$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/F8088528E65D11EDB5112931C4F9AE02.roa File: F8088528E65D11EDB5112931C4F9AE02.roa (raw, json) Hash identifier: 2Y1qjCmLTaBuW+PY4V12Zh62AUY0iuAkYOwDBibrsjY= Subject key identifier: A1:FB:10:0A:AC:8F:E2:AA:C7:16:DC:3E:D9:84:72:13:80:78:5C:C1 Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Certificate serial: 0B85 Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/F8088528E65D11EDB5112931C4F9AE02.roa Signing time: Fri 02 May 2025 19:27:40 +0000 ROA not before: Fri 02 May 2025 19:27:40 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 150744 IP address blocks: 103.112.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2949 (0xb85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Validity Not Before: May 2 19:27:40 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68151cab-0b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:29:6c:b0:9f:de:f4:a6:02:e0:9b:90:67: a3:e3:56:b8:15:ab:33:44:35:91:21:09:6d:9b:4a: 7c:a8:f4:f8:ac:2b:1b:99:69:47:3c:0a:da:b4:6e: 6e:59:b9:39:c4:0a:ed:58:e2:4f:ed:5a:50:29:98: 8e:92:f1:50:69:dd:c3:b7:80:16:c9:a0:bf:c6:97: 56:66:be:9f:81:32:82:84:09:fe:db:87:7a:10:b0: 02:b3:b4:9c:78:b9:e5:db:8c:b5:6b:b1:76:8d:79: 9e:92:f6:fb:27:f4:de:04:0d:c5:b4:d7:6f:47:d8: 2d:5a:30:54:2a:a6:03:87:99:08:03:ae:79:4d:5c: db:27:58:5f:4c:6b:8d:a0:53:41:78:63:90:25:22: 67:9d:2c:98:09:62:62:62:da:78:64:a6:b9:e3:8c: 2a:b7:c8:34:8e:22:4b:a6:02:68:72:a4:ea:eb:1a: 09:37:bc:44:47:36:49:81:3a:8f:05:d6:f9:10:9f: 57:60:5f:f9:66:79:2f:15:e1:36:1f:16:91:dc:a9: 13:49:77:27:2b:00:67:31:ce:4d:b8:8c:42:c2:23: 94:08:2f:75:b3:59:30:24:73:05:32:ce:c9:d1:0f: 1b:3d:d8:33:6e:5f:6e:08:62:f2:02:d7:c9:b2:24: 5f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FB:10:0A:AC:8F:E2:AA:C7:16:DC:3E:D9:84:72:13:80:78:5C:C1 X509v3 Authority Key Identifier: keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/F8088528E65D11EDB5112931C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.205.0/24 Signature Algorithm: sha256WithRSAEncryption 82:30:bb:02:1d:41:c0:a0:9c:6a:c9:db:68:a9:40:18:b8:e4: 69:bf:46:92:0f:bb:9f:24:07:53:79:ca:b1:d1:47:5c:e5:e1: 8d:aa:5c:fe:bc:f1:17:3e:1a:71:ef:7d:86:27:ca:2e:40:d8: 5f:8b:0a:00:33:4a:82:d7:8d:86:1a:23:80:7a:b6:fa:e4:5c: 80:94:c2:47:7a:4d:ef:72:f7:6c:7e:7a:67:01:d6:89:46:b0: dd:89:2c:bd:98:07:26:59:92:f0:0b:da:3e:c6:80:e9:e0:48: ae:c5:7d:3d:69:46:7b:89:74:dc:38:03:cc:40:3b:cf:c5:cf: 6b:08:b2:38:cf:e6:90:0e:f1:1c:56:94:4b:49:98:7a:14:28: 20:c7:8f:41:02:ae:ff:1e:20:b8:2e:1f:8c:a5:b3:09:d6:05: 40:0e:cf:ea:6a:53:f8:f3:74:69:33:f2:8b:28:1a:23:64:d9: ad:c8:6a:76:dc:d5:ac:31:77:a8:77:67:25:24:42:b4:ae:0f: cd:0b:56:92:52:be:86:17:24:33:00:89:3e:b1:e8:22:93:64: 25:87:81:0d:5f:6b:c6:4d:36:2b:a0:fe:4b:d9:66:ca:5e:5a: 15:a1:af:8c:7a:50:67:84:6f:37:0e:df:41:3f:de:31:81:bc: 94:09:47:c7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0MDUxMTAvBgNVBAUTKDJEOUVEM0QyNkU2MzVGN0NGRkU0QkJGNTIwODcxNTBC N0E0MjE4OEYwHhcNMjUwNTAyMTkyNzQwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1MWNhYi0wYjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/gpbLCf3vSmAuCbkGej41a4FaszRDWRIQltm0p8qPT4rCsbmWlHPAratG5u Wbk5xArtWOJP7VpQKZiOkvFQad3Dt4AWyaC/xpdWZr6fgTKChAn+24d6ELACs7Sc eLnl24y1a7F2jXmekvb7J/TeBA3FtNdvR9gtWjBUKqYDh5kIA655TVzbJ1hfTGuN oFNBeGOQJSJnnSyYCWJiYtp4ZKa544wqt8g0jiJLpgJocqTq6xoJN7xERzZJgTqP Bdb5EJ9XYF/5ZnkvFeE2HxaR3KkTSXcnKwBnMc5NuIxCwiOUCC91s1kwJHMFMs7J 0Q8bPdgzbl9uCGLyAtfJsiRfPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKH7EAqs j+KqxxbcPtmEchOAeFzBMB8GA1UdIwQYMBaAFC2e09JuY198/+S79SCHFQt6QhiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwNS9GOUMxOTY5NjMy MTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algzel81THYxSUljVkMzcENH STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xaN1QwbTVqWDN6XzVMdjFJSWNWQzNwQ0dJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTg0MDUvRjlDMTk2OTYzMjEyMTFFQTkzNjMzQTU5QzRGOUFFMDIvRjgwODg1MjhF NjVEMTFFREI1MTEyOTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABncM0wDQYJKoZIhvcNAQELBQADggEBAIIwuwIdQcCgnGrJ 22ipQBi45Gm/RpIPu58kB1N5yrHRR1zl4Y2qXP688Rc+GnHvfYYnyi5A2F+LCgAz SoLXjYYaI4B6tvrkXICUwkd6Te9y92x+emcB1olGsN2JLL2YByZZkvAL2j7GgOng SK7FfT1pRnuJdNw4A8xAO8/Fz2sIsjjP5pAO8RxWlEtJmHoUKCDHj0ECrv8eILgu H4ylswnWBUAOz+pqU/jzdGkz8osoGiNk2a3Ianbc1awxd6h3ZyUkQrSuD80LVpJS voYXJDMAiT6x6CKTZCWHgQ1fa8ZNNiug/kvZZspeWhWhr4x6UGeEbzcO30E/3jGB vJQJR8c= -----END CERTIFICATE-----Generated at Mon Jun 2 07:11:44 2025 by rpki-client