$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/B5579BEA421911EC832A4A41C4F9AE02.roa File: B5579BEA421911EC832A4A41C4F9AE02.roa (raw, json) Hash identifier: TnPFt98O/lpzVBzpn7t3CZrVS9wPgwpRPSBubph6Vs8= Subject key identifier: B5:AD:50:55:00:2C:39:9C:A7:B2:80:62:F6:EC:BB:46:9B:FD:6C:8E Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Certificate serial: 059A Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/B5579BEA421911EC832A4A41C4F9AE02.roa Signing time: Tue 20 May 2025 09:28:18 +0000 ROA not before: Tue 20 May 2025 09:28:18 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 42960 IP address blocks: 103.214.172.0/24 maxlen: 24 103.214.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 23:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1434 (0x59a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Validity Not Before: May 20 09:28:18 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=682c4b31-5e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a3:45:8b:80:42:49:83:dd:65:9d:e0:0a:d8: 40:8c:9b:3c:2e:66:e6:fe:00:75:6b:9d:f0:01:be: 0e:10:c5:74:64:ca:30:24:bb:fc:fb:7e:c2:3d:2a: c9:04:24:2e:5c:6a:aa:56:cf:d1:01:28:31:a1:8c: db:e9:f7:72:f8:b7:97:09:15:50:31:fd:6d:93:98: 4b:85:46:ad:2e:30:a4:00:06:ca:78:07:76:6b:d2: af:33:83:d6:32:83:ab:87:1d:69:29:32:0f:3b:8e: bd:fe:8d:52:a1:d5:ef:44:50:2c:ff:b9:5d:47:6f: 88:32:fd:29:a8:83:68:31:75:f9:00:25:56:1b:28: 53:a7:d1:d7:e1:59:17:08:cd:3f:d9:59:41:ac:75: 37:26:4e:94:67:a0:91:5e:dc:01:fe:f3:8b:70:d1: a3:f9:63:b3:72:07:91:4b:bf:a4:6a:2b:84:0b:0d: 3e:fc:c0:fd:4e:44:d6:4c:b9:18:0d:cc:a4:00:17: c5:c5:3d:9b:3f:80:42:ed:1a:28:fb:4d:05:33:c8: 38:67:93:43:ff:35:e5:2a:5a:d6:60:16:6a:c4:dc: 71:68:9f:bc:cb:8f:1b:9b:4e:33:ff:b4:57:5c:46: 59:84:a2:c3:5e:c4:3e:f0:46:d2:70:57:92:07:45: c9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AD:50:55:00:2C:39:9C:A7:B2:80:62:F6:EC:BB:46:9B:FD:6C:8E X509v3 Authority Key Identifier: keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/B5579BEA421911EC832A4A41C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.214.172.0/24 103.214.174.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:2c:d7:16:f8:e3:eb:c7:d1:dc:9e:4c:97:64:44:d3:7a:d3: 33:48:a2:6e:91:a3:c9:5b:f5:77:2e:c0:c4:84:30:2a:b4:c0: 87:c8:d2:ad:2b:e9:a7:50:f9:26:31:86:de:7d:4f:cb:d8:ed: 09:8b:fd:1c:89:6e:7a:0c:b4:10:d4:b3:c7:ad:f0:75:57:87: 96:fd:1c:c0:2d:31:98:53:cc:49:23:2c:ff:99:d4:75:6a:a0: 8a:f7:e1:78:f5:c4:37:63:1e:18:a0:02:b4:f8:38:8d:63:4c: 23:ca:30:48:17:f5:38:a2:bf:ba:fc:29:4f:99:bc:20:e9:05: e5:8c:e6:bf:34:4e:9d:48:6b:b4:9c:2f:fd:44:13:73:71:38: 6a:9d:4c:fa:55:e9:99:1c:1c:00:25:22:ff:7a:ce:ba:13:f6: ac:ef:d8:b9:35:15:f5:20:b7:af:58:86:8d:6e:8b:61:4b:22: fc:b2:c4:65:0b:33:bf:fb:04:38:bf:6a:05:ea:f1:ab:3e:b1: 62:b0:a2:9a:2b:1c:2c:25:fe:0c:1b:4f:c2:48:53:59:61:0a: ca:68:d8:77:82:08:f8:df:6a:f1:63:97:37:1e:64:f9:df:3f: 4a:64:4e:be:08:f4:a4:a5:0e:bf:6e:57:99:c9:d2:6e:b8:33: b9:9f:91:d9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC RkI4MENGNUUwHhcNMjUwNTIwMDkyODE4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJjNGIzMS01ZTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqNFi4BCSYPdZZ3gCthAjJs8Lmbm/gB1a53wAb4OEMV0ZMowJLv8+37CPSrJ BCQuXGqqVs/RASgxoYzb6fdy+LeXCRVQMf1tk5hLhUatLjCkAAbKeAd2a9KvM4PW MoOrhx1pKTIPO469/o1SodXvRFAs/7ldR2+IMv0pqINoMXX5ACVWGyhTp9HX4VkX CM0/2VlBrHU3Jk6UZ6CRXtwB/vOLcNGj+WOzcgeRS7+kaiuECw0+/MD9TkTWTLkY DcykABfFxT2bP4BC7Roo+00FM8g4Z5ND/zXlKlrWYBZqxNxxaJ+8y48bm04z/7RX XEZZhKLDXsQ+8EbScFeSB0XJSwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLWtUFUA LDmcp7KAYvbsu0ab/WyOMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6 MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIzODMvOENDMkE5QUFERTc3MTFFQjg3MzlFQzExQzRGOUFFMDIvQjU1NzlCRUE0 MjE5MTFFQzgzMkE0QTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABn1qwDBAFn1q4wDQYJKoZIhvcNAQELBQADggEBAE0s1xb4 4+vH0dyeTJdkRNN60zNIom6Ro8lb9XcuwMSEMCq0wIfI0q0r6adQ+SYxht59T8vY 7QmL/RyJbnoMtBDUs8et8HVXh5b9HMAtMZhTzEkjLP+Z1HVqoIr34Xj1xDdjHhig ArT4OI1jTCPKMEgX9Tiiv7r8KU+ZvCDpBeWM5r80Tp1Ia7ScL/1EE3NxOGqdTPpV 6ZkcHAAlIv96zroT9qzv2Lk1FfUgt69Yho1ui2FLIvyyxGULM7/7BDi/agXq8as+ sWKwoporHCwl/gwbT8JIU1lhCspo2HeCCPjfavFjlzceZPnfP0pkTr4I9KSlDr9u V5nJ0m64M7mfkdk= -----END CERTIFICATE-----Generated at Mon Jun 2 06:53:40 2025 by rpki-client