$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0FA97166C80411ECBA7BB174C4F9AE02.roa File: 0FA97166C80411ECBA7BB174C4F9AE02.roa (raw, json) Hash identifier: 30Bcwfo746beL6TG9snvEW7O1ZgFuTW1IVMwb8hxmH4= Subject key identifier: E6:F3:9A:93:E8:D1:47:21:27:3A:8F:D3:74:88:02:5E:9A:8C:E6:07 Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Certificate serial: 0334 Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0FA97166C80411ECBA7BB174C4F9AE02.roa Signing time: Mon 05 May 2025 01:06:52 +0000 ROA not before: Mon 05 May 2025 01:06:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 36351 IP address blocks: 103.53.196.0/24 maxlen: 24 2402:2f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 01:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Validity Not Before: May 5 01:06:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68180f2c-27fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:86:fb:32:7b:d8:7b:7b:3b:48:8a:45:35:6e: 29:86:39:00:2d:0c:e1:60:b9:99:16:35:25:ba:6b: 7d:34:b5:f4:b2:cc:f3:98:5c:37:68:65:9a:5d:50: 90:89:87:52:f1:0f:92:22:cd:1a:b8:51:e3:d4:58: 22:d7:7d:8f:55:aa:cc:57:7d:86:bc:a5:70:0e:4b: 2d:2a:b0:2c:d3:c1:28:34:32:b5:e8:1a:22:9a:50: 0a:b5:e8:dc:48:f3:d6:62:15:c8:26:7d:35:68:5c: 33:b2:8e:ac:02:e9:47:32:9d:be:82:d4:bd:3c:e2: 30:8b:d0:d3:01:70:28:1a:35:a4:55:80:8b:5a:f1: ed:05:07:34:a6:36:4a:73:77:21:32:19:a5:c9:1d: 04:bc:6a:5f:2b:cf:f0:77:8e:84:1f:99:46:23:34: f8:83:57:cb:5a:d5:7d:91:51:9a:4f:f6:11:1f:1f: bc:1d:4d:64:6c:49:86:a3:a8:f9:7b:73:9d:97:d1: 6e:30:8a:b6:ac:d1:e1:e3:19:a4:fc:37:de:08:46: 74:8d:5e:82:b6:83:10:26:1f:c2:0b:87:fd:69:f7: 9c:01:ee:e8:9a:08:25:da:32:e2:19:54:2f:15:05: b3:4f:30:14:52:ca:f7:55:6a:1f:c1:de:33:db:7d: d5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F3:9A:93:E8:D1:47:21:27:3A:8F:D3:74:88:02:5E:9A:8C:E6:07 X509v3 Authority Key Identifier: keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0FA97166C80411ECBA7BB174C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.53.196.0/24 IPv6: 2402:2f80::/48 Signature Algorithm: sha256WithRSAEncryption 9a:29:55:b9:81:c2:15:8b:7b:5d:2b:1d:9d:c6:4e:6c:5a:42: 5f:ec:6c:13:15:72:b5:d8:84:b6:09:d5:85:12:8a:ca:f9:86: d6:79:b4:8c:8f:75:c1:bf:ae:1b:c4:08:13:b8:56:22:a8:1a: d4:ae:58:34:3e:a0:a7:b6:b8:3a:4c:a0:5f:be:2e:63:11:5e: af:5b:78:b9:03:46:e4:f7:58:bb:35:79:af:89:c4:34:3c:0a: a3:8f:9c:13:f3:4e:61:26:f3:bb:27:88:cb:d7:77:82:d3:17: b0:83:76:0a:47:d4:74:0b:1d:ff:78:9b:af:b5:0c:0d:7c:62: fe:eb:bc:88:09:66:3a:03:a8:00:88:4f:d5:38:37:34:c4:51: 66:16:09:6b:89:09:80:13:ed:46:97:21:78:51:6c:d5:82:b1: fe:21:d4:a1:34:d7:65:cc:00:1c:04:46:52:0e:f0:b2:26:79: 05:e4:04:bd:73:2b:5c:ae:1a:71:1d:c3:4c:f8:67:90:7e:ae: 28:24:ac:9d:68:71:ab:50:4c:5c:2d:ca:1c:52:13:96:bf:22: e5:70:44:0c:14:a0:a7:83:77:2a:c2:d6:4e:64:a1:74:6f:e9: 5d:d4:a2:82:8c:63:ab:60:07:0e:67:04:02:ff:6d:6f:42:b9: 0b:e9:df:9a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3MkREMDg4NTA1 QUY5QkI2NkQwHhcNMjUwNTA1MDEwNjUyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE4MGYyYy0yN2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIb7MnvYe3s7SIpFNW4phjkALQzhYLmZFjUlumt9NLX0sszzmFw3aGWaXVCQ iYdS8Q+SIs0auFHj1Fgi132PVarMV32GvKVwDkstKrAs08EoNDK16BoimlAKtejc SPPWYhXIJn01aFwzso6sAulHMp2+gtS9POIwi9DTAXAoGjWkVYCLWvHtBQc0pjZK c3chMhmlyR0EvGpfK8/wd46EH5lGIzT4g1fLWtV9kVGaT/YRHx+8HU1kbEmGo6j5 e3Odl9FuMIq2rNHh4xmk/DfeCEZ0jV6CtoMQJh/CC4f9afecAe7omggl2jLiGVQv FQWzTzAUUsr3VWofwd4z233VdQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFObzmpPo 0UchJzqP03SIAl6ajOYHMB8GA1UdIwQYMBaAFCzDP7y4ZAhAIIlKct0IhQWvm7Zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUE0NC85Q0MwMEE5Q0M3 RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NFQWdpVXB5M1FpRkJhLWJ0 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNTV92TGhrQ0VBZ2lVcHkzUWlGQmEtYnRtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFBNDQvOUNDMDBBOUNDN0ZGMTFFQzlCREJGRTRCQzRGOUFFMDIvMEZBOTcxNjZD ODA0MTFFQ0JBN0JCMTc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnNcQwDwQCAAIwCQMHACQCL4AAADANBgkqhkiG9w0BAQsF AAOCAQEAmilVuYHCFYt7XSsdncZObFpCX+xsExVytdiEtgnVhRKKyvmG1nm0jI91 wb+uG8QIE7hWIqga1K5YND6gp7a4OkygX74uYxFer1t4uQNG5PdYuzV5r4nENDwK o4+cE/NOYSbzuyeIy9d3gtMXsIN2CkfUdAsd/3ibr7UMDXxi/uu8iAlmOgOoAIhP 1Tg3NMRRZhYJa4kJgBPtRpcheFFs1YKx/iHUoTTXZcwAHARGUg7wsiZ5BeQEvXMr XK4acR3DTPhnkH6uKCSsnWhxq1BMXC3KHFITlr8i5XBEDBSgp4N3KsLWTmShdG/p XdSigoxjq2AHDmcEAv9tb0K5C+nfmg== -----END CERTIFICATE-----Generated at Sun Jun 8 19:57:19 2025 by rpki-client