$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/8F467E0082DD11EABD325010C4F9AE02.roa File: 8F467E0082DD11EABD325010C4F9AE02.roa (raw, json) Hash identifier: nTti14+ixHvCqHgk8IwtFdkQ1Ouiq6aL3zx3Hm8MMGs= Subject key identifier: 39:65:2F:69:55:A1:B4:6E:1A:9E:37:0E:B2:1C:CA:3D:9F:89:37:49 Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 09C1 Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/8F467E0082DD11EABD325010C4F9AE02.roa Signing time: Fri 16 May 2025 20:29:36 +0000 ROA not before: Fri 16 May 2025 20:29:36 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 4657 IP address blocks: 103.149.23.0/24 maxlen: 24 2001:df3:a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2497 (0x9c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: May 16 20:29:36 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6827a030-b4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:f8:ca:b1:bd:83:a3:17:14:28:b6:94:b5: ef:23:b7:38:72:2d:52:26:ac:9c:5d:a2:64:71:98: 8d:90:38:ac:c0:2e:ba:5c:19:8d:4a:b2:4e:4c:03: 4f:06:44:0f:44:6c:b5:09:b7:1f:91:ea:bd:1b:9c: 29:5e:0c:38:c4:be:8c:02:ff:df:a2:98:0b:d1:68: fb:9c:92:bf:ba:bf:cf:d6:4b:58:01:1f:ee:7b:3f: a6:78:0d:a5:96:c3:29:81:ed:ed:ea:a5:2c:ec:94: d7:65:ef:65:25:da:18:e5:99:43:d3:b4:e7:1b:76: ea:2e:97:b8:52:8b:06:51:e5:10:b9:36:f3:30:2b: c2:01:5e:02:41:5e:b8:db:f7:4e:bb:05:43:22:90: d1:70:5c:4e:93:f2:e1:e6:dc:30:38:ac:16:cd:91: 73:56:78:ae:da:39:8e:1f:eb:85:61:1f:47:f3:b5: 47:8a:7b:4b:b6:5b:21:d7:54:cc:28:de:30:43:07: 37:7d:7d:76:ff:6f:3a:5f:a1:27:8c:c2:99:1d:fb: 83:e7:96:b4:03:7e:2e:36:a9:16:df:73:4f:c5:f7: 35:94:23:56:69:a9:24:16:9a:25:4e:0e:e4:c0:6f: b2:fa:d0:7c:7b:bb:27:c7:46:b4:b1:36:4f:f8:1c: 30:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:65:2F:69:55:A1:B4:6E:1A:9E:37:0E:B2:1C:CA:3D:9F:89:37:49 X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/8F467E0082DD11EABD325010C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.23.0/24 IPv6: 2001:df3:a80::/48 Signature Algorithm: sha256WithRSAEncryption 1b:37:bd:f3:b4:a5:47:cf:c9:11:bc:61:8f:7a:29:d9:84:2d: 0e:c3:e3:a4:36:39:1a:64:05:63:0c:86:6c:29:9f:e5:18:ce: 61:e4:c0:11:d2:e3:9a:36:ce:52:e5:ce:b4:e1:3f:ec:85:af: f2:a2:59:8b:9b:b1:a5:59:b5:82:fa:05:1d:45:58:36:76:fc: 92:0c:50:b8:f0:49:1c:bf:4e:75:02:74:f8:39:ec:b9:28:f5: e3:57:04:32:22:8f:fd:bd:b0:f8:71:dd:f5:c7:57:fb:8a:65: a8:5d:06:6d:c9:ca:ba:d5:96:6e:5f:87:0f:88:d2:46:79:84: cd:58:00:28:d0:8f:6f:26:5c:2b:27:d5:13:7f:a8:42:ca:70: 6e:df:22:4c:b8:56:3c:4b:2a:bc:34:75:4c:f5:85:1f:85:53: 7f:ab:c4:9d:d9:4a:b4:e6:ef:0c:bd:5e:52:d9:0c:d0:b3:1b: 87:ab:e3:b0:b9:8a:73:f1:fe:04:48:ff:5c:04:d7:f1:14:1a: b4:a5:0b:d6:0c:c0:61:9f:c4:10:25:8e:20:95:64:a8:95:14: ac:40:51:b2:97:d5:37:5b:2f:f0:9e:df:b6:cf:1c:f5:b3:9d: 02:a4:40:25:64:d5:96:fc:e2:69:db:b5:89:58:8a:01:a9:6f: 25:6c:8e:97 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjUwNTE2MjAyOTM2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI3YTAzMC1iNGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkb4yrG9g6MXFCi2lLXvI7c4ci1SJqycXaJkcZiNkDiswC66XBmNSrJOTANP BkQPRGy1Cbcfkeq9G5wpXgw4xL6MAv/fopgL0Wj7nJK/ur/P1ktYAR/uez+meA2l lsMpge3t6qUs7JTXZe9lJdoY5ZlD07TnG3bqLpe4UosGUeUQuTbzMCvCAV4CQV64 2/dOuwVDIpDRcFxOk/Lh5twwOKwWzZFzVniu2jmOH+uFYR9H87VHintLtlsh11TM KN4wQwc3fX12/286X6EnjMKZHfuD55a0A34uNqkW33NPxfc1lCNWaakkFpolTg7k wG+y+tB8e7snx0a0sTZP+BwwEwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDllL2lV obRuGp43DrIcyj2fiTdJMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzU5Q0QvMTg1RkZDMjg4MkRCMTFFQUFDMkNENjBBQzRGOUFFMDIvOEY0NjdFMDA4 MkREMTFFQUJEMzI1MDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnlRcwDwQCAAIwCQMHACABDfMKgDANBgkqhkiG9w0BAQsF AAOCAQEAGze987SlR8/JEbxhj3op2YQtDsPjpDY5GmQFYwyGbCmf5RjOYeTAEdLj mjbOUuXOtOE/7IWv8qJZi5uxpVm1gvoFHUVYNnb8kgxQuPBJHL9OdQJ0+DnsuSj1 41cEMiKP/b2w+HHd9cdX+4plqF0GbcnKutWWbl+HD4jSRnmEzVgAKNCPbyZcKyfV E3+oQspwbt8iTLhWPEsqvDR1TPWFH4VTf6vEndlKtObvDL1eUtkM0LMbh6vjsLmK c/H+BEj/XATX8RQatKUL1gzAYZ/EECWOIJVkqJUUrEBRspfVN1sv8J7fts8c9bOd AqRAJWTVlvziadu1iViKAalvJWyOlw== -----END CERTIFICATE-----Generated at Tue Jun 3 23:45:41 2025 by rpki-client