$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/5AF61D0CEDD811EF8D4FD882C4F9AE02.roa File: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (raw, json) Hash identifier: Z3slCZDCkUSw/0F4QpW19+Hh7dYabhcL9K/vcPHYUaA= Subject key identifier: 50:46:B5:F2:02:ED:85:CC:32:DC:C1:BB:F4:E6:95:A4:EA:14:26:86 Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 4E Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/5AF61D0CEDD811EF8D4FD882C4F9AE02.roa Signing time: Tue 18 Feb 2025 09:11:37 +0000 ROA not before: Tue 18 Feb 2025 09:11:37 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 137535 IP address blocks: 103.110.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C Validity Not Before: Feb 18 09:11:37 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67b44ec8-9099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:a9:9e:d4:7f:7f:6d:a4:ed:fb:51:6e:a3: 98:5e:eb:2c:23:9b:44:a9:b6:b1:36:09:c0:a5:d4: 8a:12:2e:c7:3f:b8:bd:bf:ce:97:1d:02:aa:80:f4: de:6a:03:29:fb:ed:d3:81:41:ee:75:55:4a:0b:98: 68:f7:82:94:ad:73:c0:29:8b:47:e7:20:56:d1:2f: 02:38:5f:ea:cd:01:5d:a0:e2:03:e8:f4:25:56:3c: 66:bf:f5:53:84:20:d7:43:ae:63:23:db:a4:c2:5c: bb:95:e0:1e:f9:4b:d9:e5:43:34:2f:f6:a7:0a:51: f3:05:f7:37:4f:83:0c:6b:81:e0:d4:80:8d:77:cd: 0e:b0:97:e6:20:ee:eb:e4:87:8e:0c:e6:de:72:82: c5:3b:67:e3:5f:81:25:a3:19:b4:93:7f:de:51:21: 1f:39:f1:e9:75:2a:69:5d:c2:c0:a6:1a:51:50:29: df:24:a1:22:3e:9f:3c:eb:20:a3:cb:3c:9e:88:e7: 69:f5:a5:ae:6c:74:36:a0:3f:34:ea:d0:42:a3:25: 12:bb:60:b3:d3:41:df:6e:6f:0d:62:77:03:92:ac: 2e:78:ad:27:45:1c:86:18:64:8e:17:2b:93:c8:22: ed:03:01:13:12:d4:97:0e:27:8b:68:85:70:6c:27: ef:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:46:B5:F2:02:ED:85:CC:32:DC:C1:BB:F4:E6:95:A4:EA:14:26:86 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/5AF61D0CEDD811EF8D4FD882C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.220.0/23 Signature Algorithm: sha256WithRSAEncryption 15:72:41:00:14:72:55:fb:b5:66:8a:46:6e:ae:0a:8e:0f:63: 67:69:d7:c4:44:4d:fc:77:1f:51:c1:a3:61:48:fb:fa:e4:e5: 07:de:1e:e0:51:5d:db:41:02:ce:47:3d:26:8b:64:4d:29:a3: 1f:39:26:ca:bd:f1:d9:6f:6e:9d:a6:e6:35:29:cb:2d:3f:98: 4e:1b:9b:2c:cc:36:33:d5:81:f1:9c:61:f4:aa:2e:fa:0c:d1: c4:1b:0f:df:d7:4e:58:ec:16:bd:8e:0a:1d:4e:93:15:62:b9: a6:16:aa:de:ce:49:88:8b:ad:ae:b9:77:00:9e:0e:a5:07:a4: 43:7a:37:56:82:34:f6:2d:5d:2f:4b:e8:fe:2a:1a:76:ce:24: 92:8a:90:f8:c6:5e:5a:56:5a:92:ab:c9:25:84:e4:59:ba:52: 88:b0:70:e2:f5:51:45:53:e5:76:42:6b:5a:52:51:93:9a:e7: 7e:c5:57:b2:c0:c1:4a:81:cc:5f:e2:6a:8e:0e:e5:b3:f6:bc: 9b:f8:91:a6:31:43:56:9b:19:f8:02:ca:02:10:2c:1c:8e:ff: d8:d8:62:72:56:71:30:68:39:8c:80:9e:fc:4c:63:01:51:8b: aa:e8:ef:ac:75:10:f8:f4:af:3a:9c:50:8c:5b:cf:c4:f1:b4: 1e:36:6a:06 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0I0QzExMC8GA1UEBRMoQjYzREZENjg2Q0UwQTkwMDc2RTRGNUZGNDI4Njg1RjYz RkIwOEVERDAeFw0yNTAyMTgwOTExMzdaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YjQ0ZWM4LTkwOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5Rqme1H9/baTt+1Fuo5he6ywjm0SptrE2CcCl1IoSLsc/uL2/zpcdAqqA9N5q Ayn77dOBQe51VUoLmGj3gpStc8Api0fnIFbRLwI4X+rNAV2g4gPo9CVWPGa/9VOE INdDrmMj26TCXLuV4B75S9nlQzQv9qcKUfMF9zdPgwxrgeDUgI13zQ6wl+Yg7uvk h44M5t5ygsU7Z+NfgSWjGbSTf95RIR858el1KmldwsCmGlFQKd8koSI+nzzrIKPL PJ6I52n1pa5sdDagPzTq0EKjJRK7YLPTQd9ubw1idwOSrC54rSdFHIYYZI4XK5PI Iu0DARMS1JcOJ4tohXBsJ+8DAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUUEa18gLt hcwy3MG79OaVpOoUJoYwHwYDVR0jBBgwFoAUtj39aGzgqQB25PX/QoaF9j+wjt0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzQjRDL0RDOURFMjhFOEM1 MDExRUZBMDY3QzgxNUM0RjlBRTAyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGozOWFHemdxUUIyNVBYX1FvYUY5ai13anQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi81QUY2MUQwQ0VE RDgxMUVGOEQ0RkQ4ODJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWdu3DANBgkqhkiG9w0BAQsFAAOCAQEAFXJBABRyVfu1ZopG bq4Kjg9jZ2nXxERN/HcfUcGjYUj7+uTlB94e4FFd20ECzkc9JotkTSmjHzkmyr3x 2W9unabmNSnLLT+YThubLMw2M9WB8Zxh9Kou+gzRxBsP39dOWOwWvY4KHU6TFWK5 phaq3s5JiIutrrl3AJ4OpQekQ3o3VoI09i1dL0vo/ioads4kkoqQ+MZeWlZakqvJ JYTkWbpSiLBw4vVRRVPldkJrWlJRk5rnfsVXssDBSoHMX+Jqjg7ls/a8m/iRpjFD VpsZ+ALKAhAsHI7/2NhiclZxMGg5jICe/ExjAVGLqujvrHUQ+PSvOpxQjFvPxPG0 HjZqBg== -----END CERTIFICATE-----Generated at Mon Apr 7 15:59:00 2025 by rpki-client