$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/74BDB7D0B96C11EB956C1D2DC4F9AE02.roa File: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (raw, json) Hash identifier: IADvK+KgV5vnYxJ4wHU1Xtz8TSGee8Bm5ZckrfzrChM= Subject key identifier: 01:07:E5:D0:13:B1:50:83:9F:F6:18:A2:C1:02:62:0C:A4:AB:42:17 Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Certificate serial: 05D3 Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/74BDB7D0B96C11EB956C1D2DC4F9AE02.roa Signing time: Sat 10 May 2025 23:02:43 +0000 ROA not before: Sat 10 May 2025 23:02:43 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142138 IP address blocks: 103.166.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1491 (0x5d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128B5, serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Validity Not Before: May 10 23:02:43 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681fdb13-1fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a9:d3:5a:26:54:83:62:0a:9a:8c:4d:02:38: df:38:e3:69:f8:dd:20:a2:60:00:4b:e1:44:e7:dd: 03:f3:8c:c0:3e:bc:78:78:12:9a:fa:c9:f4:6d:93: e7:89:7c:78:ce:4b:d2:13:19:5f:d2:9d:a2:3f:c6: 19:e8:b0:9f:94:77:46:57:00:69:cb:df:b8:89:f2: 76:f8:65:c9:f2:ae:3d:f2:06:f9:ff:cb:72:04:5a: 65:0d:ea:88:91:ae:0d:c6:3e:a8:c4:ca:04:7e:7d: 09:b7:64:c8:2c:05:e8:6b:09:b1:f6:ce:3b:c9:fe: 25:ee:2f:71:e4:f4:92:3e:a6:cc:c1:88:39:db:c9: 3c:b7:91:f1:1d:97:50:08:61:45:81:8c:69:62:eb: ef:fd:fc:21:1c:e0:57:49:75:a9:09:48:98:32:98: 36:54:bb:b0:c7:4a:8d:3e:a0:9d:a4:b2:5f:3f:31: a4:8d:60:de:97:19:ec:04:21:41:39:93:c5:e4:58: e7:91:c0:25:69:6e:0b:a1:aa:bd:ee:18:fe:d9:a4: c3:01:48:67:73:89:30:5e:65:a4:3a:56:d3:59:59: f3:fb:41:f2:67:55:c3:95:4b:d3:8d:3d:c0:d4:4d: 08:a9:c5:8e:1c:62:29:1a:14:8f:b0:0b:93:c7:30: a5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:07:E5:D0:13:B1:50:83:9F:F6:18:A2:C1:02:62:0C:A4:AB:42:17 X509v3 Authority Key Identifier: keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/74BDB7D0B96C11EB956C1D2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.202.0/23 Signature Algorithm: sha256WithRSAEncryption 41:d0:0f:dc:89:bc:59:0e:52:c3:9b:76:cb:f3:4d:09:7e:6c: 01:2e:ba:cd:0d:f6:8a:86:82:e5:8f:52:79:9b:41:59:f5:24: a6:3f:06:35:6e:4e:53:a6:26:1a:65:92:21:10:d3:c7:14:bc: 5d:94:38:a9:71:1f:44:ac:af:db:1b:0d:d9:cc:85:d0:b7:4d: ff:93:08:c8:5e:8e:84:d5:d8:f8:8c:70:f9:ba:db:35:90:54: b7:eb:bc:2f:e8:2d:64:c7:6b:6b:7b:6b:e3:7d:f8:ad:ce:86: b9:bf:f3:ee:a5:50:95:6a:1a:f3:83:24:bb:f5:ab:11:a5:0f: 2d:a9:47:b1:c2:6e:82:d5:1e:58:f9:14:91:f7:2d:3c:85:17: b7:95:59:20:50:34:2c:14:4b:58:5d:0d:43:39:8b:aa:24:37: 49:2e:30:68:78:ef:cb:cc:ac:05:08:57:76:cf:b8:1f:b9:82: ef:f4:36:03:dc:55:28:02:7d:c7:0b:4f:99:1e:e7:c6:e0:51: af:56:af:1a:68:5d:43:fa:2a:93:aa:3a:a1:fe:d6:4c:b4:76: ae:c4:e4:eb:08:e4:eb:7c:79:c6:9e:3e:27:8d:78:22:59:b8: 51:8d:e3:c3:8f:c9:e8:54:f1:cf:59:ff:95:a1:f6:b4:92:50: c7:64:8b:cc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QjUxMTAvBgNVBAUTKDkxQUVFOTYwREM0MUZGOThFRDFCMzcyMzM0MzE3Mzkz ODEyNkRDOUYwHhcNMjUwNTEwMjMwMjQzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFmZGIxMy0xZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qnTWiZUg2IKmoxNAjjfOONp+N0gomAAS+FE590D84zAPrx4eBKa+sn0bZPn iXx4zkvSExlf0p2iP8YZ6LCflHdGVwBpy9+4ifJ2+GXJ8q498gb5/8tyBFplDeqI ka4Nxj6oxMoEfn0Jt2TILAXoawmx9s47yf4l7i9x5PSSPqbMwYg528k8t5HxHZdQ CGFFgYxpYuvv/fwhHOBXSXWpCUiYMpg2VLuwx0qNPqCdpLJfPzGkjWDelxnsBCFB OZPF5FjnkcAlaW4Loaq97hj+2aTDAUhnc4kwXmWkOlbTWVnz+0HyZ1XDlUvTjT3A 1E0IqcWOHGIpGhSPsAuTxzCl5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFAEH5dAT sVCDn/YYosECYgykq0IXMB8GA1UdIwQYMBaAFJGu6WDcQf+Y7Rs3IzQxc5OBJtyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhCNS8zRUJDRDFEQUI5 NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81anRHemNqTkRGems0RW0z SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thN3BZTnhCXzVqdEd6Y2pOREZ6azRFbTNKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI4QjUvM0VCQ0QxREFCOTZCMTFFQkIxNkVFRjJDQzRGOUFFMDIvNzRCREI3RDBC OTZDMTFFQjk1NkMxRDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnpsowDQYJKoZIhvcNAQELBQADggEBAEHQD9yJvFkOUsOb dsvzTQl+bAEuus0N9oqGguWPUnmbQVn1JKY/BjVuTlOmJhplkiEQ08cUvF2UOKlx H0Ssr9sbDdnMhdC3Tf+TCMhejoTV2PiMcPm62zWQVLfrvC/oLWTHa2t7a+N9+K3O hrm/8+6lUJVqGvODJLv1qxGlDy2pR7HCboLVHlj5FJH3LTyFF7eVWSBQNCwUS1hd DUM5i6okN0kuMGh478vMrAUIV3bPuB+5gu/0NgPcVSgCfccLT5ke58bgUa9Wrxpo XUP6KpOqOqH+1ky0dq7E5OsI5Ot8ecaePieNeCJZuFGN48OPyehU8c9Z/5Wh9rSS UMdki8w= -----END CERTIFICATE-----Generated at Sun May 11 12:22:38 2025 by rpki-client