$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/575AA83EC89611EDB6E9F849C4F9AE02.roa File: 575AA83EC89611EDB6E9F849C4F9AE02.roa (raw, json) Hash identifier: zUQrvX33/3TCKafKm47GXtbl0gyaNKZ7M04LcO+HoFI= Subject key identifier: 93:66:5B:AD:F7:D0:35:21:0B:38:A5:4B:5E:AC:46:AB:54:0F:BB:28 Certificate issuer: /CN=A91BD68B/serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A Certificate serial: 1B8E Authority key identifier: 45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/575AA83EC89611EDB6E9F849C4F9AE02.roa Signing time: Mon 06 Jan 2025 16:33:40 +0000 ROA not before: Mon 06 Jan 2025 16:33:40 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 15404 IP address blocks: 103.80.220.0/24 maxlen: 24 103.80.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7054 (0x1b8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD68B Validity Not Before: Jan 6 16:33:40 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=677c05e3-b36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3d:55:82:68:20:6c:e0:29:75:8f:e1:09:e2: 63:48:bb:f0:98:16:46:7c:be:d0:47:7b:6f:3c:5b: b7:58:71:21:c4:3e:97:ba:f9:68:47:8c:3d:42:b2: fc:2f:a6:46:f9:8e:a2:ae:e0:77:d3:81:9d:38:94: af:fb:5f:81:f6:46:11:cd:df:c5:f9:d5:05:cc:79: ac:27:04:ec:8e:d0:50:5d:50:68:7c:a6:b5:f8:f9: b4:77:d1:04:81:7c:cd:dd:32:a3:e5:ba:81:15:7a: bb:c4:a1:5b:64:fb:8e:89:77:9d:a8:50:be:2e:7b: 86:f8:ec:c0:68:ef:2a:de:9a:a3:d2:ea:1e:9b:c2: a8:ee:5f:36:a3:da:8b:30:1b:8f:04:06:77:ca:1e: 79:d6:74:d2:02:c5:58:2a:77:50:1f:b9:b0:7a:d4: f6:4f:52:b1:52:dc:a4:fb:11:be:36:1d:4a:4c:7e: 09:4f:5e:b3:04:e2:7f:ef:b8:e0:39:a2:1c:b1:8d: cf:2c:a0:50:4f:b9:5a:f8:53:25:fe:8e:ee:47:b7: 3c:a4:1b:31:81:23:e0:0a:54:0c:58:42:ba:7b:73: f3:ae:99:7b:e4:55:bf:1e:0e:60:35:1f:bd:ed:ec: 08:4b:2b:55:cf:54:e5:06:60:66:ec:11:cf:d8:84: fd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:66:5B:AD:F7:D0:35:21:0B:38:A5:4B:5E:AC:46:AB:54:0F:BB:28 X509v3 Authority Key Identifier: keyid:45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/575AA83EC89611EDB6E9F849C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.80.220.0/23 Signature Algorithm: sha256WithRSAEncryption c4:19:90:53:95:c5:f2:ae:7f:76:9e:b1:11:be:24:2e:30:b7: fb:8c:b1:29:78:fc:91:7e:62:a5:f0:9f:f4:bc:a1:21:dc:76: 71:9b:b8:e9:25:b2:32:d0:d8:7a:24:a4:49:8c:88:2a:d8:8b: 1f:c8:07:46:d4:63:c3:83:9b:32:4d:4d:03:93:51:1a:83:b0: 07:42:1c:70:54:c1:97:b8:9f:0c:ef:d1:f2:bf:9d:94:e7:ff: 83:b1:09:ca:71:b3:39:70:65:19:2d:a0:0e:d2:fc:92:91:5a: 08:3d:5a:dc:9e:a5:1e:e7:6a:d9:37:30:80:84:11:e0:52:f2: 00:b8:17:b9:5b:c4:f5:6f:45:46:fa:45:9d:00:85:0d:8b:8c: c5:30:cd:6f:12:8e:c1:23:8e:dc:5d:2e:e9:d4:44:2a:89:e6: 9b:d2:e1:2e:5f:26:9a:8a:1f:09:dc:cf:65:ff:22:55:4c:d9: ae:34:1e:bd:21:3c:47:cd:2e:07:7c:26:e2:cd:43:95:07:8d: 96:eb:30:87:e2:a4:9e:96:ce:88:3c:85:d3:e9:36:8a:38:48: 5d:1d:97:10:98:79:a4:fa:bc:37:6a:1f:ee:5c:46:56:59:56: a1:06:4b:7a:bf:54:76:66:28:21:32:38:7f:92:98:a4:de:af: 9c:93:55:fd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICG44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2OEIxMTAvBgNVBAUTKDQ1QkIxOTdERUI5MzYxNTk4MTE1NjUzRjk3MDg5RTZB N0Y2MkJGOUEwHhcNMjUwMTA2MTYzMzQwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdjMDVlMy1iMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArT1VgmggbOApdY/hCeJjSLvwmBZGfL7QR3tvPFu3WHEhxD6XuvloR4w9QrL8 L6ZG+Y6iruB304GdOJSv+1+B9kYRzd/F+dUFzHmsJwTsjtBQXVBofKa1+Pm0d9EE gXzN3TKj5bqBFXq7xKFbZPuOiXedqFC+LnuG+OzAaO8q3pqj0uoem8Ko7l82o9qL MBuPBAZ3yh551nTSAsVYKndQH7mwetT2T1KxUtyk+xG+Nh1KTH4JT16zBOJ/77jg OaIcsY3PLKBQT7la+FMl/o7uR7c8pBsxgSPgClQMWEK6e3Pzrpl75FW/Hg5gNR+9 7ewISytVz1TlBmBm7BHP2IT9vQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJNmW633 0DUhCzilS16sRqtUD7soMB8GA1UdIwQYMBaAFEW7GX3rk2FZgRVlP5cInmp/Yr+a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDY4Qi9CMERGNTVFQ0ZB M0IxMUU2QjhBNkFFMkRDNEY5QUUwMi9SYnNaZmV1VFlWbUJGV1VfbHdpZWFuOWl2 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jic1pmZXVUWVZtQkZXVV9sd2llYW45aXY1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkQ2OEIvQjBERjU1RUNGQTNCMTFFNkI4QTZBRTJEQzRGOUFFMDIvNTc1QUE4M0VD ODk2MTFFREI2RTlGODQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnUNwwDQYJKoZIhvcNAQELBQADggEBAMQZkFOVxfKuf3ae sRG+JC4wt/uMsSl4/JF+YqXwn/S8oSHcdnGbuOklsjLQ2HokpEmMiCrYix/IB0bU Y8ODmzJNTQOTURqDsAdCHHBUwZe4nwzv0fK/nZTn/4OxCcpxszlwZRktoA7S/JKR Wgg9WtyepR7natk3MICEEeBS8gC4F7lbxPVvRUb6RZ0AhQ2LjMUwzW8SjsEjjtxd LunURCqJ5pvS4S5fJpqKHwncz2X/IlVM2a40Hr0hPEfNLgd8JuLNQ5UHjZbrMIfi pJ6Wzog8hdPpNoo4SF0dlxCYeaT6vDdqH+5cRlZZVqEGS3q/VHZmKCEyOH+SmKTe r5yTVf0= -----END CERTIFICATE-----Generated at Sun Apr 6 17:54:14 2025 by rpki-client