$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/D3C965FA45F611EC9FB3BB49C4F9AE02.roa File: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (raw, json) Hash identifier: TOciMmg+YXh13dYfOrB14chWnhLKZ+JRHOQLiS8Jf5Y= Subject key identifier: 4A:57:46:BA:E6:CF:99:DF:20:3A:0E:FC:D9:F0:04:6E:1B:18:18:ED Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Certificate serial: 0435 Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/D3C965FA45F611EC9FB3BB49C4F9AE02.roa Signing time: Wed 15 Jan 2025 00:03:00 +0000 ROA not before: Wed 15 Jan 2025 00:03:00 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 149015 IP address blocks: 103.176.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 23:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAED9 Validity Not Before: Jan 15 00:03:00 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6786fb33-2106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:45:ff:f1:9c:a6:bc:69:3e:8e:68:a4:cf:6b: 7d:87:cc:68:fb:f3:db:d9:36:04:fe:d1:15:42:b0: 1d:43:1a:f7:20:4e:1d:65:24:1e:19:c5:1f:8b:03: b5:64:1a:e7:90:e1:52:89:f9:8c:03:a1:3e:bf:68: 55:b5:03:2d:ca:93:a3:06:19:5c:a2:18:2e:bf:72: e5:89:47:cf:bd:ee:74:91:f6:11:c6:f3:49:47:eb: 02:10:cb:fb:80:99:d8:06:d6:7f:15:a5:12:ca:16: 1f:fe:09:9e:ce:ab:b9:ea:c8:d7:9f:2d:80:e0:6e: 53:e3:64:b4:74:b1:2d:9a:c1:d9:2e:be:d5:9a:83: 91:a4:22:c7:af:a5:05:e0:de:c6:cb:9f:a3:d3:c9: 38:db:8f:69:de:ed:67:a0:19:ea:6b:25:82:5f:d6: bc:7f:ea:cb:34:49:35:d3:b6:86:86:8c:9e:f7:b0: 5c:e2:93:5b:45:02:c5:02:27:8e:3a:9f:cd:22:d3: c4:0f:82:9f:fc:82:a7:c9:a4:fa:d2:6d:77:03:6c: cf:d1:da:b4:be:1d:69:66:6b:99:0f:2f:b0:2a:ae: 55:2b:15:ac:b7:27:bf:c8:1b:86:d8:fa:ac:85:16: 06:6f:fc:36:3f:45:9b:04:df:04:4a:60:55:a9:68: e4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:57:46:BA:E6:CF:99:DF:20:3A:0E:FC:D9:F0:04:6E:1B:18:18:ED X509v3 Authority Key Identifier: keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/D3C965FA45F611EC9FB3BB49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.86.0/23 Signature Algorithm: sha256WithRSAEncryption 42:c5:40:e8:49:35:ec:f0:e3:36:07:4c:8f:10:74:0e:49:67: 5f:fd:64:06:35:dc:57:a9:44:c3:02:b5:8e:02:e5:b2:75:bf: 8b:87:b1:07:24:88:31:77:a6:39:72:ca:70:f8:e1:52:69:f8: 25:0e:b2:31:81:50:d5:cd:18:45:40:4e:9d:b4:6d:14:6a:7a: 4e:72:a8:77:02:a1:04:6f:76:71:52:df:7b:5d:a0:67:1f:1d: b7:64:b2:1b:0e:4e:6a:a5:8f:0f:0a:b4:73:9e:83:51:62:6e: f3:7e:78:78:4f:3d:2a:bd:53:0b:4a:f1:8f:dd:c9:bd:36:1a: bc:41:54:ce:f8:dc:8c:34:5f:c7:63:00:85:f5:b8:6b:a2:f6: ad:f2:37:e9:59:3e:31:ad:8d:07:b1:12:0b:44:10:76:c0:c7: 41:d3:76:e8:2c:8c:a9:e5:c8:ad:43:17:f1:c4:bb:3a:89:e5: f7:a9:5d:36:d0:dc:9d:89:53:16:8d:70:e3:40:d7:f3:e6:dd: 9d:91:39:4c:79:79:58:15:b7:b1:e7:40:2b:be:fb:b1:5d:f9: 48:0c:6e:4d:cc:1b:6b:4c:57:c4:1a:39:f2:f3:c7:11:a0:3c: d0:b7:22:9f:17:1d:40:46:cf:5e:d4:c0:07:00:32:79:23:b7: a6:6e:ca:51 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFFRDkxMTAvBgNVBAUTKDA4N0IyOUMxRkJENzQ0NDIwMkFFMDAyQTQ5NzEyN0ZE NjZGMjRBRDkwHhcNMjUwMTE1MDAwMzAwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg2ZmIzMy0yMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EX/8ZymvGk+jmikz2t9h8xo+/Pb2TYE/tEVQrAdQxr3IE4dZSQeGcUfiwO1 ZBrnkOFSifmMA6E+v2hVtQMtypOjBhlcohguv3LliUfPve50kfYRxvNJR+sCEMv7 gJnYBtZ/FaUSyhYf/gmezqu56sjXny2A4G5T42S0dLEtmsHZLr7VmoORpCLHr6UF 4N7Gy5+j08k4249p3u1noBnqayWCX9a8f+rLNEk107aGhoye97Bc4pNbRQLFAieO Op/NItPED4Kf/IKnyaT60m13A2zP0dq0vh1pZmuZDy+wKq5VKxWstye/yBuG2Pqs hRYGb/w2P0WbBN8ESmBVqWjkswIDAQABo4IClTCCApEwHQYDVR0OBBYEFEpXRrrm z5nfIDoO/NnwBG4bGBjtMB8GA1UdIwQYMBaAFAh7KcH710RCAq4AKklxJ/1m8krZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUVEOS82QTc2NUFBQTQ1 REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJFSUNyZ0FxU1hFbl9XYnlT dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIc3B3ZnZYUkVJQ3JnQXFTWEVuX1dieVN0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkFFRDkvNkE3NjVBQUE0NURDMTFFQ0E4QTMxNDZEQzRGOUFFMDIvRDNDOTY1RkE0 NUY2MTFFQzlGQjNCQjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnsFYwDQYJKoZIhvcNAQELBQADggEBAELFQOhJNezw4zYH TI8QdA5JZ1/9ZAY13FepRMMCtY4C5bJ1v4uHsQckiDF3pjlyynD44VJp+CUOsjGB UNXNGEVATp20bRRqek5yqHcCoQRvdnFS33tdoGcfHbdkshsOTmqljw8KtHOeg1Fi bvN+eHhPPSq9UwtK8Y/dyb02GrxBVM743Iw0X8djAIX1uGui9q3yN+lZPjGtjQex EgtEEHbAx0HTdugsjKnlyK1DF/HEuzqJ5fepXTbQ3J2JUxaNcONA1/Pm3Z2ROUx5 eVgVt7HnQCu++7Fd+UgMbk3MG2tMV8QaOfLzxxGgPNC3Ip8XHUBGz17UwAcAMnkj t6ZuylE= -----END CERTIFICATE-----Generated at Fri Apr 11 16:24:29 2025 by rpki-client