$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/87BB6D70822711ED94C3212CC4F9AE02.roa File: 87BB6D70822711ED94C3212CC4F9AE02.roa (raw, json) Hash identifier: TgzuO7T0sgwTCl2sRbtN58HlHEFkWtWHdI30YEepdig= Subject key identifier: 26:F2:98:91:34:5E:EB:42:72:1A:9B:8E:8A:1D:02:B4:F5:57:91:FD Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0D93 Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/87BB6D70822711ED94C3212CC4F9AE02.roa Signing time: Tue 06 May 2025 18:27:35 +0000 ROA not before: Tue 06 May 2025 18:27:35 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 4812 IP address blocks: 103.38.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3475 (0xd93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: May 6 18:27:35 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681a5496-a18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:80:77:ec:ea:15:46:cc:45:d2:c6:5b:c8:04: 15:42:ed:2f:13:d1:cd:ec:2d:fd:d9:17:19:b1:a4: b1:b0:91:81:91:2e:18:c0:4f:2a:fd:a3:2e:6a:29: bc:20:69:74:a9:5e:a6:2c:3e:b5:16:f2:a3:5a:bd: 9a:c9:67:6e:ab:30:8e:1d:b1:cd:1f:89:6c:28:ea: aa:47:b4:ad:69:f7:fa:76:ae:44:46:c5:35:aa:2f: 40:42:1b:1a:bd:e3:2b:01:c9:d3:07:13:f4:35:e8: c6:cb:f1:ac:75:0a:e9:dd:b4:7d:73:8e:65:d4:52: c2:ab:d8:07:f6:d8:b1:e8:f5:ac:2b:14:bd:cf:4f: 7f:3b:8a:6b:48:dd:2e:1c:3e:9d:eb:4b:7e:97:e9: 95:f0:f4:0a:2d:7a:50:ae:eb:09:b4:07:2e:62:ae: f3:a3:d3:66:4d:c4:e9:b2:34:0d:78:72:9f:d9:dc: 51:48:d1:45:85:25:09:90:35:19:0e:69:56:5f:26: 76:09:73:a2:9b:a2:ea:5d:52:99:56:0c:76:82:c3: db:03:39:91:cb:83:ee:1f:30:a7:ad:b1:5a:4d:76: f9:39:4b:5e:bb:ef:7b:f0:81:c3:3f:c4:22:7f:67: 84:1c:5d:73:2f:1d:5f:aa:40:be:93:2a:ae:94:37: d9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F2:98:91:34:5E:EB:42:72:1A:9B:8E:8A:1D:02:B4:F5:57:91:FD X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/87BB6D70822711ED94C3212CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.38.252.0/23 Signature Algorithm: sha256WithRSAEncryption 35:f1:99:c3:d5:7a:ff:da:d5:79:4e:e6:59:3c:f3:f7:9a:6a: 47:c0:18:ff:d6:65:7a:78:f3:24:01:1f:6c:3c:e1:9b:da:a8: c3:73:43:2f:94:dd:9b:54:10:8f:b0:9b:e9:47:50:70:7c:de: ee:29:0b:80:35:31:08:39:d8:18:42:19:34:20:0a:56:aa:9c: 16:84:45:54:20:27:df:06:6f:51:3b:dd:b3:1f:73:b7:ec:6a: 67:2f:4f:94:8d:3d:9b:76:bf:fe:70:68:ca:49:ef:ae:5e:ec: d4:d6:1f:cd:28:cb:2d:ef:f5:cb:db:d3:20:4b:e1:e9:ed:76: 68:d1:b6:bd:08:94:0e:90:72:b9:d5:0b:15:20:bb:4f:ec:7f: 30:7f:74:c2:9d:d2:dd:d0:91:cf:61:c1:04:b4:5e:64:a1:ad: 16:d8:36:a1:59:46:75:6a:fb:41:e9:dc:c8:75:72:73:44:68: 5f:aa:3e:f2:5c:82:25:16:59:2d:73:eb:ac:57:e3:33:07:9b: 31:4e:94:ff:b1:5d:5d:78:02:fd:fe:88:7d:72:3a:99:24:63: 45:2c:2b:3e:54:c3:55:c6:ec:49:c0:6c:7a:a3:49:4d:7f:66: 85:32:ed:d8:fb:a2:ea:a3:24:46:9d:74:b8:40:0e:c5:0c:e1: 6a:eb:f3:65 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjUwNTA2MTgyNzM1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhNTQ5Ni1hMThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YB37OoVRsxF0sZbyAQVQu0vE9HN7C392RcZsaSxsJGBkS4YwE8q/aMuaim8 IGl0qV6mLD61FvKjWr2ayWduqzCOHbHNH4lsKOqqR7Staff6dq5ERsU1qi9AQhsa veMrAcnTBxP0NejGy/GsdQrp3bR9c45l1FLCq9gH9tix6PWsKxS9z09/O4prSN0u HD6d60t+l+mV8PQKLXpQrusJtAcuYq7zo9NmTcTpsjQNeHKf2dxRSNFFhSUJkDUZ DmlWXyZ2CXOim6LqXVKZVgx2gsPbAzmRy4PuHzCnrbFaTXb5OUteu+978IHDP8Qi f2eEHF1zLx1fqkC+kyqulDfZmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCbymJE0 XutCchqbjoodArT1V5H9MB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTY4RjYvMzdEMDNERjZDRTI4MTFFOUE2QjZDMTdCQzRGOUFFMDIvODdCQjZENzA4 MjI3MTFFRDk0QzMyMTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnJvwwDQYJKoZIhvcNAQELBQADggEBADXxmcPVev/a1XlO 5lk88/eaakfAGP/WZXp48yQBH2w84ZvaqMNzQy+U3ZtUEI+wm+lHUHB83u4pC4A1 MQg52BhCGTQgClaqnBaERVQgJ98Gb1E73bMfc7fsamcvT5SNPZt2v/5waMpJ765e 7NTWH80oyy3v9cvb0yBL4entdmjRtr0IlA6QcrnVCxUgu0/sfzB/dMKd0t3Qkc9h wQS0XmShrRbYNqFZRnVq+0Hp3Mh1cnNEaF+qPvJcgiUWWS1z66xX4zMHmzFOlP+x XV14Av3+iH1yOpkkY0UsKz5Uw1XG7EnAbHqjSU1/ZoUy7dj7ouqjJEaddLhADsUM 4Wrr82U= -----END CERTIFICATE-----Generated at Wed May 14 10:45:14 2025 by rpki-client