$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/2815D106041A11EEA67A6B4DC4F9AE02.roa File: 2815D106041A11EEA67A6B4DC4F9AE02.roa (raw, json) Hash identifier: SwrvoVYgU6/JlbNtHbJmqe4zyeb9jSsFgyQPBZNxoww= Subject key identifier: BF:FF:7C:6C:5B:38:65:63:57:E9:EE:1D:D8:56:C4:CD:08:ED:C7:69 Certificate issuer: /CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Certificate serial: 0172 Authority key identifier: 09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/2815D106041A11EEA67A6B4DC4F9AE02.roa Signing time: Wed 21 May 2025 03:02:59 +0000 ROA not before: Wed 21 May 2025 03:02:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141730 IP address blocks: 103.148.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 03:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDAFB, serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Validity Not Before: May 21 03:02:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=682d4263-af3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3b:f8:ac:80:25:52:33:c7:76:ff:18:68:22: 42:33:55:69:4a:9b:12:c3:d9:74:1a:f8:d1:73:6c: 54:69:b1:49:07:0e:b8:b7:1d:a4:03:d2:98:37:24: 82:c5:b5:f3:b4:8c:32:43:52:3d:3c:bd:4f:54:e7: 26:74:1b:cf:e8:e5:46:c3:7f:b3:bc:53:70:1b:a4: 04:ca:fd:65:8d:5e:2e:04:ff:f8:b9:2e:9f:c5:ae: e4:c5:18:33:ea:7f:9a:0f:91:2a:42:ca:17:29:28: 25:78:0c:5c:27:37:03:6b:f0:6a:2e:2c:c6:cb:ed: a0:16:80:5c:b6:2a:8a:aa:48:44:5c:40:51:27:88: 58:7c:2d:9b:56:98:e8:b0:45:ee:9a:82:62:bb:d3: 57:3a:c3:2c:7e:18:2d:28:26:e9:69:2a:39:e3:4a: fd:93:c4:a4:1c:7a:cd:37:28:f3:e6:d5:78:1c:5c: e3:30:dc:bf:62:c7:c6:01:62:9b:5d:e2:ac:e2:a9: ed:2e:ea:bf:cb:7c:55:71:52:b7:a9:e1:2d:6d:c9: 3e:9a:c2:dd:62:38:51:63:13:3f:80:31:c1:47:2c: fa:9e:22:09:bb:66:38:8d:74:63:89:c8:0c:20:e8: 70:ac:f0:22:fe:7b:38:29:79:a5:b7:77:a6:da:98: 4e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FF:7C:6C:5B:38:65:63:57:E9:EE:1D:D8:56:C4:CD:08:ED:C7:69 X509v3 Authority Key Identifier: keyid:09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/2815D106041A11EEA67A6B4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.106.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:74:f9:39:0e:77:a1:e0:20:2c:19:3a:a0:4a:ee:f4:60:31: f4:15:b5:46:d9:c7:ed:b3:5c:e0:07:f2:99:21:57:44:d1:dd: c7:86:58:50:d5:ef:81:52:fc:a1:60:b2:6c:3a:40:75:a7:35: 95:d7:d6:71:41:22:9d:46:a1:01:bb:93:d8:17:bd:80:05:0b: 3d:6b:f1:a4:cf:dc:c5:d9:5f:98:10:b6:a5:92:95:a5:1e:10: 82:20:a2:5f:45:bd:fe:57:8a:0b:44:c5:a8:92:44:a3:a4:38: 03:8c:7f:77:a3:c6:48:d1:81:e8:95:a1:39:18:cd:f3:88:54: 7e:59:70:97:c0:4a:ac:fe:f3:a7:11:7f:4a:df:ac:ca:f6:38: 8e:37:87:0a:00:4b:44:65:c3:91:5d:88:ca:22:10:49:90:b3: cd:1b:f2:93:58:c4:10:7e:c0:9a:53:c6:52:66:b5:ea:f0:53: 63:83:8a:fe:c5:6e:72:4b:f2:87:e2:15:49:67:0f:75:30:e9: f1:29:58:be:eb:a9:85:23:d9:b3:2c:99:87:06:02:1d:57:6b: 77:b4:c8:c7:8c:44:33:2f:16:8e:78:ec:e1:5f:2e:cc:c5:2b: 88:85:64:24:36:7d:fc:5a:35:e5:a4:fe:ec:8d:99:02:b0:6d: 77:47:52:e9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RBRkIxMTAvBgNVBAUTKDA5RTkwNTc3NDdGNjNCQTBBMjgxQUU3ODAxMzY2OENF REVBNDBBQjQwHhcNMjUwNTIxMDMwMjU5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJkNDI2My1hZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjv4rIAlUjPHdv8YaCJCM1VpSpsSw9l0GvjRc2xUabFJBw64tx2kA9KYNySC xbXztIwyQ1I9PL1PVOcmdBvP6OVGw3+zvFNwG6QEyv1ljV4uBP/4uS6fxa7kxRgz 6n+aD5EqQsoXKSgleAxcJzcDa/BqLizGy+2gFoBctiqKqkhEXEBRJ4hYfC2bVpjo sEXumoJiu9NXOsMsfhgtKCbpaSo540r9k8SkHHrNNyjz5tV4HFzjMNy/YsfGAWKb XeKs4qntLuq/y3xVcVK3qeEtbck+msLdYjhRYxM/gDHBRyz6niIJu2Y4jXRjicgM IOhwrPAi/ns4KXmlt3em2phOvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL//fGxb OGVjV+nuHdhWxM0I7cdpMB8GA1UdIwQYMBaAFAnpBXdH9jugooGueAE2aM7epAq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREFGQi9FQzBGNkEzODAz NDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82Q2lnYTU0QVRab3p0NmtD clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nla0ZkMGYyTzZDaWdhNTRBVFpvenQ2a0NyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0RBRkIvRUMwRjZBMzgwMzQxMTFFRUE1MjE1MjQ3QzRGOUFFMDIvMjgxNUQxMDYw NDFBMTFFRUE2N0E2QjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlGowDQYJKoZIhvcNAQELBQADggEBAA10+TkOd6HgICwZ OqBK7vRgMfQVtUbZx+2zXOAH8pkhV0TR3ceGWFDV74FS/KFgsmw6QHWnNZXX1nFB Ip1GoQG7k9gXvYAFCz1r8aTP3MXZX5gQtqWSlaUeEIIgol9Fvf5XigtExaiSRKOk OAOMf3ejxkjRgeiVoTkYzfOIVH5ZcJfASqz+86cRf0rfrMr2OI43hwoAS0Rlw5Fd iMoiEEmQs80b8pNYxBB+wJpTxlJmterwU2ODiv7FbnJL8ofiFUlnD3Uw6fEpWL7r qYUj2bMsmYcGAh1Xa3e0yMeMRDMvFo547OFfLszFK4iFZCQ2ffxaNeWk/uyNmQKw bXdHUuk= -----END CERTIFICATE-----Generated at Wed Jun 4 00:07:39 2025 by rpki-client