$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/AB731B004B2A11EFAAFCC92CC4F9AE02.roa File: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (raw, json) Hash identifier: 1iubQBpsLSvGnn+Mx1GBJRtm0BcqUW85CF15NJsmWt0= Subject key identifier: CE:B2:11:DA:85:DF:31:2C:01:3B:36:FA:C0:94:E0:DF:93:57:99:DF Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Certificate serial: 107B Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/AB731B004B2A11EFAAFCC92CC4F9AE02.roa Signing time: Fri 02 May 2025 17:56:39 +0000 ROA not before: Fri 02 May 2025 17:56:39 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152676 IP address blocks: 103.24.132.0/23 maxlen: 23 2406:bf00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4219 (0x107b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Validity Not Before: May 2 17:56:39 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68150757-d9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:0b:d0:4b:c6:88:24:ed:9a:73:6f:bd:bc: 1c:77:b3:34:3a:97:8d:b7:76:31:7c:cf:ed:97:1c: 3a:3b:5d:ce:60:0f:3b:da:50:ab:28:30:59:d7:af: 24:cf:7f:2a:bf:cb:20:7e:66:e3:a0:86:83:67:a2: 55:b0:6e:8d:f2:0a:e8:a3:41:fd:51:43:6a:70:e5: 00:d0:aa:93:0a:22:42:b8:ea:43:6a:ca:6d:9b:4a: 06:9a:cf:19:65:d5:60:a6:ce:51:ab:3a:ca:b3:c3: 24:a0:93:83:4e:21:92:5e:95:9e:23:d0:aa:c9:01: d2:1b:77:74:e9:32:28:cc:6a:fd:9d:96:a4:62:8e: f1:6f:a9:a5:21:dc:5f:06:9f:bf:66:a2:22:3a:33: 51:e6:60:56:be:97:19:a8:b9:7b:e0:87:4b:a9:5a: 56:c9:42:b5:db:c8:5c:57:ae:2d:20:a3:92:aa:71: e7:58:20:5f:0e:ac:a8:06:c2:08:66:d2:e6:0a:76: 6a:50:b0:3b:fd:54:7f:33:c6:c4:18:6d:e8:22:d4: da:64:21:46:09:bb:ce:06:a4:43:b6:73:5b:b2:76: bf:15:26:b9:17:33:26:d7:22:db:47:5d:5b:0f:a6: 12:8a:9c:97:d0:23:40:25:f5:e4:75:62:76:1e:3e: 1b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B2:11:DA:85:DF:31:2C:01:3B:36:FA:C0:94:E0:DF:93:57:99:DF X509v3 Authority Key Identifier: keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/AB731B004B2A11EFAAFCC92CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.132.0/23 IPv6: 2406:bf00::/48 Signature Algorithm: sha256WithRSAEncryption 50:2e:e7:66:2b:5d:46:0e:eb:72:62:4d:80:ee:2d:9c:a9:d6: 68:7e:82:f3:e7:d3:55:d6:12:cd:03:0c:38:e5:94:c0:db:02: 15:43:6f:0c:7a:71:f5:95:d7:c4:ae:f0:cf:b7:c0:95:56:f9: 5a:20:1d:9e:bc:08:e3:02:fa:8e:bf:21:98:84:db:e4:cf:72: 3a:95:22:ce:75:d2:e0:df:30:04:e1:80:c3:56:f4:a6:68:6b: da:74:b3:34:f2:16:af:68:c6:e6:e8:40:31:8b:8b:a3:0a:fa: 4c:e7:4a:76:86:3e:91:95:2b:e9:9e:49:84:d5:d7:56:0e:b4: 5c:25:02:db:77:99:d4:58:7b:eb:80:65:0f:61:7b:72:3d:75: 18:1b:07:8d:a5:93:97:02:60:89:bc:2c:92:3f:18:06:e4:d0: 55:4f:c4:a9:b1:f7:31:7c:56:bf:05:05:15:d2:02:29:f3:df: df:d3:9f:d9:2b:56:af:80:51:17:99:bd:9d:a1:ea:7e:25:bb: 98:fc:7d:54:e1:72:89:f1:7d:42:0e:96:d1:73:66:21:01:b8: 65:c8:13:6a:a1:bb:a1:75:98:85:c9:db:14:51:77:b2:06:39: f6:17:1f:dd:ff:7b:7e:28:dd:ef:4d:92:a9:59:a8:92:f2:25: ea:ff:02:ec -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICEHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyODUxMTAvBgNVBAUTKDNFMjlDRTZGNkE3REI5NEI2RDA5MTMzQjczRkVENTJE REVFMTJEQUIwHhcNMjUwNTAyMTc1NjM5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1MDc1Ny1kOWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAov4L0EvGiCTtmnNvvbwcd7M0OpeNt3YxfM/tlxw6O13OYA872lCrKDBZ168k z38qv8sgfmbjoIaDZ6JVsG6N8groo0H9UUNqcOUA0KqTCiJCuOpDasptm0oGms8Z ZdVgps5RqzrKs8MkoJODTiGSXpWeI9CqyQHSG3d06TIozGr9nZakYo7xb6mlIdxf Bp+/ZqIiOjNR5mBWvpcZqLl74IdLqVpWyUK128hcV64tIKOSqnHnWCBfDqyoBsII ZtLmCnZqULA7/VR/M8bEGG3oItTaZCFGCbvOBqRDtnNbsna/FSa5FzMm1yLbR11b D6YSipyX0CNAJfXkdWJ2Hj4bDwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFM6yEdqF 3zEsATs2+sCU4N+TV5nfMB8GA1UdIwQYMBaAFD4pzm9qfblLbQkTO3P+1S3e4S2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI4NS9GRDY0RjBCODM0 MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVVdHRDUk03Y183VkxkN2hM YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bpbk9iMnA5dVV0dENSTTdjXzdWTGQ3aExhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0YyODUvRkQ2NEYwQjgzNDBDMTFFOTk2NkM1QTc2QzRGOUFFMDIvQUI3MzFCMDA0 QjJBMTFFRkFBRkNDOTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnGIQwDwQCAAIwCQMHACQGvwAAADANBgkqhkiG9w0BAQsF AAOCAQEAUC7nZitdRg7rcmJNgO4tnKnWaH6C8+fTVdYSzQMMOOWUwNsCFUNvDHpx 9ZXXxK7wz7fAlVb5WiAdnrwI4wL6jr8hmITb5M9yOpUiznXS4N8wBOGAw1b0pmhr 2nSzNPIWr2jG5uhAMYuLowr6TOdKdoY+kZUr6Z5JhNXXVg60XCUC23eZ1Fh764Bl D2F7cj11GBsHjaWTlwJgibwskj8YBuTQVU/EqbH3MXxWvwUFFdICKfPf39Of2StW r4BRF5m9naHqfiW7mPx9VOFyifF9Qg6W0XNmIQG4ZcgTaqG7oXWYhcnbFFF3sgY5 9hcf3f97fijd702SqVmokvIl6v8C7A== -----END CERTIFICATE-----Generated at Tue May 13 11:46:03 2025 by rpki-client