$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/4B31BDC4B76911ED8A503224C4F9AE02.roa File: 4B31BDC4B76911ED8A503224C4F9AE02.roa (raw, json) Hash identifier: l0BRfiLqHQsOV1ADKIbKK5vOrt/xeo6mhndQAShwIN8= Subject key identifier: 7E:F0:2F:8D:E2:B1:71:4D:50:B0:E3:09:C0:86:40:EA:9D:8D:8B:97 Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Certificate serial: 0992 Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/4B31BDC4B76911ED8A503224C4F9AE02.roa Signing time: Mon 26 May 2025 20:36:27 +0000 ROA not before: Mon 26 May 2025 20:36:27 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 150001 IP address blocks: 103.151.60.0/24 maxlen: 24 2001:df3:ab80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2450 (0x992) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Validity Not Before: May 26 20:36:27 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6834d0cb-fca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fc:a0:cc:84:db:98:3b:bd:ed:7b:00:89:a1: 0a:b7:c2:ef:51:7f:94:5c:19:37:7e:c0:ce:df:13: 96:9b:ef:1e:1a:63:19:75:7f:96:49:fd:aa:6c:ad: ff:f3:ed:16:b0:1e:a7:8c:1c:79:71:70:00:6c:db: d9:9f:75:26:9a:47:8d:a8:7f:92:6c:30:b7:06:f1: c0:ae:7f:bb:56:66:58:91:03:f1:c0:ae:aa:67:fb: 50:8a:8e:c7:e5:ca:cd:ff:00:2e:95:f6:04:b1:d6: 65:54:b2:41:f4:c1:43:34:3a:eb:ed:d7:bd:dd:c7: f1:93:f2:90:ff:bc:17:cf:04:64:ba:b8:1d:8e:d0: ab:f0:56:4a:89:5e:98:f9:67:00:e5:34:85:25:51: d7:6d:14:de:2e:fa:c0:22:53:a2:4e:c6:ae:1e:70: cc:3f:cc:7d:15:d7:33:76:68:ec:57:91:ab:bd:a2: fa:6a:39:34:8f:74:16:68:fa:c8:d6:20:fb:a1:16: 61:23:82:70:cb:b4:02:1a:32:5d:0b:d5:20:85:e7: 79:2c:df:23:56:6a:36:d3:3a:45:87:5f:f2:7a:f2: 2b:f3:ae:db:71:0b:2f:50:b4:a8:36:3d:bf:07:10: a5:4f:d6:ea:07:d1:cf:66:9e:09:0f:93:5f:71:e4: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F0:2F:8D:E2:B1:71:4D:50:B0:E3:09:C0:86:40:EA:9D:8D:8B:97 X509v3 Authority Key Identifier: keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/4B31BDC4B76911ED8A503224C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.60.0/24 IPv6: 2001:df3:ab80::/48 Signature Algorithm: sha256WithRSAEncryption 8a:b5:24:48:05:1b:1c:c8:b8:53:da:c0:f6:98:cd:4c:0b:cd: 41:86:be:7b:e3:b2:a3:4f:03:17:01:c4:67:ef:79:da:64:fc: 14:74:ed:35:5f:c8:94:3f:2b:00:57:b6:2b:94:4c:ef:ad:53: 0f:50:58:d1:15:07:b9:55:d7:d5:1a:dd:6d:4c:6c:18:9f:2e: 5d:97:35:24:07:6e:61:f6:9a:10:e8:87:3b:6a:ec:86:54:8c: 49:d2:d3:93:8c:4c:70:5f:ed:2a:aa:3d:5d:90:22:85:3a:c4: cf:8e:65:20:c9:70:b0:88:da:7a:f7:c3:64:94:08:e6:8a:9c: 90:9d:07:33:d7:50:36:6e:ce:e5:6b:45:7e:4d:e1:10:07:5c: 48:11:98:5b:61:0f:90:c6:e6:c4:f5:fd:9a:9c:1f:67:a4:5e: 5d:59:a1:4b:ac:ac:45:06:86:3a:0c:cb:e1:de:17:0e:a7:b3: 12:d7:64:9a:dc:3a:7d:7c:8b:83:80:25:d9:5e:e0:f3:ec:61: 31:0f:a1:46:5e:ad:2c:5f:ef:84:d2:32:16:6b:a0:e7:0f:d1: d5:eb:39:ea:58:5e:78:c7:eb:1e:6a:ba:44:32:34:5c:0c:56: b6:6a:fc:70:9e:39:dd:5e:63:e5:a2:71:c1:58:e9:22:67:8d: 2e:8e:c8:1e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB QzE3ODFBNUEwHhcNMjUwNTI2MjAzNjI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM0ZDBjYi1mY2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/ygzITbmDu97XsAiaEKt8LvUX+UXBk3fsDO3xOWm+8eGmMZdX+WSf2qbK3/ 8+0WsB6njBx5cXAAbNvZn3UmmkeNqH+SbDC3BvHArn+7VmZYkQPxwK6qZ/tQio7H 5crN/wAulfYEsdZlVLJB9MFDNDrr7de93cfxk/KQ/7wXzwRkurgdjtCr8FZKiV6Y +WcA5TSFJVHXbRTeLvrAIlOiTsauHnDMP8x9FdczdmjsV5GrvaL6ajk0j3QWaPrI 1iD7oRZhI4Jwy7QCGjJdC9Ughed5LN8jVmo20zpFh1/yevIr867bcQsvULSoNj2/ BxClT9bqB9HPZp4JD5NfceSXzQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFH7wL43i sXFNULDjCcCGQOqdjYuXMB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVDNzAvMjNBMEFDMDY5MTA3MTFFQUEzRTkzQTVCQzRGOUFFMDIvNEIzMUJEQzRC NzY5MTFFRDhBNTAzMjI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnlzwwDwQCAAIwCQMHACABDfOrgDANBgkqhkiG9w0BAQsF AAOCAQEAirUkSAUbHMi4U9rA9pjNTAvNQYa+e+Oyo08DFwHEZ+952mT8FHTtNV/I lD8rAFe2K5RM761TD1BY0RUHuVXX1RrdbUxsGJ8uXZc1JAduYfaaEOiHO2rshlSM SdLTk4xMcF/tKqo9XZAihTrEz45lIMlwsIjaevfDZJQI5oqckJ0HM9dQNm7O5WtF fk3hEAdcSBGYW2EPkMbmxPX9mpwfZ6ReXVmhS6ysRQaGOgzL4d4XDqezEtdkmtw6 fXyLg4Al2V7g8+xhMQ+hRl6tLF/vhNIyFmug5w/R1es56lheeMfrHmq6RDI0XAxW tmr8cJ453V5j5aJxwVjpImeNLo7IHg== -----END CERTIFICATE-----Generated at Wed Jun 4 00:01:06 2025 by rpki-client