$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/4CF19A6EAEDC11EF99753F71C4F9AE02.roa File: 4CF19A6EAEDC11EF99753F71C4F9AE02.roa (raw, json) Hash identifier: 5pfESJcYcm4Km92O0vgIg8+gD07vzMh/3SQIYm4koYw= Subject key identifier: CF:D0:72:2F:C6:27:99:17:23:C3:B0:EC:97:F7:FF:31:53:2E:6E:5D Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 1124 Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/4CF19A6EAEDC11EF99753F71C4F9AE02.roa Signing time: Mon 19 May 2025 03:16:26 +0000 ROA not before: Mon 19 May 2025 03:16:26 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 0 IP address blocks: 103.140.8.0/23 maxlen: 23 103.149.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 17:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4388 (0x1124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: May 19 03:16:26 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=682aa289-0c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:71:7e:75:44:db:a7:0a:ba:9d:50:45:b2: 36:38:da:af:3d:95:7a:5b:9d:24:f6:2c:3a:c5:1e: 88:98:75:4f:50:b0:be:eb:b1:da:72:df:c1:d5:07: 8f:40:42:98:09:b9:bb:6e:a6:28:42:45:8c:07:e2: 3e:ed:8c:25:60:b8:a7:a2:1f:6a:3c:be:c4:14:27: 1d:4f:d9:2d:27:32:61:75:d7:39:f8:1a:57:73:58: eb:10:f4:ca:a9:d2:be:de:f7:73:8e:19:6f:e2:f5: 25:7c:97:7f:97:58:03:61:1a:9f:c7:73:e9:ff:2c: 64:b1:49:9c:bb:a0:94:e7:29:49:99:9b:c5:26:cd: 7e:2d:ea:a3:f7:fb:2e:00:c5:b8:c1:6b:4d:3b:51: 85:27:62:95:17:ca:a9:79:25:81:71:f3:6d:1c:f2: 00:af:78:09:33:45:35:1a:fe:f2:5b:bb:5d:ae:a9: e5:68:24:c5:0e:55:32:df:37:7d:18:41:47:e3:f9: d2:22:57:d9:6a:ac:e7:7d:ef:33:14:6a:30:8f:99: 42:dc:d0:d6:ae:f1:f9:4f:b9:12:30:cb:13:78:84: e2:eb:84:db:07:86:81:c8:c7:ea:d9:f7:e0:13:5c: 6c:27:5c:ea:b4:40:e4:22:e2:ad:50:72:3b:85:49: 50:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D0:72:2F:C6:27:99:17:23:C3:B0:EC:97:F7:FF:31:53:2E:6E:5D X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/4CF19A6EAEDC11EF99753F71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.8.0/23 103.149.144.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:fe:d2:d5:53:fb:46:02:00:7e:79:ae:0a:b7:dd:02:6e:02: 7a:e8:08:68:f7:8d:23:04:3d:19:65:7e:e5:e1:de:01:1c:54: de:7d:c4:06:8e:f3:c2:07:43:91:a3:b7:76:11:87:e3:07:52: 4d:84:f2:1b:40:da:e8:8d:d9:1a:b7:34:03:9d:10:09:13:88: 9b:9a:de:7c:17:e5:60:ec:79:04:12:0a:7d:fc:91:c7:6d:9e: d8:8e:2b:20:84:8d:8a:0b:15:16:97:33:97:d1:9d:fd:b1:55: e9:77:fa:ff:a9:91:d7:a9:3e:a4:53:4b:c5:ab:3b:3a:22:4d: 66:24:95:ef:c7:5c:cb:6d:eb:89:cd:c4:db:02:fc:53:fc:c9: 38:9a:5f:48:2d:be:35:bd:6f:67:36:28:76:c2:57:75:dd:ae: 86:f3:01:1c:23:67:3e:33:11:e3:f9:47:77:8a:81:82:80:2d: 52:14:29:88:a2:b0:c8:1b:48:91:16:90:c3:8c:54:3d:42:b0: a4:20:3b:61:f3:f5:7b:02:4a:79:0e:18:2a:0b:aa:f4:9a:d8: 75:a4:f2:99:dd:42:fe:c3:4f:41:57:d4:55:2f:92:30:c9:11: ef:f8:b9:97:01:da:af:28:97:c0:3a:27:94:3d:09:df:f1:c1: 06:c2:03:1b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICESQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjUwNTE5MDMxNjI2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJhYTI4OS0wYzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvudxfnVE26cKup1QRbI2ONqvPZV6W50k9iw6xR6ImHVPULC+67Hact/B1QeP QEKYCbm7bqYoQkWMB+I+7YwlYLinoh9qPL7EFCcdT9ktJzJhddc5+BpXc1jrEPTK qdK+3vdzjhlv4vUlfJd/l1gDYRqfx3Pp/yxksUmcu6CU5ylJmZvFJs1+Leqj9/su AMW4wWtNO1GFJ2KVF8qpeSWBcfNtHPIAr3gJM0U1Gv7yW7tdrqnlaCTFDlUy3zd9 GEFH4/nSIlfZaqznfe8zFGowj5lC3NDWrvH5T7kSMMsTeITi64TbB4aByMfq2ffg E1xsJ1zqtEDkIuKtUHI7hUlQxwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFM/Qci/G J5kXI8Ow7Jf3/zFTLm5dMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvNENGMTlBNkVB RURDMTFFRjk5NzUzRjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnjAgDBAFnlZAwDQYJKoZIhvcNAQELBQADggEBAHz+0tVT +0YCAH55rgq33QJuAnroCGj3jSMEPRllfuXh3gEcVN59xAaO88IHQ5Gjt3YRh+MH Uk2E8htA2uiN2Rq3NAOdEAkTiJua3nwX5WDseQQSCn38kcdtntiOKyCEjYoLFRaX M5fRnf2xVel3+v+pkdepPqRTS8WrOzoiTWYkle/HXMtt64nNxNsC/FP8yTiaX0gt vjW9b2c2KHbCV3XdrobzARwjZz4zEeP5R3eKgYKALVIUKYiisMgbSJEWkMOMVD1C sKQgO2Hz9XsCSnkOGCoLqvSa2HWk8pndQv7DT0FX1FUvkjDJEe/4uZcB2q8ol8A6 J5Q9Cd/xwQbCAxs= -----END CERTIFICATE-----Generated at Sun Jun 1 04:10:00 2025 by rpki-client