$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/A14BDCE491EB11EBAD7A1530C4F9AE02.roa File: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (raw, json) Hash identifier: NSWzyjE2HPsrPxuhTouX2YNe98sTsio9BMgnAVmwnyg= Subject key identifier: 76:25:01:5B:01:5E:86:C5:1D:E3:BE:C4:FA:7C:22:E7:B6:67:04:37 Certificate issuer: /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Certificate serial: 0633 Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/A14BDCE491EB11EBAD7A1530C4F9AE02.roa Signing time: Mon 28 Apr 2025 23:33:56 +0000 ROA not before: Mon 28 Apr 2025 23:33:56 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142008 IP address blocks: 103.164.158.0/24 maxlen: 24 103.173.38.0/24 maxlen: 24 2001:df6:4c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1587 (0x633) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1EBA, serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Validity Not Before: Apr 28 23:33:56 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68101063-5925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a4:39:3e:3a:8f:53:0e:a0:08:3c:85:04:ab: c4:f3:82:42:96:db:8b:f2:00:cf:0c:fb:70:65:2f: 99:19:9f:85:23:83:aa:c8:d7:a2:a8:89:31:a6:59: 6e:c7:8d:ea:40:48:3b:85:02:2f:94:0d:1f:eb:e1: 14:34:92:20:92:a9:47:05:5d:b6:ef:4f:66:92:4e: 33:23:ff:f5:ef:7d:be:22:ea:ab:70:55:69:4d:9c: b7:bc:eb:36:25:0d:81:83:8a:ea:62:ae:a6:42:5f: 97:4c:8e:66:3e:52:06:db:57:34:ee:67:50:df:da: 82:c8:8b:4d:b9:ef:e9:60:b9:4a:ed:7a:27:b2:2a: ee:76:f2:2e:e8:e4:c8:31:af:03:24:d5:7e:6f:65: 72:b0:a8:c0:02:3a:59:c7:a7:1c:25:11:fe:83:43: ec:40:08:85:82:8a:29:9f:3b:07:06:59:09:87:bd: ec:15:92:af:04:b8:1e:6e:69:87:28:29:c1:69:dd: 3b:bc:49:6d:60:28:b3:d3:cb:fd:9f:54:81:e9:aa: 29:3a:f7:85:a8:92:62:38:28:5b:ec:dc:14:f5:11: 75:44:d7:63:4e:01:ae:6c:a1:ad:66:f0:4d:bf:d8: 07:ee:69:71:ed:aa:e4:60:0b:20:19:5a:ec:e0:ac: 30:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:25:01:5B:01:5E:86:C5:1D:E3:BE:C4:FA:7C:22:E7:B6:67:04:37 X509v3 Authority Key Identifier: keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/A14BDCE491EB11EBAD7A1530C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.158.0/24 103.173.38.0/24 IPv6: 2001:df6:4c80::/48 Signature Algorithm: sha256WithRSAEncryption 2f:34:56:b7:bc:66:82:bb:eb:a4:da:a2:48:78:c8:93:c0:31: e3:1a:9f:8d:4a:92:db:e5:7e:b5:7f:94:f8:3f:9c:02:0c:4a: b7:23:88:82:ae:9a:f1:7b:f4:05:66:25:20:96:f0:8c:90:ed: 84:3c:51:76:13:a5:1e:cc:83:b7:5a:b9:f9:04:3d:fb:4b:94: 0c:00:ff:6d:cc:88:c0:15:62:10:67:d3:36:f9:50:9c:a6:64: 3d:d1:d7:2c:f5:3b:bc:be:a8:9d:ea:04:0b:21:5f:63:bc:32: 66:df:e4:6c:8d:e3:74:45:8e:7e:de:67:a2:df:17:f9:cb:cd: 73:2e:38:38:cd:33:fa:b5:00:df:7c:59:98:a8:cf:5c:72:65: b5:7c:53:a9:08:a3:ec:a7:e5:1c:1a:9e:6f:e3:df:a4:6c:fc: 68:e5:53:56:67:44:a4:81:4d:5d:85:d5:5d:cb:52:95:2b:a7: ae:9c:72:24:46:a7:f4:88:04:d1:1c:6b:97:e0:b1:4a:a5:cc: ae:11:3e:45:76:3a:55:fc:bc:c7:7e:64:90:b2:8a:4e:c3:13: 2d:d0:7e:d4:76:89:12:23:f5:c2:78:5a:4b:67:a4:f2:30:5a: 30:4e:1d:c6:90:b7:44:6c:9d:79:26:62:1b:09:65:bb:32:d2: 5d:07:62:2f -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFQkExMTAvBgNVBAUTKDVDMzdDREZDQzhFOUU5MEM0MTE2NEEzOTFFRTkwM0I0 REU1NERGQjEwHhcNMjUwNDI4MjMzMzU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEwMTA2My01OTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06Q5PjqPUw6gCDyFBKvE84JCltuL8gDPDPtwZS+ZGZ+FI4OqyNeiqIkxpllu x43qQEg7hQIvlA0f6+EUNJIgkqlHBV22709mkk4zI//1732+IuqrcFVpTZy3vOs2 JQ2Bg4rqYq6mQl+XTI5mPlIG21c07mdQ39qCyItNue/pYLlK7XonsirudvIu6OTI Ma8DJNV+b2VysKjAAjpZx6ccJRH+g0PsQAiFgoopnzsHBlkJh73sFZKvBLgebmmH KCnBad07vEltYCiz08v9n1SB6aopOveFqJJiOChb7NwU9RF1RNdjTgGubKGtZvBN v9gH7mlx7arkYAsgGVrs4Kww8QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFHYlAVsB XobFHeO+xPp8Iue2ZwQ3MB8GA1UdIwQYMBaAFFw3zfzI6ekMQRZKOR7pA7TeVN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUVCQS84Mzk0RTI1MDkx RUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZReEJGa281SHVrRHRONVUz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEZk5fTWpwNlF4QkZrbzVIdWtEdE41VTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDFFQkEvODM5NEUyNTA5MUVBMTFFQkFBREJGOTJGQzRGOUFFMDIvQTE0QkRDRTQ5 MUVCMTFFQkFEN0ExNTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnpJ4DBABnrSYwDwQCAAIwCQMHACABDfZMgDANBgkqhkiG 9w0BAQsFAAOCAQEALzRWt7xmgrvrpNqiSHjIk8Ax4xqfjUqS2+V+tX+U+D+cAgxK tyOIgq6a8Xv0BWYlIJbwjJDthDxRdhOlHsyDt1q5+QQ9+0uUDAD/bcyIwBViEGfT NvlQnKZkPdHXLPU7vL6oneoECyFfY7wyZt/kbI3jdEWOft5not8X+cvNcy44OM0z +rUA33xZmKjPXHJltXxTqQij7KflHBqeb+PfpGz8aOVTVmdEpIFNXYXVXctSlSun rpxyJEan9IgE0Rxrl+CxSqXMrhE+RXY6Vfy8x35kkLKKTsMTLdB+1HaJEiP1wnha S2ek8jBaME4dxpC3RGydeSZiGwlluzLSXQdiLw== -----END CERTIFICATE-----Generated at Wed May 14 00:43:22 2025 by rpki-client