$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/2DD4424401A211F09D28335BC4F9AE02.roa File: 2DD4424401A211F09D28335BC4F9AE02.roa (raw, json) Hash identifier: /pUGpbO60Fe1yZM/qF6+zCst+2cZhcsURR33/zD2CVU= Subject key identifier: 71:D6:C0:22:F7:7F:85:96:9A:CA:7A:E1:85:05:18:85:F1:F6:57:27 Certificate issuer: /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Certificate serial: 1328 Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/2DD4424401A211F09D28335BC4F9AE02.roa Signing time: Mon 12 May 2025 17:48:41 +0000 ROA not before: Mon 12 May 2025 17:48:41 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137827 IP address blocks: 103.115.33.0/24 maxlen: 24 103.139.80.0/24 maxlen: 24 2001:df7:1300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4904 (0x1328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFFF0, serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Validity Not Before: May 12 17:48:41 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68223479-6d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ef:46:65:5a:b5:46:24:c1:1f:6e:29:05:85: 0c:4b:24:d1:28:73:6c:ef:52:58:01:ef:2d:b2:52: 13:57:0b:49:76:af:7f:fc:db:6e:c6:1c:6a:04:62: a1:bb:42:e2:46:8d:be:57:e1:e2:fe:7f:5c:bf:f2: 6b:94:70:16:83:5b:54:eb:73:6c:24:28:40:20:2e: 89:b7:3a:8e:d7:8f:37:11:20:a3:3f:b5:c3:00:32: 59:0b:cd:f6:1f:5b:c5:bf:7d:43:eb:ff:b3:1d:22: 61:b1:18:aa:4f:0e:63:a3:67:58:0d:22:19:ab:4d: 2f:a5:51:f5:90:f4:bc:ec:8d:dd:25:f1:6c:36:34: 2c:26:d1:76:2a:b0:75:46:0c:fa:76:f4:98:b2:c0: 1b:88:93:1a:98:d6:3b:58:1f:81:e6:6d:db:41:6b: b9:70:bf:62:f2:8b:95:ab:49:3a:e2:bd:5b:5c:d7: b6:99:4b:51:15:d6:78:90:10:80:9e:f7:f4:05:62: c7:fb:bb:a1:0c:fb:a5:8f:2d:56:9e:24:30:5f:d9: ae:21:64:af:ec:97:30:b6:80:ed:fa:4c:af:fb:75: 40:a4:b5:97:3e:21:3f:9b:e4:28:70:35:71:1c:e6: 3d:96:bf:a4:f0:a6:a2:4a:d9:c8:4f:b3:a6:d1:53: 8d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D6:C0:22:F7:7F:85:96:9A:CA:7A:E1:85:05:18:85:F1:F6:57:27 X509v3 Authority Key Identifier: keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/2DD4424401A211F09D28335BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.33.0/24 103.139.80.0/24 IPv6: 2001:df7:1300::/48 Signature Algorithm: sha256WithRSAEncryption 0a:31:a3:b9:89:73:9a:58:3a:28:e9:0f:e2:d1:b5:ae:c4:20: 22:4c:48:bc:e2:fc:e5:76:ab:52:0c:a9:07:5a:91:3b:f3:f2: 3a:5a:91:42:90:41:61:1f:4d:a6:bd:a1:d5:df:e7:93:38:ef: 2d:dd:f2:09:3a:94:0a:38:f5:f7:6c:9b:41:30:28:a8:72:35: cf:9e:ce:cd:a1:d6:a2:0d:e4:64:cd:f3:cf:46:08:54:d3:69: 91:fe:3a:7c:98:34:c3:18:98:f3:08:d1:11:17:9e:e3:e9:33: b6:1c:2a:e2:08:06:f9:ca:3d:5a:79:f6:67:83:cd:80:cb:fb: c0:3f:36:c7:02:72:70:33:4f:15:5b:d3:92:38:fa:0e:5b:b2: 0b:2a:06:ca:7e:c6:93:b0:10:26:0a:11:a5:3d:a5:f4:8a:bd: 4c:f7:25:87:c1:88:36:58:a1:94:4e:65:40:55:da:e1:d6:d8: b1:08:5b:e4:d9:0b:0d:57:d9:ff:a2:ee:8c:fc:ae:d5:a9:0b: 78:56:43:52:a8:3d:2d:2f:b9:32:93:d2:cf:2f:77:d0:29:7b: 35:18:7d:21:6a:38:c7:00:02:18:f1:24:25:1c:49:e4:ca:99: 42:f3:79:68:3a:55:37:43:0e:8d:be:de:c9:f6:d8:e7:1b:57: da:1d:46:e6 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICEygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZGRjAxMTAvBgNVBAUTKEFFRkNFNEJBMjRERkE2RUQ2NEU0MUU0RjI0NTFDOUU4 ODRBRTY5QTIwHhcNMjUwNTEyMTc0ODQxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODIyMzQ3OS02ZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAye9GZVq1RiTBH24pBYUMSyTRKHNs71JYAe8tslITVwtJdq9//NtuxhxqBGKh u0LiRo2+V+Hi/n9cv/JrlHAWg1tU63NsJChAIC6JtzqO1483ESCjP7XDADJZC832 H1vFv31D6/+zHSJhsRiqTw5jo2dYDSIZq00vpVH1kPS87I3dJfFsNjQsJtF2KrB1 Rgz6dvSYssAbiJMamNY7WB+B5m3bQWu5cL9i8ouVq0k64r1bXNe2mUtRFdZ4kBCA nvf0BWLH+7uhDPuljy1WniQwX9muIWSv7JcwtoDt+kyv+3VApLWXPiE/m+QocDVx HOY9lr+k8KaiStnIT7Om0VONjQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFHHWwCL3 f4WWmsp64YUFGIXx9lcnMB8GA1UdIwQYMBaAFK785Lok36btZOQeTyRRyeiErmmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkZGMC80NEZFQkM5MkFE QjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1MWs1QjVQSkZISjZJU3Vh YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J2emt1aVRmcHUxazVCNVBKRkhKNklTdWFhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUZGRjAvNDRGRUJDOTJBREIyMTFFODlDOUI0NTUzQzRGOUFFMDIvMkRENDQyNDQw MUEyMTFGMDlEMjgzMzVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABncyEDBABni1AwDwQCAAIwCQMHACABDfcTADANBgkqhkiG 9w0BAQsFAAOCAQEACjGjuYlzmlg6KOkP4tG1rsQgIkxIvOL85XarUgypB1qRO/Py OlqRQpBBYR9Npr2h1d/nkzjvLd3yCTqUCjj192ybQTAoqHI1z57OzaHWog3kZM3z z0YIVNNpkf46fJg0wxiY8wjRERee4+kzthwq4ggG+co9Wnn2Z4PNgMv7wD82xwJy cDNPFVvTkjj6DluyCyoGyn7Gk7AQJgoRpT2l9Iq9TPclh8GINlihlE5lQFXa4dbY sQhb5NkLDVfZ/6LujPyu1akLeFZDUqg9LS+5MpPSzy930Cl7NRh9IWo4xwACGPEk JRxJ5MqZQvN5aDpVN0MOjb7eyfbY5xtX2h1G5g== -----END CERTIFICATE-----Generated at Tue Jun 3 23:51:26 2025 by rpki-client