$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E3D8F396FE4111EF98C5951BC4F9AE02.roa File: E3D8F396FE4111EF98C5951BC4F9AE02.roa (raw, json) Hash identifier: LjffEWJHQUXprNbzV+WAxfVGHJc/4nh+t0Csk7PAIco= Subject key identifier: D2:A5:E2:23:8A:92:BE:09:07:9F:9A:74:09:85:73:97:EC:C4:86:AD Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 248C Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E3D8F396FE4111EF98C5951BC4F9AE02.roa Signing time: Tue 11 Mar 2025 06:29:10 +0000 ROA not before: Tue 11 Mar 2025 06:29:10 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 3561 IP address blocks: 103.11.68.0/22 maxlen: 24 115.167.10.0/24 maxlen: 24 175.110.100.0/24 maxlen: 24 175.110.102.0/24 maxlen: 24 175.110.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9356 (0x248c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134 Validity Not Before: Mar 11 06:29:10 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67cfd836-ce7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:75:a8:01:f7:0a:97:84:a8:5b:43:b4:67:ac: cb:39:d8:fe:9e:e6:18:0b:63:49:8f:af:12:da:fd: 1c:d2:99:6d:01:d9:c0:1f:d6:1f:7b:ac:af:5e:d6: 7c:ac:af:5f:65:04:53:4d:e4:0f:27:1e:3f:a3:b9: 74:29:5b:8d:0b:c7:be:f8:16:17:0c:1d:74:d3:d5: 6c:9f:63:14:bf:9f:bf:af:49:37:f0:24:cb:0a:22: d8:19:8c:d8:2d:16:e5:2d:aa:b4:e9:f5:84:74:ce: b3:5f:63:a8:2a:31:ce:9f:85:97:38:86:e6:49:6c: f8:72:14:b8:c4:29:48:b4:14:ec:e0:81:b7:1a:d2: ee:b8:c9:72:0b:8c:23:9e:6b:22:23:79:2b:f0:86: 48:f7:42:b1:b9:83:59:b8:1e:7a:1e:dd:5b:f0:cb: 37:e4:04:4b:b7:28:fc:11:be:07:a0:96:31:35:5d: 3d:39:03:39:1d:ef:25:37:f4:ec:4f:44:d4:e8:e1: 41:33:02:c5:0e:01:ee:d0:c8:1c:d6:38:0c:80:4f: 02:c8:15:19:d5:70:42:c6:26:e6:50:94:d1:24:5b: ae:00:cf:43:3a:c9:51:67:73:f6:1f:0f:27:b6:46: e3:59:de:8e:5f:03:58:d7:c7:57:b8:9b:2f:20:c7: c6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A5:E2:23:8A:92:BE:09:07:9F:9A:74:09:85:73:97:EC:C4:86:AD X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E3D8F396FE4111EF98C5951BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.11.68.0/22 115.167.10.0/24 175.110.100.0/24 175.110.102.0/23 Signature Algorithm: sha256WithRSAEncryption 57:36:b9:fd:35:3f:5c:68:92:59:01:87:33:e7:44:5a:76:42: 77:2b:7b:3e:d7:fb:48:f0:77:fa:21:56:f6:0a:e8:f5:6f:9d: f0:6e:bc:54:9e:06:2a:f5:b5:55:a6:04:98:09:01:81:51:2f: d2:1f:6c:4f:bd:1c:9f:d3:2b:3a:a0:58:c0:57:b2:1d:90:b3: 2c:bc:4b:19:36:1a:7b:50:65:5c:32:27:bc:e5:5a:14:8f:4c: eb:c0:ed:9e:18:54:b9:21:16:44:f4:ab:5d:c7:78:c3:0c:21: 58:dd:d0:f9:3e:92:cb:42:e3:53:54:00:f7:5e:0a:48:31:c4: dd:4b:8f:73:44:f2:7d:4a:67:7f:49:ca:62:7f:f4:0c:27:6f: dd:88:15:b1:ed:fb:26:20:b0:48:de:0d:bf:d9:44:1c:32:14: ce:12:11:5c:1b:79:53:5b:ea:ca:17:83:fc:a9:dc:69:98:ca: f8:4e:cc:73:fc:16:be:9f:84:87:59:50:a4:64:16:43:da:b1: 5e:6f:94:2c:c0:90:10:99:e8:dd:c0:68:cf:71:dd:4e:92:47: aa:b5:c5:62:d2:b2:5d:15:58:30:8b:0f:7d:09:8c:3a:01:16: 86:58:8d:f1:9d:ac:a6:a3:22:1f:4e:1a:4f:cf:25:ac:98:63: 54:4d:a0:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICJIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjUwMzExMDYyOTEwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NmZDgzNi1jZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnWoAfcKl4SoW0O0Z6zLOdj+nuYYC2NJj68S2v0c0pltAdnAH9Yfe6yvXtZ8 rK9fZQRTTeQPJx4/o7l0KVuNC8e++BYXDB1009Vsn2MUv5+/r0k38CTLCiLYGYzY LRblLaq06fWEdM6zX2OoKjHOn4WXOIbmSWz4chS4xClItBTs4IG3GtLuuMlyC4wj nmsiI3kr8IZI90KxuYNZuB56Ht1b8Ms35ARLtyj8Eb4HoJYxNV09OQM5He8lN/Ts T0TU6OFBMwLFDgHu0Mgc1jgMgE8CyBUZ1XBCxibmUJTRJFuuAM9DOslRZ3P2Hw8n tkbjWd6OXwNY18dXuJsvIMfGtwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFNKl4iOK kr4JB5+adAmFc5fsxIatMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRTNEOEYzOTZG RTQxMTFFRjk4QzU5NTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAJnC0QDBABzpwoDBACvbmQDBAGvbmYwDQYJKoZIhvcNAQEL BQADggEBAFc2uf01P1xoklkBhzPnRFp2Qncrez7X+0jwd/ohVvYK6PVvnfBuvFSe Bir1tVWmBJgJAYFRL9IfbE+9HJ/TKzqgWMBXsh2Qsyy8Sxk2GntQZVwyJ7zlWhSP TOvA7Z4YVLkhFkT0q13HeMMMIVjd0Pk+kstC41NUAPdeCkgxxN1Lj3NE8n1KZ39J ymJ/9Awnb92IFbHt+yYgsEjeDb/ZRBwyFM4SEVwbeVNb6soXg/yp3GmYyvhOzHP8 Fr6fhIdZUKRkFkPasV5vlCzAkBCZ6N3AaM9x3U6SR6q1xWLSsl0VWDCLD30JjDoB FoZYjfGdrKajIh9OGk/PJayYY1RNoO4= -----END CERTIFICATE-----Generated at Sat Apr 5 10:20:31 2025 by rpki-client