$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa File: 1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa (raw, json) Hash identifier: q7wHaZ7WhIdB/9HOXBV7j7aexx2zP2ZakkHbOXZVsxA= Subject key identifier: 08:CF:76:5C:0C:F1:B1:8C:1D:60:5C:38:49:22:84:12:86:A1:71:3A Certificate issuer: /CN=A91175BA/serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100 Certificate serial: 0112 Authority key identifier: EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa Signing time: Wed 07 May 2025 04:17:01 +0000 ROA not before: Wed 07 May 2025 04:17:01 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152320 IP address blocks: 103.85.72.0/22 maxlen: 23 103.85.72.0/24 maxlen: 24 103.85.73.0/24 maxlen: 24 103.85.74.0/24 maxlen: 24 103.85.75.0/24 maxlen: 24 203.175.12.0/22 maxlen: 24 2001:df0:a640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175BA, serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100 Validity Not Before: May 7 04:17:01 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=681adebc-a72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b8:33:64:bb:d9:20:43:27:09:f5:2f:02:39: 09:12:53:38:a7:bd:fb:93:34:b1:c4:16:8f:cf:a5: d6:71:7a:52:98:fa:1c:39:1f:14:e1:0b:34:1b:3f: ed:98:a9:d1:30:0e:8d:1c:cd:9a:b6:47:66:fa:e0: 50:40:59:c2:d1:b4:96:7a:8d:29:e1:d3:94:58:d7: a8:7c:72:22:dc:29:5e:23:22:d4:d9:bf:e1:94:42: 63:5f:84:a7:28:52:9e:d3:d2:f9:7d:e3:a5:f5:d9: a2:61:d7:e8:83:35:e7:5f:b6:84:29:fa:7d:9f:d2: 71:dd:a5:9b:7a:6c:8e:81:44:0b:9a:fe:79:01:89: 0e:5d:fb:06:90:ac:ca:22:70:6b:7b:47:d1:5a:25: 8b:bc:bf:be:3e:f8:33:5f:9d:03:98:00:77:ed:ab: 52:bc:81:0e:1e:13:04:37:1b:75:c6:75:cb:43:b2: 51:f6:e5:ed:6c:56:a7:77:73:a7:14:52:f7:d4:fb: 6a:41:4b:12:93:74:44:65:06:f8:b4:3f:48:53:02: e1:b8:50:1f:25:f0:73:93:e6:18:c6:4b:fb:97:f8: 24:ff:7a:78:b4:2a:a1:f5:80:9e:ed:7b:c9:5a:20: 0b:10:fd:e4:28:44:09:66:61:77:2f:3c:f7:81:76: 3f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CF:76:5C:0C:F1:B1:8C:1D:60:5C:38:49:22:84:12:86:A1:71:3A X509v3 Authority Key Identifier: keyid:EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.72.0/22 203.175.12.0/22 IPv6: 2001:df0:a640::/48 Signature Algorithm: sha256WithRSAEncryption 86:58:2a:6e:e8:60:3f:f3:7f:cf:f6:9b:df:b3:04:9e:be:c2: b1:cd:4a:92:e9:68:6a:73:2f:e6:7a:46:93:63:76:64:7f:04: b9:7d:a9:b2:dd:99:b5:68:6a:a5:60:95:53:0a:73:7d:db:05: bd:5b:44:2f:b9:01:9e:92:49:e9:92:57:81:d9:ac:5d:b5:f0: 89:6d:ee:98:4a:af:f3:92:81:11:25:75:5e:00:13:f4:8d:51: 63:6d:65:42:24:7a:7d:fe:16:b0:29:18:5d:cf:24:90:ea:36: 5e:ae:c1:3d:fb:a5:29:9c:ab:e3:30:4a:55:63:a7:de:80:09: 1a:18:d9:eb:99:33:2d:d3:88:f5:16:85:22:f2:79:15:b9:4f: 46:09:c9:9c:65:84:9f:2e:b9:c0:fe:99:cb:92:d8:0f:6c:01: 2a:9a:83:04:3b:c5:9f:54:d2:ba:a8:34:c5:9e:f1:30:4d:d2: 56:eb:78:d0:d0:f2:56:e8:cd:0f:89:7f:e8:40:9b:f5:08:84: c0:15:03:44:73:c3:f4:4e:6e:93:f0:10:77:c0:0a:71:4a:26: 64:a2:df:3a:58:39:64:3c:1c:b7:b5:56:83:be:ca:7c:9f:0f: 70:5c:63:1e:5c:14:e7:4d:7a:c1:e7:99:0b:86:84:7e:ad:db: 99:1f:2c:a2 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1QkExMTAvBgNVBAUTKEVBNjExMzdDMDkwMDkwNkU0NzQ4RDFFMDdDQzU1NUU2 QTdDQ0UxMDAwHhcNMjUwNTA3MDQxNzAxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhZGViYy1hNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LgzZLvZIEMnCfUvAjkJElM4p737kzSxxBaPz6XWcXpSmPocOR8U4Qs0Gz/t mKnRMA6NHM2atkdm+uBQQFnC0bSWeo0p4dOUWNeofHIi3CleIyLU2b/hlEJjX4Sn KFKe09L5feOl9dmiYdfogzXnX7aEKfp9n9Jx3aWbemyOgUQLmv55AYkOXfsGkKzK InBre0fRWiWLvL++PvgzX50DmAB37atSvIEOHhMENxt1xnXLQ7JR9uXtbFand3On FFL31PtqQUsSk3REZQb4tD9IUwLhuFAfJfBzk+YYxkv7l/gk/3p4tCqh9YCe7XvJ WiALEP3kKEQJZmF3Lzz3gXY/9wIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFAjPdlwM 8bGMHWBcOEkihBKGoXE6MB8GA1UdIwQYMBaAFOphE3wJAJBuR0jR4HzFVeanzOEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVCQS8xNkM0RDJCOEM4 NEQxMUVCOTkxM0QzMkRDNEY5QUUwMi82bUVUZkFrQWtHNUhTTkhnZk1WVjVxZk00 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZtRVRmQWtBa0c1SFNOSGdmTVZWNXFmTTRRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTc1QkEvMTZDNEQyQjhDODREMTFFQjk5MTNEMzJEQzRGOUFFMDIvMUY3RUNDODgy QUZBMTFGMEJDQkZCRDcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAJnVUgDBALLrwwwDwQCAAIwCQMHACABDfCmQDANBgkqhkiG 9w0BAQsFAAOCAQEAhlgqbuhgP/N/z/ab37MEnr7Csc1KkuloanMv5npGk2N2ZH8E uX2pst2ZtWhqpWCVUwpzfdsFvVtEL7kBnpJJ6ZJXgdmsXbXwiW3umEqv85KBESV1 XgAT9I1RY21lQiR6ff4WsCkYXc8kkOo2Xq7BPfulKZyr4zBKVWOn3oAJGhjZ65kz LdOI9RaFIvJ5FblPRgnJnGWEny65wP6Zy5LYD2wBKpqDBDvFn1TSuqg0xZ7xME3S Vut40NDyVujND4l/6ECb9QiEwBUDRHPD9E5uk/AQd8AKcUomZKLfOlg5ZDwct7VW g77KfJ8PcFxjHlwU5016weeZC4aEfq3bmR8sog== -----END CERTIFICATE-----Generated at Sun May 11 08:29:46 2025 by rpki-client