$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/A433C1262D0311F0A91F647CC4F9AE02.roa File: A433C1262D0311F0A91F647CC4F9AE02.roa (raw, json) Hash identifier: rpfBuY4xqKMYE45ZTaNcRBU8E1C/kMxDVjLVLcwIScU= Subject key identifier: 1C:9E:EE:22:CB:B2:1F:46:90:D1:05:6E:3D:F2:06:DE:DB:A1:1A:38 Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Certificate serial: 02 Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/A433C1262D0311F0A91F647CC4F9AE02.roa Signing time: Fri 09 May 2025 18:30:11 +0000 ROA not before: Fri 09 May 2025 18:30:11 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 45382 IP address blocks: 103.140.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Validity Not Before: May 9 18:30:11 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=681e49b3-a028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c2:9f:98:98:07:d4:c8:0c:85:2c:28:e4:d9: 8b:db:2b:b9:71:94:e4:f2:4b:33:47:78:20:88:8d: 0d:0d:ed:c2:db:59:fd:f9:14:12:47:b7:51:33:34: 14:1b:d5:e1:6f:85:70:ca:ab:84:59:9f:64:31:2e: 44:83:f1:df:a4:97:ac:f0:e6:e4:3d:1a:c0:5e:d6: b5:95:73:28:ce:43:1f:8e:73:9f:70:33:11:44:15: b1:23:f8:25:3e:ba:af:27:5e:c1:77:25:7f:54:09: 2f:02:52:b4:40:a5:73:78:5b:13:b9:be:f3:10:eb: e1:91:bb:3b:f8:9c:73:4a:ad:e9:ae:b0:18:c8:10: 01:49:a9:bf:83:45:94:c3:ab:fd:01:71:90:44:46: 8a:9b:9e:23:a4:e4:74:d1:d7:56:34:3b:8a:3c:b1: b3:80:88:49:2f:97:b4:11:7e:00:9f:ef:a7:bf:64: a3:e9:cc:00:2e:72:86:b5:64:82:25:43:bf:ac:9c: 9c:ed:ca:38:36:5a:de:bc:32:8f:80:75:28:fa:64: 8d:50:dc:2e:a3:a2:b1:f8:3c:75:ec:7f:3e:88:ba: 0d:2d:77:5d:7c:01:ff:ea:98:a3:27:f0:af:f7:f9: 94:fc:9e:e2:99:aa:57:5b:6f:6e:8d:d4:0a:3d:e2: 19:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9E:EE:22:CB:B2:1F:46:90:D1:05:6E:3D:F2:06:DE:DB:A1:1A:38 X509v3 Authority Key Identifier: keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/A433C1262D0311F0A91F647CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.45.0/24 Signature Algorithm: sha256WithRSAEncryption 50:92:72:ad:b3:2b:2c:f0:98:88:93:5a:a1:46:e2:a2:a9:85: c0:82:53:1c:f1:7a:41:e8:c3:5f:da:93:b8:4a:64:3d:d4:dd: ea:92:24:cf:d9:61:ea:68:de:aa:72:7a:3b:bc:22:df:f9:86: 9d:0e:41:d2:e9:47:9e:a2:24:96:6f:bd:b5:9f:af:1e:8a:40: 06:26:54:9c:5c:42:e4:aa:4e:c5:b4:1e:a7:ec:29:a2:ce:2c: d2:5e:96:db:9a:e7:3c:47:f1:14:f6:d2:ad:76:d0:73:3c:a9: 84:9a:49:07:97:c3:78:a6:22:3b:45:3a:f2:13:33:dc:e1:1f: ad:46:96:c8:f6:c1:81:b5:a9:82:92:34:c4:39:16:9b:bb:9d: e2:94:0c:26:6e:5c:6a:9e:59:f6:1a:bd:20:8b:24:67:cc:24: 29:8b:82:23:8d:46:93:48:7c:96:87:6d:8c:34:b9:21:65:34: fb:b8:5f:5c:f8:b6:78:7f:f0:02:35:e9:7b:53:a9:0a:6b:3c: 31:ce:3a:66:8f:01:f5:52:b0:a8:a6:56:2d:e7:9f:dd:cc:7d: 69:b4:41:e0:19:2f:79:2e:b8:b6:3c:94:96:6f:41:b4:e8:54: e8:3f:90:e9:b2:b0:31:2e:9c:37:a0:16:e6:b9:0a:87:ef:f6: da:82:cc:42 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjIyMTExMC8GA1UEBRMoQUVFMTdEREI4QzZCMzU5OTY0NjE4N0QwODFFN0M4Rjc5 ODgzRTE5RDAeFw0yNTA1MDkxODMwMTFaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MWU0OWIzLWEwMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDawp+YmAfUyAyFLCjk2YvbK7lxlOTySzNHeCCIjQ0N7cLbWf35FBJHt1EzNBQb 1eFvhXDKq4RZn2QxLkSD8d+kl6zw5uQ9GsBe1rWVcyjOQx+Oc59wMxFEFbEj+CU+ uq8nXsF3JX9UCS8CUrRApXN4WxO5vvMQ6+GRuzv4nHNKremusBjIEAFJqb+DRZTD q/0BcZBERoqbniOk5HTR11Y0O4o8sbOAiEkvl7QRfgCf76e/ZKPpzAAucoa1ZIIl Q7+snJztyjg2Wt68Mo+AdSj6ZI1Q3C6jorH4PHXsfz6Iug0td118Af/qmKMn8K/3 +ZT8nuKZqldbb26N1Ao94hkdAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUHJ7uIsuy H0aQ0QVuPfIG3tuhGjgwHwYDVR0jBBgwFoAUruF924xrNZlkYYfQgefI95iD4Z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjIxLzMzRUFBQzY4MkQw MzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlpsa1lZZlFnZWZJOTVpRDRa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnVGOTI0eHJOWmxrWVlmUWdlZkk5NWlENFowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjIyMS8zM0VBQUM2ODJEMDMxMUYwODNFQkIzN0FDNEY5QUUwMi9BNDMzQzEyNjJE MDMxMUYwQTkxRjY0N0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeMLTANBgkqhkiG9w0BAQsFAAOCAQEAUJJyrbMrLPCYiJNa oUbioqmFwIJTHPF6QejDX9qTuEpkPdTd6pIkz9lh6mjeqnJ6O7wi3/mGnQ5B0ulH nqIklm+9tZ+vHopABiZUnFxC5KpOxbQep+wpos4s0l6W25rnPEfxFPbSrXbQczyp hJpJB5fDeKYiO0U68hMz3OEfrUaWyPbBgbWpgpI0xDkWm7ud4pQMJm5cap5Z9hq9 IIskZ8wkKYuCI41Gk0h8lodtjDS5IWU0+7hfXPi2eH/wAjXpe1OpCms8Mc46Zo8B 9VKwqKZWLeef3cx9abRB4BkveS64tjyUlm9BtOhU6D+Q6bKwMS6cN6AW5rkKh+/2 2oLMQg== -----END CERTIFICATE-----Generated at Fri May 16 02:35:30 2025 by rpki-client