$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/CAF5CED2E1A511EC8AB72944C4F9AE02.roa File: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (raw, json) Hash identifier: zbiYtUOfzyp7ptHvHbV0SU4d4rP1mH83ebF8pRuNsx0= Subject key identifier: 16:46:37:6E:D9:DB:EE:79:8C:44:8C:20:96:33:87:8D:61:AE:94:A2 Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Certificate serial: 07C8 Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/CAF5CED2E1A511EC8AB72944C4F9AE02.roa Signing time: Tue 06 May 2025 21:31:54 +0000 ROA not before: Tue 06 May 2025 21:31:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.151.192.0/24 maxlen: 24 103.151.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1992 (0x7c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Validity Not Before: May 6 21:31:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681a7fca-8656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fa:bc:b7:43:58:85:ee:a2:66:92:3f:1c:db: 29:c2:5f:05:d2:60:34:96:22:e3:14:27:11:e9:df: c1:b5:36:78:1b:a4:14:09:de:1a:0a:fe:ae:b0:46: 72:6e:61:e2:fc:75:63:e7:6f:36:bc:08:4d:99:3f: d8:2a:ea:70:d5:fd:bf:e0:8f:97:a2:ff:e6:63:95: fa:80:a8:2f:6e:11:00:e8:74:e9:d0:d0:60:d0:77: 12:ce:2d:9f:9b:97:21:50:bc:82:9d:a8:7a:37:70: 30:75:1b:5f:4a:e9:4b:fa:58:b3:df:51:2d:86:27: 4b:7a:fe:80:91:e6:6c:e9:79:84:76:76:4d:ab:c9: 57:33:ec:7a:72:f3:98:93:0b:d8:e4:b8:80:3e:d0: 88:7d:5c:82:3f:3c:f3:97:3f:c1:83:8b:5d:76:a6: d7:7b:a1:54:cd:9f:47:57:18:af:56:c4:56:2d:19: e9:9d:3c:19:ec:4a:fb:4f:cf:09:bd:21:18:38:cd: d6:c5:b8:97:42:93:71:10:c1:5f:ff:9e:5f:20:24: f8:70:93:f0:ab:32:98:8a:4d:26:79:e1:ed:7a:28: f5:a6:fa:b0:d2:3b:4f:b8:9b:f3:f0:94:37:10:54: 9e:ae:e7:bf:e6:0b:53:36:29:74:3c:c2:ac:dd:7c: 1c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:46:37:6E:D9:DB:EE:79:8C:44:8C:20:96:33:87:8D:61:AE:94:A2 X509v3 Authority Key Identifier: keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/CAF5CED2E1A511EC8AB72944C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.192.0/23 Signature Algorithm: sha256WithRSAEncryption 15:ca:43:c3:8b:ce:ca:13:a9:8e:29:fc:86:95:7a:42:4d:80: 59:06:33:a2:9e:1f:f7:6d:02:5a:2f:57:94:29:3c:67:f8:49: a8:41:4f:0a:22:84:ed:29:b6:74:7a:ba:2f:93:0b:79:c0:66: 07:e8:f7:37:39:1f:64:05:d3:66:45:e7:1e:d4:40:80:dc:1d: 25:79:ce:10:ab:ba:d9:dd:5b:4c:49:44:6b:9c:d7:29:95:03: 51:6a:f2:df:04:1b:03:40:a3:8e:fd:0a:2f:05:60:75:db:37: 0e:c2:fb:a8:bb:dd:7d:42:46:b4:03:f4:75:ba:85:14:66:3b: 5d:91:08:92:0a:bc:3c:f2:85:13:09:e2:4b:df:3e:08:78:77: 51:23:23:e9:70:6c:55:01:6f:df:6f:0d:a1:e8:4d:36:44:48: f3:6b:db:4d:02:9e:dc:5c:05:03:02:51:63:45:4c:db:50:d4: b3:bc:ae:ee:b7:ce:23:ab:61:79:d6:0e:e3:42:d6:a2:16:e6: 8f:6d:7a:46:e9:bf:9a:40:a6:d1:1f:bd:df:26:83:05:27:5c: 7d:32:54:e5:df:b2:94:63:20:b5:c9:17:cc:ea:1b:ba:d5:88: b3:06:85:3c:60:56:b2:42:72:ff:90:e0:9b:67:39:43:c5:a4: 2e:b2:f0:e1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOUYxMTAvBgNVBAUTKDRGRkZBQzcxNzgxMzM5MkVFMUM4NzZBMzIxNjcxRTFE NkMyQUI5QjQwHhcNMjUwNTA2MjEzMTU0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhN2ZjYS04NjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vq8t0NYhe6iZpI/HNspwl8F0mA0liLjFCcR6d/BtTZ4G6QUCd4aCv6usEZy bmHi/HVj5282vAhNmT/YKupw1f2/4I+Xov/mY5X6gKgvbhEA6HTp0NBg0HcSzi2f m5chULyCnah6N3AwdRtfSulL+liz31EthidLev6AkeZs6XmEdnZNq8lXM+x6cvOY kwvY5LiAPtCIfVyCPzzzlz/Bg4tddqbXe6FUzZ9HVxivVsRWLRnpnTwZ7Er7T88J vSEYOM3WxbiXQpNxEMFf/55fICT4cJPwqzKYik0meeHteij1pvqw0jtPuJvz8JQ3 EFSerue/5gtTNil0PMKs3XwcpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBZGN27Z 2+55jESMIJYzh41hrpSiMB8GA1UdIwQYMBaAFE//rHF4Ezku4ch2oyFnHh1sKrm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Ri9DMTVDNDFCNEZE NTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9TN2h5SGFqSVdjZUhXd3F1 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfLXNjWGdUT1M3aHlIYWpJV2NlSFd3cXViUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0UzOUYvQzE1QzQxQjRGRDU3MTFFQUJDM0NBMjREQzRGOUFFMDIvQ0FGNUNFRDJF MUE1MTFFQzhBQjcyOTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnl8AwDQYJKoZIhvcNAQELBQADggEBABXKQ8OLzsoTqY4p /IaVekJNgFkGM6KeH/dtAlovV5QpPGf4SahBTwoihO0ptnR6ui+TC3nAZgfo9zc5 H2QF02ZF5x7UQIDcHSV5zhCrutndW0xJRGuc1ymVA1Fq8t8EGwNAo479Ci8FYHXb Nw7C+6i73X1CRrQD9HW6hRRmO12RCJIKvDzyhRMJ4kvfPgh4d1EjI+lwbFUBb99v DaHoTTZESPNr200CntxcBQMCUWNFTNtQ1LO8ru63ziOrYXnWDuNC1qIW5o9tekbp v5pAptEfvd8mgwUnXH0yVOXfspRjILXJF8zqG7rViLMGhTxgVrJCcv+Q4JtnOUPF pC6y8OE= -----END CERTIFICATE-----Generated at Tue May 13 14:12:38 2025 by rpki-client