$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91FD8D16316811F0BE69CF7FC4F9AE02.roa File: 91FD8D16316811F0BE69CF7FC4F9AE02.roa (raw, json) Hash identifier: JK75Bo+4CLYgzAgIrUedt37t79VRnPKyXrkvraUpVig= Subject key identifier: 41:1E:9D:28:B1:83:0E:71:55:70:95:12:0D:EB:FB:09:53:26:C2:3E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BB04 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91FD8D16316811F0BE69CF7FC4F9AE02.roa Signing time: Thu 15 May 2025 08:42:44 +0000 ROA not before: Thu 15 May 2025 08:42:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134009 IP address blocks: 103.51.137.0/24 maxlen: 24 103.169.157.0/24 maxlen: 24 103.179.38.0/23 maxlen: 24 103.181.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 15:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47876 (0xbb04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 15 08:42:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6825a904-3db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:f7:71:53:98:68:79:56:d6:96:6f:cc:78: 05:f8:1c:63:eb:6f:3e:8a:17:eb:e4:96:55:ba:b0: d0:82:ec:02:70:ee:ae:4a:f1:db:67:70:cf:63:fe: 25:29:25:7f:ce:b3:7b:fa:67:5d:37:9d:9b:80:09: a9:d8:53:4b:60:14:9f:4b:1f:77:b6:2a:92:89:65: 97:b9:bf:2b:c3:9c:42:cd:30:96:3b:55:ae:a0:9d: 99:66:ab:62:85:e1:d4:0b:5d:df:ca:6c:04:cc:8b: 7e:85:90:20:57:c4:70:72:21:92:99:8b:88:94:a6: 10:b2:fe:19:5f:56:ae:a6:75:05:2e:aa:c6:85:f8: db:45:95:11:f2:c4:18:ae:b7:ce:3c:9c:17:d0:c7: 3e:1e:37:e1:75:dc:2b:83:6b:bc:1d:4b:23:2f:dc: a3:02:a3:db:e2:9b:32:90:a9:08:5f:70:58:a7:d6: a2:e5:25:aa:c8:36:89:95:ae:e0:5b:59:c9:19:4b: 6c:bd:bd:c2:9d:cf:af:78:53:1b:9b:b2:aa:99:72: f1:f2:4e:e1:ca:6e:f3:bb:3f:f7:14:54:f1:87:23: 2d:9b:3f:aa:68:d4:8b:43:87:29:01:cf:9f:ee:52: f8:8e:af:c1:77:63:1c:0c:b2:2e:01:e8:45:52:a2: 2a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1E:9D:28:B1:83:0E:71:55:70:95:12:0D:EB:FB:09:53:26:C2:3E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91FD8D16316811F0BE69CF7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.51.137.0/24 103.169.157.0/24 103.179.38.0/23 103.181.141.0/24 Signature Algorithm: sha256WithRSAEncryption 33:7e:83:c7:b6:31:c1:09:f7:49:c8:e6:2b:25:a2:55:0e:ad: ea:90:20:1e:e1:6b:10:bf:4b:1c:f6:00:6e:de:12:97:9e:a8: 83:7f:87:08:ed:af:3d:96:b6:cd:ff:27:87:5d:53:3d:83:bb: 4b:a7:d5:24:5c:1a:d0:1a:d0:ce:42:5a:34:eb:48:06:a1:60: 6e:f0:97:3d:99:43:77:56:ad:72:aa:6d:18:24:be:e2:6e:df: 95:7c:05:04:a6:8b:16:60:ae:31:6a:e9:67:18:ba:b1:b3:f7: dc:b5:df:46:2f:a5:85:8a:76:56:47:bb:01:a0:e8:ae:34:20: 74:d8:f2:35:0d:a0:d1:8f:02:36:35:26:54:75:ef:85:7a:63: d9:5a:28:8d:1a:d1:59:7f:d5:c0:00:de:f2:04:6e:32:d5:0f: f1:d5:4a:48:8e:ce:06:ec:46:59:e8:b9:81:6f:56:73:65:20: e1:bd:7c:a3:01:7f:36:e8:98:5d:a8:5e:75:5c:64:d2:a5:d6: c7:c7:1a:cc:bb:1a:e6:a6:e6:70:8a:a4:d4:a3:23:a9:82:c9: 34:89:5b:17:c8:76:f6:98:69:73:72:1c:09:43:80:48:6b:01: c2:ca:96:f0:84:86:59:18:2a:5c:95:b5:1a:ea:da:72:ce:44: b1:5d:5d:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDALsEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUxNTA4NDI0NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgyNWE5MDQtM2RiMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALy593FTmGh5VtaWb8x4BfgcY+tvPooX6+SWVbqw0ILsAnDurkrx22dwz2P+ JSklf86ze/pnXTedm4AJqdhTS2AUn0sfd7Yqkolll7m/K8OcQs0wljtVrqCdmWar YoXh1Atd38psBMyLfoWQIFfEcHIhkpmLiJSmELL+GV9WrqZ1BS6qxoX420WVEfLE GK63zjycF9DHPh434XXcK4NrvB1LIy/cowKj2+KbMpCpCF9wWKfWouUlqsg2iZWu 4FtZyRlLbL29wp3Pr3hTG5uyqply8fJO4cpu87s/9xRU8YcjLZs/qmjUi0OHKQHP n+5S+I6vwXdjHAyyLgHoRVKiKqkCAwEAAaOCAqcwggKjMB0GA1UdDgQWBBRBHp0o sYMOcVVwlRIN6/sJUybCPjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkxRkQ4RDE2 MzE2ODExRjBCRTY5Q0Y3RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDEGCCsGAQUFBwEHAQH/ BCIwIDAeBAIAATAYAwQAZzOJAwQAZ6mdAwQBZ7MmAwQAZ7WNMA0GCSqGSIb3DQEB CwUAA4IBAQAzfoPHtjHBCfdJyOYrJaJVDq3qkCAe4WsQv0sc9gBu3hKXnqiDf4cI 7a89lrbN/yeHXVM9g7tLp9UkXBrQGtDOQlo060gGoWBu8Jc9mUN3Vq1yqm0YJL7i bt+VfAUEposWYK4xaulnGLqxs/fctd9GL6WFinZWR7sBoOiuNCB02PI1DaDRjwI2 NSZUde+FemPZWiiNGtFZf9XAAN7yBG4y1Q/x1UpIjs4G7EZZ6LmBb1ZzZSDhvXyj AX826JhdqF51XGTSpdbHxxrMuxrmpuZwiqTUoyOpgsk0iVsXyHb2mGlzchwJQ4BI awHCypbwhIZZGCpclbUa6tpyzkSxXV2H -----END CERTIFICATE-----Generated at Mon Jun 9 01:16:47 2025 by rpki-client