$ rpki-client -vvf rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/EF8CB49CD78F11EC91680D49C4F9AE02.roa File: EF8CB49CD78F11EC91680D49C4F9AE02.roa (raw, json) Hash identifier: m1T9GaVF/kOA3y3lDclBiCBdGMqPbCm1SzZbjGctr8o= Subject key identifier: 3D:29:E1:92:F3:5D:44:E3:72:51:12:1F:2F:01:6C:7C:F7:9A:64:4B Certificate issuer: /CN=A91772FA/serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522 Certificate serial: 0316 Authority key identifier: 3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/EF8CB49CD78F11EC91680D49C4F9AE02.roa Signing time: Wed 07 May 2025 01:07:56 +0000 ROA not before: Wed 07 May 2025 01:07:56 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.186.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 790 (0x316) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91772FA, serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522 Validity Not Before: May 7 01:07:56 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681ab26b-7b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:13:53:73:89:a1:b3:1a:53:b0:c5:22:9a: 3f:5e:82:ae:b2:c5:2d:28:3b:4a:85:86:ec:27:30: 8f:bc:43:52:53:95:3a:0a:34:d5:ab:8f:7e:06:b5: 91:a5:ee:41:01:4a:63:27:9a:74:26:a3:56:15:67: b5:a8:0a:18:51:5a:20:b8:13:d6:e6:44:30:78:c5: c1:9f:ed:2c:fb:12:d0:94:1f:29:52:7b:54:04:1a: d6:80:cd:40:9d:ae:86:69:0e:fb:00:fe:0a:d6:99: 76:56:e8:06:bf:10:2f:13:f4:d9:1e:98:48:6e:93: 25:32:77:a8:ee:ef:e8:7c:4c:f9:be:04:01:33:43: fa:62:17:b7:2f:48:51:71:ad:8c:5f:1b:90:38:4c: 26:44:c6:4d:27:63:24:71:4e:0d:91:bc:65:37:00: d7:30:fc:f5:28:21:e4:10:9e:4c:1a:e3:bc:f9:27: 29:32:b3:41:0b:cb:b7:ea:7e:93:0d:6f:a5:3e:5f: b6:f7:73:56:3c:6b:87:5f:b5:4c:a3:b2:0e:35:51: ea:0c:5c:62:03:18:05:c0:58:92:7f:45:67:58:93: 83:07:80:01:fb:09:43:df:09:9c:df:1d:9a:a0:73: bf:bc:86:be:f6:b6:b7:d1:64:e0:fa:a0:52:2b:2d: a9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:29:E1:92:F3:5D:44:E3:72:51:12:1F:2F:01:6C:7C:F7:9A:64:4B X509v3 Authority Key Identifier: keyid:3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/EF8CB49CD78F11EC91680D49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.205.0/24 Signature Algorithm: sha256WithRSAEncryption 64:b1:56:04:26:1c:97:6e:f4:4a:e7:37:f6:3a:71:b5:ac:24: 2a:bf:16:b7:a8:79:67:bb:c0:1d:bc:76:6d:ae:7e:53:36:2d: 1a:d3:96:d2:28:96:7f:b0:33:fd:75:a5:f8:74:89:12:2a:ad: 51:f5:28:28:b5:0e:23:ff:84:4e:5b:76:70:41:3b:24:96:03: cb:96:70:19:c0:a6:16:60:50:a8:7c:96:8a:9c:a7:fb:12:a1: b7:33:5f:61:d4:dd:f3:3d:67:95:ca:35:3d:0f:09:9d:0d:8b: 1d:f0:f1:2d:cb:78:15:11:36:d0:4a:26:90:13:69:4f:a0:a8: 27:89:98:92:61:10:f6:99:5b:82:ea:c6:01:92:b7:2c:9a:84: c0:4e:f1:14:61:68:90:86:52:0c:98:38:62:53:71:47:d2:1a: 72:4b:02:d8:da:fe:6d:71:b1:18:a1:67:27:49:49:8e:4f:5e: 1f:9c:73:cc:d4:e1:13:9f:45:f1:98:8a:3c:69:02:61:58:a4: ef:7b:5e:42:fc:a1:72:2e:2d:77:e4:fc:94:14:8e:b8:cd:52: ee:8c:67:a8:7f:4f:71:12:e0:37:b4:51:1f:38:80:87:f7:49: 3e:75:45:a6:68:d4:9a:cc:c5:6d:6a:77:4a:fe:12:0c:a1:6a: 64:43:a0:95 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcyRkExMTAvBgNVBAUTKDNCMTY4OEE1RjdCNzI0QUFGQkU3ODIwQTJDNjNEOTdC MkVBOEU1MjIwHhcNMjUwNTA3MDEwNzU2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhYjI2Yi03YjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5kTU3OJobMaU7DFIpo/XoKussUtKDtKhYbsJzCPvENSU5U6CjTVq49+BrWR pe5BAUpjJ5p0JqNWFWe1qAoYUVoguBPW5kQweMXBn+0s+xLQlB8pUntUBBrWgM1A na6GaQ77AP4K1pl2VugGvxAvE/TZHphIbpMlMneo7u/ofEz5vgQBM0P6Yhe3L0hR ca2MXxuQOEwmRMZNJ2MkcU4NkbxlNwDXMPz1KCHkEJ5MGuO8+ScpMrNBC8u36n6T DW+lPl+293NWPGuHX7VMo7IONVHqDFxiAxgFwFiSf0VnWJODB4AB+wlD3wmc3x2a oHO/vIa+9ra30WTg+qBSKy2pOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD0p4ZLz XUTjclESHy8BbHz3mmRLMB8GA1UdIwQYMBaAFDsWiKX3tySq++eCCixj2XsuqOUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzJGQS9ENzI0NDU2MkNE NzMxMUVDQTBBQTgwNjFDNEY5QUUwMi9PeGFJcGZlM0pLcjc1NElLTEdQWmV5Nm81 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL094YUlwZmUzSktyNzU0SUtMR1BaZXk2bzVTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzcyRkEvRDcyNDQ1NjJDRDczMTFFQ0EwQUE4MDYxQzRGOUFFMDIvRUY4Q0I0OUNE NzhGMTFFQzkxNjgwRDQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnus0wDQYJKoZIhvcNAQELBQADggEBAGSxVgQmHJdu9Ern N/Y6cbWsJCq/FreoeWe7wB28dm2uflM2LRrTltIoln+wM/11pfh0iRIqrVH1KCi1 DiP/hE5bdnBBOySWA8uWcBnAphZgUKh8loqcp/sSobczX2HU3fM9Z5XKNT0PCZ0N ix3w8S3LeBURNtBKJpATaU+gqCeJmJJhEPaZW4LqxgGStyyahMBO8RRhaJCGUgyY OGJTcUfSGnJLAtja/m1xsRihZydJSY5PXh+cc8zU4ROfRfGYijxpAmFYpO97XkL8 oXIuLXfk/JQUjrjNUu6MZ6h/T3ES4De0UR84gIf3ST51RaZo1JrMxW1qd0r+Egyh amRDoJU= -----END CERTIFICATE-----Generated at Tue May 13 08:05:05 2025 by rpki-client