$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/AFD61B9C36A311F08A82A258C4F9AE02.roa File: AFD61B9C36A311F08A82A258C4F9AE02.roa (raw, json) Hash identifier: +g7S+aP+gP5OGD63E2pSF3uq07V8a/AIOEKK09wzFAU= Subject key identifier: 0D:B2:E5:52:15:6A:70:6F:72:AB:73:D0:AF:B7:C8:23:E9:0C:68:06 Certificate issuer: /CN=A91CB3FE/serialNumber=AFF8777218753585C388E9B81C39066BD38DB592 Certificate serial: 05 Authority key identifier: AF:F8:77:72:18:75:35:85:C3:88:E9:B8:1C:39:06:6B:D3:8D:B5:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/AFD61B9C36A311F08A82A258C4F9AE02.roa Signing time: Mon 26 May 2025 05:47:19 +0000 ROA not before: Mon 26 May 2025 05:47:19 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 137965 IP address blocks: 103.118.120.0/24 maxlen: 24 2001:df5:cb00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.crl rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 08:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB3FE, serialNumber=AFF8777218753585C388E9B81C39066BD38DB592 Validity Not Before: May 26 05:47:19 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=68340066-ecd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:13:fd:41:dd:ae:2b:31:be:96:de:fa:da:7a: 83:22:3c:53:b0:bb:cb:bf:54:10:eb:4f:e4:60:d5: 19:08:e7:c8:54:5e:c7:5e:22:26:af:c2:03:45:f6: fc:4d:95:f5:9b:f6:9a:75:2d:50:af:15:68:18:39: e2:9d:f7:42:8f:76:41:52:ab:3a:04:b6:bc:b8:91: 8d:19:5d:29:31:1e:b7:0e:a6:d6:74:32:7a:f0:06: 2f:8c:40:90:bd:bf:75:21:1f:2b:c4:67:bd:2c:f7: 50:2d:f6:3c:0a:7a:a0:49:be:20:df:a6:2d:5e:31: af:4d:82:34:b4:2b:f9:e0:3d:d8:48:3d:02:82:d1: a0:ab:e6:59:b9:53:33:50:92:c8:f6:8e:7e:4f:44: 54:2c:0b:3e:62:0d:e9:bb:86:58:2e:77:6d:06:f9: 61:48:9a:2e:99:34:af:7a:0f:19:98:f5:7a:51:3f: 47:fe:bc:7d:f6:bd:f6:a5:80:aa:26:bf:51:4c:02: 8a:74:d2:64:10:dc:11:12:a0:d6:4f:79:31:4d:fd: 96:3d:2b:03:53:f2:f6:1d:4e:e2:80:d6:24:d2:df: e7:20:c4:a1:21:0a:ea:10:f9:d2:9d:8c:76:70:1d: 1b:d2:cf:b0:cf:5d:dc:d2:7d:46:26:7b:79:cd:e6: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B2:E5:52:15:6A:70:6F:72:AB:73:D0:AF:B7:C8:23:E9:0C:68:06 X509v3 Authority Key Identifier: keyid:AF:F8:77:72:18:75:35:85:C3:88:E9:B8:1C:39:06:6B:D3:8D:B5:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/AFD61B9C36A311F08A82A258C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.118.120.0/24 IPv6: 2001:df5:cb00::/48 Signature Algorithm: sha256WithRSAEncryption