$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/43E961E013E711EE8ECA2D3CC4F9AE02.roa File: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (raw, json) Hash identifier: +KpPTrvUJ0fhW59fFGMaGeaxnMDX3lJjTA7XrEuSgaw= Subject key identifier: C4:C1:A8:D0:7E:C5:01:7E:01:A5:48:CD:A2:FB:FC:35:E2:B2:2C:CC Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 01AB Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/43E961E013E711EE8ECA2D3CC4F9AE02.roa Signing time: Sun 01 Jun 2025 04:00:17 +0000 ROA not before: Sun 01 Jun 2025 04:00:16 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 9335 IP address blocks: 103.114.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: Jun 1 04:00:16 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=683bd050-d8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:72:d7:6d:cd:db:34:11:88:d0:c7:a1:78:7d: 65:be:b8:47:6b:df:1b:a7:52:99:70:3b:7b:6d:52: 72:aa:ab:8c:cd:89:c6:2c:a0:16:42:7b:36:ea:3f: 60:5b:e3:dc:8d:52:18:4b:b0:e3:e3:5b:dc:2f:67: 66:5e:5c:dc:79:9e:22:ef:60:2a:1f:80:e2:bf:dc: 2e:c0:7f:c6:b9:78:a7:77:74:11:71:43:1f:e7:3e: 27:4b:d2:42:92:b3:59:cf:1c:84:d6:26:eb:45:84: b9:ff:ae:58:2f:94:f9:4b:fe:ca:17:d0:1e:9d:37: 97:cd:53:a9:59:7c:92:67:33:fb:9a:6d:b0:57:7a: fd:82:00:15:51:16:36:29:cb:f8:48:ef:a2:7e:10: f5:3d:46:f2:30:d3:35:66:16:73:cb:10:18:3b:7c: 5f:6d:09:aa:90:54:32:64:f5:d6:2f:d5:80:f4:09: 16:87:4d:81:f6:70:f0:c1:77:4e:86:0e:f3:b3:a6: 2b:ee:68:75:a2:d0:3a:5c:de:96:29:49:48:ad:8e: 80:d6:68:85:d9:32:d2:cb:05:fc:37:60:0b:b1:48: 12:b3:78:6b:d6:1a:47:43:1e:e7:12:5e:b7:27:48: c5:b9:b7:9b:33:f5:73:af:0d:2d:b9:ec:0f:c4:e4: 5b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C1:A8:D0:7E:C5:01:7E:01:A5:48:CD:A2:FB:FC:35:E2:B2:2C:CC X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/43E961E013E711EE8ECA2D3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.114.200.0/22 Signature Algorithm: sha256WithRSAEncryption 26:4f:93:85:a5:f3:56:c0:c9:17:ba:85:57:81:ce:da:b0:fc: b4:f1:bd:73:72:3e:01:ba:2c:e3:c9:ea:0f:ee:b6:37:80:24: 05:d5:d1:52:33:c7:51:13:66:d4:9a:77:b8:f8:1d:9d:22:bd: 44:b8:23:b3:54:58:9b:23:63:4d:cc:34:9b:c6:c7:48:ae:ea: e9:45:83:2c:ab:a2:de:99:2e:74:4f:f0:0e:eb:cb:f9:82:b5: 17:12:69:80:71:e5:92:82:65:f5:d9:f6:93:c2:1c:be:69:19: d8:d5:24:0f:18:9a:53:10:49:20:b4:5e:75:7e:db:35:94:62: cb:58:ee:1c:e9:14:58:ac:d6:e2:80:37:87:51:d3:89:e7:81: 43:33:2d:df:13:b2:a1:5d:05:47:0a:2e:d1:9d:99:a9:7f:7e: 1a:33:ac:cc:c3:e1:85:ed:93:30:6f:25:51:af:10:b4:a8:35: d5:be:bb:3d:e6:9c:ff:10:83:c4:0e:cc:04:c0:97:3d:87:ab: 90:7a:01:05:e3:67:fb:bc:31:56:1a:ca:49:02:2c:77:10:86: a7:78:d5:74:ae:51:f6:3c:e4:e1:45:9a:68:96:3b:79:b7:0f: 6b:ff:0c:5f:a7:70:76:d7:54:e8:f7:a1:51:07:94:61:24:54: ee:6a:df:c1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjUwNjAxMDQwMDE2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNiZDA1MC1kOGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5nLXbc3bNBGI0MeheH1lvrhHa98bp1KZcDt7bVJyqquMzYnGLKAWQns26j9g W+PcjVIYS7Dj41vcL2dmXlzceZ4i72AqH4Div9wuwH/GuXind3QRcUMf5z4nS9JC krNZzxyE1ibrRYS5/65YL5T5S/7KF9AenTeXzVOpWXySZzP7mm2wV3r9ggAVURY2 Kcv4SO+ifhD1PUbyMNM1ZhZzyxAYO3xfbQmqkFQyZPXWL9WA9AkWh02B9nDwwXdO hg7zs6Yr7mh1otA6XN6WKUlIrY6A1miF2TLSywX8N2ALsUgSs3hr1hpHQx7nEl63 J0jFubebM/Vzrw0tuewPxORb7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMTBqNB+ xQF+AaVIzaL7/DXisizMMB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZBOEUvNjFCQUQ4RTBGODdFMTFFRDkwRDg0NDVDQzRGOUFFMDIvNDNFOTYxRTAx M0U3MTFFRThFQ0EyRDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJncsgwDQYJKoZIhvcNAQELBQADggEBACZPk4Wl81bAyRe6 hVeBztqw/LTxvXNyPgG6LOPJ6g/utjeAJAXV0VIzx1ETZtSad7j4HZ0ivUS4I7NU WJsjY03MNJvGx0iu6ulFgyyrot6ZLnRP8A7ry/mCtRcSaYBx5ZKCZfXZ9pPCHL5p GdjVJA8YmlMQSSC0XnV+2zWUYstY7hzpFFis1uKAN4dR04nngUMzLd8TsqFdBUcK LtGdmal/fhozrMzD4YXtkzBvJVGvELSoNdW+uz3mnP8Qg8QOzATAlz2Hq5B6AQXj Z/u8MVYaykkCLHcQhqd41XSuUfY85OFFmmiWO3m3D2v/DF+ncHbXVOj3oVEHlGEk VO5q38E= -----END CERTIFICATE-----Generated at Mon Jun 2 07:09:38 2025 by rpki-client