$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/57C25DB2E42811EA881AB667C4F9AE02.roa File: 57C25DB2E42811EA881AB667C4F9AE02.roa (raw, json) Hash identifier: E9181+VVT+rwNNkc7uINFuNWW6wPgms9gTqr7A850dY= Subject key identifier: FB:01:6A:91:FF:FC:65:BF:36:07:44:D6:BC:43:61:D8:81:11:E7:C1 Certificate issuer: /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Certificate serial: 0A31 Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/57C25DB2E42811EA881AB667C4F9AE02.roa Signing time: Mon 28 Apr 2025 20:30:27 +0000 ROA not before: Mon 28 Apr 2025 20:30:27 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 137373 IP address blocks: 103.148.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2609 (0xa31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1AC7, serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Validity Not Before: Apr 28 20:30:27 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=680fe563-4608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4a:f9:dd:84:fe:95:b0:62:4c:25:75:16:01: 92:55:31:60:a4:24:a5:c2:e1:f3:d9:a3:22:2e:74: 58:ca:71:3b:7d:f1:5c:9d:42:aa:48:e0:4e:fc:fc: f3:21:a5:7c:6b:c5:10:cc:3d:cd:18:19:a1:6a:d5: 87:73:d3:b7:d3:51:42:4a:cf:61:15:09:1a:2c:97: 8b:77:95:68:c9:ae:54:4f:9b:44:92:98:0d:0a:89: bf:d1:f8:cb:7f:8a:5e:52:38:cc:10:8e:51:55:b0: 3c:cf:a5:f8:6b:4c:e1:37:a6:82:c2:2b:de:af:b9: a9:65:94:ad:72:9b:c6:99:f7:e0:84:aa:b9:38:01: e1:9e:b7:25:a8:ed:1f:65:bc:67:6f:c7:17:8c:52: 10:bc:c2:da:b5:02:7d:d3:7a:f1:f7:1a:b7:91:81: 6f:13:d7:f2:54:07:e6:30:33:1d:97:87:1d:08:33: 2e:d7:84:6a:17:a1:88:18:8b:87:8b:f6:0f:dc:1d: 2f:f9:af:c3:24:74:34:15:38:3a:f7:9d:7d:94:1a: 1d:bf:17:b2:75:e4:4e:02:5c:82:15:eb:e2:71:61: 34:04:3d:25:84:21:71:d6:b0:93:43:c0:b5:17:4b: 3d:91:b3:71:76:af:ec:cd:ab:82:7f:ce:af:12:6e: ff:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:01:6A:91:FF:FC:65:BF:36:07:44:D6:BC:43:61:D8:81:11:E7:C1 X509v3 Authority Key Identifier: keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/57C25DB2E42811EA881AB667C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.242.0/24 Signature Algorithm: sha256WithRSAEncryption db:62:a0:ff:44:0d:dc:40:66:57:d2:b3:f7:02:02:97:7d:f5: 88:66:be:d8:53:fa:6f:3b:97:a0:e8:15:f7:c0:e8:26:12:00: 05:ca:3b:58:73:44:ce:b5:a1:cf:0b:8e:ae:e4:fd:c4:97:70: 18:02:fa:26:a2:ae:46:e0:39:9f:08:bb:db:e8:d5:53:89:38: cc:d2:ec:82:a1:32:d4:42:f4:79:e5:e3:72:60:b3:d5:73:5f: 71:a0:35:88:0d:75:52:8e:10:ef:b4:97:1d:26:83:09:06:7c: 22:12:13:c0:92:3c:0e:ac:75:88:fe:81:bf:12:bc:73:04:9b: 12:9f:e2:94:10:fc:e2:d3:f0:71:04:e7:6e:51:18:7d:8f:26: 14:27:e7:55:09:4a:40:e1:d0:c2:02:af:37:6d:2b:b0:aa:e9: 4f:f7:32:eb:9b:d0:79:87:9c:b5:26:fd:f8:58:96:e8:b9:20: d0:82:44:81:e8:92:04:17:21:e3:a2:62:fe:dd:db:22:9a:56: 90:04:b8:02:4c:92:9f:9b:9c:1e:c0:12:91:22:6a:8e:56:6a: 88:90:9f:97:3d:9c:d0:a8:c7:d0:6a:fd:a3:ef:bc:a5:de:04: 6a:7e:63:3d:87:88:39:49:35:bb:2c:95:53:25:87:bd:52:19: 9a:6a:ad:cf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBQzcxMTAvBgNVBAUTKDZBNDVENjFBODM3NzBDOTBEMDU4Qzc0MTUzMUQ4RDlD NkI2NzkzNUEwHhcNMjUwNDI4MjAzMDI3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODBmZTU2My00NjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkr53YT+lbBiTCV1FgGSVTFgpCSlwuHz2aMiLnRYynE7ffFcnUKqSOBO/Pzz IaV8a8UQzD3NGBmhatWHc9O301FCSs9hFQkaLJeLd5Voya5UT5tEkpgNCom/0fjL f4peUjjMEI5RVbA8z6X4a0zhN6aCwiver7mpZZStcpvGmffghKq5OAHhnrclqO0f Zbxnb8cXjFIQvMLatQJ903rx9xq3kYFvE9fyVAfmMDMdl4cdCDMu14RqF6GIGIuH i/YP3B0v+a/DJHQ0FTg69519lBodvxeydeROAlyCFevicWE0BD0lhCFx1rCTQ8C1 F0s9kbNxdq/szauCf86vEm7/7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPsBapH/ /GW/NgdE1rxDYdiBEefBMB8GA1UdIwQYMBaAFGpF1hqDdwyQ0FjHQVMdjZxrZ5Na MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUFDNy84MUE0QzRENjZF NDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RKRFFXTWRCVXgyTm5HdG5r MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrWFdHb04zREpEUVdNZEJVeDJObkd0bmsxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDFBQzcvODFBNEM0RDY2RTQzMTFFQTk0OUQ5OTIyQzRGOUFFMDIvNTdDMjVEQjJF NDI4MTFFQTg4MUFCNjY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnlPIwDQYJKoZIhvcNAQELBQADggEBANtioP9EDdxAZlfS s/cCApd99YhmvthT+m87l6DoFffA6CYSAAXKO1hzRM61oc8Ljq7k/cSXcBgC+iai rkbgOZ8Iu9vo1VOJOMzS7IKhMtRC9Hnl43Jgs9VzX3GgNYgNdVKOEO+0lx0mgwkG fCISE8CSPA6sdYj+gb8SvHMEmxKf4pQQ/OLT8HEE525RGH2PJhQn51UJSkDh0MIC rzdtK7Cq6U/3Muub0HmHnLUm/fhYlui5INCCRIHokgQXIeOiYv7d2yKaVpAEuAJM kp+bnB7AEpEiao5WaoiQn5c9nNCox9Bq/aPvvKXeBGp+Yz2HiDlJNbsslVMlh71S GZpqrc8= -----END CERTIFICATE-----Generated at Fri May 16 06:06:11 2025 by rpki-client