$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/324967826D8D11EE9883B985C4F9AE02.roa File: 324967826D8D11EE9883B985C4F9AE02.roa (raw, json) Hash identifier: sNPYnaNgf0/KN19CYq8xhtZnGWDk4qYxL4ZVFrLDAZE= Subject key identifier: 29:0E:DA:84:98:14:D0:DA:EE:05:0C:78:42:77:11:F7:11:A0:B9:17 Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Certificate serial: 012F Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/324967826D8D11EE9883B985C4F9AE02.roa Signing time: Wed 14 May 2025 14:29:00 +0000 ROA not before: Wed 14 May 2025 14:29:00 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 139053 IP address blocks: 103.138.250.0/24 maxlen: 24 103.138.251.0/24 maxlen: 24 2001:df0:5e80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Validity Not Before: May 14 14:29:00 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6824a8ab-9318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:1b:a8:7b:96:e7:e6:24:84:08:32:0f:2e: dc:dc:a6:af:3b:f5:c8:95:46:34:02:bd:5e:7e:d0: 5e:b8:78:65:d4:43:e9:c5:b2:03:d9:22:81:6c:ac: de:80:1d:4c:6b:de:c5:cb:f2:0e:cc:e5:19:74:3f: 31:57:7b:0b:8c:82:58:1b:9e:b9:dd:a6:3d:39:70: 9c:99:79:3b:8b:4e:93:ea:a7:d6:49:a1:18:fe:e3: 66:aa:92:b5:87:e5:92:3f:7c:76:81:f0:c5:38:14: 2e:82:ef:67:50:c1:32:95:c0:9d:75:86:ca:16:6f: 29:c9:52:68:ed:d3:5d:37:64:f5:e1:73:50:4b:b8: 17:22:b2:8c:b1:04:50:59:58:ae:1d:e4:a5:36:dd: 3c:96:1c:d4:c5:3f:10:bb:a6:f5:a8:42:26:52:be: 06:79:8c:e4:d7:84:87:7d:c8:af:2a:fe:08:67:91: a8:60:f2:6e:fc:32:a6:3e:c3:04:ed:79:7d:ee:ff: 00:5d:95:00:be:cc:ff:98:af:a3:f1:6e:dd:a8:60: 56:30:bb:9e:6e:df:a2:1b:f8:35:e4:29:8b:10:f0: 8f:72:30:53:c8:15:da:d7:48:b1:b6:56:72:7d:30: e8:e5:5f:31:1e:01:ac:4f:f3:6b:a1:99:30:f5:5a: 5d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0E:DA:84:98:14:D0:DA:EE:05:0C:78:42:77:11:F7:11:A0:B9:17 X509v3 Authority Key Identifier: keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/324967826D8D11EE9883B985C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.250.0/23 IPv6: 2001:df0:5e80::/48 Signature Algorithm: sha256WithRSAEncryption 6f:f8:6e:33:f3:a6:9e:a2:4e:88:4c:70:67:fc:8a:31:3b:10: c8:8f:1f:86:1e:e8:d6:4c:3c:cc:12:36:1f:73:67:fd:cd:b0: e6:b1:d1:74:68:4e:79:91:1a:d3:b2:82:b0:ba:9e:89:d4:f6: b9:75:dd:fe:18:f3:f7:24:94:51:86:c9:16:5c:5d:1a:db:f3: 7f:da:d3:2a:1c:f7:7d:80:1c:b9:38:eb:24:d6:31:36:60:d4: 92:ae:f0:63:6f:2d:7e:d3:1c:1c:ff:c5:8f:b2:61:c3:61:9c: e1:dc:c7:2f:a3:ae:19:1a:99:9f:d5:b2:5e:ea:06:6e:79:50: 64:ca:8d:fb:52:dc:b9:8e:0a:22:02:3f:6c:73:dc:ab:36:4e: 56:45:a5:2e:31:69:69:3b:0d:ea:98:95:43:fe:6c:7c:7a:e5: c4:2c:e6:73:67:9c:95:a7:59:96:1b:d1:e4:59:d4:59:3f:39: 37:8a:ca:83:c3:f7:29:ff:e5:2f:23:3d:c7:ae:7f:4f:7d:44: 85:bc:a3:68:37:15:d2:0d:44:a8:10:3a:ee:c6:40:46:58:ba: ad:2e:ed:6c:a9:c1:4c:74:ae:30:93:64:db:58:02:ed:82:99: 99:dc:85:56:d5:e9:31:10:af:ee:e5:73:9b:94:20:c9:bd:ba: 35:e3:3c:97 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKEY0NDAxODE4MUVFNUM2MjQwRTEzOTQzOTVBNUNDQzRE MkY2MjMxQTQwHhcNMjUwNTE0MTQyOTAwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI0YThhYi05MzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw44bqHuW5+YkhAgyDy7c3KavO/XIlUY0Ar1eftBeuHhl1EPpxbID2SKBbKze gB1Ma97Fy/IOzOUZdD8xV3sLjIJYG5653aY9OXCcmXk7i06T6qfWSaEY/uNmqpK1 h+WSP3x2gfDFOBQugu9nUMEylcCddYbKFm8pyVJo7dNdN2T14XNQS7gXIrKMsQRQ WViuHeSlNt08lhzUxT8Qu6b1qEImUr4GeYzk14SHfcivKv4IZ5GoYPJu/DKmPsME 7Xl97v8AXZUAvsz/mK+j8W7dqGBWMLuebt+iG/g15CmLEPCPcjBTyBXa10ixtlZy fTDo5V8xHgGsT/NroZkw9VpdAQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCkO2oSY FNDa7gUMeEJ3EfcRoLkXMB8GA1UdIwQYMBaAFPRAGBge5cYkDhOUOVpczE0vYjGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhpUU9FNVE1V2x6TVRTOWlN YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkREODIvMTk3RjlEOTI5MUUyMTFFOTk3Njg4OTBFQzRGOUFFMDIvMzI0OTY3ODI2 RDhEMTFFRTk4ODNCOTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnivowDwQCAAIwCQMHACABDfBegDANBgkqhkiG9w0BAQsF AAOCAQEAb/huM/OmnqJOiExwZ/yKMTsQyI8fhh7o1kw8zBI2H3Nn/c2w5rHRdGhO eZEa07KCsLqeidT2uXXd/hjz9ySUUYbJFlxdGtvzf9rTKhz3fYAcuTjrJNYxNmDU kq7wY28tftMcHP/Fj7Jhw2Gc4dzHL6OuGRqZn9WyXuoGbnlQZMqN+1LcuY4KIgI/ bHPcqzZOVkWlLjFpaTsN6piVQ/5sfHrlxCzmc2ecladZlhvR5FnUWT85N4rKg8P3 Kf/lLyM9x65/T31EhbyjaDcV0g1EqBA67sZARli6rS7tbKnBTHSuMJNk21gC7YKZ mdyFVtXpMRCv7uVzm5Qgyb26NeM8lw== -----END CERTIFICATE-----Generated at Thu May 15 19:13:23 2025 by rpki-client