$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/1B047818141E11EFB957692CC4F9AE02.roa File: 1B047818141E11EFB957692CC4F9AE02.roa (raw, json) Hash identifier: ZE0tBApDZzaQ+O4EZGcawrB6RxmvKTQ6iYLr+X4ZOpI= Subject key identifier: 5E:08:B4:22:50:1C:3D:59:0D:CB:80:BC:C0:13:52:15:9D:A6:C9:00 Certificate issuer: /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Certificate serial: 06C1 Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/1B047818141E11EFB957692CC4F9AE02.roa Signing time: Tue 04 Mar 2025 23:41:14 +0000 ROA not before: Tue 04 Mar 2025 23:41:14 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 132492 IP address blocks: 103.148.251.0/24 maxlen: 24 203.0.184.0/21 maxlen: 24 2001:df3:280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9D33, serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Validity Not Before: Mar 4 23:41:14 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c78f9a-98c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ef:51:bc:7f:6c:22:71:96:87:bd:cd:bc:42: 99:f9:25:e6:1b:a0:5e:68:96:21:8e:f1:78:34:6f: fb:19:87:e1:4b:af:fc:3f:6b:7a:0c:9e:24:47:9b: ef:3e:b4:bc:38:25:de:6c:64:a0:e9:d5:e3:b6:a4: f6:43:1c:e0:3c:60:01:72:d6:92:b6:34:cd:7c:4e: b2:79:89:cf:0e:64:e2:a1:c9:a8:a3:21:23:1b:17: 6a:b3:69:cf:ec:01:7c:c7:c8:12:e5:48:8c:84:59: 4d:9f:1d:ce:ca:9a:f3:16:9b:90:d1:fc:6e:61:78: a6:7e:5b:7c:7c:26:80:9c:1e:6b:35:71:a3:f4:8c: cc:0f:5b:f7:d5:81:39:0b:0d:0c:2b:81:05:45:56: 7c:b8:b1:8b:da:7e:7a:ad:4c:d7:bb:c9:25:94:dd: 3a:ec:9a:07:59:3e:6d:59:03:df:af:f1:44:34:e8: 9c:12:db:40:6e:eb:a2:2a:69:69:50:f7:43:e5:33: 48:59:24:11:5f:91:51:86:5e:c7:70:cb:59:ec:df: 52:0e:62:3d:86:5a:bf:ae:08:e3:61:09:0c:e2:ce: f6:a9:24:3a:26:27:3f:7d:f2:02:85:80:e3:72:7c: ef:7f:ae:96:33:0c:08:56:1c:75:07:52:62:80:7b: d5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:08:B4:22:50:1C:3D:59:0D:CB:80:BC:C0:13:52:15:9D:A6:C9:00 X509v3 Authority Key Identifier: keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/1B047818141E11EFB957692CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.251.0/24 203.0.184.0/21 IPv6: 2001:df3:280::/48 Signature Algorithm: sha256WithRSAEncryption c3:a5:04:34:f4:83:14:c1:70:bb:ee:52:60:3f:a8:3e:db:0e: b3:e5:bb:a6:22:17:cb:e0:c3:50:75:1d:56:ee:93:66:e8:03: 83:ee:e5:39:b1:53:4a:c4:d7:5f:f6:32:78:68:7d:49:6a:9c: b9:39:88:a0:ec:b9:5f:5e:6c:51:59:58:39:b4:26:f1:62:f5: 8c:5f:68:f8:11:e9:54:8f:3a:b5:d9:05:f7:c6:c5:4f:d5:d4: d9:8e:e4:3a:27:30:57:19:4c:60:55:13:fe:dd:9a:49:37:00: c9:24:fb:b3:f0:f1:44:84:0d:77:04:7c:d9:72:1d:ab:59:67: 37:23:6c:2a:5b:7b:6b:1a:bb:9e:17:b1:46:8f:53:4e:2e:c9: 87:7e:57:81:9c:ce:3b:e7:8d:02:a8:cf:c8:cc:ea:9e:30:46: 5c:92:55:ce:e0:78:a4:3e:8d:74:b8:ff:d9:2c:d4:42:46:53: 4a:d6:13:10:38:a1:a2:e5:da:d4:7a:45:d0:d4:40:c8:2c:71: 24:e4:82:bd:88:46:26:db:98:fa:45:7e:6b:aa:4d:67:8c:77: ab:77:bb:62:5c:6f:18:3a:b1:3c:ea:d1:33:09:d1:9c:43:48: bb:96:13:23:88:41:36:3d:80:5d:11:97:1c:12:ee:03:0a:91: db:72:3b:28 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlEMzMxMTAvBgNVBAUTKDIyMkE0REQyRDZEMTRDNkZCRjQ4OTI0RTY2QTBGOENC REYxMjU1MTgwHhcNMjUwMzA0MjM0MTE0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3OGY5YS05OGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+9RvH9sInGWh73NvEKZ+SXmG6BeaJYhjvF4NG/7GYfhS6/8P2t6DJ4kR5vv PrS8OCXebGSg6dXjtqT2QxzgPGABctaStjTNfE6yeYnPDmTiocmooyEjGxdqs2nP 7AF8x8gS5UiMhFlNnx3OyprzFpuQ0fxuYXimflt8fCaAnB5rNXGj9IzMD1v31YE5 Cw0MK4EFRVZ8uLGL2n56rUzXu8kllN067JoHWT5tWQPfr/FENOicEttAbuuiKmlp UPdD5TNIWSQRX5FRhl7HcMtZ7N9SDmI9hlq/rgjjYQkM4s72qSQ6Jic/ffIChYDj cnzvf66WMwwIVhx1B1JigHvVdwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFF4ItCJQ HD1ZDcuAvMATUhWdpskAMB8GA1UdIwQYMBaAFCIqTdLW0Uxvv0iSTmag+MvfElUY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUQzMy9DMkUxQ0FEQzUz QzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRHLV9TSkpPWnFENHk5OFNW UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpcE4wdGJSVEctX1NKSk9acUQ0eTk4U1ZSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjlEMzMvQzJFMUNBREM1M0MzMTFFQjhBMTg4NDMxQzRGOUFFMDIvMUIwNDc4MTgx NDFFMTFFRkI5NTc2OTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnlPsDBAPLALgwDwQCAAIwCQMHACABDfMCgDANBgkqhkiG 9w0BAQsFAAOCAQEAw6UENPSDFMFwu+5SYD+oPtsOs+W7piIXy+DDUHUdVu6TZugD g+7lObFTSsTXX/YyeGh9SWqcuTmIoOy5X15sUVlYObQm8WL1jF9o+BHpVI86tdkF 98bFT9XU2Y7kOicwVxlMYFUT/t2aSTcAyST7s/DxRIQNdwR82XIdq1lnNyNsKlt7 axq7nhexRo9TTi7Jh35XgZzOO+eNAqjPyMzqnjBGXJJVzuB4pD6NdLj/2SzUQkZT StYTEDihouXa1HpF0NRAyCxxJOSCvYhGJtuY+kV+a6pNZ4x3q3e7YlxvGDqxPOrR MwnRnENIu5YTI4hBNj2AXRGXHBLuAwqR23I7KA== -----END CERTIFICATE-----Generated at Tue May 13 08:30:25 2025 by rpki-client