$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/88DA4EC83E3511ED8B05E85AC4F9AE02.roa File: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (raw, json) Hash identifier: Bpmtc+dst8i9fWSSTK2qFRlGSZiBtVfIZ/yU5akTF90= Subject key identifier: B1:2D:BA:51:C3:BC:0D:B0:94:08:60:BC:61:8B:0C:EF:8C:DC:C9:29 Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Certificate serial: 01E6 Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/88DA4EC83E3511ED8B05E85AC4F9AE02.roa Signing time: Wed 09 Apr 2025 02:07:41 +0000 ROA not before: Wed 09 Apr 2025 02:07:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132229 IP address blocks: 103.7.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 01:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Validity Not Before: Apr 9 02:07:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f5d66d-a664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:9a:65:e1:fe:c2:5a:db:e4:14:35:e0:3e: 44:de:bb:1d:55:29:90:52:ab:54:dd:5b:5f:7e:16: bf:11:a3:40:ff:e2:bd:3e:93:d9:f2:c5:ba:53:91: ac:21:9a:f1:e8:51:22:11:3f:d3:02:1d:e5:c0:68: e5:b0:aa:dd:47:2b:36:8d:3f:d3:b4:4d:b5:f8:cb: be:24:42:54:63:f1:dc:1a:a5:d1:0a:6d:c4:15:34: d6:d3:06:e8:5b:31:7e:1b:e1:54:a8:60:76:b1:87: 4e:d4:a2:4f:62:49:28:d7:f7:82:f6:e5:85:32:5b: ba:2f:0a:6a:86:8a:18:39:6f:13:dd:fb:73:47:53: c2:a3:d9:32:56:18:ff:af:0c:5a:8e:ee:f3:52:78: da:4d:0d:4e:ae:58:9f:94:4d:51:b2:24:35:ff:ba: 60:30:a8:2a:d8:92:f5:f7:fb:f8:10:a4:39:98:ef: 1b:32:08:fb:d0:81:98:f9:e7:62:55:1e:8f:25:6a: f6:e6:8d:d4:b0:e6:67:2b:c3:7b:e4:3b:97:07:03: 17:9d:f3:d3:57:47:88:f4:30:80:b9:99:ef:cc:b6: 76:80:e7:e6:27:1e:a8:a1:05:62:60:c6:c0:af:85: 28:ab:fe:1f:00:f1:fd:ef:03:66:d0:d6:ee:cc:0b: 84:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2D:BA:51:C3:BC:0D:B0:94:08:60:BC:61:8B:0C:EF:8C:DC:C9:29 X509v3 Authority Key Identifier: keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/88DA4EC83E3511ED8B05E85AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.7.224.0/24 Signature Algorithm: sha256WithRSAEncryption 46:21:a6:5d:1a:0d:c8:44:c0:18:9e:26:8b:48:3f:76:5a:f8: 32:bb:be:90:e1:eb:aa:3d:f1:31:4a:dc:ad:94:b1:3b:ca:31: b8:81:69:90:cb:f0:73:31:1f:e8:1c:37:17:ca:5e:9d:dd:e4: e2:90:c8:9a:9b:ad:2c:6e:6b:30:d3:8d:75:a2:08:76:78:5f: 76:62:e7:63:39:35:7f:43:c2:83:5c:c7:ae:22:9c:0b:75:e9: fc:0c:e3:d8:e5:97:46:d8:6b:55:b7:63:ae:06:09:96:c3:7e: 1a:d1:83:bf:57:d5:f4:88:c4:be:f4:aa:c1:2b:ee:60:0d:f9: 1d:be:43:32:78:2c:db:46:1d:df:36:eb:1e:5c:3b:bd:a7:f9: 13:45:83:6f:89:dc:58:96:6f:8a:b2:30:b9:9b:5e:b9:f8:2f: 1e:93:6a:6c:00:cc:73:0a:4d:a2:10:7a:01:2a:3f:76:43:0d: 30:6b:a7:9f:46:7b:a2:b6:6a:39:8f:a8:81:af:fb:58:12:71: 53:2a:d3:d4:57:06:5e:20:ba:8b:21:d4:4e:c1:23:f9:03:8f: 8c:b3:b9:28:a3:83:7a:20:9f:b2:a7:ad:b5:bc:12:ad:7a:db: bb:c8:3d:ef:cf:58:68:8c:0f:45:76:f0:82:64:05:e7:8e:48: c2:43:92:ba -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUExMTAvBgNVBAUTKDc0QkYyRkUyNkQ0NEZGRUY2M0RFNjgzRjQyNDI0ODI0 MEZCNzIyOUEwHhcNMjUwNDA5MDIwNzQxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y1ZDY2ZC1hNjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhqaZeH+wlrb5BQ14D5E3rsdVSmQUqtU3Vtffha/EaNA/+K9PpPZ8sW6U5Gs IZrx6FEiET/TAh3lwGjlsKrdRys2jT/TtE21+Mu+JEJUY/HcGqXRCm3EFTTW0wbo WzF+G+FUqGB2sYdO1KJPYkko1/eC9uWFMlu6LwpqhooYOW8T3ftzR1PCo9kyVhj/ rwxaju7zUnjaTQ1OrliflE1RsiQ1/7pgMKgq2JL19/v4EKQ5mO8bMgj70IGY+edi VR6PJWr25o3UsOZnK8N75DuXBwMXnfPTV0eI9DCAuZnvzLZ2gOfmJx6ooQViYMbA r4Uoq/4fAPH97wNm0NbuzAuE9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLEtulHD vA2wlAhgvGGLDO+M3MkpMB8GA1UdIwQYMBaAFHS/L+JtRP/vY95oP0JCSCQPtyKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1QS8wQUVGMEZEODNF MzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8tOWozbWdfUWtKSUpBLTNJ cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMOHY0bTFFXy05ajNtZ19Ra0pJSkEtM0lwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTJDNUEvMEFFRjBGRDgzRTMyMTFFRDhERDdFMDZBQzRGOUFFMDIvODhEQTRFQzgz RTM1MTFFRDhCMDVFODVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnB+AwDQYJKoZIhvcNAQELBQADggEBAEYhpl0aDchEwBie JotIP3Za+DK7vpDh66o98TFK3K2UsTvKMbiBaZDL8HMxH+gcNxfKXp3d5OKQyJqb rSxuazDTjXWiCHZ4X3Zi52M5NX9DwoNcx64inAt16fwM49jll0bYa1W3Y64GCZbD fhrRg79X1fSIxL70qsEr7mAN+R2+QzJ4LNtGHd826x5cO72n+RNFg2+J3FiWb4qy MLmbXrn4Lx6TamwAzHMKTaIQegEqP3ZDDTBrp59Ge6K2ajmPqIGv+1gScVMq09RX Bl4guosh1E7BI/kDj4yzuSijg3ogn7KnrbW8Eq1627vIPe/PWGiMD0V28IJkBeeO SMJDkro= -----END CERTIFICATE-----Generated at Fri May 9 01:59:26 2025 by rpki-client