$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/412371002A5911F08EA23244C4F9AE02.roa File: 412371002A5911F08EA23244C4F9AE02.roa (raw, json) Hash identifier: nv5XmU97C++H82vtSbaW06zkLpVOeaF9Xg49KK/5bYU= Subject key identifier: 0E:87:DE:B6:93:EB:8B:25:93:37:03:68:0D:34:06:98:09:C5:9D:22 Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Certificate serial: 039F Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/412371002A5911F08EA23244C4F9AE02.roa Signing time: Tue 06 May 2025 09:05:28 +0000 ROA not before: Tue 06 May 2025 09:05:28 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 137535 IP address blocks: 103.127.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 927 (0x39f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Validity Not Before: May 6 09:05:28 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6819d0d8-0369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f2:91:6c:46:59:56:81:2d:05:4e:b4:d9:70: be:39:36:59:f3:15:58:ad:57:f3:cc:57:84:01:2d: 46:bb:8f:4d:47:e5:ac:6a:39:8e:86:ef:91:2e:35: 43:c8:a0:17:a3:de:1c:05:76:f2:48:75:e5:0c:19: ca:65:18:d5:81:e4:60:f5:89:94:e7:6f:87:49:20: 5e:9a:96:c7:86:c0:be:5b:02:81:5a:95:e1:80:18: 9a:15:00:7c:3c:f0:1d:02:f8:ec:08:d5:f6:88:88: ab:cf:66:e2:dc:6c:ed:df:2f:d7:9c:16:da:3f:d5: b4:89:2f:38:bd:ea:3b:43:bb:cc:a3:6f:1f:6c:43: 53:a0:1d:7c:d6:f5:fe:fc:0a:8c:05:36:d5:d1:2c: 1e:07:66:63:a1:1f:c8:eb:69:d7:25:d3:73:e0:19: cf:0b:1c:8e:e8:4c:49:b7:80:07:c9:ce:f6:66:fd: 05:09:23:ff:fe:78:4a:81:68:33:86:2a:66:e9:b0: 17:6f:39:df:8d:ae:cf:fc:36:a9:0e:f9:f9:18:37: 11:cf:c1:d7:08:5d:84:83:95:93:42:e4:e1:b1:be: 20:57:b5:69:45:bc:bb:99:54:6f:76:92:a7:26:9d: de:93:1f:e6:94:3c:45:16:41:ad:59:ce:e9:7a:21: 81:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:87:DE:B6:93:EB:8B:25:93:37:03:68:0D:34:06:98:09:C5:9D:22 X509v3 Authority Key Identifier: keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/412371002A5911F08EA23244C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.240.0/22 Signature Algorithm: sha256WithRSAEncryption 16:4a:38:8c:98:a2:37:63:96:96:f7:ed:cf:8d:d9:07:8f:b4: 17:0e:d6:24:38:39:3d:a6:d9:72:12:82:8e:d0:44:8c:69:c3: 6a:8f:b1:6e:e9:2e:57:82:28:4f:87:0e:e0:35:a8:6c:d6:16: 99:6f:17:91:bb:9f:43:a9:e6:04:60:b6:ea:e0:c6:b4:1b:30: a3:fc:a7:40:a5:81:b6:1b:85:97:ae:14:2e:38:7d:38:9d:c9: a4:27:61:90:79:72:3c:0e:06:3b:31:3e:e8:f0:52:8a:e4:dd: c5:3e:bc:9b:6e:64:bb:3b:43:6f:5a:aa:20:f7:d7:7b:bd:37: 78:3b:0d:21:30:26:fd:ac:ec:f1:32:8a:62:2e:1f:77:67:19: 0c:4d:b3:40:d6:ed:46:a8:81:35:25:d8:bd:c3:6f:43:8e:c7: cf:18:c8:01:11:07:0d:2b:b6:ca:ad:a1:4f:4d:04:64:6b:a4: 6c:38:df:e7:21:50:40:eb:3c:5a:ea:a3:0a:6d:d2:0d:a4:04: fe:c7:f3:94:c6:c9:3f:f9:d9:0b:a7:e2:bd:87:25:94:74:06: ca:9f:a8:d8:49:7f:4e:44:a0:87:87:77:e5:89:c1:8a:92:df: 83:b5:ce:fb:6d:95:10:a8:85:a1:56:2b:ed:a0:f8:6a:c7:35: a3:bf:56:00 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxQUQxMTAvBgNVBAUTKDE1NjU3NzJCN0I0RUJFODUwNDlEMkFGOUIzMkFDQzg3 ODAzMTFBNUQwHhcNMjUwNTA2MDkwNTI4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODE5ZDBkOC0wMzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvKRbEZZVoEtBU602XC+OTZZ8xVYrVfzzFeEAS1Gu49NR+WsajmOhu+RLjVD yKAXo94cBXbySHXlDBnKZRjVgeRg9YmU52+HSSBempbHhsC+WwKBWpXhgBiaFQB8 PPAdAvjsCNX2iIirz2bi3Gzt3y/XnBbaP9W0iS84veo7Q7vMo28fbENToB181vX+ /AqMBTbV0SweB2ZjoR/I62nXJdNz4BnPCxyO6ExJt4AHyc72Zv0FCSP//nhKgWgz hipm6bAXbznfja7P/DapDvn5GDcRz8HXCF2Eg5WTQuThsb4gV7VpRby7mVRvdpKn Jp3ekx/mlDxFFkGtWc7peiGBYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFA6H3raT 64slkzcDaA00BpgJxZ0iMB8GA1UdIwQYMBaAFBVldyt7Tr6FBJ0q+bMqzIeAMRpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFBRC84RkRERjVFODk5 MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3ZvVUVuU3I1c3lyTWg0QXhH bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXVjNLM3RPdm9VRW5TcjVzeXJNaDRBeEdsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUxQUQvOEZEREY1RTg5OTFEMTFFQzgwOTM5QTU0QzRGOUFFMDIvNDEyMzcxMDAy QTU5MTFGMDhFQTIzMjQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnf/AwDQYJKoZIhvcNAQELBQADggEBABZKOIyYojdjlpb3 7c+N2QePtBcO1iQ4OT2m2XISgo7QRIxpw2qPsW7pLleCKE+HDuA1qGzWFplvF5G7 n0Op5gRgturgxrQbMKP8p0ClgbYbhZeuFC44fTidyaQnYZB5cjwOBjsxPujwUork 3cU+vJtuZLs7Q29aqiD313u9N3g7DSEwJv2s7PEyimIuH3dnGQxNs0DW7UaogTUl 2L3Db0OOx88YyAERBw0rtsqtoU9NBGRrpGw43+chUEDrPFrqowpt0g2kBP7H85TG yT/52Qun4r2HJZR0BsqfqNhJf05EoIeHd+WJwYqS34O1zvttlRCohaFWK+2g+GrH NaO/VgA= -----END CERTIFICATE-----Generated at Tue May 13 08:15:04 2025 by rpki-client