$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/2B8EF9AA083911F0A051CE72C4F9AE02.roa File: 2B8EF9AA083911F0A051CE72C4F9AE02.roa (raw, json) Hash identifier: NUJLc0QRL6TCVIjI3d7tAKvp2NahPW0NGI52wQUI1t4= Subject key identifier: DD:30:7F:19:88:F7:D6:C9:63:90:31:BD:95:DA:87:1F:19:2F:77:14 Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Certificate serial: 0197 Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/2B8EF9AA083911F0A051CE72C4F9AE02.roa Signing time: Sun 23 Mar 2025 22:50:09 +0000 ROA not before: Sun 23 Mar 2025 22:50:08 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 138039 IP address blocks: 103.176.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 02:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B2E Validity Not Before: Mar 23 22:50:08 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67e09020-f20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:da:5e:31:4f:6d:d1:9a:37:3e:9c:3c:27:f3: 47:ec:e3:7b:14:32:a4:67:b9:a9:18:23:1d:2e:71: 85:d7:ae:40:36:c0:94:e5:bb:28:5f:3c:e9:ce:b3: e9:2f:13:14:63:8d:a8:82:27:f2:07:e8:7d:55:ad: 7a:ea:71:36:b5:c6:c2:01:60:9b:96:f0:40:38:1d: 4a:94:6c:9a:3f:ea:14:2e:e0:05:1c:3a:3a:33:bf: cf:a1:45:fd:c3:59:3e:bc:ec:bb:7b:a3:37:bb:37: 50:1f:80:e5:fd:ad:3c:c5:e9:48:2f:d7:7c:fc:15: 57:6d:3b:21:e7:c1:fa:19:43:7f:eb:db:4e:02:54: cc:00:4f:e3:c3:13:3a:ec:e7:89:73:f2:fd:a8:8e: 3a:eb:b8:ff:e8:2b:ce:fc:24:1f:19:44:62:02:ef: 43:fe:d9:d3:e1:bf:16:27:f4:13:de:5e:75:8b:6c: 01:73:6e:dc:b6:0d:df:fa:8f:df:4b:19:e4:dc:00: e5:26:e6:d9:60:69:8c:46:b2:c9:9a:62:43:2f:a2: 12:f6:06:ea:cb:c6:b9:7e:0e:f8:0b:74:bb:0a:46: 24:2e:f4:eb:2d:7a:ea:ae:bc:88:61:7b:ab:cd:dd: 9a:1e:6a:ac:bb:71:ef:12:a4:5e:41:c8:13:28:c7: 4b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:30:7F:19:88:F7:D6:C9:63:90:31:BD:95:DA:87:1F:19:2F:77:14 X509v3 Authority Key Identifier: keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/2B8EF9AA083911F0A051CE72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.247.0/24 Signature Algorithm: sha256WithRSAEncryption 52:6b:1a:03:de:d4:4a:44:1f:e4:4a:2f:0b:6f:79:3e:4b:25: dd:13:71:d3:38:6e:b4:b6:89:4d:4a:d1:d4:44:2d:38:e8:6f: e8:90:18:ac:dc:7b:eb:0c:d8:9a:0c:c9:84:13:d5:2f:36:f2: 8b:5d:8d:12:ce:af:b5:d4:ca:d8:15:c7:c7:74:d8:79:33:cc: 6a:4f:5f:97:15:b2:d0:7c:f2:a5:3f:af:f0:05:75:dc:56:b3: 0b:8b:e9:65:78:12:32:05:82:b2:82:c8:1b:b6:64:c9:23:0f: 7f:17:03:97:b4:d5:4f:07:00:7d:56:f1:46:33:ac:13:27:1c: 5f:44:6f:50:57:3b:3c:04:45:93:86:5b:52:d1:a9:cc:89:28: 17:9a:08:6d:c4:57:ef:65:7e:a0:40:d7:8a:52:d7:7c:20:fe: 13:00:96:bb:32:d2:e0:bf:0f:f3:6b:fb:4a:6e:5c:e5:3a:d4: e5:66:e3:62:28:f4:0a:49:66:45:a7:a8:e3:d9:ef:c1:a7:bf: 6a:15:b8:a5:10:45:4b:e0:9c:1c:60:3f:45:1e:48:ac:86:a7: c9:ed:22:9e:b8:cb:f9:08:31:ec:65:b0:d6:45:9d:c9:fa:61: ad:d1:6d:81:27:c7:53:4b:a1:9b:7c:d2:5d:90:6e:5d:14:57: 06:98:f6:4d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG MjE0MDdDODEwHhcNMjUwMzIzMjI1MDA4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2UwOTAyMC1mMjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9peMU9t0Zo3Ppw8J/NH7ON7FDKkZ7mpGCMdLnGF165ANsCU5bsoXzzpzrPp LxMUY42ogifyB+h9Va166nE2tcbCAWCblvBAOB1KlGyaP+oULuAFHDo6M7/PoUX9 w1k+vOy7e6M3uzdQH4Dl/a08xelIL9d8/BVXbTsh58H6GUN/69tOAlTMAE/jwxM6 7OeJc/L9qI4667j/6CvO/CQfGURiAu9D/tnT4b8WJ/QT3l51i2wBc27ctg3f+o/f Sxnk3ADlJubZYGmMRrLJmmJDL6IS9gbqy8a5fg74C3S7CkYkLvTrLXrqrryIYXur zd2aHmqsu3HvEqReQcgTKMdLuQIDAQABo4IClTCCApEwHQYDVR0OBBYEFN0wfxmI 99bJY5AxvZXahx8ZL3cUMB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2 N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNCMkUvMEY1NUM2OTZENjdEMTFFRDg2RDMzNzUwQzRGOUFFMDIvMkI4RUY5QUEw ODM5MTFGMEEwNTFDRTcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnsPcwDQYJKoZIhvcNAQELBQADggEBAFJrGgPe1EpEH+RK LwtveT5LJd0TcdM4brS2iU1K0dRELTjob+iQGKzce+sM2JoMyYQT1S828otdjRLO r7XUytgVx8d02HkzzGpPX5cVstB88qU/r/AFddxWswuL6WV4EjIFgrKCyBu2ZMkj D38XA5e01U8HAH1W8UYzrBMnHF9Eb1BXOzwERZOGW1LRqcyJKBeaCG3EV+9lfqBA 14pS13wg/hMAlrsy0uC/D/Nr+0puXOU61OVm42Io9ApJZkWnqOPZ78Gnv2oVuKUQ RUvgnBxgP0UeSKyGp8ntIp64y/kIMexlsNZFncn6Ya3RbYEnx1NLoZt80l2Qbl0U VwaY9k0= -----END CERTIFICATE-----Generated at Mon Apr 7 08:56:31 2025 by rpki-client