$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e31302e36312e302f32342d3234203d3e203435313633.roa File: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (raw, json) Hash identifier: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI= Subject key identifier: 3F:6F:87:F3:53:6E:C1:7F:3E:21:30:78:0C:BF:DF:03:F4:28:43:FC Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 4D07FA90C9CFA0A81DDA50CC9B51817878A6C9A9 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e31302e36312e302f32342d3234203d3e203435313633.roa Signing time: Wed 12 Mar 2025 08:19:06 +0000 ROA not before: Wed 12 Mar 2025 08:14:06 +0000 ROA not after: Wed 11 Mar 2026 08:19:06 +0000 asID: 45163 IP address blocks: 203.10.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 13:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:07:fa:90:c9:cf:a0:a8:1d:da:50:cc:9b:51:81:78:78:a6:c9:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Mar 12 08:14:06 2025 GMT Not After : Mar 11 08:19:06 2026 GMT Subject: CN=3F6F87F3536EC17F3E2130780CBFDF03F42843FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:f5:49:99:97:2a:ce:ee:bb:58:54:02:95: 10:91:d1:4f:0c:bc:95:ce:b7:14:fd:f8:83:8d:40: 64:69:fe:7c:4a:85:6d:7c:7e:21:8f:29:b9:4f:f7: 90:bb:57:09:37:0c:78:d6:f2:20:8d:2f:f9:91:6e: 34:38:23:71:f5:97:39:7d:48:2a:bc:37:a3:92:ae: fa:7f:da:40:16:9a:2c:bb:91:85:c2:4b:d1:1d:bc: d1:3d:85:b1:e2:48:8c:c5:a8:40:72:a0:45:09:73: 94:9f:39:aa:fb:17:3e:14:2c:a6:47:73:ea:46:31: db:7f:a6:2b:66:75:ca:62:a6:a4:90:0a:e6:d1:d6: 31:90:41:6f:28:7f:e1:6f:2e:52:eb:f6:5a:18:a1: 76:a6:f7:4d:13:0f:c5:14:2d:28:a6:21:32:75:97: dd:30:ce:70:81:f2:1d:27:a6:d0:07:a6:cf:6b:15: f2:f0:bc:5c:3a:1e:84:8d:d5:25:b9:89:d9:43:e4: 68:d8:c8:4a:ff:78:1b:20:7e:71:4e:c0:a0:9f:34: 15:54:3a:13:93:7d:9b:75:88:1a:eb:bc:77:f2:ce: a0:d3:67:80:63:2d:12:ef:15:77:21:25:e5:d4:06: 79:66:dd:00:e8:8e:13:89:66:6f:8b:ca:59:4e:b9: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6F:87:F3:53:6E:C1:7F:3E:21:30:78:0C:BF:DF:03:F4:28:43:FC X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e31302e36312e302f32342d3234203d3e203435313633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.10.61.0/24 Signature Algorithm: sha256WithRSAEncryption 29:7a:97:a3:76:6b:c2:41:31:02:ab:98:0b:56:5f:d0:37:f2: 3b:1e:15:4b:d9:a6:16:3a:df:d2:f4:e6:df:c1:01:e2:c5:a9: 9e:04:20:7c:9d:b0:39:1f:54:3a:f7:ed:54:c6:86:61:4c:e3: 16:ce:4a:43:31:0e:a1:8e:79:ab:00:1c:d6:6e:3f:80:6f:47: d8:88:fd:59:19:fb:54:a7:16:61:02:44:c2:31:a2:98:ab:2c: 2b:9d:03:ae:c0:7f:e3:86:d9:77:a3:95:0b:38:f7:53:5d:e7: 8a:18:a8:27:2e:88:45:ea:0e:d1:fe:7f:61:0e:b5:70:a6:2a: 51:d7:15:04:e3:21:df:e4:43:9f:cc:d2:65:14:7d:c3:95:e4: 34:0f:29:d1:28:77:07:ec:fd:8e:b1:1f:77:68:2b:dd:25:60: 91:ee:cb:13:2f:20:63:75:68:ba:3c:28:87:f7:85:38:aa:82: 27:3f:32:e1:04:45:a4:3b:51:ca:c2:05:fa:44:f7:c0:dd:05: 60:c2:2e:20:31:5b:81:89:f2:11:7b:36:86:3c:29:7e:c1:12: 58:f9:fb:42:c7:52:67:00:f4:e3:a8:bb:ee:d8:9e:25:d5:a5: 7d:73:07:8b:a2:0e:88:43:58:e9:b3:2f:ec:c1:d9:8f:12:fa: 3d:ef:da:b7 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUTQf6kMnPoKgd2lDMm1GBeHimyakwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MDMxMjA4MTQwNloX DTI2MDMxMTA4MTkwNlowMzExMC8GA1UEAxMoM0Y2Rjg3RjM1MzZFQzE3RjNFMjEz MDc4MENCRkRGMDNGNDI4NDNGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMlK9UmZlyrO7rtYVAKVEJHRTwy8lc63FP34g41AZGn+fEqFbXx+IY8puU/3 kLtXCTcMeNbyII0v+ZFuNDgjcfWXOX1IKrw3o5Ku+n/aQBaaLLuRhcJL0R280T2F seJIjMWoQHKgRQlzlJ85qvsXPhQspkdz6kYx23+mK2Z1ymKmpJAK5tHWMZBBbyh/ 4W8uUuv2Whihdqb3TRMPxRQtKKYhMnWX3TDOcIHyHSem0Aemz2sV8vC8XDoehI3V JbmJ2UPkaNjISv94GyB+cU7AoJ80FVQ6E5N9m3WIGuu8d/LOoNNngGMtEu8VdyEl 5dQGeWbdAOiOE4lmb4vKWU65BSECAwEAAaOCAgUwggIBMB0GA1UdDgQWBBQ/b4fz U27Bfz4hMHgMv98D9ChD/DAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjCBhAYIKwYBBQUHAQsEeDB2MHQGCCsGAQUFBzALhmhy c3luYzovL3Jwa2kucmFuZC5hcG5pYy5uZXQvcmVwby9BOTE4NzJFRDAwMDEvMC8z MjMwMzMyZTMxMzAyZTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM1MzEz NjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAywo9MA0GCSqGSIb3DQEBCwUAA4IBAQApepejdmvCQTEC q5gLVl/QN/I7HhVL2aYWOt/S9ObfwQHixameBCB8nbA5H1Q69+1UxoZhTOMWzkpD MQ6hjnmrABzWbj+Ab0fYiP1ZGftUpxZhAkTCMaKYqywrnQOuwH/jhtl3o5ULOPdT XeeKGKgnLohF6g7R/n9hDrVwpipR1xUE4yHf5EOfzNJlFH3DleQ0DynRKHcH7P2O sR93aCvdJWCR7ssTLyBjdWi6PCiH94U4qoInPzLhBEWkO1HKwgX6RPfA3QVgwi4g MVuBifIRezaGPCl+wRJY+ftCx1JnAPTjqLvu2J4l1aV9cweLog6IQ1jpsy/swdmP Evo979q3 -----END CERTIFICATE-----Generated at Wed Apr 16 06:50:39 2025 by rpki-client