$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa File: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (raw, json) Hash identifier: mC34LETxTxdV/sN58o4zkKL+jE9k7zziD5QSKranJMg= Subject key identifier: 7E:CD:D8:6A:C4:A5:B4:36:42:17:14:33:63:49:AE:D3:FA:CD:0D:41 Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Certificate serial: 0A30 Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa Signing time: Sat 31 May 2025 20:25:15 +0000 ROA not before: Sat 31 May 2025 20:25:15 +0000 ROA not after: Wed 01 Oct 2025 00:00:00 +0000 asID: 140241 IP address blocks: 103.149.106.0/23 maxlen: 23 103.149.106.0/24 maxlen: 24 103.149.107.0/24 maxlen: 24 2001:df3:1f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2608 (0xa30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Validity Not Before: May 31 20:25:15 2025 GMT Not After : Oct 1 00:00:00 2025 GMT Subject: CN=683b65ab-efc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:81:22:b5:20:b6:6c:bf:89:ec:7a:bf:0a: c3:75:65:8d:bc:da:ab:9c:97:5d:93:ad:01:37:a4: 7d:40:f4:7e:88:a9:c9:d9:13:ab:ea:b4:c3:36:1f: 1e:b3:86:74:2e:fd:4a:30:79:cb:37:12:f5:29:e0: dd:d7:44:ab:9e:b1:34:26:a9:e7:c6:98:f3:2a:2f: 19:1f:09:ad:84:07:00:68:74:67:68:25:31:a6:f2: 53:ec:9a:28:d6:09:de:26:17:5b:71:c2:ee:7c:e3: 57:e1:f0:91:cc:e8:93:95:de:3b:f5:c3:a1:53:3e: c5:00:76:7c:4f:50:eb:a9:7f:1c:84:8a:19:8e:72: a4:e3:31:1a:a5:37:c2:c9:32:01:3c:a8:fb:30:a3: 25:86:bd:f4:2e:a4:49:d2:de:f4:e3:01:65:ae:3b: e7:a0:9e:9c:dd:f6:1d:a7:70:31:7d:f1:e9:64:60: 59:92:1f:69:05:cf:48:aa:21:93:dd:9c:00:9e:1c: 1c:99:75:dc:ff:c3:fb:f5:94:31:5e:f1:4e:68:15: 09:2d:c2:09:28:3c:f5:aa:9f:e9:9a:c0:75:d5:59: 4c:39:f3:ca:cc:48:38:e5:5a:22:f7:ef:5b:52:f9: 95:30:cd:30:7f:6b:10:25:21:7f:78:63:62:38:91: 47:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CD:D8:6A:C4:A5:B4:36:42:17:14:33:63:49:AE:D3:FA:CD:0D:41 X509v3 Authority Key Identifier: keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.106.0/23 IPv6: 2001:df3:1f80::/48 Signature Algorithm: sha256WithRSAEncryption 14:be:52:7d:02:96:08:05:4a:b6:fb:27:cd:b9:51:0b:1f:e4: b8:e9:29:a0:59:d8:da:0a:3c:8a:30:d3:c5:82:49:f3:52:5d: b3:0d:69:15:a7:1e:91:7b:b6:77:6e:4a:73:38:6a:53:0e:be: 35:7c:72:1f:8f:1e:14:0d:33:03:6b:9f:68:dd:3d:67:1b:03: 6c:65:d1:4c:4c:66:85:40:54:55:1e:0c:61:db:20:03:f5:d0: d1:e6:03:d2:2b:d8:83:40:90:1e:34:a1:43:06:a9:07:1c:1b: 76:ed:9b:9a:e7:f6:83:cd:92:14:1d:c8:2d:48:83:5b:52:2c: 25:9f:f4:d4:3e:56:b9:d5:9a:f0:10:c2:ed:6c:dd:54:62:f6: 08:e6:dd:71:07:ae:16:d7:38:ba:45:1e:23:ac:28:21:88:1d: 32:54:fc:65:8a:26:9e:30:dc:cb:30:3a:da:29:a6:8d:b4:62: 88:9c:d6:3d:77:cb:4a:31:93:02:07:59:0a:5d:f1:97:51:aa: 46:97:e3:e5:54:24:67:66:54:9c:25:6b:9e:88:c7:30:c6:5e: 28:d4:60:43:e4:d5:6b:89:76:0b:75:80:c3:30:1b:87:3e:97: 31:1e:66:2a:59:9e:1e:9d:2d:c7:84:93:cf:da:65:43:a9:3f: eb:6c:ec:da -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1 MDIwNTlGMEMwHhcNMjUwNTMxMjAyNTE1WhcNMjUxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNiNjVhYi1lZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLCBIrUgtmy/iex6vwrDdWWNvNqrnJddk60BN6R9QPR+iKnJ2ROr6rTDNh8e s4Z0Lv1KMHnLNxL1KeDd10SrnrE0JqnnxpjzKi8ZHwmthAcAaHRnaCUxpvJT7Joo 1gneJhdbccLufONX4fCRzOiTld479cOhUz7FAHZ8T1DrqX8chIoZjnKk4zEapTfC yTIBPKj7MKMlhr30LqRJ0t704wFlrjvnoJ6c3fYdp3AxffHpZGBZkh9pBc9IqiGT 3ZwAnhwcmXXc/8P79ZQxXvFOaBUJLcIJKDz1qp/pmsB11VlMOfPKzEg45Voi9+9b UvmVMM0wf2sQJSF/eGNiOJFHXQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFH7N2GrE pbQ2QhcUM2NJrtP6zQ1BMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTgzQTIvNjFDMUE1Nzg2REJBMTFFQTk1NjNDQjY1QzRGOUFFMDIvNTdERjk0RkE2 REJDMTFFQUIxMEExRjZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlWowDwQCAAIwCQMHACABDfMfgDANBgkqhkiG9w0BAQsF AAOCAQEAFL5SfQKWCAVKtvsnzblRCx/kuOkpoFnY2go8ijDTxYJJ81Jdsw1pFace kXu2d25KczhqUw6+NXxyH48eFA0zA2ufaN09ZxsDbGXRTExmhUBUVR4MYdsgA/XQ 0eYD0ivYg0CQHjShQwapBxwbdu2bmuf2g82SFB3ILUiDW1IsJZ/01D5WudWa8BDC 7WzdVGL2CObdcQeuFtc4ukUeI6woIYgdMlT8ZYomnjDcyzA62immjbRiiJzWPXfL SjGTAgdZCl3xl1GqRpfj5VQkZ2ZUnCVrnojHMMZeKNRgQ+TVa4l2C3WAwzAbhz6X MR5mKlmeHp0tx4STz9plQ6k/62zs2g== -----END CERTIFICATE-----Generated at Wed Jun 4 00:08:32 2025 by rpki-client