$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/13DE95F668FA11EFAE700D5FC4F9AE02.roa File: 13DE95F668FA11EFAE700D5FC4F9AE02.roa (raw, json) Hash identifier: KHc6hdMetfcu7UM69svB42s0SGaTeAMb8i+TaWZ7DWk= Subject key identifier: AA:80:E1:05:CA:9A:74:A8:21:01:DA:79:8B:7D:57:CD:E7:D6:FC:BD Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Certificate serial: 0BEC Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/13DE95F668FA11EFAE700D5FC4F9AE02.roa Signing time: Tue 20 May 2025 09:21:08 +0000 ROA not before: Tue 20 May 2025 09:21:08 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 131464 IP address blocks: 103.198.132.0/24 maxlen: 24 103.198.133.0/24 maxlen: 24 103.198.134.0/24 maxlen: 24 103.198.135.0/24 maxlen: 24 2403:60c0:100::/40 maxlen: 40 2403:60c0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3052 (0xbec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Validity Not Before: May 20 09:21:08 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=682c4984-a5b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f4:6c:d8:29:76:b4:a1:02:7c:d4:68:65:cf: 67:47:65:1c:ac:29:89:d7:60:7d:0b:31:69:fc:17: df:72:7a:20:33:cc:fe:99:50:f5:4a:58:d7:95:df: d5:3f:61:d1:01:a4:64:53:f4:93:3f:49:03:d4:bf: c7:48:89:b1:40:d9:90:9b:12:1b:5f:13:6e:78:93: f0:1a:58:5e:33:68:cc:c3:d2:de:b6:fe:e4:f9:d1: 83:61:1c:91:06:f3:72:15:61:40:fe:c8:5b:2b:96: 53:ef:55:a4:a4:e2:c2:8e:1a:aa:da:3c:b5:9b:3b: 50:1f:cd:58:3d:18:cc:2d:78:30:b9:ab:4f:68:2c: 0d:09:fd:75:6c:e6:1b:a2:f7:17:fb:11:fb:01:e2: 30:89:a5:9a:09:37:87:80:c7:5f:8d:18:a6:0e:b1: 8d:c8:d8:a1:fa:3a:74:bb:d9:d0:7a:70:4c:11:8f: 13:95:6f:db:62:ae:64:91:55:17:8c:7b:e5:10:91: 58:37:2b:ba:b2:3c:31:87:d5:9e:fd:b3:80:84:f5: 11:1a:43:a7:5d:b8:87:66:bd:9a:37:b8:f5:df:73: 6c:58:72:c4:28:8d:72:a5:4b:76:da:d1:b9:45:cf: 2c:83:20:66:96:89:ad:44:fc:5f:36:1f:3a:f6:48: 97:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:80:E1:05:CA:9A:74:A8:21:01:DA:79:8B:7D:57:CD:E7:D6:FC:BD X509v3 Authority Key Identifier: keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/13DE95F668FA11EFAE700D5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.198.132.0/22 IPv6: 2403:60c0:100::/40 Signature Algorithm: sha256WithRSAEncryption 7a:b1:08:96:9f:a8:e7:a7:ef:d0:9c:ee:05:c6:d1:09:18:2a: fb:29:0e:37:34:27:5f:f7:73:88:f2:41:06:30:93:f5:9a:85: 83:78:64:37:b8:f1:0d:8b:51:fa:bc:ae:2e:35:19:96:f3:4f: 6c:6f:35:d3:d1:03:27:53:31:8a:56:f4:eb:7e:e1:43:de:d0: 08:0b:de:37:d7:11:79:c0:08:17:a8:79:54:32:c6:b0:c1:74: fe:76:ee:32:eb:88:5a:4b:d0:61:9d:b3:64:5e:60:c4:ad:a7: bd:01:dd:9b:d5:5b:01:06:95:e1:b3:70:31:05:cb:2f:63:90: ed:c1:ff:5e:0a:31:70:54:c8:f1:a9:b1:ab:75:e6:ea:3d:42: fe:19:ed:cd:f1:04:3f:bd:b2:4f:ec:0d:b0:fa:71:83:35:21: b3:48:33:c5:33:d7:90:f6:ea:16:2a:2d:cb:38:99:0f:aa:23: 4e:07:78:d9:8f:cb:8c:90:d5:d0:33:a2:61:dd:0c:a9:02:a6: 1d:45:f3:98:32:90:1b:9d:33:9d:47:47:ab:e5:48:5f:20:d6: 2e:06:fe:52:35:33:54:58:28:91:10:a3:d9:65:57:dd:fb:3e: 2b:35:de:07:b3:c9:26:3f:72:62:2f:ec:d9:6a:de:8a:00:c2: 7b:6f:66:02 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICC+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE2Q0YxMTAvBgNVBAUTKDgyOUYwRjQwODg0REQ5OTExMjEwMDVCMDdEMDlBMkNC RkZCNERFQzYwHhcNMjUwNTIwMDkyMTA4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJjNDk4NC1hNWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vRs2Cl2tKECfNRoZc9nR2UcrCmJ12B9CzFp/BffcnogM8z+mVD1SljXld/V P2HRAaRkU/STP0kD1L/HSImxQNmQmxIbXxNueJPwGlheM2jMw9Letv7k+dGDYRyR BvNyFWFA/shbK5ZT71WkpOLCjhqq2jy1mztQH81YPRjMLXgwuatPaCwNCf11bOYb ovcX+xH7AeIwiaWaCTeHgMdfjRimDrGNyNih+jp0u9nQenBMEY8TlW/bYq5kkVUX jHvlEJFYNyu6sjwxh9We/bOAhPURGkOnXbiHZr2aN7j133NsWHLEKI1ypUt22tG5 Rc8sgyBmlomtRPxfNh869kiX0wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKqA4QXK mnSoIQHaeYt9V83n1vy9MB8GA1UdIwQYMBaAFIKfD0CITdmREhAFsH0Josv/tN7G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTZDRi8yQ0FENTA4ODE5 QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJaRVNFQVd3ZlFtaXlfLTAz c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwOFBRSWhOMlpFU0VBV3dmUW1peV8tMDNzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTE2Q0YvMkNBRDUwODgxOUEyMTFFQUFFODExQzcxQzRGOUFFMDIvMTNERTk1RjY2 OEZBMTFFRkFFNzAwRDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAJnxoQwDgQCAAIwCAMGACQDYMABMA0GCSqGSIb3DQEBCwUA A4IBAQB6sQiWn6jnp+/QnO4FxtEJGCr7KQ43NCdf93OI8kEGMJP1moWDeGQ3uPEN i1H6vK4uNRmW809sbzXT0QMnUzGKVvTrfuFD3tAIC9431xF5wAgXqHlUMsawwXT+ du4y64haS9BhnbNkXmDErae9Ad2b1VsBBpXhs3AxBcsvY5Dtwf9eCjFwVMjxqbGr debqPUL+Ge3N8QQ/vbJP7A2w+nGDNSGzSDPFM9eQ9uoWKi3LOJkPqiNOB3jZj8uM kNXQM6Jh3QypAqYdRfOYMpAbnTOdR0er5UhfINYuBv5SNTNUWCiREKPZZVfd+z4r Nd4Hs8kmP3JiL+zZat6KAMJ7b2YC -----END CERTIFICATE-----Generated at Mon Jun 2 07:09:32 2025 by rpki-client