$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/4E0A64703A3811F0ADB0050BC4F9AE02.roa File: 4E0A64703A3811F0ADB0050BC4F9AE02.roa (raw, json) Hash identifier: Vqxb0PYOCR3C6cShr5awy3jVN80kFbWIBGbta/oK5uQ= Subject key identifier: F5:31:C9:21:8C:97:C2:54:12:9C:12:43:1C:02:7D:8D:87:BE:59:42 Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 0896 Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/4E0A64703A3811F0ADB0050BC4F9AE02.roa Signing time: Mon 26 May 2025 13:49:55 +0000 ROA not before: Mon 26 May 2025 13:49:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 103.111.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2198 (0x896) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: May 26 13:49:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68347183-55b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:15:a6:f0:e8:f2:a6:0c:f9:03:5a:8d:0e: ca:ca:f3:ba:33:f0:6f:b0:73:aa:2d:01:a7:f4:70: bb:b3:7d:31:25:73:b1:3c:6a:9f:78:46:48:c4:ab: 4d:08:13:fe:87:77:bf:4b:54:41:27:1c:0e:84:bf: be:e2:b1:ef:df:04:26:dc:eb:f6:f2:cb:13:1f:1c: 31:a9:92:2b:50:f3:76:a4:cc:49:f2:28:14:c4:95: 3b:ff:02:48:b8:60:1e:70:32:a9:c1:ff:68:d2:cf: 63:92:6f:ec:2a:bf:35:e4:4b:fd:3a:75:4c:d6:6f: 98:fa:0d:07:d5:03:74:b0:47:2f:ab:a8:fe:e5:53: 78:d8:4e:e2:ea:4d:b3:44:ee:62:d0:0c:6e:bf:f3: a0:04:00:58:6c:61:6c:7f:4c:b7:57:45:89:b3:67: 65:5a:55:00:35:a8:b1:c3:14:d7:9e:68:e4:63:f7: 73:6d:10:8f:62:de:35:ca:b2:67:ab:74:03:02:7d: 2f:41:c4:e9:f8:a5:d7:9e:24:f6:41:4b:79:c7:26: 23:b6:e8:5e:4b:f4:35:5b:b0:21:f9:f1:6c:4f:05: 54:80:87:5f:9f:9f:a9:0b:9c:39:ec:35:59:4a:d0: d0:2d:17:db:30:97:b4:9a:d5:9e:a5:b2:2d:2d:01: 04:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:31:C9:21:8C:97:C2:54:12:9C:12:43:1C:02:7D:8D:87:BE:59:42 X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/4E0A64703A3811F0ADB0050BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.167.0/24 Signature Algorithm: sha256WithRSAEncryption a0:8a:dd:0c:fb:3d:71:5e:76:3b:3a:f1:ed:ce:e3:da:a2:41: 36:4b:87:82:e7:e9:40:53:9e:98:ca:6a:2c:9d:ab:49:9b:86: bf:b4:38:f9:d9:1c:6e:1a:a4:4b:5a:09:22:8b:20:5b:cd:3c: 9c:e8:c7:fb:98:bd:e8:f6:7c:0b:f8:98:68:db:f9:06:e0:2b: 05:d3:c0:4f:56:89:44:b6:ab:7e:f6:a0:74:8f:3e:ae:2e:27: a8:a5:4c:ee:10:09:f7:be:77:34:43:fb:ea:c8:4e:00:69:5a: 4e:d7:91:f4:d5:88:90:b9:5f:d3:b8:81:09:5f:cd:75:cc:f9: 60:46:44:55:8c:16:73:29:7f:0b:25:69:5a:ce:97:d1:be:ee: 04:9e:45:4f:5a:44:35:6e:07:ae:df:b6:36:ba:03:41:18:bd: de:40:1a:3d:4c:1c:d0:7e:63:29:a0:a3:ea:8e:6c:dd:37:38: 59:e2:aa:39:a6:26:69:30:9f:12:21:7e:90:21:46:83:b6:eb: 61:8d:ff:19:df:43:bc:7e:2a:6a:1a:66:cb:9d:b3:0a:16:50: cd:31:5a:19:5d:75:d7:c4:cb:70:b0:f7:38:9e:7f:4a:81:75: d4:b2:56:34:db:dd:41:69:de:64:1c:c9:58:b6:f0:43:d3:98: ac:5b:60:51 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjUwNTI2MTM0OTU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM0NzE4My01NWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlQVpvDo8qYM+QNajQ7KyvO6M/BvsHOqLQGn9HC7s30xJXOxPGqfeEZIxKtN CBP+h3e/S1RBJxwOhL++4rHv3wQm3Ov28ssTHxwxqZIrUPN2pMxJ8igUxJU7/wJI uGAecDKpwf9o0s9jkm/sKr815Ev9OnVM1m+Y+g0H1QN0sEcvq6j+5VN42E7i6k2z RO5i0Axuv/OgBABYbGFsf0y3V0WJs2dlWlUANaixwxTXnmjkY/dzbRCPYt41yrJn q3QDAn0vQcTp+KXXniT2QUt5xyYjtuheS/Q1W7Ah+fFsTwVUgIdfn5+pC5w57DVZ StDQLRfbMJe0mtWepbItLQEE1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFPUxySGM l8JUEpwSQxwCfY2HvllCMB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDU2MEQvNjhDM0Y0OUE0MUVFMTFFQTlDRUExRjc1QzRGOUFFMDIvNEUwQTY0NzAz QTM4MTFGMEFEQjAwNTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnb6cwDQYJKoZIhvcNAQELBQADggEBAKCK3Qz7PXFedjs6 8e3O49qiQTZLh4Ln6UBTnpjKaiydq0mbhr+0OPnZHG4apEtaCSKLIFvNPJzox/uY vej2fAv4mGjb+QbgKwXTwE9WiUS2q372oHSPPq4uJ6ilTO4QCfe+dzRD++rITgBp Wk7XkfTViJC5X9O4gQlfzXXM+WBGRFWMFnMpfwslaVrOl9G+7gSeRU9aRDVuB67f tja6A0EYvd5AGj1MHNB+Yymgo+qObN03OFniqjmmJmkwnxIhfpAhRoO262GN/xnf Q7x+KmoaZsudswoWUM0xWhldddfEy3Cw9zief0qBddSyVjTb3UFp3mQcyVi28EPT mKxbYFE= -----END CERTIFICATE-----Generated at Mon Jun 2 07:11:41 2025 by rpki-client