$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/891E633CB7F111EFA500D67CC4F9AE02.roa File: 891E633CB7F111EFA500D67CC4F9AE02.roa (raw, json) Hash identifier: w25txEYnko2hg8Zbjah0ISuSlzEzamAaezA5miWy4fo= Subject key identifier: A8:A7:93:C0:CA:D4:B1:DB:7B:A3:24:92:59:7F:58:B1:8F:96:4D:95 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 01C7 Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/891E633CB7F111EFA500D67CC4F9AE02.roa Signing time: Tue 03 Jun 2025 03:21:09 +0000 ROA not before: Tue 03 Jun 2025 03:21:09 +0000 ROA not after: Wed 01 Oct 2025 00:00:00 +0000 asID: 151048 IP address blocks: 103.121.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 03:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: Jun 3 03:21:09 2025 GMT Not After : Oct 1 00:00:00 2025 GMT Subject: CN=683e6a24-30fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:24:bd:91:5d:0e:cd:f7:f2:7f:55:7b:22: 38:e6:14:be:b4:6d:25:2c:e6:48:79:da:c2:d5:be: e5:06:0d:39:a7:8b:4d:b7:74:99:e2:d5:21:83:a6: 15:84:0f:98:2d:4d:4c:b6:86:89:2b:90:31:1d:b5: 14:3e:99:f7:eb:d0:b8:99:c6:a3:12:81:93:fb:e2: 9c:a2:95:b7:85:96:44:0e:13:25:82:fa:a3:35:42: 9d:9d:bc:37:67:85:7a:b7:86:30:4b:b9:c6:62:2a: e1:56:28:61:5d:04:f5:ca:70:21:0c:ef:c8:ff:ce: 8d:86:0c:56:c5:73:a9:f5:dc:54:2a:79:0e:51:b7: 3f:3c:2d:97:37:d8:82:60:c9:d1:8d:14:41:b1:11: 3d:cc:23:cb:db:59:a0:bd:db:63:43:a9:40:1b:49: d4:fb:6a:ec:5f:77:b1:cd:d3:a0:ae:16:c7:03:20: bb:5b:41:32:30:da:48:a9:10:05:14:09:64:08:4f: ac:b0:c6:2f:36:40:97:ff:f6:25:dc:d3:86:f5:81: f6:86:4f:1d:b9:e5:3c:96:93:22:c1:0a:3b:0c:1a: 22:f0:f4:54:b2:e4:8d:c4:13:87:5f:60:c5:5d:ad: 78:98:84:5c:ab:e0:32:b5:df:14:e4:66:59:1f:eb: b8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A7:93:C0:CA:D4:B1:DB:7B:A3:24:92:59:7F:58:B1:8F:96:4D:95 X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/891E633CB7F111EFA500D67CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.6.0/24 Signature Algorithm: sha256WithRSAEncryption 90:7c:88:27:46:96:d0:0f:35:12:55:4b:5a:b0:a9:b6:ec:5b: 5b:f8:83:62:bf:3d:62:c7:23:a6:d1:2f:4a:bb:ea:72:f4:88: fa:0b:4c:54:10:c1:ff:c0:38:81:c7:07:ad:fb:73:95:51:ab: 04:a1:6c:13:35:ed:a6:46:27:2d:8f:32:15:dc:0b:33:c9:15: 93:30:f4:76:53:68:b0:17:60:6c:01:08:a0:64:af:ff:03:3a: 3f:1b:81:70:7b:59:a9:4b:b9:9c:3c:bf:b1:ff:45:d4:f5:96: 1d:6f:cc:80:b5:ed:7b:d3:f6:48:94:4b:ae:19:44:17:52:fd: 79:f8:76:30:47:aa:9c:d3:9f:e4:30:4d:26:40:0e:7d:05:54: 22:a0:74:ff:37:fe:31:fa:a0:38:a3:93:d6:cc:69:ad:8b:29: 1f:1d:bc:5f:ea:ce:d4:e2:1b:1a:15:54:cb:cf:18:f3:da:9a: 9e:8c:e3:cd:b6:3b:aa:a2:96:e7:5f:d2:1b:79:97:08:e9:04: b5:44:55:a3:90:a5:20:42:10:33:50:13:36:dc:59:81:68:65: 00:ac:07:e1:ec:b1:04:c8:d0:e2:02:87:53:c2:43:d1:94:ed: 2d:8d:6e:00:e2:ae:f1:0d:08:7e:e9:ff:22:28:52:40:3d:17: 55:78:b0:5a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjUwNjAzMDMyMTA5WhcNMjUxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlNmEyNC0zMGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjMkvZFdDs338n9VeyI45hS+tG0lLOZIedrC1b7lBg05p4tNt3SZ4tUhg6YV hA+YLU1MtoaJK5AxHbUUPpn369C4mcajEoGT++KcopW3hZZEDhMlgvqjNUKdnbw3 Z4V6t4YwS7nGYirhVihhXQT1ynAhDO/I/86NhgxWxXOp9dxUKnkOUbc/PC2XN9iC YMnRjRRBsRE9zCPL21mgvdtjQ6lAG0nU+2rsX3exzdOgrhbHAyC7W0EyMNpIqRAF FAlkCE+ssMYvNkCX//Yl3NOG9YH2hk8dueU8lpMiwQo7DBoi8PRUsuSNxBOHX2DF Xa14mIRcq+Aytd8U5GZZH+u40QIDAQABo4IClTCCApEwHQYDVR0OBBYEFKink8DK 1LHbe6Mkkll/WLGPlk2VMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUZBRkYvRDA2MTFGMDRDQzQ0MTFFRDlBNzFFMTBDQzRGOUFFMDIvODkxRTYzM0NC N0YxMTFFRkE1MDBENjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABneQYwDQYJKoZIhvcNAQELBQADggEBAJB8iCdGltAPNRJV S1qwqbbsW1v4g2K/PWLHI6bRL0q76nL0iPoLTFQQwf/AOIHHB637c5VRqwShbBM1 7aZGJy2PMhXcCzPJFZMw9HZTaLAXYGwBCKBkr/8DOj8bgXB7WalLuZw8v7H/RdT1 lh1vzIC17XvT9kiUS64ZRBdS/Xn4djBHqpzTn+QwTSZADn0FVCKgdP83/jH6oDij k9bMaa2LKR8dvF/qztTiGxoVVMvPGPPamp6M4822O6qiludf0ht5lwjpBLVEVaOQ pSBCEDNQEzbcWYFoZQCsB+HssQTI0OICh1PCQ9GU7S2NbgDirvENCH7p/yIoUkA9 F1V4sFo= -----END CERTIFICATE-----Generated at Tue Jun 3 23:50:41 2025 by rpki-client