$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/D9C4471C32D911F0B3466E0BC4F9AE02.roa File: D9C4471C32D911F0B3466E0BC4F9AE02.roa (raw, json) Hash identifier: U/d/s1JPgH6gkVuyhkfdGVpBevwlUKHBGV5SdR1gD64= Subject key identifier: E5:53:9A:5A:C1:15:46:7D:A2:99:33:8D:97:F1:DC:92:99:BE:4B:0D Certificate issuer: /CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407 Certificate serial: 17B4 Authority key identifier: 3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/D9C4471C32D911F0B3466E0BC4F9AE02.roa Signing time: Sat 17 May 2025 04:46:09 +0000 ROA not before: Sat 17 May 2025 04:46:09 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153800 IP address blocks: 103.158.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6068 (0x17b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD4DB, serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407 Validity Not Before: May 17 04:46:09 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=68281491-cb30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:9a:3e:60:cf:67:1f:b1:70:75:32:54:1f: ff:72:81:14:61:b4:03:39:47:1d:73:b6:cb:c1:45: 4e:5b:07:2a:72:02:eb:47:13:65:d6:24:12:14:24: 36:a8:2c:3d:51:a7:38:85:4d:52:69:4a:f6:fc:f2: 8f:ea:5e:c6:bc:1d:48:3e:2f:c2:d6:e4:82:17:a4: 39:4b:07:8c:bf:1c:25:30:1d:91:4f:57:d4:1a:cf: 74:a0:7b:da:a5:89:e8:96:05:2e:46:0a:ac:3e:89: d9:ba:a6:16:5a:d8:ab:ce:78:b5:66:d3:44:98:61: 0a:b0:e6:7a:97:55:42:ed:25:30:fd:b3:30:1f:a3: 21:1e:d8:f6:d4:85:41:51:91:8b:c4:da:86:47:f2: 6b:f0:19:0f:06:26:56:b0:93:e5:cb:31:cc:66:f3: 51:8b:7f:8c:11:80:fd:68:9f:e4:4c:89:d2:71:ba: 19:97:66:8d:2c:23:79:42:67:05:67:ec:80:2d:93: 70:a0:d1:46:00:82:53:71:b1:d8:7b:53:23:9d:df: 45:50:ba:66:7a:ff:d8:0c:c0:49:08:98:2b:c4:4e: e7:df:ca:09:53:27:f8:36:f8:89:a3:5f:5d:b7:58: 73:2f:b2:79:00:10:28:ac:76:4c:a2:b6:bc:bd:6e: e4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:53:9A:5A:C1:15:46:7D:A2:99:33:8D:97:F1:DC:92:99:BE:4B:0D X509v3 Authority Key Identifier: keyid:3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/D9C4471C32D911F0B3466E0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.38.0/24 Signature Algorithm: sha256WithRSAEncryption 57:47:6b:61:68:7e:45:b5:2b:bc:2f:ea:5a:2a:8d:a6:24:52: a0:02:73:9e:b2:20:cd:70:c1:e3:d5:77:93:fa:a7:de:ee:d3: 7f:f7:7f:c4:ff:1b:64:76:b6:b4:84:b6:ff:93:d9:0b:19:6f: 62:5f:c4:ab:54:30:cb:58:30:e7:25:ce:d3:bd:b2:19:05:49: 7d:a2:db:f4:be:e6:b0:22:af:8f:48:bb:a1:9a:b1:ed:e7:e0: b3:eb:db:1b:af:5f:c6:92:9f:06:89:48:39:e8:33:cb:a5:7b: f8:4d:dc:16:1a:dc:8e:ed:eb:1e:40:6e:da:fa:18:8a:bd:42: 57:c1:22:50:1f:5b:de:01:96:a1:f7:9a:6d:0e:26:ba:6b:c2: 0b:a4:26:f3:48:92:f8:e7:f0:33:b3:99:e4:c6:9b:3d:5f:cb: e1:a2:78:8b:a2:91:30:35:90:5b:d0:d3:ae:2c:d9:e3:70:6d: 4a:a5:dc:7c:63:fe:b4:90:c8:a0:f2:05:77:7e:fa:6a:e6:b0: d1:ba:d4:f1:ab:aa:c5:a8:e2:05:5e:ef:73:a7:20:b2:07:d1: e1:2a:6c:73:4b:7b:b0:cf:1b:3b:2b:29:d9:1f:65:22:98:0a: 3d:a6:1e:f2:88:ed:92:f0:7c:cf:72:c3:b6:3b:22:c8:e5:49: 56:4a:26:cc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICF7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q0REIxMTAvBgNVBAUTKDNGQjc4NTVFRjMzMEJBNzdEOUYzQjcyREZGREVDMjA3 MTJBQzE0MDcwHhcNMjUwNTE3MDQ0NjA5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI4MTQ5MS1jYjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtl6aPmDPZx+xcHUyVB//coEUYbQDOUcdc7bLwUVOWwcqcgLrRxNl1iQSFCQ2 qCw9Uac4hU1SaUr2/PKP6l7GvB1IPi/C1uSCF6Q5SweMvxwlMB2RT1fUGs90oHva pYnolgUuRgqsPonZuqYWWtirzni1ZtNEmGEKsOZ6l1VC7SUw/bMwH6MhHtj21IVB UZGLxNqGR/Jr8BkPBiZWsJPlyzHMZvNRi3+MEYD9aJ/kTInScboZl2aNLCN5QmcF Z+yALZNwoNFGAIJTcbHYe1Mjnd9FULpmev/YDMBJCJgrxE7n38oJUyf4NviJo19d t1hzL7J5ABAorHZMora8vW7kkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOVTmlrB FUZ9opkzjZfx3JKZvksNMB8GA1UdIwQYMBaAFD+3hV7zMLp32fO3Lf/ewgcSrBQH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDREQi8zQTMxNURDRUNE MDIxMUU3QjA0NDJEMjhDNEY5QUUwMi9QN2VGWHZNd3VuZlo4N2N0Xzk3Q0J4S3NG QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3ZUZYdk13dW5mWjg3Y3RfOTdDQnhLc0ZBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Q0REIvM0EzMTVEQ0VDRDAyMTFFN0IwNDQyRDI4QzRGOUFFMDIvRDlDNDQ3MUMz MkQ5MTFGMEIzNDY2RTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnniYwDQYJKoZIhvcNAQELBQADggEBAFdHa2FofkW1K7wv 6loqjaYkUqACc56yIM1wwePVd5P6p97u03/3f8T/G2R2trSEtv+T2QsZb2JfxKtU MMtYMOclztO9shkFSX2i2/S+5rAir49Iu6Gase3n4LPr2xuvX8aSnwaJSDnoM8ul e/hN3BYa3I7t6x5Abtr6GIq9QlfBIlAfW94BlqH3mm0OJrprwgukJvNIkvjn8DOz meTGmz1fy+GieIuikTA1kFvQ064s2eNwbUql3Hxj/rSQyKDyBXd++mrmsNG61PGr qsWo4gVe73OnILIH0eEqbHNLe7DPGzsrKdkfZSKYCj2mHvKI7ZLwfM9yw7Y7Isjl SVZKJsw= -----END CERTIFICATE-----Generated at Tue Jun 3 23:52:30 2025 by rpki-client