$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/CC57D98CE1A511EC8AB72944C4F9AE02.roa File: CC57D98CE1A511EC8AB72944C4F9AE02.roa (raw, json) Hash identifier: ZYqL2fHcbNd2tSbNDmjF+dD/m7i54Wfd/1i3In6hhsU= Subject key identifier: D8:5E:20:25:0E:04:5F:35:98:24:4D:15:AC:C2:0D:CA:4F:DA:3D:AD Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Certificate serial: 07C9 Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/CC57D98CE1A511EC8AB72944C4F9AE02.roa Signing time: Tue 06 May 2025 21:31:55 +0000 ROA not before: Tue 06 May 2025 21:31:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.151.192.0/24 maxlen: 24 103.151.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1993 (0x7c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Validity Not Before: May 6 21:31:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681a7fcb-9318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:12:32:f4:09:44:6d:66:12:61:8e:d1:96:e0: 30:19:ed:e5:fd:22:42:28:08:1c:ad:b0:31:2c:5f: 6b:39:2a:a6:3e:d7:0b:17:58:02:f6:6d:14:63:27: 34:84:c5:70:10:5c:ba:de:e2:a3:b5:2d:a1:60:5c: c4:65:81:9d:1a:b9:06:44:30:0e:8c:6a:72:09:2b: a1:4d:ca:8d:a3:ef:fb:16:b6:51:f3:a0:93:e6:e7: 16:34:8b:9a:30:d3:0d:4f:fe:71:c0:46:fc:09:32: 6a:11:cd:66:63:01:c8:c8:45:04:1c:d4:4f:a1:6d: 7b:27:2d:f8:09:53:38:a8:52:34:52:e8:d4:5e:4a: 17:99:0b:cb:c4:4b:e8:ab:bd:00:72:26:d4:c5:ce: 25:08:5a:9f:22:b2:41:e5:12:d1:43:3d:5d:05:a4: dd:70:04:84:ed:85:31:d2:ec:30:1d:07:30:a6:b1: 6f:4d:e8:f6:14:2f:21:a1:49:76:2f:41:d8:00:69: ab:57:90:61:26:9f:8f:3f:06:eb:1e:df:e2:ba:0e: 8c:40:59:23:f4:d7:6f:c7:58:ca:51:83:c2:d2:0a: 68:e6:07:2b:c3:3f:b2:5e:dc:bf:f6:65:3f:a2:1d: 65:70:08:6e:5f:2d:f1:a6:f1:0f:8d:5b:fc:6a:6b: 6a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5E:20:25:0E:04:5F:35:98:24:4D:15:AC:C2:0D:CA:4F:DA:3D:AD X509v3 Authority Key Identifier: keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/CC57D98CE1A511EC8AB72944C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.192.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:ae:8a:27:1c:42:52:fa:49:12:b9:0b:c5:97:af:7a:63:1c: 04:01:44:7c:2e:c1:9c:f5:03:2a:79:b0:d4:ad:18:67:7b:cc: 3a:6f:de:01:95:a3:3a:90:b6:8a:6a:1d:09:4a:79:dc:ca:bd: 5a:c6:38:18:91:ec:d8:ea:7a:fa:58:6f:5e:88:03:4f:1f:8f: b0:3c:a5:4e:10:b0:28:3a:75:f6:fe:da:ff:40:81:ab:d1:a7: d7:d0:6c:66:4c:04:f6:51:69:a7:51:4f:eb:4b:c5:5c:be:59: 0b:30:f3:6e:83:d2:c2:9a:0f:6b:40:99:74:69:ac:55:80:89: ab:73:fc:f5:43:6f:66:3a:5d:4e:43:15:03:f5:8d:da:ae:18: 6d:78:c9:14:e6:ed:ed:a5:11:ea:6d:8d:5c:fd:2b:37:3c:3b: 1f:3e:27:93:d4:8b:a0:68:34:25:f7:46:97:6b:db:43:3f:df: d6:ba:54:43:fe:d6:bf:83:82:30:d8:a2:46:59:49:8d:a1:36: f6:f1:09:43:c1:4e:69:78:91:b9:a4:22:3d:b0:58:6b:8c:ec: 13:ea:a9:3a:52:9b:6e:ba:54:08:db:b3:86:13:0c:b9:97:e1: 84:51:51:6a:00:8b:aa:24:52:51:f9:c7:be:a0:6e:2b:ff:f0: 66:c0:00:7e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOUYxMTAvBgNVBAUTKDRGRkZBQzcxNzgxMzM5MkVFMUM4NzZBMzIxNjcxRTFE NkMyQUI5QjQwHhcNMjUwNTA2MjEzMTU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhN2ZjYi05MzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BIy9AlEbWYSYY7RluAwGe3l/SJCKAgcrbAxLF9rOSqmPtcLF1gC9m0UYyc0 hMVwEFy63uKjtS2hYFzEZYGdGrkGRDAOjGpyCSuhTcqNo+/7FrZR86CT5ucWNIua MNMNT/5xwEb8CTJqEc1mYwHIyEUEHNRPoW17Jy34CVM4qFI0UujUXkoXmQvLxEvo q70AcibUxc4lCFqfIrJB5RLRQz1dBaTdcASE7YUx0uwwHQcwprFvTej2FC8hoUl2 L0HYAGmrV5BhJp+PPwbrHt/iug6MQFkj9Ndvx1jKUYPC0gpo5gcrwz+yXty/9mU/ oh1lcAhuXy3xpvEPjVv8amtqGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNheICUO BF81mCRNFazCDcpP2j2tMB8GA1UdIwQYMBaAFE//rHF4Ezku4ch2oyFnHh1sKrm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Ri9DMTVDNDFCNEZE NTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9TN2h5SGFqSVdjZUhXd3F1 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfLXNjWGdUT1M3aHlIYWpJV2NlSFd3cXViUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0UzOUYvQzE1QzQxQjRGRDU3MTFFQUJDM0NBMjREQzRGOUFFMDIvQ0M1N0Q5OENF MUE1MTFFQzhBQjcyOTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnl8AwDQYJKoZIhvcNAQELBQADggEBAA6uiiccQlL6SRK5 C8WXr3pjHAQBRHwuwZz1Ayp5sNStGGd7zDpv3gGVozqQtopqHQlKedzKvVrGOBiR 7NjqevpYb16IA08fj7A8pU4QsCg6dfb+2v9AgavRp9fQbGZMBPZRaadRT+tLxVy+ WQsw826D0sKaD2tAmXRprFWAiatz/PVDb2Y6XU5DFQP1jdquGG14yRTm7e2lEept jVz9Kzc8Ox8+J5PUi6BoNCX3Rpdr20M/39a6VEP+1r+DgjDYokZZSY2hNvbxCUPB Tml4kbmkIj2wWGuM7BPqqTpSm266VAjbs4YTDLmX4YRRUWoAi6okUlH5x76gbiv/ 8GbAAH4= -----END CERTIFICATE-----Generated at Sun May 11 16:03:53 2025 by rpki-client