$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/02F03EBCD2F111ECB0DB7850C4F9AE02.roa File: 02F03EBCD2F111ECB0DB7850C4F9AE02.roa (raw, json) Hash identifier: 4I3Yc+oHBu75hPbHWxPxeRv9eI1vw2aVJaFMOmOjLHw= Subject key identifier: 49:AB:40:62:C1:0A:10:1B:02:EC:A2:4B:E1:16:94:81:0D:FD:FD:DE Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 0366 Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/02F03EBCD2F111ECB0DB7850C4F9AE02.roa Signing time: Sat 03 May 2025 01:07:02 +0000 ROA not before: Sat 03 May 2025 01:07:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149658 IP address blocks: 103.185.20.0/24 maxlen: 24 103.185.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 00:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 870 (0x366) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: May 3 01:07:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68156c36-6050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:29:7e:42:2f:50:d0:42:4f:2d:43:b8:81:0e: 7a:2e:52:20:cd:e9:4f:2b:f1:c7:80:af:e9:c2:a2: a4:68:81:e6:50:32:67:d3:21:04:a9:a1:5a:0c:8a: 31:34:b0:49:8a:7a:a6:70:9b:79:9b:a1:b2:b1:f4: 0b:1c:ab:3b:2f:28:25:33:4c:18:00:40:bd:1a:31: da:f2:c6:0b:3b:28:cd:dd:ee:95:21:cf:7b:01:4b: e7:b1:6f:cd:37:bc:b6:66:d0:88:2b:1c:86:ec:8a: a4:bf:64:af:8e:6f:06:e6:80:06:4c:8c:94:d2:f0: 16:e2:59:77:a4:1e:dc:4b:5b:ff:22:8e:44:ac:d1: a3:9e:46:7e:f6:68:c1:e2:2a:d7:9c:7a:a7:75:11: 32:b0:31:ac:07:8d:fd:c6:c0:df:9a:0f:42:55:ee: 99:72:ca:27:9c:1d:e2:51:c3:4d:d3:8e:b4:c6:a8: b3:33:b7:82:90:cf:a2:8f:93:be:3e:ce:b2:3c:5a: 04:d7:cb:85:f3:18:55:e7:47:b5:e1:9b:7b:21:cf: c7:de:2a:aa:53:03:78:4d:16:fc:49:33:44:06:c0: 19:4f:14:08:b3:91:9a:2b:0a:34:6c:7d:fb:55:fb: 03:c6:d7:60:43:b0:5c:06:dc:94:15:04:39:98:16: c4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AB:40:62:C1:0A:10:1B:02:EC:A2:4B:E1:16:94:81:0D:FD:FD:DE X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/02F03EBCD2F111ECB0DB7850C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.185.20.0/23 Signature Algorithm: sha256WithRSAEncryption 93:ed:93:de:cf:8b:be:8a:34:3e:89:1d:53:d9:ca:80:94:05: fa:7e:d8:b1:3f:a4:0a:f2:25:4b:f7:1e:c7:2e:39:07:3c:66: 5c:b5:c9:cd:11:ee:fc:a2:aa:4a:aa:2c:61:be:f9:d8:33:e5: 22:28:71:bf:4b:75:46:c4:5a:fd:57:c5:73:86:98:9b:a5:02: 79:57:59:7a:bc:ad:b9:e7:93:eb:45:d8:ca:59:54:cf:70:e9: 44:01:f8:6c:d2:6e:b2:6b:e0:b3:4c:8f:a2:03:58:0a:85:2b: f3:83:39:a8:8e:de:47:fc:20:38:77:47:7a:61:a7:da:72:ac: 9a:49:a2:7d:e7:f2:8d:b8:39:99:83:30:8a:46:07:2f:6e:dc: d8:19:a2:2c:47:cb:d9:18:93:30:c9:0e:89:01:21:0e:b9:09: b7:ff:60:cf:80:18:5d:42:f1:ea:d1:00:43:a8:21:9a:16:7d: e5:39:4d:ea:23:6a:65:df:83:9b:2e:03:7b:23:52:da:98:79: dd:ee:ff:2f:b5:24:27:84:4c:01:f8:46:db:b6:83:43:ca:5c: dd:2d:25:a0:aa:20:d2:4b:94:45:36:3c:0c:ce:36:4e:cb:f6: fd:1e:ad:6e:90:ee:20:58:21:ae:cd:ab:86:66:f2:d9:c3:5d: b0:f5:82:2d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjUwNTAzMDEwNzAyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1NmMzNi02MDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSl+Qi9Q0EJPLUO4gQ56LlIgzelPK/HHgK/pwqKkaIHmUDJn0yEEqaFaDIox NLBJinqmcJt5m6GysfQLHKs7LyglM0wYAEC9GjHa8sYLOyjN3e6VIc97AUvnsW/N N7y2ZtCIKxyG7Iqkv2Svjm8G5oAGTIyU0vAW4ll3pB7cS1v/Io5ErNGjnkZ+9mjB 4irXnHqndREysDGsB439xsDfmg9CVe6ZcsonnB3iUcNN0460xqizM7eCkM+ij5O+ Ps6yPFoE18uF8xhV50e14Zt7Ic/H3iqqUwN4TRb8STNEBsAZTxQIs5GaKwo0bH37 VfsDxtdgQ7BcBtyUFQQ5mBbEkwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEmrQGLB ChAbAuyiS+EWlIEN/f3eMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTc2RTIvNDdDNDRBRDhBRTg5MTFFQzhBOEQzMzY4QzRGOUFFMDIvMDJGMDNFQkNE MkYxMTFFQ0IwREI3ODUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnuRQwDQYJKoZIhvcNAQELBQADggEBAJPtk97Pi76KND6J HVPZyoCUBfp+2LE/pAryJUv3HscuOQc8Zly1yc0R7vyiqkqqLGG++dgz5SIocb9L dUbEWv1XxXOGmJulAnlXWXq8rbnnk+tF2MpZVM9w6UQB+GzSbrJr4LNMj6IDWAqF K/ODOaiO3kf8IDh3R3php9pyrJpJon3n8o24OZmDMIpGBy9u3NgZoixHy9kYkzDJ DokBIQ65Cbf/YM+AGF1C8erRAEOoIZoWfeU5TeojamXfg5suA3sjUtqYed3u/y+1 JCeETAH4Rtu2g0PKXN0tJaCqINJLlEU2PAzONk7L9v0erW6Q7iBYIa7Nq4Zm8tnD XbD1gi0= -----END CERTIFICATE-----Generated at Sat May 10 20:32:21 2025 by rpki-client