$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/1F89C5C22CB511F08A1A9242C4F9AE02.roa File: 1F89C5C22CB511F08A1A9242C4F9AE02.roa (raw, json) Hash identifier: baAQ8jjbDnd+yIywZELKI/f+fLzoC+yEEVRka25c/bE= Subject key identifier: 30:F4:13:2A:6F:47:86:10:DC:A1:F7:FA:C8:6E:E1:48:B0:D9:6C:08 Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Certificate serial: 03F9 Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/1F89C5C22CB511F08A1A9242C4F9AE02.roa Signing time: Fri 09 May 2025 09:08:08 +0000 ROA not before: Fri 09 May 2025 09:08:08 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 151373 IP address blocks: 103.103.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1017 (0x3f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Validity Not Before: May 9 09:08:08 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=681dc5f8-020d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:fb:74:6b:db:52:94:79:15:3f:79:a9:06: 63:4b:f0:71:c5:a4:04:09:3b:b9:b3:d3:80:61:bb: 3b:e6:44:28:30:4b:9e:a6:85:e2:d0:11:f9:e8:7d: 2f:d9:0d:b0:7f:a4:14:41:80:5e:2e:71:81:82:2d: e5:e4:09:86:8d:11:c2:6a:27:59:44:87:4f:26:28: 14:2f:c4:52:3a:af:87:2b:7d:91:4c:16:d6:b0:04: dc:dd:b7:4e:83:44:eb:6b:94:22:5e:62:02:fd:eb: e0:eb:60:81:2f:9c:2c:7e:33:6f:5f:fb:e5:7c:c8: 03:91:9d:96:ff:52:8f:00:14:95:dd:f9:34:6e:73: b1:b5:d6:9f:9e:70:42:11:3a:78:25:9a:d2:6e:52: c0:da:06:a1:2b:79:4e:40:b0:4f:5a:11:0f:71:5e: 15:e2:a4:e8:47:97:a6:d8:ec:74:ac:96:3f:6f:5d: 54:2c:4c:72:1b:8c:08:03:7f:41:0b:98:d6:85:d3: 12:a3:c3:31:2a:e3:36:0a:56:1b:b1:10:a2:d5:96: d2:82:4f:57:72:a8:7a:8e:6f:95:f1:3a:5f:42:84: d7:80:09:fa:d3:f2:9a:dd:fd:f7:c7:a3:8d:fd:ec: 43:93:2e:5a:2f:44:65:ff:2c:de:fd:4e:e9:fc:89: 5e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F4:13:2A:6F:47:86:10:DC:A1:F7:FA:C8:6E:E1:48:B0:D9:6C:08 X509v3 Authority Key Identifier: keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/1F89C5C22CB511F08A1A9242C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.103.244.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:b0:9a:e3:97:46:4d:da:a1:a5:48:0c:5c:78:d1:84:29:5e: 2d:e5:54:41:5f:fa:92:c1:5c:6e:dc:70:9c:b1:eb:bd:d7:1d: 24:1b:98:9e:7e:1f:36:ac:08:40:1f:ee:44:64:c7:8a:a0:14: 76:b8:76:cc:68:08:7f:ae:43:2f:3e:ad:d1:bb:08:cf:19:94: f5:93:2d:89:b4:e8:00:9b:34:5d:2c:90:f5:94:11:52:b1:8c: 1a:fd:82:05:76:8e:3c:1c:fe:05:ac:23:31:31:90:96:b4:78: 20:6e:76:5a:80:29:f1:77:33:74:c8:06:a6:b4:50:87:04:52: af:6f:01:9b:13:6d:24:48:ad:51:67:ad:aa:f2:ab:50:14:cc: 34:b7:94:01:7b:ec:2f:67:fb:99:e1:37:4a:b1:63:d5:9b:5d: 36:19:b1:9b:4d:4c:5b:b6:8e:4e:28:67:76:a8:7f:c6:93:64: e9:80:63:32:2a:13:17:23:97:bc:9e:8e:64:9f:b2:0e:64:4d: d8:ab:64:9f:b5:bd:71:43:fa:fe:30:08:72:95:89:05:3d:d2: 53:97:e0:8e:ca:10:61:66:a1:b8:67:ea:77:f1:a3:63:a8:47: f8:cc:bb:9b:3e:52:ce:39:86:ce:f9:15:10:b5:af:8c:44:c9: 63:07:bf:a7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE MjYwQUE5NzgwHhcNMjUwNTA5MDkwODA4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFkYzVmOC0wMjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugn7dGvbUpR5FT95qQZjS/BxxaQECTu5s9OAYbs75kQoMEuepoXi0BH56H0v 2Q2wf6QUQYBeLnGBgi3l5AmGjRHCaidZRIdPJigUL8RSOq+HK32RTBbWsATc3bdO g0Tra5QiXmIC/evg62CBL5wsfjNvX/vlfMgDkZ2W/1KPABSV3fk0bnOxtdafnnBC ETp4JZrSblLA2gahK3lOQLBPWhEPcV4V4qToR5em2Ox0rJY/b11ULExyG4wIA39B C5jWhdMSo8MxKuM2ClYbsRCi1ZbSgk9Xcqh6jm+V8TpfQoTXgAn60/Ka3f33x6ON /exDky5aL0Rl/yze/U7p/IleYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDD0Eypv R4YQ3KH3+shu4Uiw2WwIMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1N0IvOERBNzI2NDBDMUZBMTFFQ0IzMEVFMjFBQzRGOUFFMDIvMUY4OUM1QzIy Q0I1MTFGMDhBMUE5MjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnZ/QwDQYJKoZIhvcNAQELBQADggEBAC6wmuOXRk3aoaVI DFx40YQpXi3lVEFf+pLBXG7ccJyx673XHSQbmJ5+HzasCEAf7kRkx4qgFHa4dsxo CH+uQy8+rdG7CM8ZlPWTLYm06ACbNF0skPWUEVKxjBr9ggV2jjwc/gWsIzExkJa0 eCBudlqAKfF3M3TIBqa0UIcEUq9vAZsTbSRIrVFnraryq1AUzDS3lAF77C9n+5nh N0qxY9WbXTYZsZtNTFu2jk4oZ3aof8aTZOmAYzIqExcjl7yejmSfsg5kTdirZJ+1 vXFD+v4wCHKViQU90lOX4I7KEGFmobhn6nfxo2OoR/jMu5s+Us45hs75FRC1r4xE yWMHv6c= -----END CERTIFICATE-----Generated at Tue May 13 22:55:17 2025 by rpki-client