$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/8F9F2F823C0111EAB6CB9936C4F9AE02.roa File: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (raw, json) Hash identifier: IHsFYOv59LECoaCivBqfgQOGspVwczVXXfHkd/E13QQ= Subject key identifier: 36:2C:AC:AB:7A:E1:52:66:D3:E5:11:FC:0A:35:9D:A0:A1:CA:E7:D6 Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 0B2A Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/8F9F2F823C0111EAB6CB9936C4F9AE02.roa Signing time: Fri 02 May 2025 19:27:51 +0000 ROA not before: Fri 02 May 2025 19:27:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.136.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2858 (0xb2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB, serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: May 2 19:27:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68151cb7-903c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:09:17:50:f1:01:bc:03:b5:1e:13:af:50:90: 53:27:84:16:a5:d1:5d:b0:18:41:c6:d8:51:29:56: 92:f6:15:8e:9b:11:bf:9f:8a:4a:69:a0:90:36:c9: 9b:d5:c9:1b:d2:52:9b:a5:6c:16:0a:80:70:7a:0b: 96:38:29:9f:d3:cb:eb:3f:3f:51:31:47:97:b1:3f: 2a:6c:0f:c9:4e:96:a5:69:d8:cc:97:15:ae:b1:76: b5:73:6a:d2:db:4d:c0:13:b2:00:24:b1:c1:28:57: a3:5b:72:ae:be:2e:1a:aa:c5:6e:68:6d:5a:cd:ba: 88:bc:66:d3:fd:44:79:3a:3e:d0:35:cf:68:1d:93: f6:c9:0d:7d:ce:8c:be:1b:ca:04:ed:c8:be:c1:53: cb:e7:df:ae:4e:f7:69:6d:8a:a1:41:f8:60:37:0d: 0e:97:77:91:98:fd:6e:68:45:e4:3c:26:42:75:74: 22:12:0e:1e:70:e5:d4:37:23:d8:20:8b:ae:33:94: 25:b6:16:bd:e7:14:48:aa:98:ff:42:9a:d1:08:4f: 51:a3:6b:cf:a5:bf:d9:10:28:43:5a:88:93:ca:cf: 51:06:5a:67:89:f7:f7:cf:b6:3a:9b:1b:07:b9:6d: 49:65:b1:63:aa:30:6f:ed:ce:32:d1:00:dd:99:4a: 04:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2C:AC:AB:7A:E1:52:66:D3:E5:11:FC:0A:35:9D:A0:A1:CA:E7:D6 X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/8F9F2F823C0111EAB6CB9936C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.10.0/24 Signature Algorithm: sha256WithRSAEncryption 34:9d:b8:d4:ea:c8:79:74:fe:67:df:8a:a5:98:77:be:41:67: f2:63:35:8a:e0:3f:0a:e5:d0:b3:d7:af:23:29:0e:64:bb:9f: 67:6a:5c:0c:02:3e:29:1c:b6:98:50:dc:bf:07:a7:7d:83:63: 27:5a:f5:d8:8a:e5:9b:83:dc:1b:01:b8:2c:ce:62:38:21:40: 71:e9:4c:b8:ca:1f:69:0d:a6:80:d1:f4:94:25:06:e1:e2:fb: d4:ad:c2:0c:f2:9d:39:eb:5c:df:3d:28:60:7a:37:e3:54:80: b7:85:23:42:52:84:4e:72:d8:4b:de:b4:97:98:07:9c:c3:2f: 7c:5f:bc:01:e2:a0:4b:ce:e2:73:ca:74:d4:c2:e5:96:7a:cd: 95:d2:88:67:75:21:84:b7:22:71:09:33:04:18:c2:c9:53:59: 16:9a:dc:d7:4e:53:33:05:7b:56:0a:e3:72:88:be:c4:2b:93: 91:7f:6f:ab:75:b3:eb:47:f9:a9:17:6b:f7:a6:ae:b7:f0:00: d5:cd:bf:8d:d4:9a:b7:55:27:8f:8b:1f:64:f1:b4:1f:4e:3a: 00:2c:6f:14:fe:20:8a:46:50:86:ab:6d:d9:b4:84:c0:8c:df: 7a:53:be:6c:27:98:ea:c3:a8:0e:8f:89:ac:59:3f:c9:9f:c0: 4e:02:19:6d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjUwNTAyMTkyNzUxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1MWNiNy05MDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gkXUPEBvAO1HhOvUJBTJ4QWpdFdsBhBxthRKVaS9hWOmxG/n4pKaaCQNsmb 1ckb0lKbpWwWCoBweguWOCmf08vrPz9RMUeXsT8qbA/JTpaladjMlxWusXa1c2rS 203AE7IAJLHBKFejW3Kuvi4aqsVuaG1azbqIvGbT/UR5Oj7QNc9oHZP2yQ19zoy+ G8oE7ci+wVPL59+uTvdpbYqhQfhgNw0Ol3eRmP1uaEXkPCZCdXQiEg4ecOXUNyPY IIuuM5Qltha95xRIqpj/QprRCE9Ro2vPpb/ZEChDWoiTys9RBlpniff3z7Y6mxsH uW1JZbFjqjBv7c4y0QDdmUoEmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDYsrKt6 4VJm0+UR/Ao1naChyufWMB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjM1QkIvNTc4OUIxQTQzQzAwMTFFQUI4MTc5NzM0QzRGOUFFMDIvOEY5RjJGODIz QzAxMTFFQUI2Q0I5OTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABniAowDQYJKoZIhvcNAQELBQADggEBADSduNTqyHl0/mff iqWYd75BZ/JjNYrgPwrl0LPXryMpDmS7n2dqXAwCPikctphQ3L8Hp32DYyda9diK 5ZuD3BsBuCzOYjghQHHpTLjKH2kNpoDR9JQlBuHi+9StwgzynTnrXN89KGB6N+NU gLeFI0JShE5y2EvetJeYB5zDL3xfvAHioEvO4nPKdNTC5ZZ6zZXSiGd1IYS3InEJ MwQYwslTWRaa3NdOUzMFe1YK43KIvsQrk5F/b6t1s+tH+akXa/emrrfwANXNv43U mrdVJ4+LH2TxtB9OOgAsbxT+IIpGUIarbdm0hMCM33pTvmwnmOrDqA6PiaxZP8mf wE4CGW0= -----END CERTIFICATE-----Generated at Fri May 16 07:19:05 2025 by rpki-client