$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/3135AFCECBF411EFBCA06B6BC4F9AE02.roa File: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (raw, json) Hash identifier: D8sGSIRpeb4KU8twC3M5LxWoSrBlM5fxXQEFrUY0ChI= Subject key identifier: 30:83:E3:7E:D1:31:FE:68:27:C9:E4:57:DE:00:08:66:F0:29:EF:11 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 51 Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/3135AFCECBF411EFBCA06B6BC4F9AE02.roa Signing time: Sat 31 May 2025 06:59:35 +0000 ROA not before: Sat 31 May 2025 06:59:35 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 395793 IP address blocks: 103.218.96.0/24 maxlen: 24 103.218.97.0/24 maxlen: 24 103.218.98.0/24 maxlen: 24 103.218.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: May 31 06:59:35 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683aa8d7-229c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:aa:4b:2a:42:da:98:b9:63:02:64:c9:c7:63: c9:46:a7:a2:47:9a:86:2c:d4:c8:be:44:97:30:72: bf:92:3f:eb:0f:d3:b1:b8:b5:c5:bf:f2:18:7c:9a: b7:3d:fa:81:6a:ea:7f:89:3e:b9:0b:02:57:25:31: b2:86:76:60:16:66:ab:86:26:af:9c:a6:46:ea:56: 5e:ee:53:47:73:51:dd:91:d5:b3:61:40:35:2e:88: c9:f8:3b:f9:70:10:88:ba:d6:44:ab:2e:6e:e1:d6: 35:8d:35:a2:01:87:f2:25:2a:64:31:54:a0:57:ee: 95:22:32:9d:8b:ba:b1:0a:84:d3:01:9c:42:71:4e: 2c:86:48:d1:5b:ff:c4:d3:5f:00:1b:23:8c:2b:4a: da:81:55:76:da:f2:07:1f:dd:a3:c5:65:14:39:48: 67:80:fe:20:a9:2d:b1:dc:99:7d:53:a8:9e:54:42: 59:ba:24:45:a1:c7:51:0f:c2:96:45:9e:2a:b2:a2: 72:90:7b:9c:c7:f0:64:6d:16:79:ea:d7:d4:1d:07: 05:33:ed:0d:f5:71:7b:74:47:a3:4d:4c:96:83:a4: 0d:c8:35:bb:d0:e4:e4:4b:8d:24:9d:26:40:ef:7e: 70:27:78:a9:08:e7:99:9f:6a:4e:12:70:94:a6:36: 0f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:83:E3:7E:D1:31:FE:68:27:C9:E4:57:DE:00:08:66:F0:29:EF:11 X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/3135AFCECBF411EFBCA06B6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.218.96.0/22 Signature Algorithm: sha256WithRSAEncryption 09:52:61:69:81:56:cb:84:50:10:03:53:44:96:3f:c9:c3:e6: 5f:7d:a2:74:e9:17:ba:9b:d6:a9:c0:63:e5:b9:e3:20:84:5c: 1d:86:f9:47:95:c0:62:d8:b5:74:7d:6c:7a:ed:b8:13:d2:c7: ed:9c:35:fd:8a:f0:31:e9:38:e1:89:69:92:32:1f:7f:55:62: f5:ed:cb:3f:f6:4d:93:2e:76:45:0d:85:e8:9d:1b:8d:b6:24: 31:06:87:6c:75:54:20:e4:5d:a8:50:9f:7a:20:31:65:f6:1a: 22:8e:99:75:03:2f:68:c8:e1:6b:c2:90:d9:63:33:b2:3f:4a: 9a:f7:4f:f2:12:58:15:9c:00:76:9e:18:42:a6:93:b9:7a:8d: 75:3c:8e:3f:29:52:d8:93:ad:87:73:2e:ce:d7:30:1a:55:67: 04:9d:36:58:47:38:c6:54:bd:9f:8e:0b:b1:25:6b:7b:3e:6c: e7:c5:dc:26:25:c5:c1:26:03:27:a5:57:f2:ef:f9:4f:0c:d4: 99:fc:b1:d5:91:e6:6d:81:d1:b1:aa:a4:dc:b9:54:2c:f4:c2: 0e:e1:45:f1:53:47:9c:09:78:8d:af:62:e1:30:97:74:0d:d5: b9:39:55:97:9b:81:46:51:7e:bc:73:43:ba:9c:5e:50:9d:c7: 10:0d:5b:cc -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzIzODExMC8GA1UEBRMoMTJBMTAyRjA4RUQxNEY2MjNGQTZFMzFEQkFCNDlBMjRE MUI5QTE1MTAeFw0yNTA1MzEwNjU5MzVaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4M2FhOGQ3LTIyOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2qksqQtqYuWMCZMnHY8lGp6JHmoYs1Mi+RJcwcr+SP+sP07G4tcW/8hh8mrc9 +oFq6n+JPrkLAlclMbKGdmAWZquGJq+cpkbqVl7uU0dzUd2R1bNhQDUuiMn4O/lw EIi61kSrLm7h1jWNNaIBh/IlKmQxVKBX7pUiMp2LurEKhNMBnEJxTiyGSNFb/8TT XwAbI4wrStqBVXba8gcf3aPFZRQ5SGeA/iCpLbHcmX1TqJ5UQlm6JEWhx1EPwpZF niqyonKQe5zH8GRtFnnq19QdBwUz7Q31cXt0R6NNTJaDpA3INbvQ5ORLjSSdJkDv fnAneKkI55mfak4ScJSmNg9JAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUMIPjftEx /mgnyeRX3gAIZvAp7xEwHwYDVR0jBBgwFoAUEqEC8I7RT2I/puMdurSaJNG5oVEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDMjM4L0NENzE3RDlDQ0JG MzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9W RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXFFQzhJN1JUMklfcHVNZHVyU2FKTkc1b1ZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzIzOC9DRDcxN0Q5Q0NCRjMxMUVGQkU1QjMzMzBDNEY5QUUwMi8zMTM1QUZDRUNC RjQxMUVGQkNBMDZCNkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmfaYDANBgkqhkiG9w0BAQsFAAOCAQEACVJhaYFWy4RQEANT RJY/ycPmX32idOkXupvWqcBj5bnjIIRcHYb5R5XAYti1dH1seu24E9LH7Zw1/Yrw Mek44YlpkjIff1Vi9e3LP/ZNky52RQ2F6J0bjbYkMQaHbHVUIORdqFCfeiAxZfYa Io6ZdQMvaMjha8KQ2WMzsj9KmvdP8hJYFZwAdp4YQqaTuXqNdTyOPylS2JOth3Mu ztcwGlVnBJ02WEc4xlS9n44LsSVrez5s58XcJiXFwSYDJ6VX8u/5TwzUmfyx1ZHm bYHRsaqk3LlULPTCDuFF8VNHnAl4ja9i4TCXdA3VuTlVl5uBRlF+vHNDupxeUJ3H EA1bzA== -----END CERTIFICATE-----Generated at Wed Jun 4 00:10:27 2025 by rpki-client