$ rpki-client -vvf rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/5A0FAE220F7011EAB8E21167C4F9AE02.roa File: 5A0FAE220F7011EAB8E21167C4F9AE02.roa (raw, json) Hash identifier: TQZLfyrNNm4rH/joKuV/c0LtGb3rqWKsaid6lV6en3Y= Subject key identifier: A5:41:B8:92:4B:D5:78:2E:55:51:22:4F:82:4B:7B:8F:34:A1:E0:0C Certificate issuer: /CN=A91B97DB/serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Certificate serial: 0BC1 Authority key identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/5A0FAE220F7011EAB8E21167C4F9AE02.roa Signing time: Sat 14 Dec 2024 18:37:27 +0000 ROA not before: Sat 14 Dec 2024 18:37:27 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 138437 IP address blocks: 103.125.120.0/22 maxlen: 24 2403:f340::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3009 (0xbc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B97DB, serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Validity Not Before: Dec 14 18:37:27 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=675dd067-d2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e8:d7:29:d7:94:95:94:25:62:12:2a:88:98: 2f:5c:34:b3:fb:8c:f8:68:fd:e7:27:50:22:e3:2b: fb:2d:1e:4c:15:48:f5:76:44:a4:04:a1:36:50:dc: b6:7f:36:8c:a5:7e:1b:f8:78:e9:ec:79:2a:90:96: 28:d3:43:95:13:c5:05:42:69:2b:95:dc:72:8d:37: 01:4d:00:3d:55:a0:81:ff:d9:52:b0:02:22:67:e2: 75:0b:60:71:cf:61:b8:77:38:aa:32:a8:29:76:47: a1:14:47:1f:b4:1a:e6:ac:ca:97:ae:7a:d2:a5:a7: 2d:ff:3e:be:dc:c0:1a:1c:8c:d6:62:ef:e5:e4:40: 3d:33:9f:b5:7d:b8:71:f9:0a:10:47:9e:6d:93:be: 7e:0a:24:f6:ce:2e:ca:82:8b:03:b7:2e:e1:38:ef: 76:b9:df:ac:df:f1:d6:dd:8f:71:20:27:a0:79:9e: c4:63:fc:6e:50:90:4c:f8:64:c7:bc:09:6b:0f:c6: 53:83:0e:27:6f:f2:b4:6d:7f:f7:c1:fb:4b:fa:ef: f9:de:1e:0f:d4:15:54:e3:b3:c5:c7:bd:e1:ac:7c: 1c:fc:05:5e:4b:c2:7f:6a:df:04:87:86:8f:f0:c4: 62:81:52:4b:41:c8:8b:5d:96:54:68:c3:fe:69:28: 1c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:41:B8:92:4B:D5:78:2E:55:51:22:4F:82:4B:7B:8F:34:A1:E0:0C X509v3 Authority Key Identifier: keyid:AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/5A0FAE220F7011EAB8E21167C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.125.120.0/22 IPv6: 2403:f340::/32 Signature Algorithm: sha256WithRSAEncryption ab:8c:61:c8:d8:81:16:20:9b:9a:10:0e:02:a9:bb:d2:5e:fd: e5:aa:da:fc:90:79:e9:be:13:8e:8c:6f:a4:50:3c:48:37:ee: 4a:4a:c2:0c:50:3f:25:9b:72:a3:d1:2f:77:50:a5:b6:97:5c: 3e:e8:98:b1:cc:62:71:6b:81:f7:be:d9:f3:29:1e:a2:a8:6c: 71:cc:87:8e:22:10:2d:93:0d:60:67:ea:c8:ef:1e:22:79:f1: 25:64:a9:da:39:13:b8:09:8f:7f:65:b9:56:fd:44:38:1b:bc: bb:86:41:58:c7:cc:c7:0f:5b:af:aa:8f:da:b5:32:cb:0f:14: 34:6f:52:e4:5b:02:10:bf:ea:65:37:2a:5d:72:bb:c2:43:fd: 56:87:7c:d6:57:c7:91:17:cf:8e:40:b2:06:4e:23:11:ca:02: cf:bc:f3:db:79:f1:98:ea:52:83:e0:24:85:d0:e9:af:b4:8e: 3f:81:70:0e:09:62:1b:77:d9:93:f3:1e:e6:a4:4a:34:f4:ce: e0:17:d6:12:f4:81:0a:5f:78:c8:27:2c:b1:92:f1:2e:03:49: de:60:c8:4a:9e:cc:a8:aa:e3:5c:45:b3:86:e7:b9:2f:36:76: 9b:ab:39:d3:56:28:65:2c:5b:5b:ab:4f:72:f8:2d:74:6f:56: 66:b2:d0:e7 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3REIxMTAvBgNVBAUTKEFEM0Q4NzAzODUwQjEyNzFFOEYzMUFFMDNFM0NDOUFD NDY2MEQ5NDIwHhcNMjQxMjE0MTgzNzI3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzVkZDA2Ny1kMmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOjXKdeUlZQlYhIqiJgvXDSz+4z4aP3nJ1Ai4yv7LR5MFUj1dkSkBKE2UNy2 fzaMpX4b+Hjp7HkqkJYo00OVE8UFQmkrldxyjTcBTQA9VaCB/9lSsAIiZ+J1C2Bx z2G4dziqMqgpdkehFEcftBrmrMqXrnrSpact/z6+3MAaHIzWYu/l5EA9M5+1fbhx +QoQR55tk75+CiT2zi7KgosDty7hOO92ud+s3/HW3Y9xICegeZ7EY/xuUJBM+GTH vAlrD8ZTgw4nb/K0bX/3wftL+u/53h4P1BVU47PFx73hrHwc/AVeS8J/at8Eh4aP 8MRigVJLQciLXZZUaMP+aSgc0QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKVBuJJL 1XguVVEiT4JLe480oeAMMB8GA1UdIwQYMBaAFK09hwOFCxJx6PMa4D48yaxGYNlC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTdEQi80RTQxMEFDRTBG NkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVuSG84eHJnUGp6SnJFWmcy VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUMkhBNFVMRW5Ibzh4cmdQanpKckVaZzJVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjk3REIvNEU0MTBBQ0UwRjZGMTFFQUFCMEFEQjY0QzRGOUFFMDIvNUEwRkFFMjIw RjcwMTFFQUI4RTIxMTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfXgwDQQCAAIwBwMFACQD80AwDQYJKoZIhvcNAQELBQAD ggEBAKuMYcjYgRYgm5oQDgKpu9Je/eWq2vyQeem+E46Mb6RQPEg37kpKwgxQPyWb cqPRL3dQpbaXXD7omLHMYnFrgfe+2fMpHqKobHHMh44iEC2TDWBn6sjvHiJ58SVk qdo5E7gJj39luVb9RDgbvLuGQVjHzMcPW6+qj9q1MssPFDRvUuRbAhC/6mU3Kl1y u8JD/VaHfNZXx5EXz45AsgZOIxHKAs+889t58ZjqUoPgJIXQ6a+0jj+BcA4JYht3 2ZPzHuakSjT0zuAX1hL0gQpfeMgnLLGS8S4DSd5gyEqezKiq41xFs4bnuS82dpur OdNWKGUsW1urT3L4LXRvVmay0Oc= -----END CERTIFICATE-----Generated at Sun May 11 16:07:37 2025 by rpki-client