGinuOhdyX/vh4CrpZt8DBrEAeBOoMXlPvJ57v+Nz/C0wpaQcMXi/moKtbO24 27gnGuI5wi2bh9ijl/9L9iU5NspLCg== -----END CERTIFICATE-----Generated at Sun Apr 6 09:04:53 2025 by rpki-client