$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/1BA4C14A2D3D11F08B0E527DC4F9AE02.roa File: 1BA4C14A2D3D11F08B0E527DC4F9AE02.roa (raw, json) Hash identifier: UZMkogX1OQfXFH1RLwemrmJ9iexBHtIlOq8021BP/cw= Subject key identifier: 31:7F:57:E8:A8:25:E4:1E:97:F1:1A:CE:B7:05:1F:19:ED:38:D7:47 Certificate issuer: /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Certificate serial: D5 Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/1BA4C14A2D3D11F08B0E527DC4F9AE02.roa Signing time: Sat 10 May 2025 01:21:33 +0000 ROA not before: Sat 10 May 2025 01:21:33 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 401371 IP address blocks: 103.67.52.0/24 maxlen: 24 103.67.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Validity Not Before: May 10 01:21:33 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=681eaa1d-016e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:20:b8:23:fb:f6:3f:b9:a2:ab:5d:89:53:66: 6f:c9:71:e6:40:cf:7c:b3:85:79:e9:a7:6c:0e:c1: 64:3a:4d:90:32:8c:a9:6b:c7:be:cd:c2:e6:a2:cb: 18:ec:91:82:d0:dc:64:c7:aa:02:ee:c9:78:d1:b8: ae:f7:1e:ad:7f:5f:71:ed:c9:1d:43:3c:54:67:37: 5a:82:b2:ed:ec:64:7f:cc:38:18:3b:35:1a:99:a4: 62:99:e6:e6:76:16:c2:e9:25:02:7b:fb:f3:93:d0: 94:c1:1a:5b:ee:ce:92:2e:cb:fe:de:8a:21:15:ed: 8f:a8:59:fe:7e:e5:a4:7f:18:52:92:2d:0f:3a:a6: 52:64:00:b9:63:72:99:4f:68:3f:bf:67:ef:ec:b0: fa:44:5f:18:c7:ea:5f:ce:88:34:4a:c2:42:93:36: ea:70:5c:d0:13:49:d2:9b:10:23:7d:16:4d:ee:98: cf:aa:46:18:f6:e5:d4:eb:ac:e3:71:58:0e:19:ca: de:88:b4:5a:5a:e6:c6:cb:fb:7d:f4:9a:45:da:d3: 37:72:8f:5f:1c:0f:cd:45:7d:f4:6e:e2:d9:ae:25: 95:3b:16:07:95:6c:9c:27:7f:fd:79:1a:0c:f4:54: 06:da:6a:f1:1e:c7:b7:a5:ea:3f:db:10:0e:bf:c9: 4f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7F:57:E8:A8:25:E4:1E:97:F1:1A:CE:B7:05:1F:19:ED:38:D7:47 X509v3 Authority Key Identifier: keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/1BA4C14A2D3D11F08B0E527DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.52.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:a5:40:f0:8b:3e:a5:cf:be:d8:13:50:37:02:f0:b3:24:03: 87:9e:d3:6e:5f:48:a5:d5:7f:09:06:a3:93:57:c3:d9:1e:4b: e9:78:e8:e6:79:bd:94:51:8e:a6:32:04:b2:14:2e:c7:08:dd: 0c:4d:ef:da:c5:5c:aa:04:d5:d1:de:00:66:63:2c:ec:2c:a7: 1c:e1:d7:e4:e5:4c:de:f7:3e:03:bf:dc:16:e7:a6:7a:43:99: a3:03:94:9b:21:d3:da:b0:74:85:32:17:85:db:5a:a7:ac:f6: ff:b6:a4:13:5a:42:83:67:27:90:60:5b:58:40:bb:95:95:3c: 50:50:63:af:e7:b9:b9:96:62:39:d8:cf:5c:d6:7f:9a:79:86: 68:92:07:7c:d9:95:f7:0d:fa:71:f7:5a:ad:27:f0:57:4f:eb: 19:fc:12:15:5e:6a:0c:60:4e:93:97:0a:35:95:d0:0d:dc:e1: a1:5f:3a:c0:df:a2:b5:03:8d:fe:b1:d0:64:ef:a7:94:14:60: ac:98:fa:f5:48:f6:db:35:b3:c5:a9:bd:22:c1:44:67:21:3e: 99:55:fd:66:11:01:1f:3c:e3:89:4b:74:8b:27:a4:13:e5:59: a2:e8:5b:a8:be:ce:36:e3:7f:97:df:2b:4a:f3:f0:83:fb:49: 34:60:fc:b1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4Q0ExMTAvBgNVBAUTKEY2MjVFNkNDMDM5MDI2RkY1QkM5RDZCREM0MkQ4RDFD MThBQkYzM0IwHhcNMjUwNTEwMDEyMTMzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFlYWExZC0wMTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyC4I/v2P7miq12JU2ZvyXHmQM98s4V56adsDsFkOk2QMoypa8e+zcLmossY 7JGC0Nxkx6oC7sl40biu9x6tf19x7ckdQzxUZzdagrLt7GR/zDgYOzUamaRimebm dhbC6SUCe/vzk9CUwRpb7s6SLsv+3oohFe2PqFn+fuWkfxhSki0POqZSZAC5Y3KZ T2g/v2fv7LD6RF8Yx+pfzog0SsJCkzbqcFzQE0nSmxAjfRZN7pjPqkYY9uXU66zj cVgOGcreiLRaWubGy/t99JpF2tM3co9fHA/NRX30buLZriWVOxYHlWycJ3/9eRoM 9FQG2mrxHse3peo/2xAOv8lPqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDF/V+io JeQel/EazrcFHxntONdHMB8GA1UdIwQYMBaAFPYl5swDkCb/W8nWvcQtjRwYq/M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODhDQS81Njk2RTc0NjM0 NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2OWJ5ZGE5eEMyTkhCaXI4 enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWG16QU9RSnY5YnlkYTl4QzJOSEJpcjh6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjg4Q0EvNTY5NkU3NDYzNDY1MTFFRkFGNkRFQjRFQzRGOUFFMDIvMUJBNEMxNEEy RDNEMTFGMDhCMEU1MjdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnQzQwDQYJKoZIhvcNAQELBQADggEBAG2lQPCLPqXPvtgT UDcC8LMkA4ee025fSKXVfwkGo5NXw9keS+l46OZ5vZRRjqYyBLIULscI3QxN79rF XKoE1dHeAGZjLOwspxzh1+TlTN73PgO/3BbnpnpDmaMDlJsh09qwdIUyF4XbWqes 9v+2pBNaQoNnJ5BgW1hAu5WVPFBQY6/nubmWYjnYz1zWf5p5hmiSB3zZlfcN+nH3 Wq0n8FdP6xn8EhVeagxgTpOXCjWV0A3c4aFfOsDforUDjf6x0GTvp5QUYKyY+vVI 9ts1s8WpvSLBRGchPplV/WYRAR8844lLdIsnpBPlWaLoW6i+zjbjf5ffK0rz8IP7 STRg/LE= -----END CERTIFICATE-----Generated at Wed May 14 10:42:03 2025 by rpki-client