$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/AF95CCA0A08711EC88A88D39C4F9AE02.roa File: AF95CCA0A08711EC88A88D39C4F9AE02.roa (raw, json) Hash identifier: f88t3B3XEIrStaMOLBEX51aBDTSHx6vviz1RmYW+1Aw= Subject key identifier: D4:2F:39:93:46:7E:A5:CC:B6:7B:59:60:9C:82:2E:C5:3E:D4:45:54 Certificate issuer: /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Certificate serial: 0371 Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/AF95CCA0A08711EC88A88D39C4F9AE02.roa Signing time: Sat 29 Mar 2025 01:26:40 +0000 ROA not before: Sat 29 Mar 2025 01:26:40 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 149643 IP address blocks: 103.183.106.0/23 maxlen: 24 2400:6260::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Validity Not Before: Mar 29 01:26:40 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e74c4f-316a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:76:4c:88:bc:56:d2:bf:92:5f:ea:7b:27:34: c9:73:d0:c2:70:4d:b9:fe:48:43:c3:40:1c:11:64: 1a:73:da:45:13:93:ef:90:14:7c:75:e0:d6:3f:f2: 53:0e:70:4b:1c:06:2c:d7:29:ee:14:85:00:5c:ff: d6:f8:b3:a8:f5:a1:02:f8:8b:7a:e3:a4:32:ca:e0: 22:f5:6f:f1:bd:3d:c0:09:10:09:34:9a:17:32:9a: bb:14:ed:c4:0c:f8:bf:10:1e:29:3a:12:83:85:4e: 08:db:a1:2e:03:45:3d:ee:ae:ca:96:d0:02:42:12: 07:8e:8c:00:e7:6b:eb:5c:61:ab:5b:0d:56:10:43: eb:51:87:c7:95:78:d2:da:11:ca:7f:03:a7:04:66: 3c:a5:1c:d3:16:87:2c:50:39:2c:52:57:41:50:da: 54:4e:a8:45:95:2c:b7:04:8d:d0:1e:f5:70:ed:19: 16:96:5d:0a:f3:1d:a9:2f:b9:0b:41:fa:9b:32:75: 48:6f:71:ce:7f:af:6f:83:a2:51:b9:0d:31:9b:f6: 57:94:cc:06:39:32:24:0a:fa:50:6a:7f:a3:72:53: f8:0e:fe:db:47:f3:c2:6b:e8:c2:6c:38:a5:9e:9a: 5a:a0:dc:92:d9:87:da:f4:9c:58:fd:45:e1:63:68: 81:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2F:39:93:46:7E:A5:CC:B6:7B:59:60:9C:82:2E:C5:3E:D4:45:54 X509v3 Authority Key Identifier: keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/AF95CCA0A08711EC88A88D39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.183.106.0/23 IPv6: 2400:6260::/32 Signature Algorithm: sha256WithRSAEncryption 62:65:e0:14:48:c7:9b:ea:c4:1e:98:9d:5e:5a:d8:fc:0b:a6: 6d:91:b6:41:6d:16:ea:1f:53:5a:34:c7:52:63:d8:44:a6:f0: f9:57:88:a0:8d:90:e7:81:68:3b:1e:25:f2:9e:6b:0b:6c:79: c2:b7:0b:48:50:64:ea:82:2e:5f:b1:21:17:42:00:5a:62:e7: 05:a2:04:da:02:89:d2:3f:73:9e:a1:0d:94:32:f7:e1:a0:a6: 9f:17:66:ad:e8:59:14:eb:23:7e:29:dd:40:e7:2a:6f:10:f3: 9a:23:b9:e9:a9:7d:ff:ff:4b:fe:7f:70:52:ce:58:de:d1:76: 58:33:f4:ee:7e:d0:d5:93:ec:8b:f9:46:6a:7d:a1:e5:16:5a: 60:f4:b4:33:8a:b1:e6:d5:04:91:23:43:8f:c3:99:15:1e:f0: 7a:84:f9:63:38:0e:e5:fc:cb:09:0d:95:42:b8:d4:1d:20:ad: 53:c9:7f:56:cd:fd:d9:87:0b:98:61:0e:78:27:97:b9:80:d8: 0a:e8:f2:c4:e5:3e:0f:b3:8b:c0:f4:55:b1:83:d4:af:e6:d7: cf:d9:c7:42:6d:1b:ab:c6:9b:ed:47:41:42:f9:c4:98:b0:b1: ff:eb:9c:77:73:f4:09:0a:26:7f:37:5e:a9:53:e1:fc:a0:5b: 0b:60:43:0f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NkYxMTAvBgNVBAUTKDM3QTBBMjFCQjU4NTExRjdFRkU3RDJCMDQ0ODNFRDgw QjRBMDIzM0EwHhcNMjUwMzI5MDEyNjQwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U3NGM0Zi0zMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3ZMiLxW0r+SX+p7JzTJc9DCcE25/khDw0AcEWQac9pFE5PvkBR8deDWP/JT DnBLHAYs1ynuFIUAXP/W+LOo9aEC+It646QyyuAi9W/xvT3ACRAJNJoXMpq7FO3E DPi/EB4pOhKDhU4I26EuA0U97q7KltACQhIHjowA52vrXGGrWw1WEEPrUYfHlXjS 2hHKfwOnBGY8pRzTFocsUDksUldBUNpUTqhFlSy3BI3QHvVw7RkWll0K8x2pL7kL QfqbMnVIb3HOf69vg6JRuQ0xm/ZXlMwGOTIkCvpQan+jclP4Dv7bR/PCa+jCbDil nppaoNyS2Yfa9JxY/UXhY2iBnwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNQvOZNG fqXMtntZYJyCLsU+1EVUMB8GA1UdIwQYMBaAFDegohu1hRH37+fSsESD7YC0oCM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU2Ri9EMzNGQzgyQUEw ODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVmZnY1OUt3UklQdGdMU2dJ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL042Q2lHN1dGRWZmdjU5S3dSSVB0Z0xTZ0l6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQ1NkYvRDMzRkM4MkFBMDg0MTFFQzk0QUQyQTM3QzRGOUFFMDIvQUY5NUNDQTBB MDg3MTFFQzg4QTg4RDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnt2owDQQCAAIwBwMFACQAYmAwDQYJKoZIhvcNAQELBQAD ggEBAGJl4BRIx5vqxB6YnV5a2PwLpm2RtkFtFuofU1o0x1Jj2ESm8PlXiKCNkOeB aDseJfKeawtsecK3C0hQZOqCLl+xIRdCAFpi5wWiBNoCidI/c56hDZQy9+Ggpp8X Zq3oWRTrI34p3UDnKm8Q85ojuempff//S/5/cFLOWN7Rdlgz9O5+0NWT7Iv5Rmp9 oeUWWmD0tDOKsebVBJEjQ4/DmRUe8HqE+WM4DuX8ywkNlUK41B0grVPJf1bN/dmH C5hhDngnl7mA2Aro8sTlPg+zi8D0VbGD1K/m18/Zx0JtG6vGm+1HQUL5xJiwsf/r nHdz9AkKJn83XqlT4fygWwtgQw8= -----END CERTIFICATE-----Generated at Mon Jun 2 05:21:04 2025 by rpki-client