$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/052FFA76076211EFB14D3B12C4F9AE02.roa File: 052FFA76076211EFB14D3B12C4F9AE02.roa (raw, json) Hash identifier: ZSCw86aRTNxpcp5h59Ua7FuiYhnQ7JZYo+fxXzI0qEo= Subject key identifier: 33:28:4B:96:0E:5A:9F:84:02:09:35:14:13:B0:46:A7:2A:D8:9A:46 Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Certificate serial: DA Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/052FFA76076211EFB14D3B12C4F9AE02.roa Signing time: Fri 23 May 2025 04:56:27 +0000 ROA not before: Fri 23 May 2025 04:56:27 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 997 IP address blocks: 103.23.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Validity Not Before: May 23 04:56:27 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682ffffa-7a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:cc:a3:5e:44:6d:49:7f:bd:36:49:46:fb:ca: e3:a5:7f:29:76:94:47:f8:81:b6:e0:70:0f:3e:4f: 53:1d:34:67:ef:39:0d:0c:fc:b6:e5:9a:b5:86:01: e4:03:22:08:a9:3e:82:60:fa:b5:e5:98:73:f7:79: 60:ea:3a:8d:8e:e8:92:5e:3a:37:8b:3d:4f:e0:e6: 98:74:9d:1d:9f:da:7e:c2:45:49:dc:7b:f7:91:0c: df:84:c5:56:3b:3a:eb:30:c9:51:55:f7:da:b9:ef: 35:97:3f:55:82:54:f2:de:31:78:51:60:c0:ec:09: 2b:49:6d:3d:61:5a:71:11:ad:1d:21:59:40:ff:54: 92:d1:58:3d:17:ff:65:4e:19:dd:dc:f7:95:71:57: b9:50:11:68:cd:a8:6e:e2:42:c7:c1:68:c6:55:38: 2d:c7:62:b0:cf:73:02:54:67:7a:86:0b:ff:8d:2f: 7a:47:fd:d0:19:ab:b0:8b:62:d7:cb:84:98:8f:b8: c8:d1:5b:04:13:26:95:0a:26:ba:66:27:17:39:e1: dd:c5:c2:78:3c:cd:8f:b5:14:c6:96:59:06:66:4b: a4:5f:6b:bf:68:29:d1:c5:a2:a2:12:5d:9b:0e:54: 66:78:a6:ad:6a:9e:90:13:63:1e:d5:a5:f3:19:f0: 67:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:28:4B:96:0E:5A:9F:84:02:09:35:14:13:B0:46:A7:2A:D8:9A:46 X509v3 Authority Key Identifier: keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/052FFA76076211EFB14D3B12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.23.172.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:1e:cb:80:45:52:22:77:e4:08:8f:56:43:ee:74:de:da:00: ab:e8:9f:15:84:be:22:e1:4e:b0:83:fc:36:e2:ff:47:e5:4b: 23:07:7a:e5:06:96:e2:16:09:87:5f:36:f0:47:de:69:00:66: 3d:76:13:12:17:8a:77:ed:43:2c:44:46:f4:eb:fa:8f:32:ae: d3:a5:dd:9a:12:2f:d7:e8:94:4b:7f:cb:f4:65:e5:05:17:95: 52:25:81:6e:49:00:0c:7a:03:c3:00:2f:4b:85:3b:4a:a4:b3: 60:b4:b4:f1:3b:df:fd:6f:b7:0c:5d:0f:73:ba:af:94:e7:bf: a5:fc:e3:76:a5:7d:e2:f4:8c:56:ba:0c:b9:1d:ae:da:c5:aa: 0f:59:07:dc:b3:1b:43:4d:66:49:77:5f:f8:64:17:e2:65:b7: c3:6e:d6:8f:74:fd:c3:95:42:71:01:87:0b:c2:62:bb:d5:1e: fb:fd:79:d7:59:77:8c:2d:22:83:ce:86:32:0b:b8:16:21:92: 49:3d:b0:09:ca:9f:85:7e:6f:83:57:ca:67:45:b7:cd:7f:9f: 82:43:20:50:d2:33:0d:a3:26:d1:33:e5:0f:e3:a4:2b:cd:2c: d9:66:ad:b5:07:72:dd:1c:ac:a0:33:e3:32:31:6e:6e:92:3d: 0a:a7:2f:c5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGNUQxMTAvBgNVBAUTKEI0MDgxODE1QzZCQUVEOThBMUNDOTUwQUM2RkExMEJD NjAwNTg5MDIwHhcNMjUwNTIzMDQ1NjI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmZmZmYS03YTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9syjXkRtSX+9NklG+8rjpX8pdpRH+IG24HAPPk9THTRn7zkNDPy25Zq1hgHk AyIIqT6CYPq15Zhz93lg6jqNjuiSXjo3iz1P4OaYdJ0dn9p+wkVJ3Hv3kQzfhMVW OzrrMMlRVffaue81lz9VglTy3jF4UWDA7AkrSW09YVpxEa0dIVlA/1SS0Vg9F/9l Thnd3PeVcVe5UBFozahu4kLHwWjGVTgtx2Kwz3MCVGd6hgv/jS96R/3QGauwi2LX y4SYj7jI0VsEEyaVCia6ZicXOeHdxcJ4PM2PtRTGllkGZkukX2u/aCnRxaKiEl2b DlRmeKatap6QE2Me1aXzGfBn/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDMoS5YO Wp+EAgk1FBOwRqcq2JpGMB8GA1UdIwQYMBaAFLQIGBXGuu2YocyVCsb6ELxgBYkC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Y1RC8xMEY5NEVGMDA2 QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjdaaWh6SlVLeHZvUXZHQUZp UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTNGNUQvMTBGOTRFRjAwNkFCMTFFRjg3QkZBNzI1QzRGOUFFMDIvMDUyRkZBNzYw NzYyMTFFRkIxNEQzQjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnF6wwDQYJKoZIhvcNAQELBQADggEBAGwey4BFUiJ35AiP VkPudN7aAKvonxWEviLhTrCD/Dbi/0flSyMHeuUGluIWCYdfNvBH3mkAZj12ExIX inftQyxERvTr+o8yrtOl3ZoSL9folEt/y/Rl5QUXlVIlgW5JAAx6A8MAL0uFO0qk s2C0tPE73/1vtwxdD3O6r5Tnv6X843alfeL0jFa6DLkdrtrFqg9ZB9yzG0NNZkl3 X/hkF+Jlt8Nu1o90/cOVQnEBhwvCYrvVHvv9eddZd4wtIoPOhjILuBYhkkk9sAnK n4V+b4NXymdFt81/n4JDIFDSMw2jJtEz5Q/jpCvNLNlmrbUHct0crKAz4zIxbm6S PQqnL8U= -----END CERTIFICATE-----Generated at Mon Jun 2 07:17:44 2025 by rpki-client