$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/B8753568229D11F0A5CF4B78C4F9AE02.roa File: B8753568229D11F0A5CF4B78C4F9AE02.roa (raw, json) Hash identifier: UzrBYvhmwM8mdH0ghMSjubq04wNr65MA9rGMTRg3B0s= Subject key identifier: ED:AE:90:C9:2A:2E:9C:C5:75:78:F3:ED:FC:82:19:8F:17:EE:87:4F Certificate issuer: /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Certificate serial: 08F7 Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/B8753568229D11F0A5CF4B78C4F9AE02.roa Signing time: Sun 27 Apr 2025 05:15:10 +0000 ROA not before: Sun 27 Apr 2025 05:15:10 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 131316 IP address blocks: 103.4.122.0/23 maxlen: 23 103.4.122.0/24 maxlen: 24 103.4.123.0/24 maxlen: 24 103.50.12.0/24 maxlen: 24 103.114.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2295 (0x8f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9611, serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Validity Not Before: Apr 27 05:15:10 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=680dbd5e-9785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:de:25:dc:72:d8:b4:ee:55:6c:52:ed:20: 61:f0:56:28:54:f3:a0:fc:60:21:12:76:0c:39:de: 74:f7:d0:70:d2:78:28:27:53:12:07:c9:d2:cd:ec: c3:d2:bb:37:f6:3f:e2:f7:a1:49:99:8b:39:e2:8d: a4:e1:71:03:f2:3f:ed:07:1d:ce:94:f4:9c:36:5f: 50:36:fc:f5:cc:b9:f9:06:6d:ba:44:73:24:92:5d: 1c:93:e3:98:58:23:26:4d:e8:80:d7:f8:17:70:45: ed:20:d4:1d:f1:4a:24:38:b2:49:92:d7:09:36:8c: 24:9c:26:ba:96:ec:7f:f1:ba:70:b7:75:90:a6:e6: ec:01:4f:d9:f1:24:47:77:47:a1:d1:2e:dc:ab:69: d4:1b:1f:f5:38:2a:af:2b:51:62:9b:bd:d4:b9:3d: a7:3b:13:19:cd:82:e9:75:ff:b5:4b:75:e3:76:ea: 18:78:3e:dc:d3:04:00:65:25:6d:d4:7b:63:a6:d4: 40:fb:24:46:96:23:d8:6e:07:e3:f8:a9:3b:c8:c6: b5:75:a6:10:d4:ab:79:fe:52:a0:25:d4:06:0d:c0: 49:28:ff:54:dc:f8:6e:b8:00:c3:08:0a:6c:43:ae: 0e:bb:d4:6b:90:78:4d:d0:51:20:82:31:c1:c1:ac: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AE:90:C9:2A:2E:9C:C5:75:78:F3:ED:FC:82:19:8F:17:EE:87:4F X509v3 Authority Key Identifier: keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/B8753568229D11F0A5CF4B78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.4.122.0/23 103.50.12.0/24 103.114.34.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:3b:a5:a7:31:9c:e5:bf:ee:7c:fa:63:c1:a4:7c:c7:8d:8b: ae:a3:1e:6e:0c:2c:5c:2d:a2:f3:38:d3:38:e6:0f:48:57:87: 6f:5c:33:df:29:44:36:6c:82:4b:f5:c1:6b:71:de:a0:25:67: 29:3d:41:37:c1:b0:12:b5:e1:a0:42:45:00:a1:c1:01:ab:f0: e0:cf:b0:0b:d0:a6:7f:be:2f:d2:03:2b:64:7c:6d:bc:1d:e5: 2a:c4:aa:f1:be:e4:a9:a3:13:d2:01:71:10:9e:ca:93:5f:65: cd:bc:ef:47:59:6a:bc:d3:74:1b:10:3b:67:b0:10:3e:09:53: bd:08:f8:05:0c:73:7c:da:9e:e4:a1:ff:ff:d0:fb:53:1f:97: b5:a2:b3:36:8d:e2:e3:89:98:b9:32:25:b9:cc:9b:99:a3:cc: ee:60:44:3b:b3:ab:d6:b0:24:d7:7b:8f:c4:d4:34:73:f1:17: a1:78:cd:00:57:8c:b5:32:23:7c:37:73:26:a7:86:69:c6:5f: 58:c5:3a:7d:4a:fc:47:99:5e:75:f7:bf:fa:68:ab:a4:0e:65: de:de:10:e6:40:89:72:ee:07:2c:af:96:35:53:1f:db:5d:de: 47:44:56:79:dd:6c:08:6e:fb:3e:3b:d1:27:02:b8:ce:57:30: 99:d2:15:c6 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MTExMTAvBgNVBAUTKDhGMUFGREU5MzYyODAzMTMzRkZCQ0E3MENGN0Y2QUFG QjAzM0Q3NzEwHhcNMjUwNDI3MDUxNTEwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBkYmQ1ZS05Nzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0PeJdxy2LTuVWxS7SBh8FYoVPOg/GAhEnYMOd5099Bw0ngoJ1MSB8nSzezD 0rs39j/i96FJmYs54o2k4XED8j/tBx3OlPScNl9QNvz1zLn5Bm26RHMkkl0ck+OY WCMmTeiA1/gXcEXtINQd8UokOLJJktcJNowknCa6lux/8bpwt3WQpubsAU/Z8SRH d0eh0S7cq2nUGx/1OCqvK1Fim73UuT2nOxMZzYLpdf+1S3XjduoYeD7c0wQAZSVt 1HtjptRA+yRGliPYbgfj+Kk7yMa1daYQ1Kt5/lKgJdQGDcBJKP9U3PhuuADDCAps Q64Ou9RrkHhN0FEggjHBwawR3QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFO2ukMkq LpzFdXjz7fyCGY8X7odPMB8GA1UdIwQYMBaAFI8a/ek2KAMTP/vKcM9/aq+wM9dx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYxMS84RUEyNDc1QUE5 RjExMUVBQUREMzg5NDlDNEY5QUUwMi9qeHI5NlRZb0F4TV8tOHB3ejM5cXI3QXox M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4cjk2VFlvQXhNXy04cHd6MzlxcjdBejEzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDk2MTEvOEVBMjQ3NUFBOUYxMTFFQUFERDM4OTQ5QzRGOUFFMDIvQjg3NTM1Njgy MjlEMTFGMEE1Q0Y0Qjc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAFnBHoDBABnMgwDBABnciIwDQYJKoZIhvcNAQELBQADggEB AHo7pacxnOW/7nz6Y8GkfMeNi66jHm4MLFwtovM40zjmD0hXh29cM98pRDZsgkv1 wWtx3qAlZyk9QTfBsBK14aBCRQChwQGr8ODPsAvQpn++L9IDK2R8bbwd5SrEqvG+ 5KmjE9IBcRCeypNfZc2870dZarzTdBsQO2ewED4JU70I+AUMc3zanuSh///Q+1Mf l7WiszaN4uOJmLkyJbnMm5mjzO5gRDuzq9awJNd7j8TUNHPxF6F4zQBXjLUyI3w3 cyanhmnGX1jFOn1K/EeZXnX3v/poq6QOZd7eEOZAiXLuByyvljVTH9td3kdEVnnd bAhu+z470ScCuM5XMJnSFcY= -----END CERTIFICATE-----Generated at Mon Jun 2 05:56:05 2025 by rpki-client