$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/020D49E0283211ED9E29FA70C4F9AE02.roa File: 020D49E0283211ED9E29FA70C4F9AE02.roa (raw, json) Hash identifier: LQxrSI0KNNYbihu8S9SLx+zDE07D+HfcizadCn96Tg0= Subject key identifier: F5:AB:49:8F:18:54:49:84:99:D7:E1:4C:81:71:72:D5:4F:43:F1:65 Certificate issuer: /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Certificate serial: 01E2 Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/020D49E0283211ED9E29FA70C4F9AE02.roa Signing time: Tue 03 Dec 2024 02:05:27 +0000 ROA not before: Tue 03 Dec 2024 02:05:27 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 45481 IP address blocks: 103.242.32.0/22 maxlen: 22 113.52.0.0/20 maxlen: 20 113.52.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Validity Not Before: Dec 3 02:05:27 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674e6767-fcbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7b:96:d3:a2:bb:01:15:ea:2b:e1:ba:6c:b0: 79:17:f8:2e:48:ed:c1:35:27:fe:e3:8f:52:61:25: b2:91:c2:02:d1:f3:22:53:8c:6b:03:ad:36:f3:6a: 36:88:46:a9:d7:d9:6e:60:f2:e3:3c:29:34:d4:e7: d6:e4:19:b1:8c:fc:fa:b7:93:d9:1a:45:38:a3:23: be:cf:9d:e1:e9:e5:6f:83:ff:7e:75:88:b6:df:74: 02:f8:63:84:c5:c1:a1:57:c9:e3:e8:03:35:0c:c3: e8:f8:a9:0c:77:4e:f9:d1:50:66:a7:b1:f2:0a:1f: 61:75:ba:b0:06:5f:59:6f:3f:e1:25:3c:f6:1f:33: 79:50:a3:91:87:84:48:e2:39:cf:31:9c:97:ad:bb: 11:29:4e:d8:9f:61:6d:42:1c:00:c6:36:16:cc:46: db:da:5d:15:44:a5:69:1a:f6:fd:63:97:94:fa:e3: 68:2b:c5:aa:1e:86:fa:f5:0c:86:67:6a:a4:fb:59: 50:87:2b:73:07:ba:3c:68:0d:b8:08:96:60:30:23: e2:4c:17:91:11:fe:c0:e8:47:0e:88:28:fa:13:1b: 52:fb:d4:80:6c:e1:ce:ff:9a:b0:31:bf:1d:d9:6d: db:70:38:80:fa:15:0b:db:0f:83:17:a3:30:db:cc: 6e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AB:49:8F:18:54:49:84:99:D7:E1:4C:81:71:72:D5:4F:43:F1:65 X509v3 Authority Key Identifier: keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/020D49E0283211ED9E29FA70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.242.32.0/22 113.52.0.0/20 Signature Algorithm: sha256WithRSAEncryption 07:17:40:0e:ac:e8:30:17:d2:52:3c:21:ff:e5:2a:49:04:04: 4d:f6:ef:07:a0:8f:0e:c9:51:27:19:c1:06:bc:86:f0:a1:c2: 20:54:a6:d4:14:89:8d:0f:ca:3a:e2:26:97:19:bc:4d:5e:5b: 5c:dc:10:d8:9c:0a:65:e7:03:49:67:0d:68:ea:5c:60:35:32: cc:7c:9d:41:9f:fd:07:f7:29:0c:18:86:9f:aa:f4:de:03:24: ed:84:2e:79:3c:91:fb:46:4f:2b:71:e9:1c:5f:61:e4:d7:b0: 47:49:75:58:61:04:0e:99:7d:06:e2:de:e4:8c:47:8a:56:33: bf:74:b2:4b:4f:fe:82:ac:0d:db:53:66:2b:13:1d:5e:2e:9f: e8:fc:6a:75:25:46:3c:76:f6:64:9d:00:75:3e:4c:cd:55:8e: 9e:02:72:a9:2e:0f:13:a6:bb:17:fc:e4:8d:55:47:eb:ec:63: 0c:fe:e1:6e:38:83:27:fc:ff:dc:56:55:0f:fb:ad:92:3a:92: 08:c9:cb:98:03:d6:e0:b7:81:8c:24:49:43:09:eb:e1:dc:48: 51:80:f3:6f:b9:ce:b2:7d:03:b3:ed:8b:ed:3e:48:bd:28:ec: 41:b1:dd:f7:41:22:12:8b:c6:94:d9:6b:3c:1c:f6:68:5c:57: 43:7a:79:5d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3RjUxMTAvBgNVBAUTKDM2ODczM0ZEQzU2MEM1RUI4OUU0NTI0MERGN0Q0MDM5 Q0IyRjYxMDgwHhcNMjQxMjAzMDIwNTI3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRlNjc2Ny1mY2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7HuW06K7ARXqK+G6bLB5F/guSO3BNSf+449SYSWykcIC0fMiU4xrA60282o2 iEap19luYPLjPCk01OfW5BmxjPz6t5PZGkU4oyO+z53h6eVvg/9+dYi233QC+GOE xcGhV8nj6AM1DMPo+KkMd0750VBmp7HyCh9hdbqwBl9Zbz/hJTz2HzN5UKORh4RI 4jnPMZyXrbsRKU7Yn2FtQhwAxjYWzEbb2l0VRKVpGvb9Y5eU+uNoK8WqHob69QyG Z2qk+1lQhytzB7o8aA24CJZgMCPiTBeREf7A6EcOiCj6ExtS+9SAbOHO/5qwMb8d 2W3bcDiA+hUL2w+DF6Mw28xu4wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPWrSY8Y VEmEmdfhTIFxctVPQ/FlMB8GA1UdIwQYMBaAFDaHM/3FYMXrieRSQN99QDnLL2EI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTdGNS85MTcwQzQyQTI3 NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hldUo1RkpBMzMxQU9jc3ZZ UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05vY3pfY1ZneGV1SjVGSkEzMzFBT2NzdllRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk3RjUvOTE3MEM0MkEyNzQ0MTFFRDhDMTM5QjUxQzRGOUFFMDIvMDIwRDQ5RTAy ODMyMTFFRDlFMjlGQTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn8iADBARxNAAwDQYJKoZIhvcNAQELBQADggEBAAcXQA6s 6DAX0lI8If/lKkkEBE327wegjw7JUScZwQa8hvChwiBUptQUiY0PyjriJpcZvE1e W1zcENicCmXnA0lnDWjqXGA1Msx8nUGf/Qf3KQwYhp+q9N4DJO2ELnk8kftGTytx 6RxfYeTXsEdJdVhhBA6ZfQbi3uSMR4pWM790sktP/oKsDdtTZisTHV4un+j8anUl Rjx29mSdAHU+TM1Vjp4CcqkuDxOmuxf85I1VR+vsYwz+4W44gyf8/9xWVQ/7rZI6 kgjJy5gD1uC3gYwkSUMJ6+HcSFGA82+5zrJ9A7Pti+0+SL0o7EGx3fdBIhKLxpTZ azwc9mhcV0N6eV0= -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:33 2025 by rpki-client