$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1E6B12EC049F11F0AD5C7C33C4F9AE02.roa File: 1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (raw, json) Hash identifier: gD5Iq8akoAlTIS4ryMBL5JIYOH1ViK0S3xNtIRVVfYc= Subject key identifier: 6B:7E:B6:CC:C0:36:64:9B:97:B2:61:3B:EB:E6:7A:E4:28:AE:B9:45 Certificate issuer: /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Certificate serial: 0AF9 Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1E6B12EC049F11F0AD5C7C33C4F9AE02.roa Signing time: Wed 19 Mar 2025 08:49:50 +0000 ROA not before: Wed 19 Mar 2025 08:49:50 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 38082 IP address blocks: 103.14.164.0/24 maxlen: 24 103.14.165.0/24 maxlen: 24 103.14.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 19:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2809 (0xaf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB475 Validity Not Before: Mar 19 08:49:50 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67da852e-bf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:af:7e:12:06:96:75:0c:3d:70:70:06:45:18: ef:25:46:33:c2:9e:35:14:4f:bc:76:65:c9:5e:81: e9:2c:47:ac:47:16:bc:22:e2:fa:16:6b:c7:45:f2: 26:8a:b1:c9:3e:3d:7d:fd:ee:d7:48:f8:49:84:88: 18:15:13:ee:bc:0b:c0:b0:ff:54:18:a2:e0:b0:5d: 58:a5:6a:53:3d:c8:d0:51:a2:97:b2:41:aa:36:7c: 61:cc:7a:a4:90:63:20:20:50:bc:da:eb:e6:47:cc: a1:ea:a0:e2:c6:90:4c:b4:89:94:61:d6:d2:bb:d7: 56:87:c4:e4:c2:40:43:83:4c:d0:7b:57:10:94:63: d8:be:1f:f4:db:f9:6c:8c:b7:d5:45:2f:49:1a:17: 08:57:70:56:0e:9b:ce:e9:75:b9:50:d5:0c:70:26: da:65:d9:2c:24:91:38:2d:bc:96:f0:57:f4:f8:85: 15:0d:a7:2c:43:93:6f:0e:f1:d6:3e:df:77:19:f2: 42:10:13:0f:0a:6a:40:8e:62:1d:e9:ff:50:17:32: 8e:dd:a5:f0:7f:34:8b:7f:84:dc:a3:32:a0:94:61: 63:8a:64:82:d5:6e:17:30:61:e6:f2:80:07:b1:2d: 07:03:07:73:d2:36:18:60:65:ff:be:2b:7f:fe:84: ed:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7E:B6:CC:C0:36:64:9B:97:B2:61:3B:EB:E6:7A:E4:28:AE:B9:45 X509v3 Authority Key Identifier: keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1E6B12EC049F11F0AD5C7C33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.14.164.0-103.14.166.255 Signature Algorithm: sha256WithRSAEncryption 72:69:96:cc:78:c2:17:d0:fa:12:42:e7:48:59:43:29:30:03: c4:8e:bd:f9:71:a3:64:c0:b1:41:2b:a5:a9:3a:b0:f1:b3:6e: a7:f0:b3:2c:da:2f:be:77:00:53:1c:12:7b:de:db:e1:7f:74: 88:ea:f8:4f:8f:26:9a:fb:1a:59:02:e5:be:31:3f:ff:a2:d8: fc:80:14:e1:01:79:e5:5b:d9:8f:2c:9f:ca:14:d1:6c:b9:ad: 86:62:37:9e:87:c9:9c:65:e2:9b:a1:c6:d1:90:55:66:4b:45: a4:ea:dc:ec:bd:4e:7f:48:5d:ec:b1:84:65:ae:86:05:0e:98: 24:4f:90:d5:f5:0d:89:fe:b2:b8:02:57:21:64:52:af:b1:ae: 5d:c2:ad:a2:06:da:f1:2e:28:0a:cc:3e:9c:1e:a1:73:61:f9: 43:70:18:41:aa:f5:26:f6:2e:7c:6c:d9:12:a0:3d:9e:5b:0b: 66:8b:06:03:e3:c0:07:e1:25:6c:0f:e8:69:b4:e8:d6:87:f5: 20:3e:f7:fe:51:b4:51:21:66:80:fd:ba:9d:78:f3:56:61:cf: cd:11:0a:f8:59:2c:ce:81:6b:29:d2:b3:e0:30:b9:89:33:5d: 51:72:e2:93:06:41:67:c2:00:be:0b:28:38:ec:45:d7:fe:7e: b3:5e:ca:37 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICCvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0NzUxMTAvBgNVBAUTKEQ1MEMwQUQzQjRBRDgxRDU1NTk0NUNDN0YzRjFFRTFD MUZBREU2MTcwHhcNMjUwMzE5MDg0OTUwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RhODUyZS1iZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5a9+EgaWdQw9cHAGRRjvJUYzwp41FE+8dmXJXoHpLEesRxa8IuL6FmvHRfIm irHJPj19/e7XSPhJhIgYFRPuvAvAsP9UGKLgsF1YpWpTPcjQUaKXskGqNnxhzHqk kGMgIFC82uvmR8yh6qDixpBMtImUYdbSu9dWh8TkwkBDg0zQe1cQlGPYvh/02/ls jLfVRS9JGhcIV3BWDpvO6XW5UNUMcCbaZdksJJE4LbyW8Ff0+IUVDacsQ5NvDvHW Pt93GfJCEBMPCmpAjmId6f9QFzKO3aXwfzSLf4TcozKglGFjimSC1W4XMGHm8oAH sS0HAwdz0jYYYGX/vit//oTtPQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFGt+tszA NmSbl7JhO+vmeuQorrlFMB8GA1UdIwQYMBaAFNUMCtO0rYHVVZRcx/Px7hwfreYX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQ3NS8yMDhGQjczMDQx NzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdkVlZsRnpIOF9IdUhCLXQ1 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRd0swN1N0Z2RWVmxGekg4X0h1SEItdDVoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI0NzUvMjA4RkI3MzA0MTcyMTFFQTk4QTM2ODZEQzRGOUFFMDIvMUU2QjEyRUMw NDlGMTFGMEFENUM3QzMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAmcOpAMEAGcOpjANBgkqhkiG9w0BAQsFAAOCAQEAcmmW zHjCF9D6EkLnSFlDKTADxI69+XGjZMCxQSulqTqw8bNup/CzLNovvncAUxwSe97b 4X90iOr4T48mmvsaWQLlvjE//6LY/IAU4QF55VvZjyyfyhTRbLmthmI3nofJnGXi m6HG0ZBVZktFpOrc7L1Of0hd7LGEZa6GBQ6YJE+Q1fUNif6yuAJXIWRSr7GuXcKt ogba8S4oCsw+nB6hc2H5Q3AYQar1JvYufGzZEqA9nlsLZosGA+PAB+ElbA/oabTo 1of1ID73/lG0USFmgP26nXjzVmHPzREK+FkszoFrKdKz4DC5iTNdUXLikwZBZ8IA vgsoOOxF1/5+s17KNw== -----END CERTIFICATE-----Generated at Mon Apr 7 02:51:51 2025 by rpki-client