$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/995F3DCEAF7811EABCA9AC1DC4F9AE02.roa File: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (raw, json) Hash identifier: ZNkH5Sj7XHBs6ufHKPHidPlMntGP72EIG2BMLfQDnC4= Subject key identifier: C2:BF:FE:FB:1A:05:68:A2:D3:70:4F:9C:52:BF:98:91:3D:F1:05:EE Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Certificate serial: 08D6 Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/995F3DCEAF7811EABCA9AC1DC4F9AE02.roa Signing time: Wed 14 May 2025 20:57:16 +0000 ROA not before: Wed 14 May 2025 20:57:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140243 IP address blocks: 103.149.100.0/23 maxlen: 23 103.149.100.0/24 maxlen: 24 103.149.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2262 (0x8d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Validity Not Before: May 14 20:57:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=682503ab-4848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:b5:d3:2f:34:1d:03:e7:34:9a:5f:99:d6: 26:26:67:8e:21:f8:c8:a0:0d:99:16:ed:d0:a5:eb: 50:ec:8e:2c:9f:ac:4e:32:4c:db:1f:c7:7a:86:74: 9d:cd:8b:cb:29:0a:7e:36:80:9d:a8:26:fc:b9:77: b9:53:27:0b:f5:be:0d:9f:c2:1c:5f:c7:d0:96:8c: d8:d6:9e:e7:fa:2a:87:58:5f:b6:f8:2e:f6:8f:44: 41:37:d6:56:a7:be:88:b2:99:3b:ca:e8:52:44:d4: 5e:f6:3d:c3:20:7c:90:0b:f4:41:b4:7d:6b:5c:d9: 57:06:99:aa:a7:c6:95:ae:06:17:84:9d:a0:3f:65: e1:33:27:45:57:08:4f:cb:fc:02:36:ce:dd:4a:10: 6f:2e:f1:2c:e3:a7:59:c5:b3:ee:eb:32:46:53:91: 94:8b:fb:19:ab:79:cf:52:de:23:97:54:3f:b8:7f: 56:4d:b2:ce:65:2f:aa:70:6a:ca:b0:86:7d:b5:c2: d9:ad:f5:68:26:9d:15:23:d5:36:e7:f3:44:1b:5e: 2c:4c:33:19:ca:3f:a8:22:81:1f:68:0f:f8:1a:11: 7b:15:02:fa:e0:4f:20:dd:b2:71:34:45:c3:c7:fa: f2:ed:2e:84:c8:9a:c0:13:39:cb:4a:2e:c2:40:e9: e1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BF:FE:FB:1A:05:68:A2:D3:70:4F:9C:52:BF:98:91:3D:F1:05:EE X509v3 Authority Key Identifier: keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/995F3DCEAF7811EABCA9AC1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.100.0/23 Signature Algorithm: sha256WithRSAEncryption 32:05:4f:b6:0f:61:3a:a6:3b:68:a6:37:aa:45:a7:03:5b:d3: 17:78:8f:0e:39:e2:fe:32:2d:79:17:d8:b0:9c:cc:f9:0b:ec: aa:8d:e5:38:51:71:b2:d8:49:47:97:65:b4:97:02:53:64:0a: f3:ae:0e:ba:df:e2:c9:32:ea:34:b9:74:ee:d2:73:54:8c:9e: f9:19:03:7a:b9:3c:b6:96:57:2a:65:59:b6:53:b3:7b:c3:ee: b6:5c:08:e4:bd:c7:47:4e:ab:a5:29:1b:7e:99:78:28:7d:b6: 57:98:e8:27:7a:8c:07:66:13:36:6d:86:a6:32:f7:bd:6c:c8: a9:51:a5:5b:c9:2f:bd:88:d3:38:56:22:19:a1:b7:4a:f0:41: 40:f1:81:8b:62:52:dd:7d:45:86:2b:5c:2c:63:64:4e:c3:e4: e0:55:0c:4b:84:67:ac:e3:fb:89:64:7a:67:a8:8f:bf:21:1f: 6b:f4:4e:10:06:62:40:b3:4b:18:5b:71:14:69:18:8b:aa:42: 50:0b:c5:fb:52:02:ae:77:cf:f1:1e:83:ff:f8:07:e1:b2:23: 97:bd:5b:a4:9c:a2:05:d7:ca:f0:2c:8e:ab:88:d4:9d:38:47: 9c:ab:48:57:c1:b1:00:1d:59:c6:5d:26:3c:66:cd:98:7a:6c: 9c:4a:e1:fe -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDRkQxMTAvBgNVBAUTKDYzN0U0MjcxOUNDQTA2NzY2NTNBMEE2QjM0QTA2RThF NTRBQzA1RUYwHhcNMjUwNTE0MjA1NzE2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI1MDNhYi00ODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/m10y80HQPnNJpfmdYmJmeOIfjIoA2ZFu3QpetQ7I4sn6xOMkzbH8d6hnSd zYvLKQp+NoCdqCb8uXe5UycL9b4Nn8IcX8fQlozY1p7n+iqHWF+2+C72j0RBN9ZW p76Ispk7yuhSRNRe9j3DIHyQC/RBtH1rXNlXBpmqp8aVrgYXhJ2gP2XhMydFVwhP y/wCNs7dShBvLvEs46dZxbPu6zJGU5GUi/sZq3nPUt4jl1Q/uH9WTbLOZS+qcGrK sIZ9tcLZrfVoJp0VI9U25/NEG14sTDMZyj+oIoEfaA/4GhF7FQL64E8g3bJxNEXD x/ry7S6EyJrAEznLSi7CQOnhYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMK//vsa BWii03BPnFK/mJE98QXuMB8GA1UdIwQYMBaAFGN+QnGcygZ2ZToKazSgbo5UrAXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNGRC8zN0EwNDI2NEFG NzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0JuWmxPZ3ByTktCdWpsU3NC ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzNUNjWnpLQm5abE9ncHJOS0J1amxTc0JlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkVDRkQvMzdBMDQyNjRBRjc3MTFFQTgxMTgzMTFCQzRGOUFFMDIvOTk1RjNEQ0VB Rjc4MTFFQUJDQTlBQzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlWQwDQYJKoZIhvcNAQELBQADggEBADIFT7YPYTqmO2im N6pFpwNb0xd4jw454v4yLXkX2LCczPkL7KqN5ThRcbLYSUeXZbSXAlNkCvOuDrrf 4sky6jS5dO7Sc1SMnvkZA3q5PLaWVyplWbZTs3vD7rZcCOS9x0dOq6UpG36ZeCh9 tleY6Cd6jAdmEzZthqYy971syKlRpVvJL72I0zhWIhmht0rwQUDxgYtiUt19RYYr XCxjZE7D5OBVDEuEZ6zj+4lkemeoj78hH2v0ThAGYkCzSxhbcRRpGIuqQlALxftS Aq53z/Eeg//4B+GyI5e9W6ScogXXyvAsjquI1J04R5yrSFfBsQAdWcZdJjxmzZh6 bJxK4f4= -----END CERTIFICATE-----Generated at Tue Jun 3 23:52:08 2025 by rpki-client