a3:03:10:e6:69:54:fe:21:5d:99:3e:33:b2:02:0f:dc:99:0d: d9:dc:7a:f9:5d:26:a9:bb:21:59:62:01:b6:49:24:73:1b:75: 80:59:ef:1c:54:d2:4c:c0:a7:ab:52:da:21:b4:86:9d:33:00: f2:39:9d:96:ba:68:6e:33:0b:01:24:5e:37:60:51:fb:82:ec: ad:d3:30:65:75:1c:0a:14:c3:3a:96:0b:06:cf:0a:07:91:ff: 3d:1a:f4:98:bf:17:ff:57:48:d5:6e:52:24:ce:89:76:9e:46: 0c:b5:20:f1:58:09:b6:07:c0:d4:25:f3:a1:e1:bb:83:db:ee: c3:ce:82:1f:2b:0d:0d:58:e2:cd:96:fb:0a:95:5a:de:5c:0f: 7b:a3:4d:cd:73:6c:47:cd:6b:6e:c9:0f:e3:b5:b2:36:ce:1e: 65:fe:3d:01:78:14:d6:23:e0:7f:4b:0e:67:0c:e1:83:c6:45: d0:6b:20:6b:b3:f5:b7:59:99:42:60:5e:e6:b4:29:e2:f5:66: e7:4c:8b:77:3e:51:54:93:e4:c3:f7:e9:fa:c8:e5:13:07:43: 99:5e:7e:32:4e:5d:19:76:bd:2c:c7:71:6c:fa:ee:f9:48:ef: 8b:8d:0c:b4:19:ee:96:86:e3:d8:a4:bb:3c:68:59:a1:61:78: 63:58:83:04 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjNGRTExMC8GA1UEBRMoQUZGODc3NzIxODc1MzU4NUMzODhFOUI4MUMzOTA2NkJE MzhEQjU5MjAeFw0yNTA1MjYwNTQ3MTlaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MzQwMDY2LWVjZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7E/1B3a4rMb6W3vraeoMiPFOwu8u/VBDrT+Rg1RkI58hUXsdeIiavwgNF9vxN lfWb9pp1LVCvFWgYOeKd90KPdkFSqzoEtry4kY0ZXSkxHrcOptZ0MnrwBi+MQJC9 v3UhHyvEZ70s91At9jwKeqBJviDfpi1eMa9NgjS0K/ngPdhIPQKC0aCr5lm5UzNQ ksj2jn5PRFQsCz5iDem7hlgud20G+WFImi6ZNK96DxmY9XpRP0f+vH32vfalgKom v1FMAop00mQQ3BESoNZPeTFN/ZY9KwNT8vYdTuKA1iTS3+cgxKEhCuoQ+dKdjHZw HRvSz7DPXdzSfUYme3nN5uZRAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUDbLlUhVq cG9yq3PQr7fII+kMaAYwHwYDVR0jBBgwFoAUr/h3chh1NYXDiOm4HDkGa9ONtZIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCM0ZFLzJBNTY4NzgyMzZB MjExRjA4OTdCNEIzQ0M0RjlBRTAyL3JfaDNjaGgxTllYRGlPbTRIRGtHYTlPTnRa SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcl9oM2NoaDFOWVhEaU9tNEhEa0dhOU9OdFpJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjNGRS8yQTU2ODc4MjM2QTIxMUYwODk3QjRCM0NDNEY5QUUwMi9BRkQ2MUI5QzM2 QTMxMUYwOEE4MkEyNThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAGd2eDAPBAIAAjAJAwcAIAEN9csAMA0GCSqGSIb3DQEBCwUA A4IBAQCjAxDmaVT+IV2ZPjOyAg/cmQ3Z3Hr5XSapuyFZYgG2SSRzG3WAWe8cVNJM wKerUtohtIadMwDyOZ2WumhuMwsBJF43YFH7guyt0zBldRwKFMM6lgsGzwoHkf89 GvSYvxf/V0jVblIkzol2nkYMtSDxWAm2B8DUJfOh4buD2+7DzoIfKw0NWOLNlvsK lVreXA97o03Nc2xHzWtuyQ/jtbI2zh5l/j0BeBTWI+B/Sw5nDOGDxkXQayBrs/W3 WZlCYF7mtCni9WbnTIt3PlFUk+TD9+n6yOUTB0OZXn4yTl0Zdr0sx3Fs+u75SO+L jQy0Ge6WhuPYpLs8aFmhYXhjWIME -----END CERTIFICATE-----Generated at Wed Jun 4 00:01:17 2025 by rpki-client