$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa File: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (raw, json) Hash identifier: tqUNG1S/rsB6bW3LBm3IsjWdqGyc7l/8ScuxBxWoVEo= Subject key identifier: C8:5D:AC:93:71:C3:23:6E:EE:39:D1:CB:79:54:87:45:74:05:99:04 Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Certificate serial: A9 Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa Signing time: Thu 01 May 2025 05:12:31 +0000 ROA not before: Thu 01 May 2025 05:12:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136493 IP address blocks: 103.90.76.0/24 maxlen: 24 103.112.67.0/24 maxlen: 24 103.112.78.0/23 maxlen: 23 103.112.78.0/24 maxlen: 24 103.112.79.0/24 maxlen: 24 2001:df4:6b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Validity Not Before: May 1 05:12:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681302bf-7920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:7a:41:89:fe:98:00:0c:1d:53:8b:8e:59: da:02:e4:76:e4:73:6f:89:4c:c0:20:09:1f:21:78: 43:0f:66:20:29:ba:fc:0d:dc:f9:bf:73:33:6c:cc: 32:de:82:87:e2:5c:1c:9e:0a:f6:67:1c:48:09:82: ba:db:b1:3c:e4:7e:fe:56:64:91:a2:cb:b0:df:4c: 3f:e1:b2:8f:92:63:dc:e1:ba:fc:68:eb:72:77:c6: d2:7f:88:e3:d4:39:88:3b:f1:bd:c3:2b:67:78:85: 96:4f:fc:13:d1:f6:7d:90:dc:59:b7:dc:1e:df:f9: 87:db:d3:17:24:95:58:4b:71:32:72:0a:97:34:6f: af:5e:43:38:b8:2c:5b:27:e9:4e:9b:94:c7:88:75: 83:a7:d3:8c:a3:c4:90:ba:58:ec:7e:c9:94:48:a7: e6:2c:e8:48:09:0b:18:5d:de:99:31:a2:6f:4a:9d: e3:4d:ad:dd:14:35:b0:5f:26:bf:b4:18:83:9b:2a: 34:2d:4d:7e:86:62:67:07:a9:de:ff:f2:f0:65:f7: e3:d4:7b:22:e4:2c:4a:92:78:da:97:8c:01:38:9e: 23:95:55:57:41:00:50:4a:83:a7:1f:b1:52:79:89: ad:c3:43:a9:02:1d:f8:1f:ab:0b:64:36:cf:fd:b0: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5D:AC:93:71:C3:23:6E:EE:39:D1:CB:79:54:87:45:74:05:99:04 X509v3 Authority Key Identifier: keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.90.76.0/24 103.112.67.0/24 103.112.78.0/23 IPv6: 2001:df4:6b00::/48 Signature Algorithm: sha256WithRSAEncryption 1c:5b:eb:16:a9:83:76:48:fd:3d:f9:83:2e:0b:d8:9e:b2:fe: 9d:1d:79:1c:58:03:82:e3:ce:fa:77:be:8e:69:a4:7a:27:14: d7:2e:54:79:ad:03:8e:f9:7d:6d:ae:35:c8:10:b7:39:11:a9: e4:20:b1:24:f7:cd:de:aa:80:f3:e1:9d:be:e5:69:ba:ed:68: 1f:ec:38:43:31:26:74:93:2b:c9:c0:9a:3f:20:a3:46:8f:fb: b4:e5:0c:4b:c1:62:fb:32:31:0a:66:0d:0f:44:ca:43:39:ff: 95:5e:5c:ba:3e:94:10:a7:3a:fa:d9:50:ff:8f:d3:4f:43:ba: 5a:52:d4:fa:b1:e0:ba:b1:75:35:4b:1c:df:94:22:92:53:bb: 1c:ba:a6:e9:78:76:7c:38:90:4f:76:98:6b:98:89:1f:32:d5: 12:74:cc:5d:3a:fe:6a:35:61:12:9c:8e:83:2f:c0:ab:02:ce: ad:79:15:78:f5:e8:d8:73:94:6c:84:34:7e:5d:12:af:0f:a8: 4d:20:af:7f:a1:ac:2f:62:11:32:6d:c5:28:3b:dc:f2:cb:3e: 7e:f1:96:cc:b2:32:83:9d:03:dc:f4:e2:fd:b2:b6:0e:e5:3f: ff:84:4d:b1:a8:c4:97:40:52:e2:a0:d1:ab:02:92:f1:fd:a6: ef:02:90:14 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM5REExMTAvBgNVBAUTKDJEMUUwRUE3N0FDQTNGRTU5N0RFRjMxOTYyMUVGNDBE MTJENEMxREMwHhcNMjUwNTAxMDUxMjMxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEzMDJiZi03OTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtM56QYn+mAAMHVOLjlnaAuR25HNviUzAIAkfIXhDD2YgKbr8Ddz5v3MzbMwy 3oKH4lwcngr2ZxxICYK627E85H7+VmSRosuw30w/4bKPkmPc4br8aOtyd8bSf4jj 1DmIO/G9wytneIWWT/wT0fZ9kNxZt9we3/mH29MXJJVYS3EycgqXNG+vXkM4uCxb J+lOm5THiHWDp9OMo8SQuljsfsmUSKfmLOhICQsYXd6ZMaJvSp3jTa3dFDWwXya/ tBiDmyo0LU1+hmJnB6ne//LwZffj1Hsi5CxKknjal4wBOJ4jlVVXQQBQSoOnH7FS eYmtw0OpAh34H6sLZDbP/bBlgQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMhdrJNx wyNu7jnRy3lUh0V0BZkEMB8GA1UdIwQYMBaAFC0eDqd6yj/ll97zGWIe9A0S1MHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzlEQS82Q0I5RDBBNjJG QUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1AtV1gzdk1aWWg3MERSTFV3 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSNE9wM3JLUC1XWDN2TVpZaDcwRFJMVXdkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTM5REEvNkNCOUQwQTYyRkFCMTFFRkJFRDk2NzZBQzRGOUFFMDIvMDU2RjBGRkEy RkFDMTFFRkE0RDQ1QzZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBABnWkwDBABncEMDBAFncE4wDwQCAAIwCQMHACABDfRrADAN BgkqhkiG9w0BAQsFAAOCAQEAHFvrFqmDdkj9PfmDLgvYnrL+nR15HFgDguPO+ne+ jmmkeicU1y5Uea0Djvl9ba41yBC3ORGp5CCxJPfN3qqA8+GdvuVpuu1oH+w4QzEm dJMrycCaPyCjRo/7tOUMS8Fi+zIxCmYND0TKQzn/lV5cuj6UEKc6+tlQ/4/TT0O6 WlLU+rHgurF1NUsc35QiklO7HLqm6Xh2fDiQT3aYa5iJHzLVEnTMXTr+ajVhEpyO gy/AqwLOrXkVePXo2HOUbIQ0fl0Srw+oTSCvf6GsL2IRMm3FKDvc8ss+fvGWzLIy g50D3PTi/bK2DuU//4RNsajEl0BS4qDRqwKS8f2m7wKQFA== -----END CERTIFICATE-----Generated at Tue May 13 06:43:17 2025 by rpki-client