$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/324967826D8D11EE9883B985C4F9AE02.roa File: 324967826D8D11EE9883B985C4F9AE02.roa (raw, json) Hash identifier: fxHGOyOyuB7YI5nNfKWHUK5b4ic8LKYtMZ7wxSPfXXw= Subject key identifier: AB:95:82:DE:80:52:0A:BA:13:A7:04:9D:50:EF:61:3F:32:13:85:56 Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Certificate serial: 0141 Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/324967826D8D11EE9883B985C4F9AE02.roa Signing time: Fri 30 May 2025 13:25:44 +0000 ROA not before: Fri 30 May 2025 13:25:44 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 139053 IP address blocks: 103.138.250.0/24 maxlen: 24 103.138.251.0/24 maxlen: 24 2001:df0:5e80::/48 maxlen: 48 2402:ba0::/32 maxlen: 32 2402:ba0::/48 maxlen: 48 2402:ba0:a::/48 maxlen: 48 2402:ba0:face::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 17:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Validity Not Before: May 30 13:25:44 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6839b1d7-5421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:04:8f:83:77:03:ae:3d:2c:bb:9d:da:cd:03: f7:63:a5:ca:dc:2f:4f:76:24:cd:c1:2f:f3:d4:80: 23:83:ca:78:e0:13:2f:d2:20:bb:b9:24:93:77:7b: 71:e9:be:be:4a:79:77:ea:40:e4:02:4b:85:39:80: 04:b9:68:49:f8:d6:80:4b:13:fb:b5:55:c6:42:4c: 67:d5:f6:ec:dd:03:5c:39:8c:0d:b8:20:95:c7:cd: c8:a7:ca:a8:71:f5:2d:e6:59:d3:73:de:71:c5:c1: 8a:1a:68:9b:4c:24:e5:9b:c3:4b:41:49:26:8a:61: fa:96:fa:16:33:63:7b:cf:94:08:53:79:0a:fa:37: 9a:40:01:7c:f1:99:1a:21:4b:ab:8e:bd:43:70:2e: 55:ea:2f:bb:10:64:ca:fd:f9:a6:e7:3f:00:33:4f: 62:51:ca:19:2c:4d:75:8b:8f:a1:a4:70:c0:45:30: f6:f6:62:8c:5a:9f:8d:a8:f4:de:e8:c7:03:e8:d6: 1f:bb:0d:56:c6:7e:e7:b0:07:15:4c:05:9c:81:af: 53:2a:ac:ed:66:31:75:ca:d8:9b:0c:17:b4:12:4d: b0:96:44:e8:c6:a8:f9:3a:6a:fb:6f:d9:94:34:98: ae:ed:c0:a3:c9:5a:d5:7e:44:d0:b9:c8:d3:14:7d: 19:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:95:82:DE:80:52:0A:BA:13:A7:04:9D:50:EF:61:3F:32:13:85:56 X509v3 Authority Key Identifier: keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/324967826D8D11EE9883B985C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.250.0/23 IPv6: 2001:df0:5e80::/48 2402:ba0::/32 Signature Algorithm: sha256WithRSAEncryption 62:83:c4:b5:71:70:27:b9:68:78:f2:6c:c1:de:4e:e9:17:92: 3e:63:06:c4:d5:94:a0:b0:9e:86:a1:7e:ea:ad:fd:2d:13:1f: 16:c9:94:37:67:ba:1b:d1:51:31:67:12:9a:5e:91:49:95:ec: f1:20:7d:eb:e7:8b:88:09:44:6d:57:08:c9:5f:0b:f4:82:ad: b6:2b:9d:cc:36:32:0c:5f:b4:11:48:2d:c8:b7:4b:21:e6:58: be:b3:b4:99:61:cc:72:b5:46:44:76:b2:ef:d2:57:98:f3:f9: a1:a2:b0:18:02:e9:53:50:06:91:76:ae:70:96:bb:63:0c:aa: 65:1f:90:b4:fa:17:29:54:b5:e3:67:82:63:d5:c2:b3:62:64: 60:8b:55:3e:f8:db:e3:cd:e6:5c:e0:0e:ed:ae:9b:71:78:eb: 13:8b:80:fc:78:6f:15:ac:2d:06:2a:b7:45:46:62:90:b4:40: f4:75:d2:6e:74:66:02:6e:74:1b:6a:49:cd:bf:5e:63:26:af: 5b:e5:69:04:c5:de:9a:1a:1b:9e:98:f6:dd:c0:76:99:ef:3b: a4:df:4a:dd:7e:f6:4f:e4:d4:a7:da:56:06:05:de:53:fd:0b: e6:a5:0a:9a:c4:a3:98:e5:45:f6:3d:4e:9d:44:82:28:b9:69: 14:ae:71:32 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKEY0NDAxODE4MUVFNUM2MjQwRTEzOTQzOTVBNUNDQzRE MkY2MjMxQTQwHhcNMjUwNTMwMTMyNTQ0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM5YjFkNy01NDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ASPg3cDrj0su53azQP3Y6XK3C9PdiTNwS/z1IAjg8p44BMv0iC7uSSTd3tx 6b6+Snl36kDkAkuFOYAEuWhJ+NaASxP7tVXGQkxn1fbs3QNcOYwNuCCVx83Ip8qo cfUt5lnTc95xxcGKGmibTCTlm8NLQUkmimH6lvoWM2N7z5QIU3kK+jeaQAF88Zka IUurjr1DcC5V6i+7EGTK/fmm5z8AM09iUcoZLE11i4+hpHDARTD29mKMWp+NqPTe 6McD6NYfuw1Wxn7nsAcVTAWcga9TKqztZjF1ytibDBe0Ek2wlkToxqj5Omr7b9mU NJiu7cCjyVrVfkTQucjTFH0ZXQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKuVgt6A Ugq6E6cEnVDvYT8yE4VWMB8GA1UdIwQYMBaAFPRAGBge5cYkDhOUOVpczE0vYjGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhpUU9FNVE1V2x6TVRTOWlN YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkREODIvMTk3RjlEOTI5MUUyMTFFOTk3Njg4OTBFQzRGOUFFMDIvMzI0OTY3ODI2 RDhEMTFFRTk4ODNCOTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMAwEAgABMAYDBAFnivowFgQCAAIwEAMHACABDfBegAMFACQCC6AwDQYJKoZI hvcNAQELBQADggEBAGKDxLVxcCe5aHjybMHeTukXkj5jBsTVlKCwnoahfuqt/S0T HxbJlDdnuhvRUTFnEppekUmV7PEgfevni4gJRG1XCMlfC/SCrbYrncw2MgxftBFI Lci3SyHmWL6ztJlhzHK1RkR2su/SV5jz+aGisBgC6VNQBpF2rnCWu2MMqmUfkLT6 FylUteNngmPVwrNiZGCLVT742+PN5lzgDu2um3F46xOLgPx4bxWsLQYqt0VGYpC0 QPR10m50ZgJudBtqSc2/XmMmr1vlaQTF3poaG56Y9t3AdpnvO6TfSt1+9k/k1Kfa VgYF3lP9C+alCprEo5jlRfY9Tp1Egii5aRSucTI= -----END CERTIFICATE-----Generated at Mon Jun 2 07:08:37 2025 by rpki-client