$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/D29DE1E6C98611ED8D5AE04CC4F9AE02.roa File: D29DE1E6C98611ED8D5AE04CC4F9AE02.roa (raw, json) Hash identifier: Cjl2Pm+bCZ4QUEFMoQa/76zBHtfWqc+OXt4GAiijv7g= Subject key identifier: 75:B0:C8:E7:0C:E7:C2:6F:53:07:3C:77:62:42:84:2A:69:50:BC:9C Certificate issuer: /CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD Certificate serial: 0C27 Authority key identifier: A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/D29DE1E6C98611ED8D5AE04CC4F9AE02.roa Signing time: Wed 30 Apr 2025 18:58:17 +0000 ROA not before: Wed 30 Apr 2025 18:58:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136141 IP address blocks: 103.137.66.0/24 maxlen: 24 103.137.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 18:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3111 (0xc27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3DC8, serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD Validity Not Before: Apr 30 18:58:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681272c9-6ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:bd:d3:e6:6d:dc:30:da:d9:74:69:aa:8c: 1c:af:eb:71:ce:b5:6e:24:73:3f:5e:fa:2b:db:05: f3:ff:d7:bb:6c:9a:06:7a:84:fe:02:7b:f7:29:b8: 2c:72:45:65:ab:7e:3f:84:52:ef:f2:26:29:c4:7c: 06:f1:30:f6:2c:85:9a:d2:c3:7f:c4:71:0e:87:0e: 4e:1b:4b:c2:26:0e:57:4c:1f:92:7e:d1:04:9f:33: c3:5c:89:bb:77:85:e3:ae:03:da:63:b2:6e:cd:d7: 12:56:2b:85:e7:20:12:dc:ca:0f:6f:a4:1e:39:4e: ab:d6:b1:b9:cb:3f:73:57:e1:19:fb:b6:a6:e5:e5: 68:ed:27:83:ab:61:41:3a:78:17:50:c6:2d:a6:4c: 0f:9e:16:ef:39:ed:80:e6:ea:3a:a6:fb:63:f0:d7: c5:fc:cc:d8:b3:87:a7:f5:2a:f4:75:fa:85:22:08: d7:fa:84:be:5d:f3:04:d9:85:a2:66:d7:2f:d4:61: c7:9d:80:ea:a2:19:a9:a1:4c:ee:04:be:d7:ae:e7: f2:d8:24:fe:b3:df:36:59:75:6b:08:18:c0:34:6b: ef:7e:ec:ec:17:69:f9:00:6c:4f:5b:b4:cb:e4:0c: 7f:c3:76:41:2d:e2:6d:f0:f8:a6:ca:7f:6b:5d:51: cf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B0:C8:E7:0C:E7:C2:6F:53:07:3C:77:62:42:84:2A:69:50:BC:9C X509v3 Authority Key Identifier: keyid:A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/D29DE1E6C98611ED8D5AE04CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.66.0/23 Signature Algorithm: sha256WithRSAEncryption 38:e3:08:2f:f3:39:43:50:fe:88:ce:c6:fd:f0:17:5c:e3:dc: f4:02:c7:05:08:37:38:e1:ef:60:4b:a5:a8:14:47:2b:d6:2b: 93:b7:8d:c5:25:68:d1:db:0c:fe:46:14:b4:3f:ab:c9:bf:d0: ff:e4:d0:59:f3:2c:b9:56:b9:32:0a:7b:85:bd:13:71:b9:f0: 1f:17:ad:0d:c3:8d:7c:fe:23:16:e4:99:cb:f3:f0:35:a7:c7: 8b:f6:84:81:9f:0f:c7:cc:43:07:fe:7b:e9:e9:b4:b0:6b:3d: 8b:bf:23:a3:63:79:86:c8:98:95:44:6e:6a:9a:17:4f:13:1b: dd:2f:f3:1b:79:e4:13:5a:7d:b6:ae:8f:de:76:f2:58:0a:48: 9f:2b:49:6f:93:26:8f:09:3a:3a:d4:11:5e:d6:de:84:15:b9: 64:5c:6c:d0:9d:6d:03:71:85:2b:ee:18:c5:9b:93:cb:52:d7: eb:51:80:ad:b6:5e:0d:30:34:73:8a:4d:40:11:0e:56:9e:df: 13:fb:db:10:13:27:2b:30:27:e7:b8:4f:15:44:6f:3d:96:88: f1:f4:27:09:66:aa:bf:8e:57:60:7e:b5:76:57:26:d8:84:38: 6d:b7:2d:95:4a:76:a9:67:2d:95:9c:9d:d6:b0:05:13:ef:54: be:06:64:d4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNEQzgxMTAvBgNVBAUTKEE2Qzk2MTExMzBDNTE2NzQ1NTEzNkU4NUFCRjIzNkFB QUE5MzdCQUQwHhcNMjUwNDMwMTg1ODE3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyNzJjOS02YWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSS90+Zt3DDa2XRpqowcr+txzrVuJHM/Xvor2wXz/9e7bJoGeoT+Anv3Kbgs ckVlq34/hFLv8iYpxHwG8TD2LIWa0sN/xHEOhw5OG0vCJg5XTB+SftEEnzPDXIm7 d4XjrgPaY7JuzdcSViuF5yAS3MoPb6QeOU6r1rG5yz9zV+EZ+7am5eVo7SeDq2FB OngXUMYtpkwPnhbvOe2A5uo6pvtj8NfF/MzYs4en9Sr0dfqFIgjX+oS+XfME2YWi Ztcv1GHHnYDqohmpoUzuBL7Xrufy2CT+s982WXVrCBjANGvvfuzsF2n5AGxPW7TL 5Ax/w3ZBLeJt8Pimyn9rXVHPswIDAQABo4IClTCCApEwHQYDVR0OBBYEFHWwyOcM 58JvUwc8d2JChCppULycMB8GA1UdIwQYMBaAFKbJYREwxRZ0VRNuhavyNqqqk3ut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0RDOC9FNUNBRjkzRTEx RDgxMUVBQjcxNjdDNEZDNEY5QUUwMi9wc2xoRVRERkZuUlZFMjZGcV9JMnFxcVRl NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzbGhFVERGRm5SVkUyNkZxX0kycXFxVGU2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzNEQzgvRTVDQUY5M0UxMUQ4MTFFQUI3MTY3QzRGQzRGOUFFMDIvRDI5REUxRTZD OTg2MTFFRDhENUFFMDRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFniUIwDQYJKoZIhvcNAQELBQADggEBADjjCC/zOUNQ/ojO xv3wF1zj3PQCxwUINzjh72BLpagURyvWK5O3jcUlaNHbDP5GFLQ/q8m/0P/k0Fnz LLlWuTIKe4W9E3G58B8XrQ3DjXz+Ixbkmcvz8DWnx4v2hIGfD8fMQwf+e+nptLBr PYu/I6NjeYbImJVEbmqaF08TG90v8xt55BNafbauj9528lgKSJ8rSW+TJo8JOjrU EV7W3oQVuWRcbNCdbQNxhSvuGMWbk8tS1+tRgK22Xg0wNHOKTUARDlae3xP72xAT JyswJ+e4TxVEbz2WiPH0Jwlmqr+OV2B+tXZXJtiEOG23LZVKdqlnLZWcndawBRPv VL4GZNQ= -----END CERTIFICATE-----Generated at Sat Jun 7 05:25:40 2025 by rpki-client