$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/D24575B2D22E11EA9D4DDE29C4F9AE02.roa File: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (raw, json) Hash identifier: xQNJE/wFi8JMz2ss0ss1yj9BAf/VPU6rBNzmi8uV9UI= Subject key identifier: E7:5A:DF:50:20:4F:2E:59:23:EA:BE:CF:4A:0E:05:07:8F:7E:22:08 Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Certificate serial: 0834 Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/D24575B2D22E11EA9D4DDE29C4F9AE02.roa Signing time: Mon 02 Jun 2025 21:08:16 +0000 ROA not before: Mon 02 Jun 2025 21:08:16 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139067 IP address blocks: 103.139.62.0/24 maxlen: 24 103.210.224.0/24 maxlen: 24 2001:df0:6c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Validity Not Before: Jun 2 21:08:16 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683e12bf-d50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3d:85:b2:77:ad:13:9a:ac:78:01:2a:95:dc: 08:45:4a:e3:8d:c1:1e:eb:bf:ba:7a:47:ae:f0:af: c4:4e:6b:3d:a4:ac:2f:09:07:04:66:74:15:ca:8f: 76:ed:ac:3e:2c:bb:76:76:04:f2:78:df:09:dc:09: cb:89:3e:47:d6:10:de:83:b7:cd:f2:a9:42:d1:e7: 05:d4:dd:fe:8e:32:ff:ba:ed:50:ac:59:57:be:c3: 35:8d:fa:c0:85:d8:08:0a:de:a6:f5:82:5a:3e:4f: 3f:44:62:20:68:6a:e6:51:69:73:8e:b8:b2:5d:93: 27:50:68:74:4e:7d:35:31:b3:b8:62:03:8f:d6:8b: 82:e3:5b:86:6b:16:55:12:19:0a:c2:52:4d:08:dd: d2:5d:5c:0d:4a:a5:f0:2a:f5:c1:99:b4:01:a7:6c: a9:72:b8:02:da:8f:c3:78:27:84:0d:2b:b6:5b:78: 5c:e3:78:df:43:5c:f1:7c:3c:0f:22:3c:dc:86:98: c8:7c:c9:a2:f2:16:ea:e8:1a:32:3d:aa:92:6f:75: aa:e1:6b:6a:0e:7f:53:3b:0b:aa:b0:52:e8:32:d7: 6e:8a:21:4b:16:be:dd:77:73:14:81:c3:84:1b:81: 97:5d:c0:db:60:4a:45:de:c8:24:01:59:e4:25:8f: 38:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5A:DF:50:20:4F:2E:59:23:EA:BE:CF:4A:0E:05:07:8F:7E:22:08 X509v3 Authority Key Identifier: keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/D24575B2D22E11EA9D4DDE29C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.62.0/24 103.210.224.0/24 IPv6: 2001:df0:6c80::/48 Signature Algorithm: sha256WithRSAEncryption ac:d6:5b:a4:db:3a:2b:8e:0c:02:b3:5e:98:b2:9f:16:23:8d: ef:79:f3:75:3e:eb:9a:b4:03:21:81:92:b0:db:6f:12:6f:10: 73:21:a4:05:4e:1b:6a:c6:5f:2d:f7:fd:05:1b:ee:63:17:0f: 94:03:60:61:66:e1:5c:7f:5b:7b:16:93:d9:6e:76:16:71:bc: d1:1f:47:c8:a2:fc:82:03:d1:ef:12:5a:2d:5f:5d:c2:65:c4: 34:c1:82:63:6a:ed:9b:01:25:d3:4d:db:71:a9:85:68:a1:79: 98:49:a0:bc:43:41:91:8c:62:97:2c:66:1e:6b:b8:55:24:23: f9:c7:ad:9b:b1:27:c3:04:86:04:87:6c:8b:ae:27:fc:4f:be: 7c:85:c6:4e:39:57:fb:79:b1:a7:ac:f5:41:a5:a7:82:bd:24: 2f:02:e6:3f:2c:6d:53:57:59:92:43:8a:3e:9e:6b:9c:f1:82: 05:40:c2:7b:61:03:04:c6:14:e0:dd:3b:23:c3:ae:24:42:3c: 3a:9b:96:ac:2e:89:3a:e6:56:2a:0d:a5:68:f3:31:cb:a1:71: 94:55:a9:82:d2:02:15:4b:18:f8:cd:d6:55:9b:89:66:de:ee: e3:cc:81:4d:45:fd:b8:b6:c5:5c:a5:db:1b:d5:3e:c8:65:cf: 1d:3a:50:67 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3N0QxMTAvBgNVBAUTKDk4M0Q3ODMwMDJDNTREQThGOEE2RTI5NTgzOEI5Q0FG MDEzNjQzNTgwHhcNMjUwNjAyMjEwODE2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlMTJiZi1kNTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9T2FsnetE5qseAEqldwIRUrjjcEe67+6ekeu8K/ETms9pKwvCQcEZnQVyo92 7aw+LLt2dgTyeN8J3AnLiT5H1hDeg7fN8qlC0ecF1N3+jjL/uu1QrFlXvsM1jfrA hdgICt6m9YJaPk8/RGIgaGrmUWlzjriyXZMnUGh0Tn01MbO4YgOP1ouC41uGaxZV EhkKwlJNCN3SXVwNSqXwKvXBmbQBp2ypcrgC2o/DeCeEDSu2W3hc43jfQ1zxfDwP IjzchpjIfMmi8hbq6BoyPaqSb3Wq4WtqDn9TOwuqsFLoMtduiiFLFr7dd3MUgcOE G4GXXcDbYEpF3sgkAVnkJY84JQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFOda31Ag Ty5ZI+q+z0oOBQePfiIIMB8GA1UdIwQYMBaAFJg9eDACxU2o+KbilYOLnK8BNkNY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjc3RC8xMUUyNTlEMEQy MkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRhajRwdUtWZzR1Y3J3RTJR MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21EMTRNQUxGVGFqNHB1S1ZnNHVjcndFMlExZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Y3N0QvMTFFMjU5RDBEMjJEMTFFQThBRTczRDI3QzRGOUFFMDIvRDI0NTc1QjJE MjJFMTFFQTlENERERTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABniz4DBABn0uAwDwQCAAIwCQMHACABDfBsgDANBgkqhkiG 9w0BAQsFAAOCAQEArNZbpNs6K44MArNemLKfFiON73nzdT7rmrQDIYGSsNtvEm8Q cyGkBU4basZfLff9BRvuYxcPlANgYWbhXH9bexaT2W52FnG80R9HyKL8ggPR7xJa LV9dwmXENMGCY2rtmwEl003bcamFaKF5mEmgvENBkYxilyxmHmu4VSQj+cetm7En wwSGBIdsi64n/E++fIXGTjlX+3mxp6z1QaWngr0kLwLmPyxtU1dZkkOKPp5rnPGC BUDCe2EDBMYU4N07I8OuJEI8OpuWrC6JOuZWKg2laPMxy6FxlFWpgtICFUsY+M3W VZuJZt7u48yBTUX9uLbFXKXbG9U+yGXPHTpQZw== -----END CERTIFICATE-----Generated at Wed Jun 4 00:01:58 2025 by rpki-client