$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/372E72941F7811F0AC4FFF82C4F9AE02.roa File: 372E72941F7811F0AC4FFF82C4F9AE02.roa (raw, json) Hash identifier: jaXbiuqtcQdlkMs4CEqb5p6S5iRfHaH4lHtZa0lEW80= Subject key identifier: D3:32:35:48:7F:90:B3:96:AC:2F:2C:80:1E:16:8C:F6:47:64:CC:10 Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Certificate serial: 18 Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/372E72941F7811F0AC4FFF82C4F9AE02.roa Signing time: Thu 01 May 2025 07:14:33 +0000 ROA not before: Thu 01 May 2025 07:14:33 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137899 IP address blocks: 103.117.136.0/22 maxlen: 24 103.186.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Validity Not Before: May 1 07:14:33 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68131f59-e05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:4b:a1:9d:eb:ed:25:28:d3:15:d0:ce:10: 86:ca:c9:08:27:19:57:9e:fb:0c:53:91:23:5b:f7: 76:94:58:13:3e:77:42:ee:39:39:50:9a:7f:93:dc: ff:e1:a7:91:3d:71:32:5e:65:3a:dd:62:66:76:4a: 8d:7d:cd:2e:b7:4c:2e:28:ed:51:76:3d:ba:f6:a3: 98:9e:a5:42:80:cf:a0:e6:30:43:9b:20:1b:32:22: 83:8e:e1:99:b9:93:67:ed:f7:49:b6:f4:6f:30:26: 02:42:b0:fa:9a:60:ea:39:32:51:6c:b4:58:68:ed: 09:e9:18:b7:d2:50:eb:2a:a9:c7:3b:9a:f7:c7:7c: da:db:2f:01:04:e9:3f:ba:a9:a3:ca:66:95:f6:1d: 94:66:f5:35:81:11:47:ff:d9:a1:79:b1:a3:c3:6c: 18:23:47:60:f2:98:ec:f6:bf:42:55:7f:a3:70:b5: 1b:41:e2:8b:53:53:96:e0:40:7e:20:80:10:d0:6f: 7c:ec:dd:28:e4:c1:b3:23:74:59:a1:b8:87:a1:bf: 18:96:5b:1e:4c:46:27:4c:b1:69:0b:18:a8:b1:eb: 1d:8a:e5:60:58:6a:14:92:f5:a9:18:b6:08:5e:aa: 22:2e:b9:cb:51:fb:40:06:b2:2b:ea:d7:ba:98:98: c7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:32:35:48:7F:90:B3:96:AC:2F:2C:80:1E:16:8C:F6:47:64:CC:10 X509v3 Authority Key Identifier: keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/372E72941F7811F0AC4FFF82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.117.136.0/22 103.186.214.0/23 Signature Algorithm: sha256WithRSAEncryption cd:89:f7:ce:d4:1a:9b:9a:e5:ce:27:90:63:09:b2:d9:19:30: ab:68:c6:df:db:76:a2:96:8e:46:3a:45:0c:f7:f5:98:2a:de: 0c:bb:f6:02:73:d3:28:b5:6e:87:7c:40:a1:38:3b:83:aa:4e: 0f:b3:e1:a2:e5:01:4c:bd:b7:0a:97:3e:48:7e:8c:32:2a:c3: 90:60:0f:be:ab:19:25:7d:0d:ec:87:49:15:6c:da:d4:1c:ef: b7:e8:39:5a:24:6a:d0:f8:c6:71:03:6c:f3:7a:76:8c:ec:46: 8a:8e:61:01:77:22:cf:60:7f:e0:d2:24:f4:2a:41:19:bd:1f: 99:3b:56:23:63:4f:e7:bd:2d:18:d0:1e:99:0d:c5:5b:70:3c: 32:b5:a9:65:11:34:34:43:f5:ce:33:16:13:dc:21:4d:f6:35: 02:1d:a7:23:a3:da:c4:43:95:c8:9f:5e:94:8e:7c:5a:f8:f3: e9:53:65:98:f6:56:18:2e:aa:5f:27:74:aa:dd:85:28:2d:9a: 53:87:37:ed:0d:7b:c6:f4:b1:44:95:72:3a:14:22:1f:6b:cf: 90:8f:32:b7:d3:eb:1b:58:22:c8:75:36:9f:cb:d7:97:d0:62: 58:2b:7e:30:02:81:db:4a:9c:a0:87:0a:11:da:74:84:5f:33: 6b:3c:e2:a8 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjQzRjExMC8GA1UEBRMoMTg5NjdEQ0RCNzI0QTg0QTcxNzExRTY3OEFBQjFEMkU3 MjIxNUQ2QzAeFw0yNTA1MDEwNzE0MzNaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MTMxZjU5LWUwNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA7kuhnevtJSjTFdDOEIbKyQgnGVee+wxTkSNb93aUWBM+d0LuOTlQmn+T3P/h p5E9cTJeZTrdYmZ2So19zS63TC4o7VF2Pbr2o5iepUKAz6DmMEObIBsyIoOO4Zm5 k2ft90m29G8wJgJCsPqaYOo5MlFstFho7QnpGLfSUOsqqcc7mvfHfNrbLwEE6T+6 qaPKZpX2HZRm9TWBEUf/2aF5saPDbBgjR2DymOz2v0JVf6NwtRtB4otTU5bgQH4g gBDQb3zs3SjkwbMjdFmhuIehvxiWWx5MRidMsWkLGKix6x2K5WBYahSS9akYtghe qiIuuctR+0AGsivq17qYmMe7AgMBAAGjggKbMIIClzAdBgNVHQ4EFgQU0zI1SH+Q s5asLyyAHhaM9kdkzBAwHwYDVR0jBBgwFoAUGJZ9zbckqEpxcR5niqsdLnIhXWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNDNGL0Q2ODRGQzJFMUE4 QjExRjA5Q0MyNDUzNUM0RjlBRTAyL0dKWjl6YmNrcUVweGNSNW5pcXNkTG5JaFhX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0paOXpiY2txRXB4Y1I1bmlxc2RMbkloWFd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjQzRi9ENjg0RkMyRTFBOEIxMUYwOUNDMjQ1MzVDNEY5QUUwMi8zNzJFNzI5NDFG NzgxMUYwQUM0RkZGODJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmd1iAMEAWe61jANBgkqhkiG9w0BAQsFAAOCAQEAzYn3ztQa m5rlzieQYwmy2Rkwq2jG39t2opaORjpFDPf1mCreDLv2AnPTKLVuh3xAoTg7g6pO D7PhouUBTL23Cpc+SH6MMirDkGAPvqsZJX0N7IdJFWza1Bzvt+g5WiRq0PjGcQNs 83p2jOxGio5hAXciz2B/4NIk9CpBGb0fmTtWI2NP570tGNAemQ3FW3A8MrWpZRE0 NEP1zjMWE9whTfY1Ah2nI6PaxEOVyJ9elI58Wvjz6VNlmPZWGC6qXyd0qt2FKC2a U4c37Q17xvSxRJVyOhQiH2vPkI8yt9PrG1giyHU2n8vXl9BiWCt+MAKB20qcoIcK Edp0hF8zazziqA== -----END CERTIFICATE-----Generated at Mon May 12 11:46:37 2025 by rpki-client