$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/E9C2CC6C29CC11F086897744C4F9AE02.roa File: E9C2CC6C29CC11F086897744C4F9AE02.roa (raw, json) Hash identifier: uDhOs7m4hROOvuYbsNmfelIHLedEW+qbRLJoRWnov7k= Subject key identifier: 22:3A:7B:06:BA:2A:94:B8:FF:BB:8A:75:3C:A4:86:D0:CE:CF:FF:84 Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Certificate serial: 0598 Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/E9C2CC6C29CC11F086897744C4F9AE02.roa Signing time: Mon 05 May 2025 16:22:36 +0000 ROA not before: Mon 05 May 2025 16:22:36 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 152605 IP address blocks: 103.169.98.0/24 maxlen: 24 103.169.99.0/24 maxlen: 24 2001:df6:f580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1432 (0x598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Validity Not Before: May 5 16:22:36 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6818e5cb-00cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:f6:67:94:ff:f9:f2:ea:22:30:ea:30:0b: 94:e2:5c:88:24:3f:c0:d9:c7:5a:aa:11:63:87:c0: 64:48:4f:d3:44:43:0e:0c:a7:93:6f:8c:a9:32:1f: 10:a3:af:a3:35:52:97:8c:ae:88:c1:2e:e1:d9:ed: a1:c8:94:76:a9:cf:c6:83:b9:c6:a7:d2:3a:79:cc: 02:82:e0:e3:6c:7e:a2:6c:a4:ff:6a:b7:2c:93:aa: 4b:df:06:1c:d9:a2:d2:ab:b7:4d:ac:cf:64:5f:c8: f7:f5:cd:ee:fd:41:8d:0d:a1:d3:9f:76:61:e2:2f: fc:e9:78:e4:c1:65:e3:f1:78:c1:8c:02:35:de:a9: d9:43:06:fe:1c:f6:07:d3:11:ef:28:56:db:ba:d6: 6c:f1:7b:2d:2f:e9:7d:24:fb:39:7e:93:b5:61:d9: de:8a:63:2a:fe:2c:24:1b:84:71:98:b5:47:a1:ec: a1:d1:f6:d0:d0:97:1d:bd:4c:cd:02:2e:40:7e:4a: a7:94:ad:bb:2c:6b:5f:65:fc:44:55:e9:cd:8a:69: cc:fb:bb:0b:03:27:52:95:37:4c:6a:6a:39:0a:48: 59:82:3a:35:1b:14:fd:f4:b4:15:78:92:34:3e:59: a1:85:fd:87:e0:51:fc:ea:17:d2:14:0d:1b:35:1f: 40:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3A:7B:06:BA:2A:94:B8:FF:BB:8A:75:3C:A4:86:D0:CE:CF:FF:84 X509v3 Authority Key Identifier: keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/E9C2CC6C29CC11F086897744C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.169.98.0/23 IPv6: 2001:df6:f580::/48 Signature Algorithm: sha256WithRSAEncryption 25:b7:78:36:14:71:81:82:ec:7b:f1:5d:8c:b0:bf:f8:93:96: ba:7b:a2:bf:8b:82:72:cc:bc:15:01:87:72:06:a3:78:76:26: 3d:b6:23:82:b6:3e:71:24:ea:91:78:ac:a8:44:ca:1e:9f:d8: 4d:7a:6a:fa:b3:2a:7d:79:8d:40:2d:bb:71:13:07:82:19:b7: 14:43:86:20:5c:23:ae:d8:28:b7:76:be:07:80:f9:9b:94:17: c1:78:83:17:ea:94:06:ea:05:42:6b:b9:a8:9d:5a:29:02:f8: d5:14:32:d6:9a:e7:f5:a0:a4:95:2d:ee:62:71:f1:fc:ca:b9: eb:48:e1:ce:df:95:b9:d5:a6:16:9b:4d:dc:0f:02:8e:51:9f: f6:0e:3c:ef:25:94:ed:bf:05:25:8a:20:e7:85:4b:b6:6a:fe: 7b:46:25:c0:58:13:51:d0:c1:eb:12:7d:c4:5e:a2:2f:4a:14: bb:16:90:4e:b3:8d:c7:c9:ab:7b:b3:2b:15:88:1c:9d:09:66: 78:3f:1d:dc:d4:cf:f9:c8:be:20:c9:1f:bf:d5:a5:4b:69:a7: 09:b2:4e:27:be:29:2c:ef:91:cf:ef:27:be:dc:ca:36:e6:4e: e3:cc:93:08:27:cb:33:f7:ff:5e:aa:56:6a:b7:7e:79:98:2e: 9b:5a:7c:a7 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz MDg3RTk3NzAwHhcNMjUwNTA1MTYyMjM2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE4ZTVjYi0wMGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoP2Z5T/+fLqIjDqMAuU4lyIJD/A2cdaqhFjh8BkSE/TREMODKeTb4ypMh8Q o6+jNVKXjK6IwS7h2e2hyJR2qc/Gg7nGp9I6ecwCguDjbH6ibKT/arcsk6pL3wYc 2aLSq7dNrM9kX8j39c3u/UGNDaHTn3Zh4i/86XjkwWXj8XjBjAI13qnZQwb+HPYH 0xHvKFbbutZs8XstL+l9JPs5fpO1YdneimMq/iwkG4RxmLVHoeyh0fbQ0JcdvUzN Ai5AfkqnlK27LGtfZfxEVenNimnM+7sLAydSlTdMamo5CkhZgjo1GxT99LQVeJI0 Plmhhf2H4FH86hfSFA0bNR9AVQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCI6ewa6 KpS4/7uKdTykhtDOz/+EMB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjI4QkMvMEU3RDY0RDZERjBEMTFFQkIxMTMwRDgxQzRGOUFFMDIvRTlDMkNDNkMy OUNDMTFGMDg2ODk3NzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqWIwDwQCAAIwCQMHACABDfb1gDANBgkqhkiG9w0BAQsF AAOCAQEAJbd4NhRxgYLse/FdjLC/+JOWunuiv4uCcsy8FQGHcgajeHYmPbYjgrY+ cSTqkXisqETKHp/YTXpq+rMqfXmNQC27cRMHghm3FEOGIFwjrtgot3a+B4D5m5QX wXiDF+qUBuoFQmu5qJ1aKQL41RQy1prn9aCklS3uYnHx/Mq560jhzt+VudWmFptN 3A8CjlGf9g487yWU7b8FJYog54VLtmr+e0YlwFgTUdDB6xJ9xF6iL0oUuxaQTrON x8mre7MrFYgcnQlmeD8d3NTP+ci+IMkfv9WlS2mnCbJOJ74pLO+Rz+8nvtzKNuZO 48yTCCfLM/f/XqpWard+eZgum1p8pw== -----END CERTIFICATE-----Generated at Wed May 14 01:23:30 2025 by rpki-client