$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/B5A7B020DBDB11EB8EC1494EC4F9AE02.roa File: B5A7B020DBDB11EB8EC1494EC4F9AE02.roa (raw, json) Hash identifier: pYihusS4UyoIsK9PCzKPk27dDaihl6ZYHFqiCUhf6Dc= Subject key identifier: E9:1D:D9:94:00:45:43:A3:93:04:C0:9B:DE:32:B4:1D:06:45:C4:DF Certificate issuer: /CN=A91D4DC1/serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB Certificate serial: 057E Authority key identifier: 76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/B5A7B020DBDB11EB8EC1494EC4F9AE02.roa Signing time: Thu 22 May 2025 23:14:17 +0000 ROA not before: Thu 22 May 2025 23:14:17 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 58602 IP address blocks: 103.8.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4DC1, serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB Validity Not Before: May 22 23:14:17 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682fafc9-3533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:1a:93:ab:84:12:b1:ae:61:a5:3b:a3:ed: a0:31:45:59:c5:ae:b2:b6:8d:64:85:89:59:0e:4c: b2:d4:95:a6:47:5e:69:f0:3f:90:35:77:75:80:08: c0:cf:3f:97:18:62:c5:7e:45:77:1b:bd:68:aa:34: bf:31:5f:e5:b7:51:8a:28:98:72:a2:4c:1a:1b:fd: de:60:65:92:ef:c9:ff:fc:52:ee:4a:fe:f0:46:08: 86:9f:62:89:44:46:57:c3:a4:80:91:2b:88:09:8b: c0:66:cc:c1:ea:0c:5f:58:6d:62:8c:59:da:e4:b0: 04:4a:5f:5a:5d:fc:36:ba:5b:3c:12:58:a5:77:41: 38:2b:e3:d8:a4:1b:c6:e7:9a:a0:55:9d:14:c0:3b: 12:0b:1b:86:0c:d2:96:d0:94:2d:9f:ae:ce:73:c8: 77:4d:22:be:4a:bb:03:3c:54:a6:b5:ca:ec:60:8e: 39:54:73:ea:14:3f:c7:25:f3:c3:21:a0:be:9b:4b: 8a:b9:9f:de:fa:e0:ea:88:fd:8e:92:06:6d:16:ea: c6:f0:97:a3:f1:67:96:3b:28:fc:b6:d4:a7:28:07: f5:3f:d5:8d:ed:87:de:f0:cc:17:e3:89:79:0b:b5: 3f:08:47:3c:82:c3:7f:59:f4:80:13:ec:21:4c:68: 03:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1D:D9:94:00:45:43:A3:93:04:C0:9B:DE:32:B4:1D:06:45:C4:DF X509v3 Authority Key Identifier: keyid:76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/B5A7B020DBDB11EB8EC1494EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.8.214.0/24 Signature Algorithm: sha256WithRSAEncryption 73:f0:b0:cb:9b:c1:8c:c7:b2:1d:6b:11:bf:ec:17:c2:31:ab: 7e:c0:d6:6c:56:bd:90:a6:0b:f2:6c:df:7d:fa:ab:4a:fd:80: fe:30:bf:e5:da:ee:1d:06:b5:44:cf:33:e9:5f:35:e5:03:bc: 4d:1b:50:92:a1:1b:b8:ef:14:ba:58:d6:0d:ec:c4:a5:ca:ae: 7e:e2:24:88:2a:d2:85:8b:8c:6d:92:04:38:13:6e:0e:91:d9: 22:ca:f3:49:45:9e:1f:ba:4f:19:85:2a:a4:dd:37:54:7e:f8: 85:24:30:f4:dc:0c:c6:3d:99:a1:3e:fe:4d:7b:ad:86:6e:63: 83:28:9b:87:b5:8b:53:33:7b:d3:93:7d:92:35:0b:c4:c8:67: 4b:33:77:f1:99:5f:6d:44:47:68:72:79:b4:ed:ae:f9:3e:64: e4:be:21:ed:9e:57:6c:bf:16:85:89:44:0c:83:aa:3e:b0:24: ca:e9:21:71:ad:74:ff:c2:30:85:cf:8e:08:e7:e0:e2:d8:91: 53:34:0d:8c:a9:c0:94:37:20:f8:a4:b0:60:05:ac:2e:ac:01: 39:32:5c:07:44:14:87:e7:bd:63:a4:fe:f7:83:d1:61:0a:42: d5:bb:c6:a1:e1:d4:d5:76:16:9a:c2:a6:a3:1e:11:b3:1f:64: 4a:3e:14:d6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDREQzExMTAvBgNVBAUTKDc2REY3RjkxMTY5QTNGMzgwQzBBNkJDRDM4RTkxODZE RUZGMzFCQUIwHhcNMjUwNTIyMjMxNDE3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmYWZjOS0zNTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkEak6uEErGuYaU7o+2gMUVZxa6yto1khYlZDkyy1JWmR15p8D+QNXd1gAjA zz+XGGLFfkV3G71oqjS/MV/lt1GKKJhyokwaG/3eYGWS78n//FLuSv7wRgiGn2KJ REZXw6SAkSuICYvAZszB6gxfWG1ijFna5LAESl9aXfw2uls8Elild0E4K+PYpBvG 55qgVZ0UwDsSCxuGDNKW0JQtn67Oc8h3TSK+SrsDPFSmtcrsYI45VHPqFD/HJfPD IaC+m0uKuZ/e+uDqiP2OkgZtFurG8Jej8WeWOyj8ttSnKAf1P9WN7Yfe8MwX44l5 C7U/CEc8gsN/WfSAE+whTGgDBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOkd2ZQA RUOjkwTAm94ytB0GRcTfMB8GA1UdIwQYMBaAFHbff5EWmj84DAprzTjpGG3v8xur MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENERDMS85OTZGOThFQURC RDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6Z01DbXZOT09rWWJlX3pH NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0OV9rUmFhUHpnTUNtdk5PT2tZYmVfekc2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDREQzEvOTk2Rjk4RUFEQkQ3MTFFQkI5NTExNzQ1QzRGOUFFMDIvQjVBN0IwMjBE QkRCMTFFQjhFQzE0OTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnCNYwDQYJKoZIhvcNAQELBQADggEBAHPwsMubwYzHsh1r Eb/sF8Ixq37A1mxWvZCmC/Js3336q0r9gP4wv+Xa7h0GtUTPM+lfNeUDvE0bUJKh G7jvFLpY1g3sxKXKrn7iJIgq0oWLjG2SBDgTbg6R2SLK80lFnh+6TxmFKqTdN1R+ +IUkMPTcDMY9maE+/k17rYZuY4Mom4e1i1Mze9OTfZI1C8TIZ0szd/GZX21ER2hy ebTtrvk+ZOS+Ie2eV2y/FoWJRAyDqj6wJMrpIXGtdP/CMIXPjgjn4OLYkVM0DYyp wJQ3IPiksGAFrC6sATkyXAdEFIfnvWOk/veD0WEKQtW7xqHh1NV2FprCpqMeEbMf ZEo+FNY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:16 2025 by rpki-client