$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/E3272FE036B911E99F4D9A5CC4F9AE02.roa File: E3272FE036B911E99F4D9A5CC4F9AE02.roa (raw, json) Hash identifier: cjRvE9qcGsnVMBQMShsH1bjq0rqs5KnVL8lFydaV3ng= Subject key identifier: 8C:71:86:9A:3C:36:80:E3:E9:53:AB:68:FA:F5:D1:67:C7:9B:9F:B0 Certificate issuer: /CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Certificate serial: 1038 Authority key identifier: 3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/E3272FE036B911E99F4D9A5CC4F9AE02.roa Signing time: Sat 08 Mar 2025 17:35:56 +0000 ROA not before: Sat 08 Mar 2025 17:35:56 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 132129 IP address blocks: 103.134.192.0/22 maxlen: 22 103.134.192.0/24 maxlen: 24 103.134.193.0/24 maxlen: 24 103.134.194.0/24 maxlen: 24 103.134.195.0/24 maxlen: 24 2404:69c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 17:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4152 (0x1038) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA944 Validity Not Before: Mar 8 17:35:56 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67cc7ffc-20b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e2:26:e8:fd:b2:4e:fa:af:82:b3:38:7a:21: c1:24:71:d5:69:0e:d1:84:0b:07:dd:05:55:97:0d: 9f:46:45:29:62:bb:68:3b:49:02:e2:d4:76:7b:03: a7:ff:a1:b8:d3:df:76:dd:cd:da:ab:01:1f:32:01: aa:11:3e:97:a7:9a:5c:47:4f:a6:b0:9c:98:f1:db: 01:fa:ea:29:f5:f1:0c:5c:a1:d1:32:eb:8f:f0:79: ae:42:4c:22:7b:4f:5c:4d:df:45:26:51:e6:67:f4: 30:bd:d4:68:3a:cb:dc:fc:a7:4b:82:bc:12:36:23: 33:d2:11:45:ba:36:a1:8c:97:8e:6a:05:71:78:5f: 91:82:ce:56:5e:4f:09:12:20:b7:fd:95:47:49:04: f9:de:3e:c5:47:b9:7a:5d:3d:2e:f0:4b:57:c9:12: e9:86:13:b5:c1:06:d3:5d:b7:02:8e:62:dd:35:76: 19:e3:c0:1f:ba:85:dd:d3:a9:bf:b1:d7:3b:45:68: 81:d8:e7:f0:95:e2:e9:6e:05:47:1c:eb:ca:26:97: c2:58:a5:ce:22:c7:41:91:d6:ee:5a:59:54:30:af: d0:45:21:02:2f:d1:fd:49:b9:42:b2:c7:9e:74:66: e1:36:aa:74:09:55:14:7f:4b:72:e6:26:02:6c:ff: ef:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:71:86:9A:3C:36:80:E3:E9:53:AB:68:FA:F5:D1:67:C7:9B:9F:B0 X509v3 Authority Key Identifier: keyid:3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/E3272FE036B911E99F4D9A5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.192.0/22 IPv6: 2404:69c0::/32 Signature Algorithm: sha256WithRSAEncryption 21:2f:bc:90:91:50:dc:13:b0:15:a1:fc:8a:d0:ea:a0:61:d1: a1:9d:e9:00:7d:2c:16:b6:8c:5c:f2:69:eb:e7:8c:68:f8:45: cc:97:e8:24:18:f5:18:e5:b2:35:56:c9:79:36:ed:34:96:c2: fb:69:c9:a0:db:35:2b:aa:43:dc:cc:ba:87:f4:15:05:86:a9: 97:6d:cd:c9:04:8c:13:0f:7a:cf:08:ad:e0:af:04:87:ae:b3: 77:6d:4d:51:b4:5c:70:03:91:d3:b1:b7:ea:7f:c2:9e:d1:bd: af:c6:cb:b8:69:fd:85:fa:c2:22:4d:fe:24:0d:b2:98:8c:a6: da:1b:62:e3:ef:c1:05:93:17:d2:84:37:96:19:f7:ea:f5:42: 80:66:b7:58:eb:46:3a:64:2f:c8:89:c8:7a:15:83:db:28:6e: da:83:81:cf:9b:37:52:31:12:34:72:27:15:5f:6f:8b:4e:95: e4:97:18:9e:90:ab:a4:1d:2e:99:e3:76:82:ec:78:ec:7f:c8: 18:02:b5:1b:d5:a7:7e:84:f2:b2:33:cb:1d:54:b1:45:54:70: 67:5d:5c:6e:1b:56:f9:f2:9b:dd:02:33:9c:bf:d3:fa:7d:3d: bc:ff:94:a1:10:f3:5c:ec:dc:9e:1b:71:17:c4:6c:a3:ac:00: 40:e6:71:f7 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICEDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NDQxMTAvBgNVBAUTKDNCOEQzQjUxODRGRjVCNDgxQjVCMEU1OUIwQjIyOUND MDZENjA5MUUwHhcNMjUwMzA4MTczNTU2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2NjN2ZmYy0yMGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnuIm6P2yTvqvgrM4eiHBJHHVaQ7RhAsH3QVVlw2fRkUpYrtoO0kC4tR2ewOn /6G409923c3aqwEfMgGqET6Xp5pcR0+msJyY8dsB+uop9fEMXKHRMuuP8HmuQkwi e09cTd9FJlHmZ/QwvdRoOsvc/KdLgrwSNiMz0hFFujahjJeOagVxeF+Rgs5WXk8J EiC3/ZVHSQT53j7FR7l6XT0u8EtXyRLphhO1wQbTXbcCjmLdNXYZ48AfuoXd06m/ sdc7RWiB2OfwleLpbgVHHOvKJpfCWKXOIsdBkdbuWllUMK/QRSECL9H9SblCssee dGbhNqp0CVUUf0ty5iYCbP/vKwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIxxhpo8 NoDj6VOraPr10WfHm5+wMB8GA1UdIwQYMBaAFDuNO1GE/1tIG1sOWbCyKcwG1gke MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk0NC83OTZDOUQ3NDM2 QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cwZ2JXdzVac0xJcHpBYldD UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080MDdVWVRfVzBnYld3NVpzTElwekFiV0NSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE5NDQvNzk2QzlENzQzNkI5MTFFOTk4NEI3NjVDQzRGOUFFMDIvRTMyNzJGRTAz NkI5MTFFOTlGNEQ5QTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnhsAwDQQCAAIwBwMFACQEacAwDQYJKoZIhvcNAQELBQAD ggEBACEvvJCRUNwTsBWh/IrQ6qBh0aGd6QB9LBa2jFzyaevnjGj4RcyX6CQY9Rjl sjVWyXk27TSWwvtpyaDbNSuqQ9zMuof0FQWGqZdtzckEjBMPes8IreCvBIeus3dt TVG0XHADkdOxt+p/wp7Rva/Gy7hp/YX6wiJN/iQNspiMptobYuPvwQWTF9KEN5YZ 9+r1QoBmt1jrRjpkL8iJyHoVg9sobtqDgc+bN1IxEjRyJxVfb4tOleSXGJ6Qq6Qd LpnjdoLseOx/yBgCtRvVp36E8rIzyx1UsUVUcGddXG4bVvnym90CM5y/0/p9Pbz/ lKEQ81zs3J4bcRfEbKOsAEDmcfc= -----END CERTIFICATE-----Generated at Sat Apr 12 09:05:16 2025 by rpki-client