$ rpki-client -vvf rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/F7307C08FFCA11EB93268E6DC4F9AE02.roa File: F7307C08FFCA11EB93268E6DC4F9AE02.roa (raw, json) Hash identifier: 68/9CqYRkzm0ius//S97EiCu+9Aa9Wpy/boYkEQX4yg= Subject key identifier: CE:AE:AD:C8:1A:9A:7B:5A:EA:01:84:B1:5A:03:51:C9:92:FD:C6:46 Certificate issuer: /CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE Certificate serial: 051A Authority key identifier: 82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/F7307C08FFCA11EB93268E6DC4F9AE02.roa Signing time: Wed 30 Apr 2025 23:34:58 +0000 ROA not before: Wed 30 Apr 2025 23:34:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142040 IP address blocks: 103.165.112.0/24 maxlen: 24 103.165.113.0/24 maxlen: 24 2407:4e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1306 (0x51a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91294F7, serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE Validity Not Before: Apr 30 23:34:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6812b3a2-8f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:f4:af:d8:21:35:0d:a5:58:a8:bf:a2:9f: d4:3e:a2:68:fb:d8:0c:14:66:2d:12:83:23:38:b0: 8d:db:7a:ad:6c:f5:12:7e:71:66:17:71:95:6f:59: ef:4c:f7:56:be:2c:bc:ec:3e:f7:0b:02:8b:4e:88: 6a:e3:8a:b6:75:f4:59:b8:01:fd:4b:67:14:37:e6: 95:27:f7:16:2b:4c:77:2b:e8:66:c1:3c:97:74:85: ff:8a:64:96:9c:f6:32:5e:5b:27:22:cf:f6:10:7f: 37:c2:d0:6d:48:b2:3b:7b:b0:9a:7b:7a:c3:71:ee: 19:77:99:a4:24:6a:92:9b:44:15:57:32:df:f2:e8: a4:ff:9a:55:3e:1c:9e:3b:0d:09:39:7a:22:da:19: e2:1b:da:07:1d:bb:a4:e9:92:20:10:ff:e7:6b:17: 76:ec:97:bd:04:2e:05:b6:6c:26:54:9d:34:47:70: 0a:34:12:3a:24:d5:96:f9:57:c2:79:0e:a6:78:01: da:2f:23:c0:4d:e4:0a:53:a8:28:0c:1e:60:12:f9: 62:1d:1d:19:3b:e5:67:b8:d7:4f:bb:c5:8f:20:e9: 25:37:cc:6b:7b:40:6a:a8:e8:5f:a6:d8:40:54:79: bb:af:a1:c6:a4:ff:9e:6b:ae:e0:9a:c6:7e:f5:64: d4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AE:AD:C8:1A:9A:7B:5A:EA:01:84:B1:5A:03:51:C9:92:FD:C6:46 X509v3 Authority Key Identifier: keyid:82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/F7307C08FFCA11EB93268E6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.112.0/23 IPv6: 2407:4e40::/48 Signature Algorithm: sha256WithRSAEncryption 01:69:ad:be:91:81:ac:57:6e:28:40:0b:63:fc:3c:0f:73:c9: 0d:24:98:ab:fd:cd:25:55:09:bb:01:82:3c:68:e8:bd:d1:0b: 44:0e:95:5d:0c:d2:ca:df:68:88:15:b9:94:50:ed:85:0e:53: 4d:c1:01:35:d3:d4:5e:db:f8:2d:8f:75:03:c7:f0:86:28:66: 8f:ed:e5:21:69:65:6d:f6:e3:59:38:26:d3:4c:cc:25:55:f2: 35:b9:ab:29:dc:c0:87:5c:57:cc:52:8c:f5:4d:68:f8:76:95: 69:d2:bf:77:8e:59:6a:d3:d6:cf:42:bb:a0:c8:30:eb:b9:4b: 80:e6:49:15:9b:df:5f:e5:42:09:88:b1:2b:90:15:63:7e:8c: eb:34:db:29:9f:0d:ed:8d:f4:0a:43:a3:74:13:3c:58:78:9c: 40:87:80:b5:0e:33:71:bf:24:d4:20:59:cd:42:6c:78:73:45: cb:a7:9f:59:7f:4c:62:3b:12:9a:a3:a3:e9:50:fd:67:06:8a: b9:62:b7:59:42:22:b4:93:16:53:fe:a9:3a:fe:56:e5:d5:a3: f5:fe:10:5d:0f:b2:ab:6e:cc:b3:e2:a5:76:ee:5a:80:88:47: 49:bb:79:0a:be:ee:54:8d:c5:8b:d3:4d:0c:bc:d1:ae:97:cd: cd:18:14:f3 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk0RjcxMTAvBgNVBAUTKDgyQjMxRkExRENFMEM0QkYyRjY2Mzk3Nzg2QTZDMDhF NDdDNkI4RkUwHhcNMjUwNDMwMjMzNDU4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyYjNhMi04ZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+X0r9ghNQ2lWKi/op/UPqJo+9gMFGYtEoMjOLCN23qtbPUSfnFmF3GVb1nv TPdWviy87D73CwKLTohq44q2dfRZuAH9S2cUN+aVJ/cWK0x3K+hmwTyXdIX/imSW nPYyXlsnIs/2EH83wtBtSLI7e7Cae3rDce4Zd5mkJGqSm0QVVzLf8uik/5pVPhye Ow0JOXoi2hniG9oHHbuk6ZIgEP/naxd27Je9BC4FtmwmVJ00R3AKNBI6JNWW+VfC eQ6meAHaLyPATeQKU6goDB5gEvliHR0ZO+VnuNdPu8WPIOklN8xre0BqqOhfpthA VHm7r6HGpP+ea67gmsZ+9WTU5wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFM6urcga mnta6gGEsVoDUcmS/cZGMB8GA1UdIwQYMBaAFIKzH6Hc4MS/L2Y5d4amwI5Hxrj+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTRGNy81OUZGMDVBQUZG QzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hMOHZaamwzaHFiQWprZkd1 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyTWZvZHpneEw4dlpqbDNocWJBamtmR3VQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk0RjcvNTlGRjA1QUFGRkM4MTFFQkE4QTRBMDU3QzRGOUFFMDIvRjczMDdDMDhG RkNBMTFFQjkzMjY4RTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnpXAwDwQCAAIwCQMHACQHTkAAADANBgkqhkiG9w0BAQsF AAOCAQEAAWmtvpGBrFduKEALY/w8D3PJDSSYq/3NJVUJuwGCPGjovdELRA6VXQzS yt9oiBW5lFDthQ5TTcEBNdPUXtv4LY91A8fwhihmj+3lIWllbfbjWTgm00zMJVXy NbmrKdzAh1xXzFKM9U1o+HaVadK/d45ZatPWz0K7oMgw67lLgOZJFZvfX+VCCYix K5AVY36M6zTbKZ8N7Y30CkOjdBM8WHicQIeAtQ4zcb8k1CBZzUJseHNFy6efWX9M YjsSmqOj6VD9ZwaKuWK3WUIitJMWU/6pOv5W5dWj9f4QXQ+yq27Ms+Kldu5agIhH Sbt5Cr7uVI3Fi9NNDLzRrpfNzRgU8w== -----END CERTIFICATE-----Generated at Wed May 14 09:23:43 2025 by rpki-client