$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/C10D2C4002B311EAABAF727DC4F9AE02.roa File: C10D2C4002B311EAABAF727DC4F9AE02.roa (raw, json) Hash identifier: vTFXyGHYGe6s3SqvcZNP+dIhUxLeP7oO2VI4PVLGlrE= Subject key identifier: FD:29:5C:7C:32:74:04:43:77:9F:2F:AD:AC:11:8E:D6:B0:40:52:1F Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0C5A Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/C10D2C4002B311EAABAF727DC4F9AE02.roa Signing time: Sun 18 May 2025 18:12:32 +0000 ROA not before: Sun 18 May 2025 18:12:32 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 134841 IP address blocks: 103.139.132.0/24 maxlen: 24 103.139.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3162 (0xc5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: May 18 18:12:32 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682a2310-eab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:a7:53:2e:f4:9a:f5:ca:aa:60:5f:e7:2c: a5:6e:ee:ca:fa:95:d8:b0:d3:7c:c5:94:95:3b:cd: fa:7e:1e:46:0e:02:35:fd:31:7c:98:13:36:e1:92: 59:cb:bb:1d:9a:7e:76:85:2b:b0:ec:be:1d:2c:8f: 44:53:11:4a:f5:fa:c6:07:1d:8c:b2:36:07:90:0a: ee:92:d6:fb:40:4d:4e:10:cd:96:eb:f7:60:5f:5e: 55:19:4a:c4:2b:c1:b0:ba:f5:03:f3:ae:ce:15:5c: 9a:17:03:97:b7:56:7a:18:88:9c:1f:37:2d:3e:20: 99:f9:36:41:0a:dc:7c:da:64:85:46:a9:18:68:ff: a3:dc:97:8a:d9:09:4b:36:d0:89:03:83:53:c4:43: 76:4a:c6:43:05:cb:af:df:f7:59:64:dc:8b:c3:ad: 77:73:6c:80:7a:d5:ac:20:9b:4c:8f:64:3c:b5:d3: 74:77:0a:e1:ce:b5:08:00:1c:0d:86:e3:fd:af:02: d1:a8:a4:5f:f6:5f:5f:2f:56:5e:b2:68:01:86:2f: 2a:4d:b0:7f:f8:43:29:98:54:7e:f3:61:6a:ee:33: aa:28:b6:a6:9d:64:ff:b3:99:2b:5e:05:66:b2:b2: ef:df:bb:90:2e:42:9d:b4:fb:a2:be:ed:d9:04:27: f4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:29:5C:7C:32:74:04:43:77:9F:2F:AD:AC:11:8E:D6:B0:40:52:1F X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/C10D2C4002B311EAABAF727DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.132.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:16:3f:7a:08:26:ce:0b:16:2b:08:7b:57:8b:d1:a3:3d:5a: 7a:af:62:bc:b7:44:56:20:6f:de:3a:96:47:a4:63:1c:cf:b1: 0f:6b:2c:cd:59:e4:05:89:cd:fd:ff:e3:51:32:9d:7d:2a:a5: 10:54:1d:20:7d:b2:d3:7f:c6:21:2e:09:b1:db:5f:d6:7c:cf: 4c:fd:a9:77:1e:59:87:3b:39:53:6e:d9:11:3a:9a:ed:b0:f3: 48:c3:61:2f:e9:29:48:f9:41:95:03:8e:4a:d5:bd:d0:6d:5f: 90:64:90:a8:3e:b7:1a:b0:d7:69:a2:a4:f7:da:c9:0a:d0:d9: 25:9f:cb:1a:bb:1a:dc:1b:a1:9f:90:d9:2d:59:bc:67:0d:13: a6:fc:e2:85:fc:7a:04:c0:aa:fc:aa:85:08:86:7d:bc:c4:5e: d4:1e:95:97:4a:3f:ff:77:d0:86:b2:98:26:4e:14:ca:12:aa: 6d:74:fa:99:80:11:24:1a:31:97:82:7e:d0:63:f6:84:b1:da: 92:a3:33:cd:d3:ee:8a:c3:bd:44:32:fb:be:1b:05:35:25:6d: 6e:68:89:9e:f8:d2:50:dd:5b:90:e3:93:ab:78:ef:cc:42:08: 39:50:ba:c5:b3:eb:75:55:1a:b4:44:a2:da:a0:7a:b9:66:04: 40:e9:f0:3e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjUwNTE4MTgxMjMyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJhMjMxMC1lYWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2ynUy70mvXKqmBf5yylbu7K+pXYsNN8xZSVO836fh5GDgI1/TF8mBM24ZJZ y7sdmn52hSuw7L4dLI9EUxFK9frGBx2MsjYHkAruktb7QE1OEM2W6/dgX15VGUrE K8GwuvUD867OFVyaFwOXt1Z6GIicHzctPiCZ+TZBCtx82mSFRqkYaP+j3JeK2QlL NtCJA4NTxEN2SsZDBcuv3/dZZNyLw613c2yAetWsIJtMj2Q8tdN0dwrhzrUIABwN huP9rwLRqKRf9l9fL1ZesmgBhi8qTbB/+EMpmFR+82Fq7jOqKLamnWT/s5krXgVm srLv37uQLkKdtPuivu3ZBCf0SwIDAQABo4IClTCCApEwHQYDVR0OBBYEFP0pXHwy dARDd58vrawRjtawQFIfMB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZDMUQvNURDQ0Y3MjgwMkIzMTFFQTlFNzc0QjdEQzRGOUFFMDIvQzEwRDJDNDAw MkIzMTFFQUFCQUY3MjdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFni4QwDQYJKoZIhvcNAQELBQADggEBAHsWP3oIJs4LFisI e1eL0aM9WnqvYry3RFYgb946lkekYxzPsQ9rLM1Z5AWJzf3/41EynX0qpRBUHSB9 stN/xiEuCbHbX9Z8z0z9qXceWYc7OVNu2RE6mu2w80jDYS/pKUj5QZUDjkrVvdBt X5BkkKg+txqw12mipPfayQrQ2SWfyxq7GtwboZ+Q2S1ZvGcNE6b84oX8egTAqvyq hQiGfbzEXtQelZdKP/930IaymCZOFMoSqm10+pmAESQaMZeCftBj9oSx2pKjM83T 7orDvUQy+74bBTUlbW5oiZ740lDdW5Djk6t478xCCDlQusWz63VVGrREotqgerlm BEDp8D4= -----END CERTIFICATE-----Generated at Mon Jun 9 07:56:36 2025 by rpki-client