$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/0A195CD4EDCE11ED994B437AC4F9AE02.roa File: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (raw, json) Hash identifier: tnhVbAfny5ry4j6HJiWID5oWjAmaD653liAgf81aO1k= Subject key identifier: 1F:85:1B:8C:22:38:10:BC:82:6C:EE:69:49:D8:85:55:9A:AE:9C:05 Certificate issuer: /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Certificate serial: 0180 Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/0A195CD4EDCE11ED994B437AC4F9AE02.roa Signing time: Fri 23 May 2025 03:32:00 +0000 ROA not before: Fri 23 May 2025 03:32:00 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151214 IP address blocks: 103.133.246.0/23 maxlen: 23 103.133.246.0/24 maxlen: 24 103.133.247.0/24 maxlen: 24 2001:df2:62c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 03:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9101, serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Validity Not Before: May 23 03:32:00 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=682fec30-b6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:08:5d:86:e1:86:8c:83:cd:e1:aa:e1:23:de: 5a:7c:13:1e:84:88:02:48:6d:eb:da:c5:54:74:03: 91:c0:03:87:cb:67:c4:de:60:95:47:0e:5e:c2:cb: 84:56:9d:00:af:f0:1c:08:e7:c4:b6:67:21:52:34: 5f:89:8b:b7:26:a5:0d:f8:55:b3:7b:bc:f8:94:6d: b8:4a:68:aa:fe:4e:bf:f5:43:14:b4:a3:97:5c:ea: 79:b8:82:c8:77:5e:48:bd:5a:4d:6c:65:d9:80:a7: 26:2f:c5:b4:0f:1c:8d:49:c5:20:03:02:7a:66:4e: bd:73:08:60:1d:94:a3:73:a3:b7:ab:5b:09:dc:72: 67:29:36:b2:8d:9b:e7:84:1b:3d:1c:67:dc:40:32: 28:d1:9e:48:63:8b:cd:a5:01:4e:f3:f3:90:a3:65: 5e:c4:ee:c1:7c:9b:5c:8c:99:fb:97:d5:a7:b8:c2: 05:18:f8:8f:b1:36:1c:1d:27:35:ea:0e:33:68:94: 7a:cf:e7:de:04:e9:12:a6:f2:f5:76:d8:68:cd:2c: 19:a2:c7:17:bd:6f:e6:e1:ca:1b:c7:81:7d:e8:b9: be:62:c4:84:9b:87:f3:01:b3:d0:8c:36:e8:2b:5e: 32:d3:f6:bb:23:a5:89:17:a7:12:02:3a:e0:1a:e8: 14:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:85:1B:8C:22:38:10:BC:82:6C:EE:69:49:D8:85:55:9A:AE:9C:05 X509v3 Authority Key Identifier: keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/0A195CD4EDCE11ED994B437AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.246.0/23 IPv6: 2001:df2:62c0::/48 Signature Algorithm: sha256WithRSAEncryption 24:5f:2b:94:42:01:b4:78:9b:02:2d:df:6e:b2:20:76:64:d1: c7:45:43:4d:38:16:bf:76:40:49:68:b3:90:af:3a:f9:bd:8e: 53:48:69:cf:d8:25:4c:8f:02:d5:70:63:a1:43:15:80:39:83: af:6e:8f:18:87:78:6f:0b:31:88:49:52:25:4e:b1:2c:f5:77: a3:ac:91:3c:d8:ea:08:66:5a:9f:d2:5b:12:86:5f:de:52:88: b6:5b:b2:89:a4:9a:76:28:07:0d:4d:4f:7f:3b:9a:55:9e:fa: d9:35:f9:cf:f9:7c:52:b6:42:07:b9:b2:ed:88:88:aa:23:0c: f7:1a:db:4b:0e:24:9c:58:04:e1:da:a1:a4:65:1b:6f:8a:43: dc:82:60:02:4d:63:2c:06:ee:ab:e5:d9:63:59:ee:e0:cf:18: 75:19:72:b1:27:60:97:20:a9:68:4c:d2:d8:fc:a1:dc:81:c0: 54:83:67:1a:75:4e:53:3b:9e:82:b5:5f:25:71:77:91:41:b4: 81:02:68:7c:7a:00:ab:84:f9:8b:b4:60:e1:98:98:94:fb:4b: 6a:56:d7:46:74:09:1f:6b:fb:64:46:3a:38:01:0f:93:a8:71: 57:7b:0e:8f:47:f0:ad:4b:91:ca:8e:dd:92:81:eb:1c:de:fd: 50:34:f6:a7 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkxMDExMTAvBgNVBAUTKDczQzA3MDE3MTc2RTdFQzFCRjk3N0UzMTE2RjU4MUY1 MTE0RDAzNjAwHhcNMjUwNTIzMDMzMjAwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmZWMzMC1iNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9whdhuGGjIPN4arhI95afBMehIgCSG3r2sVUdAORwAOHy2fE3mCVRw5ewsuE Vp0Ar/AcCOfEtmchUjRfiYu3JqUN+FWze7z4lG24Smiq/k6/9UMUtKOXXOp5uILI d15IvVpNbGXZgKcmL8W0DxyNScUgAwJ6Zk69cwhgHZSjc6O3q1sJ3HJnKTayjZvn hBs9HGfcQDIo0Z5IY4vNpQFO8/OQo2VexO7BfJtcjJn7l9WnuMIFGPiPsTYcHSc1 6g4zaJR6z+feBOkSpvL1dthozSwZoscXvW/m4cobx4F96Lm+YsSEm4fzAbPQjDbo K14y0/a7I6WJF6cSAjrgGugUdwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFB+FG4wi OBC8gmzuaUnYhVWarpwFMB8GA1UdIwQYMBaAFHPAcBcXbn7Bv5d+MRb1gfURTQNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTEwMS83NzI4ODgyMkVE QzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZzR19sMzR4RnZXQjlSRk5B MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4QndGeGR1ZnNHX2wzNHhGdldCOVJGTkEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjkxMDEvNzcyODg4MjJFREM5MTFFREE3MzAxRjdGQzRGOUFFMDIvMEExOTVDRDRF RENFMTFFRDk5NEI0MzdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnhfYwDwQCAAIwCQMHACABDfJiwDANBgkqhkiG9w0BAQsF AAOCAQEAJF8rlEIBtHibAi3fbrIgdmTRx0VDTTgWv3ZASWizkK86+b2OU0hpz9gl TI8C1XBjoUMVgDmDr26PGId4bwsxiElSJU6xLPV3o6yRPNjqCGZan9JbEoZf3lKI tluyiaSadigHDU1PfzuaVZ762TX5z/l8UrZCB7my7YiIqiMM9xrbSw4knFgE4dqh pGUbb4pD3IJgAk1jLAbuq+XZY1nu4M8YdRlysSdglyCpaEzS2Pyh3IHAVINnGnVO UzuegrVfJXF3kUG0gQJofHoAq4T5i7Rg4ZiYlPtLalbXRnQJH2v7ZEY6OAEPk6hx V3sOj0fwrUuRyo7dkoHrHN79UDT2pw== -----END CERTIFICATE-----Generated at Wed Jun 4 00:15:20 2025 by rpki-client