$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/DD015FDE639D11EFB9BDBE62C4F9AE02.roa File: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (raw, json) Hash identifier: SDxl8l5CQA8d0jF8r7Sa6q9ALS3hHi/3Jt4li1lWZ7Y= Subject key identifier: 18:62:A1:AE:7B:30:75:2B:64:92:42:D5:32:7F:B0:9A:A2:2A:17:41 Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Certificate serial: 68 Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/DD015FDE639D11EFB9BDBE62C4F9AE02.roa Signing time: Wed 05 Feb 2025 05:48:21 +0000 ROA not before: Wed 05 Feb 2025 05:48:21 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 38195 IP address blocks: 103.116.195.0/24 maxlen: 24 203.20.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F372C Validity Not Before: Feb 5 05:48:21 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a2fba5-7693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bf:de:6b:76:ce:fb:f8:7f:3b:b9:fd:cd:25: 1d:58:d8:06:6b:6b:ca:81:0d:21:0f:cc:71:85:3a: c8:51:17:de:f7:b2:f5:96:a1:68:3f:2a:cd:4b:e4: 9e:66:34:18:0e:69:1a:9f:2c:a2:d0:a1:45:de:65: 81:96:1b:ce:f6:00:39:e1:04:d2:73:8d:17:f4:87: 9c:b6:dc:9c:07:0a:0f:a1:89:57:6f:40:2d:4c:e6: e1:6b:f6:eb:f0:76:05:e8:6f:00:1a:b4:16:4c:28: bf:8e:2d:fe:da:63:27:cc:8a:9e:11:c9:04:57:3c: 2f:81:0d:79:4c:ed:64:4c:60:17:65:d6:d7:08:33: b2:6a:b8:41:45:1b:5f:39:4f:71:eb:f3:39:21:10: 20:b4:93:20:01:52:07:5f:29:b0:74:e0:89:96:db: 85:fb:5b:47:cd:75:e4:eb:1b:e6:92:aa:41:46:e2: 3b:aa:20:06:a2:b5:1c:d8:6a:49:94:40:2d:73:c4: c0:26:a2:e6:66:e9:88:48:bf:81:07:bc:2e:34:4b: f1:3d:71:57:ce:95:18:86:5c:7f:07:01:45:1e:38: 90:f6:c6:52:fa:fb:51:0b:c9:f6:6e:44:bb:9d:38: 06:72:9e:f2:d9:72:dd:29:4b:74:a7:e6:8f:db:ed: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:62:A1:AE:7B:30:75:2B:64:92:42:D5:32:7F:B0:9A:A2:2A:17:41 X509v3 Authority Key Identifier: keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/DD015FDE639D11EFB9BDBE62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.195.0/24 203.20.125.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:c7:b1:d9:61:be:20:d1:1e:50:9e:65:99:50:33:14:ec:30: 16:a5:17:87:2e:4d:cf:a6:1e:10:81:6e:37:c6:0e:5e:82:4a: 88:f1:ad:0b:fd:10:49:71:e3:c1:80:8c:2f:b8:95:5d:0c:42: 4b:95:66:1b:fb:25:65:61:eb:3d:a8:5e:b8:08:44:71:ef:6b: ba:1d:76:dd:fa:2f:be:e3:21:3e:6c:5a:14:2c:c3:00:fb:02: 4b:1f:d8:0d:34:6a:4f:fa:ee:60:6d:4d:d7:d9:cc:75:85:b5: a4:c4:6d:bc:b5:4d:de:c3:b2:11:91:26:b1:02:7c:1a:1f:65: 3d:72:ca:77:63:2c:c2:a9:0d:08:62:34:b9:80:a8:d4:d3:d0: 9d:e4:18:02:82:f2:76:fd:e6:4d:18:57:ac:cd:5a:61:e0:ef: ef:b4:b7:0b:c7:b8:05:84:e9:71:87:5f:71:5a:1c:41:1e:b3: 30:72:23:f9:b7:0c:32:16:0c:c0:55:ba:ff:8d:80:38:4c:89: 44:21:6e:aa:65:90:d8:6b:f7:fd:ff:df:c8:22:6c:81:77:f6: 95:9d:ac:ef:b7:64:5c:48:4f:ce:a6:dd:38:a4:f3:22:31:00: 35:27:8e:d9:b0:f2:a0:ea:f2:dd:41:1e:cb:c9:56:ab:1f:b1: 93:77:c5:3e -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzcyQzExMC8GA1UEBRMoNEM2MkYxRTEwQjg4M0Y1RDU3ODRENjM1NzQwRkQyMzAz NENFQkZFMjAeFw0yNTAyMDUwNTQ4MjFaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YTJmYmE1LTc2OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuv95rds77+H87uf3NJR1Y2AZra8qBDSEPzHGFOshRF973svWWoWg/Ks1L5J5m NBgOaRqfLKLQoUXeZYGWG872ADnhBNJzjRf0h5y23JwHCg+hiVdvQC1M5uFr9uvw dgXobwAatBZMKL+OLf7aYyfMip4RyQRXPC+BDXlM7WRMYBdl1tcIM7JquEFFG185 T3Hr8zkhECC0kyABUgdfKbB04ImW24X7W0fNdeTrG+aSqkFG4juqIAaitRzYakmU QC1zxMAmouZm6YhIv4EHvC40S/E9cVfOlRiGXH8HAUUeOJD2xlL6+1ELyfZuRLud OAZynvLZct0pS3Sn5o/b7QwVAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUGGKhrnsw dStkkkLVMn+wmqIqF0EwHwYDVR0jBBgwFoAUTGLx4QuIP11XhNY1dA/SMDTOv+Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzNzJDLzY3OTZEOEUyNUVD RTExRUZBOUE4QjAzRUM0RjlBRTAyL1RHTHg0UXVJUDExWGhOWTFkQV9TTURUT3Yt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVEdMeDRRdUlQMTFYaE5ZMWRBX1NNRFRPdi1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzcyQy82Nzk2RDhFMjVFQ0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9ERDAxNUZERTYz OUQxMUVGQjlCREJFNjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAGd0wwMEAMsUfTANBgkqhkiG9w0BAQsFAAOCAQEAbMex2WG+ INEeUJ5lmVAzFOwwFqUXhy5Nz6YeEIFuN8YOXoJKiPGtC/0QSXHjwYCML7iVXQxC S5VmG/slZWHrPaheuAhEce9ruh123fovvuMhPmxaFCzDAPsCSx/YDTRqT/ruYG1N 19nMdYW1pMRtvLVN3sOyEZEmsQJ8Gh9lPXLKd2MswqkNCGI0uYCo1NPQneQYAoLy dv3mTRhXrM1aYeDv77S3C8e4BYTpcYdfcVocQR6zMHIj+bcMMhYMwFW6/42AOEyJ RCFuqmWQ2Gv3/f/fyCJsgXf2lZ2s77dkXEhPzqbdOKTzIjEANSeO2bDyoOry3UEe y8lWqx+xk3fFPg== -----END CERTIFICATE-----Generated at Sat Apr 5 16:24:18 2025 by rpki-client