$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/0C5564C2E3AC11EAAAC85761C4F9AE02.roa File: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (raw, json) Hash identifier: 6lqehcAyCNVs7/NRnq82eztxUGH8XbnYMN7Uvtot0JE= Subject key identifier: 45:80:E7:65:0E:59:A2:1C:BE:66:2B:8B:2B:66:BF:01:E6:F6:4E:38 Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Certificate serial: 07F3 Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/0C5564C2E3AC11EAAAC85761C4F9AE02.roa Signing time: Wed 30 Apr 2025 21:00:08 +0000 ROA not before: Wed 30 Apr 2025 21:00:08 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 53550 IP address blocks: 103.214.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2035 (0x7f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Validity Not Before: Apr 30 21:00:08 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68128f58-9298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:69:04:42:72:23:8b:ae:1b:17:f6:68:23:aa: 08:72:2f:70:73:6e:5e:2f:a8:e2:2b:98:f7:e8:b5: 8e:19:b6:3b:ad:6a:b3:68:5e:20:5f:0e:a9:b6:73: 36:e2:e2:95:b7:d6:3f:a4:12:04:4a:c1:a7:90:fa: 0b:4e:f3:20:fc:90:a7:93:05:7c:82:14:e9:35:b2: 5f:1f:62:4e:09:36:b1:69:f9:33:d3:54:d0:a3:e4: e7:c5:ec:ac:6c:bf:92:f1:01:12:bf:ec:21:eb:cc: 0a:ef:f1:78:c5:43:0a:ea:5c:7d:ba:bd:3f:cd:e5: a0:ab:41:63:b7:e9:58:98:1c:48:cf:47:a8:11:ec: 84:66:0f:c4:21:69:76:69:4c:12:3c:fb:64:7f:79: 3d:ad:73:39:e1:31:16:48:7b:0f:34:65:2f:26:53: b9:5c:fd:85:0e:4a:c7:36:23:49:a7:18:34:52:68: e3:a1:4c:e2:54:34:81:10:4e:cb:47:f2:cd:bc:e5: 37:0f:79:0d:86:b7:9d:d9:eb:a6:b1:c0:56:12:18: dd:81:ff:1d:67:37:8b:88:94:22:8d:39:75:5b:c6: 77:3a:ad:bc:8c:53:ca:06:c8:ec:dc:1f:d9:91:17: db:4c:76:ce:f1:21:7c:78:cd:c6:6a:5e:00:79:b4: 0f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:80:E7:65:0E:59:A2:1C:BE:66:2B:8B:2B:66:BF:01:E6:F6:4E:38 X509v3 Authority Key Identifier: keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/0C5564C2E3AC11EAAAC85761C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.214.228.0/24 Signature Algorithm: sha256WithRSAEncryption 36:73:60:74:de:f3:29:c2:29:a3:33:5b:51:1f:77:4c:33:5d: 7e:27:30:f0:22:74:67:87:a7:5f:11:5b:5d:ca:9d:0e:78:46: 58:7f:34:cd:ce:20:ea:fc:d2:e6:e1:af:e3:c9:5f:34:9f:27: da:2e:ac:91:28:0c:90:23:ff:54:92:7f:0f:36:54:c7:44:5d: 04:4b:8d:af:8d:93:69:be:84:63:a3:38:7a:25:d4:51:50:91: 5b:e7:be:dc:a7:a4:c5:27:b9:d8:83:58:ea:2c:22:a7:c3:e5: 85:c6:67:e7:e0:f2:c2:df:aa:ae:1d:df:46:87:85:3b:ff:3b: 42:70:82:ae:ba:03:33:a2:97:51:b9:4f:77:9e:a6:ff:0e:f1: 2b:82:f7:f5:34:d8:b9:d5:ea:c8:18:a9:c2:ad:79:b5:67:ea: 7e:ef:f9:39:b2:a7:80:38:06:7d:6d:68:93:64:42:2e:53:08: 17:a2:5b:9d:64:2c:37:08:07:31:98:ac:b3:fc:50:1f:45:8d: bf:1f:0b:b6:06:7d:da:bb:7a:58:76:f2:23:ea:eb:a1:b0:0a: 56:7d:da:fe:7c:4b:41:2b:ab:58:89:59:3c:44:ca:63:ec:28: 82:d7:47:3a:a1:d8:23:ae:4e:71:88:d6:37:52:56:df:0b:01: 72:4e:36:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3MDIxMTAvBgNVBAUTKDlFNjM3NkE1RjJBQTNFMkM3RkY1NTJBRkI4QUY1MERB QzEzRDQ5QjcwHhcNMjUwNDMwMjEwMDA4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyOGY1OC05Mjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GkEQnIji64bF/ZoI6oIci9wc25eL6jiK5j36LWOGbY7rWqzaF4gXw6ptnM2 4uKVt9Y/pBIESsGnkPoLTvMg/JCnkwV8ghTpNbJfH2JOCTaxafkz01TQo+Tnxeys bL+S8QESv+wh68wK7/F4xUMK6lx9ur0/zeWgq0Fjt+lYmBxIz0eoEeyEZg/EIWl2 aUwSPPtkf3k9rXM54TEWSHsPNGUvJlO5XP2FDkrHNiNJpxg0UmjjoUziVDSBEE7L R/LNvOU3D3kNhred2eumscBWEhjdgf8dZzeLiJQijTl1W8Z3Oq28jFPKBsjs3B/Z kRfbTHbO8SF8eM3Gal4AebQPFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEWA52UO WaIcvmYriytmvwHm9k44MB8GA1UdIwQYMBaAFJ5jdqXyqj4sf/VSr7ivUNrBPUm3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTcwMi9FRjkxM0QyNkUz QUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBpeF85Vkt2dUs5UTJzRTlT YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tTjJwZktxUGl4XzlWS3Z1SzlRMnNFOVNiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk3MDIvRUY5MTNEMjZFM0FBMTFFQTg4RjQ5NTYwQzRGOUFFMDIvMEM1NTY0QzJF M0FDMTFFQUFBQzg1NzYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn1uQwDQYJKoZIhvcNAQELBQADggEBADZzYHTe8ynCKaMz W1Efd0wzXX4nMPAidGeHp18RW13KnQ54Rlh/NM3OIOr80ubhr+PJXzSfJ9ourJEo DJAj/1SSfw82VMdEXQRLja+Nk2m+hGOjOHol1FFQkVvnvtynpMUnudiDWOosIqfD 5YXGZ+fg8sLfqq4d30aHhTv/O0Jwgq66AzOil1G5T3eepv8O8SuC9/U02LnV6sgY qcKtebVn6n7v+Tmyp4A4Bn1taJNkQi5TCBeiW51kLDcIBzGYrLP8UB9Fjb8fC7YG fdq7elh28iPq66GwClZ92v58S0Erq1iJWTxEymPsKILXRzqh2COuTnGI1jdSVt8L AXJONg0= -----END CERTIFICATE-----Generated at Wed May 14 06:45:20 2025 by rpki-client