$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa File: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (raw, json) Hash identifier: ViKM5e5iyaoZ2fwSNhoyHsddKA5yuwX0C7qKIyKJX7Q= Subject key identifier: BF:A5:7F:F8:69:C4:5C:04:4C:8D:0D:0D:11:93:42:E6:22:A5:7B:51 Certificate issuer: /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Certificate serial: 0184 Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa Signing time: Wed 23 Apr 2025 02:58:45 +0000 ROA not before: Wed 23 Apr 2025 02:58:45 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 38903 IP address blocks: 103.122.123.0/24 maxlen: 24 103.131.83.0/24 maxlen: 24 203.99.152.0/24 maxlen: 24 203.99.153.0/24 maxlen: 24 203.99.154.0/24 maxlen: 24 203.99.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 03:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB128, serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Validity Not Before: Apr 23 02:58:45 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68085765-af6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:88:14:bb:82:f0:d2:db:48:57:1c:5d:bc: c3:c4:c0:38:dd:b8:07:99:98:fe:5d:79:dd:db:6f: fa:ad:69:bf:b0:b8:33:66:44:84:c1:65:25:4b:3d: ab:29:3d:94:1b:76:cb:fb:fe:1d:e9:56:75:bd:9d: 65:0d:da:f1:b4:c4:66:b1:a8:20:3d:15:dd:00:8b: f2:98:12:9c:d9:42:9c:56:a0:01:8b:65:99:40:70: bf:51:9c:7b:da:e8:96:1f:61:d0:58:4a:93:b4:5a: 6f:71:c9:12:70:6e:87:83:fe:6d:9b:e4:9e:f7:09: 96:33:84:e0:41:e7:88:a2:ac:f7:d0:35:0e:d3:b9: 74:32:87:e4:21:07:e2:28:4e:a2:8b:0a:d9:95:46: 56:3e:86:53:66:17:3f:e1:91:56:ee:50:81:b6:fb: 7b:a4:c6:be:86:d9:35:95:21:39:7d:bb:26:02:fd: 5a:84:6a:31:d0:da:93:dc:4d:b7:0f:c8:64:86:b7: 09:bc:6c:d5:24:90:7a:f6:d3:57:e3:6a:b9:b9:a8: 7e:3a:ed:bb:fb:e2:98:9a:f6:c7:a7:f9:1f:a5:09: 1c:a9:e2:5f:c1:cf:56:89:74:e1:2c:b6:7e:17:5b: df:04:20:73:1b:82:65:75:1d:04:05:4a:77:a2:ea: ef:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A5:7F:F8:69:C4:5C:04:4C:8D:0D:0D:11:93:42:E6:22:A5:7B:51 X509v3 Authority Key Identifier: keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.123.0/24 103.131.83.0/24 203.99.152.0/22 Signature Algorithm: sha256WithRSAEncryption 59:f3:ff:80:4a:c9:27:5a:0f:af:e7:b1:eb:00:bf:bb:bc:dd: 8c:b8:a8:1a:d1:49:aa:46:7f:91:e7:19:74:8e:76:46:1c:c2: fe:17:96:3e:4f:a5:3c:c3:96:4f:c2:72:e2:2e:63:38:f6:44: 0e:a9:9c:a1:f5:52:d4:04:f0:bb:11:d4:43:3c:ab:f8:0d:5f: c9:79:f1:98:c6:d4:bd:3c:6d:0f:e1:1b:19:02:91:ff:56:1b: 96:29:8a:21:d8:15:c5:5d:76:72:8d:a9:82:46:bd:db:8a:8c: ca:06:f9:73:ae:06:af:02:4a:62:87:90:3c:be:05:50:ed:79: 5a:ce:3c:4a:cb:9f:4d:94:99:d0:e7:29:53:67:0b:a9:3c:df: 09:81:bc:bb:c3:62:fc:7f:ca:16:f3:6d:d7:eb:e0:d1:ab:94: 2e:3e:0f:e3:86:63:2d:8c:bd:38:0a:2a:09:4f:25:ec:16:12: 64:53:81:90:bd:a1:0b:13:42:bf:6c:a2:2f:d5:09:66:2f:4c: 67:56:c0:59:1d:31:b9:7b:42:84:75:bd:4c:da:68:57:f9:b9: b6:65:0f:e2:f2:b8:a0:82:da:4e:5f:d6:94:e7:7a:fd:ae:8f: a5:21:76:c8:45:d7:2e:41:f3:94:ed:0d:95:e1:ea:0b:34:2f: 49:46:96:af -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIxMjgxMTAvBgNVBAUTKDcwQ0Y1QUMyNjE0NEU4RDc0M0IxNTIwM0UyNkMyMjA0 NkZBMjQwN0EwHhcNMjUwNDIzMDI1ODQ1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODA4NTc2NS1hZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUCIFLuC8NLbSFccXbzDxMA43bgHmZj+XXnd22/6rWm/sLgzZkSEwWUlSz2r KT2UG3bL+/4d6VZ1vZ1lDdrxtMRmsaggPRXdAIvymBKc2UKcVqABi2WZQHC/UZx7 2uiWH2HQWEqTtFpvcckScG6Hg/5tm+Se9wmWM4TgQeeIoqz30DUO07l0MofkIQfi KE6iiwrZlUZWPoZTZhc/4ZFW7lCBtvt7pMa+htk1lSE5fbsmAv1ahGox0NqT3E23 D8hkhrcJvGzVJJB69tNX42q5uah+Ou27++KYmvbHp/kfpQkcqeJfwc9WiXThLLZ+ F1vfBCBzG4JldR0EBUp3ourvhQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFL+lf/hp xFwETI0NDRGTQuYipXtRMB8GA1UdIwQYMBaAFHDPWsJhROjXQ7FSA+JsIgRvokB6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjEyOC83QkYyM0FDNERE RTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZOZERzVklENG13aUJHLWlR SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNOWF3bUZFNk5kRHNWSUQ0bXdpQkctaVFIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REIxMjgvN0JGMjNBQzREREU4MTFFREJGOEM5NzNBQzRGOUFFMDIvQUJEN0Q5RkNE REVDMTFFREIxNEVEQTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnensDBABng1MDBALLY5gwDQYJKoZIhvcNAQELBQADggEB AFnz/4BKySdaD6/nsesAv7u83Yy4qBrRSapGf5HnGXSOdkYcwv4Xlj5PpTzDlk/C cuIuYzj2RA6pnKH1UtQE8LsR1EM8q/gNX8l58ZjG1L08bQ/hGxkCkf9WG5YpiiHY FcVddnKNqYJGvduKjMoG+XOuBq8CSmKHkDy+BVDteVrOPErLn02UmdDnKVNnC6k8 3wmBvLvDYvx/yhbzbdfr4NGrlC4+D+OGYy2MvTgKKglPJewWEmRTgZC9oQsTQr9s oi/VCWYvTGdWwFkdMbl7QoR1vUzaaFf5ubZlD+LyuKCC2k5f1pTnev2uj6UhdshF 1y5B85TtDZXh6gs0L0lGlq8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:39:31 2025 by rpki-client