$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/1777F060A7CE11E980B87114C4F9AE02.roa File: 1777F060A7CE11E980B87114C4F9AE02.roa (raw, json) Hash identifier: HeL3v4bVI9uczPOUq41UBh1VIigK//d/8NJCyMV1Esw= Subject key identifier: 42:6D:EC:D6:FF:F1:90:BF:02:7A:3A:47:4B:62:0A:1E:0E:5A:05:32 Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C Certificate serial: 0FAF Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/1777F060A7CE11E980B87114C4F9AE02.roa Signing time: Fri 02 May 2025 17:57:37 +0000 ROA not before: Fri 02 May 2025 17:57:37 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139240 IP address blocks: 103.139.90.0/24 maxlen: 24 2404:bb41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4015 (0xfaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C Validity Not Before: May 2 17:57:37 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68150791-b90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:27:4c:dd:7c:5b:63:76:8f:28:2b:a4:66:2f: 9f:40:d5:84:11:86:1d:c6:4a:ed:ec:cf:39:12:7e: f1:cd:35:fd:6c:d6:4b:95:64:f7:1b:dd:14:99:4b: e1:f9:5e:18:05:b6:cc:3a:6b:9f:6f:59:37:40:b6: f2:d4:75:bf:a1:e3:88:3e:d5:0a:da:48:db:f9:74: 32:1a:95:63:96:99:bc:82:9f:a3:46:88:8a:60:c7: c7:ae:5d:76:04:31:9f:50:a7:93:95:54:dc:b5:9c: af:f4:7a:cd:e1:6a:2f:8d:7f:01:10:22:9b:88:ca: 8f:43:c7:aa:a3:ac:39:bb:14:21:4a:91:69:53:0b: f4:c0:e8:2b:fe:1c:f8:10:a4:03:e5:e7:3d:0d:44: 7a:80:87:0a:bf:01:3c:0f:5d:41:a8:df:53:b4:59: 1d:ff:b8:65:d9:b8:72:4b:7a:74:cb:2e:a5:4b:07: 50:85:e1:09:24:3c:38:6f:13:54:3c:a6:8e:94:60: d0:b3:43:95:12:76:12:d4:9d:22:d9:3f:fc:92:3e: e3:ba:29:54:0f:34:61:c4:5b:02:01:e8:0f:dc:42: cf:ed:ca:22:68:3c:44:d4:d1:c9:b1:13:4d:a2:dd: 3b:6d:2e:af:d1:a8:19:1c:8c:e9:d3:3a:c5:c0:df: 9e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6D:EC:D6:FF:F1:90:BF:02:7A:3A:47:4B:62:0A:1E:0E:5A:05:32 X509v3 Authority Key Identifier: keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/1777F060A7CE11E980B87114C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.90.0/24 IPv6: 2404:bb41::/32 Signature Algorithm: sha256WithRSAEncryption 8f:47:6d:29:ea:dd:cb:32:35:18:bb:78:b5:28:6c:aa:fd:6a: 88:ee:00:5c:cd:28:c3:ad:3b:1f:58:d6:62:52:cc:62:d3:f4: 0e:bf:be:df:a5:b0:c0:a8:9b:b4:17:32:7b:cc:26:f0:e0:26: a3:04:02:e2:82:b7:3c:bb:37:0f:98:2c:9b:f0:b4:92:0e:6c: dd:1b:fc:be:1c:3b:f6:e5:7f:db:ae:27:89:ee:e0:55:a2:eb: a3:a1:14:8b:9b:4a:60:48:fe:c7:04:e4:4c:c7:d2:49:80:f1: 72:00:bd:0f:c2:e4:ed:2c:39:47:0d:a7:b7:09:27:02:7e:9a: 58:36:18:58:8e:2a:f7:d9:41:49:64:09:74:ed:85:00:e5:2c: b7:67:33:7c:d2:42:de:f3:98:bc:48:63:1c:0f:c4:70:55:b2: e9:56:a4:a1:76:13:46:38:0c:3f:69:83:dd:69:5a:4c:0e:4b: f1:a2:55:23:f3:29:ce:24:54:74:2b:5f:85:20:b1:8b:63:41: 13:ef:cd:af:d9:3c:da:2c:af:88:83:c6:8c:10:72:fd:33:bd: 55:3d:4a:ed:32:52:bc:a8:56:bf:2f:92:c1:04:b8:d3:5f:07: 73:14:fd:22:39:ff:42:21:80:f4:50:9d:79:4f:9b:97:e8:28: 18:45:a3:18 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICD68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RTgxMTAvBgNVBAUTKDMwMjczMDgxNTkxNTE5NDFBQjczNEM3MjA2MTdERjdG RENDMjQxMEMwHhcNMjUwNTAyMTc1NzM3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1MDc5MS1iOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CdM3XxbY3aPKCukZi+fQNWEEYYdxkrt7M85En7xzTX9bNZLlWT3G90UmUvh +V4YBbbMOmufb1k3QLby1HW/oeOIPtUK2kjb+XQyGpVjlpm8gp+jRoiKYMfHrl12 BDGfUKeTlVTctZyv9HrN4WovjX8BECKbiMqPQ8eqo6w5uxQhSpFpUwv0wOgr/hz4 EKQD5ec9DUR6gIcKvwE8D11BqN9TtFkd/7hl2bhyS3p0yy6lSwdQheEJJDw4bxNU PKaOlGDQs0OVEnYS1J0i2T/8kj7juilUDzRhxFsCAegP3ELP7coiaDxE1NHJsRNN ot07bS6v0agZHIzp0zrFwN+ecQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEJt7Nb/ 8ZC/Ano6R0tiCh4OWgUyMB8GA1UdIwQYMBaAFDAnMIFZFRlBq3NMcgYX33/cwkEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdFOC9GMTZFMTg1NjVD NTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdVR3JjMHh5QmhmZmY5ekNR UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01DY3dnVmtWR1VHcmMweHlCaGZmZjl6Q1FRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE3RTgvRjE2RTE4NTY1QzUzMTFFOTlBQjVDRjY4QzRGOUFFMDIvMTc3N0YwNjBB N0NFMTFFOTgwQjg3MTE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABni1owDQQCAAIwBwMFACQEu0EwDQYJKoZIhvcNAQELBQAD ggEBAI9HbSnq3csyNRi7eLUobKr9aojuAFzNKMOtOx9Y1mJSzGLT9A6/vt+lsMCo m7QXMnvMJvDgJqMEAuKCtzy7Nw+YLJvwtJIObN0b/L4cO/blf9uuJ4nu4FWi66Oh FIubSmBI/scE5EzH0kmA8XIAvQ/C5O0sOUcNp7cJJwJ+mlg2GFiOKvfZQUlkCXTt hQDlLLdnM3zSQt7zmLxIYxwPxHBVsulWpKF2E0Y4DD9pg91pWkwOS/GiVSPzKc4k VHQrX4UgsYtjQRPvza/ZPNosr4iDxowQcv0zvVU9Su0yUryoVr8vksEEuNNfB3MU /SI5/0IhgPRQnXlPm5foKBhFoxg= -----END CERTIFICATE-----Generated at Fri Jun 13 06:11:46 2025 by rpki-client