$ rpki-client -vvf rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/AD0B0E5E762711EBBD5D544FC4F9AE02.roa File: AD0B0E5E762711EBBD5D544FC4F9AE02.roa (raw, json) Hash identifier: sRmBeQkX3ZH6lPD83kjqFke2bsVl1aLInDxD3kBzJvg= Subject key identifier: 42:B6:46:87:AC:89:97:18:1C:CF:B6:4B:DB:23:E8:74:A3:63:59:43 Certificate issuer: /CN=A91E75B7/serialNumber=B1CFE5FA6A7122C904EB110EF1A82980FC3DFA4A Certificate serial: 0654 Authority key identifier: B1:CF:E5:FA:6A:71:22:C9:04:EB:11:0E:F1:A8:29:80:FC:3D:FA:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/AD0B0E5E762711EBBD5D544FC4F9AE02.roa Signing time: Sat 01 Mar 2025 00:01:13 +0000 ROA not before: Sat 01 Mar 2025 00:01:13 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 141700 IP address blocks: 103.161.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.crl rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E75B7 Validity Not Before: Mar 1 00:01:13 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c24e49-a3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:e9:2d:d7:95:8e:75:c4:00:3f:ff:72:3e: a5:72:57:dd:2b:58:a6:61:94:44:ea:c9:d8:bf:d8: ae:7b:03:4f:c7:87:34:45:59:9d:34:47:8e:8d:55: 2e:a2:a0:70:ee:40:99:46:7b:63:95:c5:13:a4:a5: 61:59:53:1b:8c:ea:f5:5c:79:2c:bb:e3:5d:fb:d2: 65:77:1d:fd:da:d0:1b:b4:66:c4:9d:7c:07:f4:9b: 79:30:b4:f1:d8:74:ac:d5:9a:ea:75:bf:6b:73:ee: 61:8f:07:40:8f:10:6b:14:a7:ea:b7:3d:ec:55:a3: c4:e1:51:b9:2b:c6:a6:8b:5c:2a:ab:d5:9a:8b:70: 25:1b:8c:b7:97:33:c9:49:9a:81:75:cd:c4:2b:ac: 9b:70:2f:09:f7:07:ba:5f:e5:a7:58:c3:27:ca:b7: 50:fc:39:36:38:0e:d0:c7:ef:b3:ee:f9:a4:ab:a0: ba:f2:fa:c3:5c:74:80:3e:ab:a8:6f:9e:fa:f9:0e: f9:cc:45:29:47:75:4a:b6:b8:87:c2:46:93:34:62: f1:45:f0:bf:12:d5:03:f3:cc:8e:70:d4:5d:1e:44: d3:59:50:27:7b:6e:c0:a0:50:99:5a:cd:8b:01:61: ca:59:a8:10:70:3f:e6:21:cb:28:73:55:e2:06:89: 56:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B6:46:87:AC:89:97:18:1C:CF:B6:4B:DB:23:E8:74:A3:63:59:43 X509v3 Authority Key Identifier: keyid:B1:CF:E5:FA:6A:71:22:C9:04:EB:11:0E:F1:A8:29:80:FC:3D:FA:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/AD0B0E5E762711EBBD5D544FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.197.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:ca:da:0b:1e:29:5e:b5:24:29:d2:91:6d:c8:04:9e:e6:b4: 0b:0a:e0:0a:32:0c:81:1c:70:a2:66:1a:7d:74:bd:b0:00:c3: c6:4a:4c:c0:70:e4:b1:90:0b:44:0e:c1:a4:9f:a6:dd:f9:19: 62:39:33:dc:90:77:3d:62:f6:bb:8d:97:e5:0e:4d:07:6a:6e: fb:8d:81:20:ce:87:a0:66:0e:eb:0d:c5:45:13:10:d2:be:27: 71:31:87:1a:5c:8b:a5:b3:ef:e0:79:ec:09:c3:44:9b:83:31: 44:f5:17:8b:6c:e6:56:4e:d4:f4:9f:36:45:56:0e:a6:24:ed: be:73:17:53:a1:06:25:5b:7d:2d:bc:f8:19:a4:0f:52:3a:e1: e2:14:3c:61:b3:9f:04:6d:0b:8c:46:80:54:bd:d2:3f:1e:26: fa:ce:ad:6e:75:1a:b7:18:55:95:df:e4:1f:61:d5:3e:73:61: 77:54:68:97:73:b4:9a:f3:88:0b:5f:06:dc:ac:e0:3f:74:8f: 0a:f7:ad:d1:2d:5a:8a:3c:c6:9b:1b:98:60:f8:52:29:1b:26: 89:1d:c2:86:dc:23:64:ca:80:fb:b9:50:25:77:7a:da:46:53: e3:19:86:be:8b:c0:49:3e:38:5c:81:51:0a:bb:9c:3f:46:7e: 8f:be:b7:fa -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1QjcxMTAvBgNVBAUTKEIxQ0ZFNUZBNkE3MTIyQzkwNEVCMTEwRUYxQTgyOTgw RkMzREZBNEEwHhcNMjUwMzAxMDAwMTEzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyNGU0OS1hM2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsvpLdeVjnXEAD//cj6lclfdK1imYZRE6snYv9iuewNPx4c0RVmdNEeOjVUu oqBw7kCZRntjlcUTpKVhWVMbjOr1XHksu+Nd+9Jldx392tAbtGbEnXwH9Jt5MLTx 2HSs1Zrqdb9rc+5hjwdAjxBrFKfqtz3sVaPE4VG5K8ami1wqq9Wai3AlG4y3lzPJ SZqBdc3EK6ybcC8J9we6X+WnWMMnyrdQ/Dk2OA7Qx++z7vmkq6C68vrDXHSAPquo b576+Q75zEUpR3VKtriHwkaTNGLxRfC/EtUD88yOcNRdHkTTWVAne27AoFCZWs2L AWHKWagQcD/mIcsoc1XiBolW2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFEK2Roes iZcYHM+2S9sj6HSjY1lDMB8GA1UdIwQYMBaAFLHP5fpqcSLJBOsRDvGoKYD8PfpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzVCNy83RkVENUUxRTc2 MjYxMUVCOERGQ0UwNEVDNEY5QUUwMi9zY19sLW1weElza0U2eEVPOGFncGdQdzkt a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjX2wtbXB4SXNrRTZ4RU84YWdwZ1B3OS1rby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc1QjcvN0ZFRDVFMUU3NjI2MTFFQjhERkNFMDRFQzRGOUFFMDIvQUQwQjBFNUU3 NjI3MTFFQkJENUQ1NDRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnocUwDQYJKoZIhvcNAQELBQADggEBAE3K2gseKV61JCnS kW3IBJ7mtAsK4AoyDIEccKJmGn10vbAAw8ZKTMBw5LGQC0QOwaSfpt35GWI5M9yQ dz1i9ruNl+UOTQdqbvuNgSDOh6BmDusNxUUTENK+J3Exhxpci6Wz7+B57AnDRJuD MUT1F4ts5lZO1PSfNkVWDqYk7b5zF1OhBiVbfS28+BmkD1I64eIUPGGznwRtC4xG gFS90j8eJvrOrW51GrcYVZXf5B9h1T5zYXdUaJdztJrziAtfBtys4D90jwr3rdEt Woo8xpsbmGD4UikbJokdwobcI2TKgPu5UCV3etpGU+MZhr6LwEk+OFyBUQq7nD9G fo++t/o= -----END CERTIFICATE-----Generated at Sat Apr 5 09:40:21 2025 by rpki-client