$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/738240A246DC11EEAF1D2C1DC4F9AE02.roa File: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (raw, json) Hash identifier: c+KKdUiE40XaCCosVDJRN/ivdbzY7AEBYwh4rejWgD8= Subject key identifier: B8:D0:CF:7C:4E:E7:43:58:43:CF:42:D5:C5:28:BD:3B:CE:8C:B0:5F Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Certificate serial: 0A10 Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/738240A246DC11EEAF1D2C1DC4F9AE02.roa Signing time: Sat 10 May 2025 20:05:38 +0000 ROA not before: Sat 10 May 2025 20:05:38 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137551 IP address blocks: 103.112.240.0/22 maxlen: 24 103.120.120.0/22 maxlen: 22 103.120.120.0/24 maxlen: 24 103.120.121.0/24 maxlen: 24 103.120.122.0/24 maxlen: 24 103.120.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2576 (0xa10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF Validity Not Before: May 10 20:05:38 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681fb192-1d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:69:90:fa:e2:7f:65:54:de:95:aa:7c:67:e9: c3:26:2a:58:0e:bf:c1:bd:71:04:29:65:9d:b3:fc: 84:ac:32:17:cc:ca:cc:50:59:9c:88:3c:c8:01:be: b5:38:0a:30:7a:54:5e:ed:8d:3f:74:91:22:e8:ca: 51:64:f2:a9:bc:52:9b:a6:8d:eb:38:fc:8a:83:7b: d1:00:cb:fa:b9:c4:e7:3b:fc:8d:7e:04:24:94:85: 3d:31:ea:5b:75:43:42:96:25:67:cb:e7:37:97:e4: c9:10:01:d2:38:17:db:11:8d:e0:8c:0b:72:fd:59: 75:8d:fd:4d:ac:fd:30:d4:f0:d9:10:17:35:e4:b7: be:37:b3:bf:1e:da:c6:cc:c0:07:d6:88:8c:10:a6: 80:22:d7:a4:e4:2b:3d:50:b4:a1:b6:4c:8d:2f:99: e9:2d:13:79:9c:9e:bb:a8:7c:d4:6c:45:45:c8:6c: 9e:ab:50:a2:09:5b:fd:06:17:72:de:33:55:72:4a: 0e:db:45:4b:f0:10:ee:31:17:05:96:35:dd:09:1b: e6:84:93:4c:7f:28:8a:35:87:9a:3a:e2:86:d6:7d: 19:02:3b:36:08:37:34:b7:b9:39:63:77:32:66:39: 8a:bb:d1:95:b3:2a:48:03:c3:51:64:fd:0d:eb:91: 4e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D0:CF:7C:4E:E7:43:58:43:CF:42:D5:C5:28:BD:3B:CE:8C:B0:5F X509v3 Authority Key Identifier: keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/738240A246DC11EEAF1D2C1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.240.0/22 103.120.120.0/22 Signature Algorithm: sha256WithRSAEncryption a5:f8:e5:3d:30:74:5e:04:14:b3:ff:b0:f8:9e:7a:84:66:14: 1f:6f:83:4e:cb:89:e7:47:40:b8:2e:ba:48:2e:af:97:b1:71: 79:f9:09:1e:ac:96:99:49:fb:71:ca:7e:df:f6:fd:a2:63:13: 49:fe:92:d6:3d:a8:82:9f:f1:eb:bb:4d:8a:93:5a:92:41:ca: ee:c2:76:a4:20:ab:2c:e2:63:58:3e:bd:6b:89:ce:4d:6f:39: 89:f0:43:b5:97:ba:38:76:ce:e3:74:b2:0b:af:87:4e:d1:fc: d6:58:4e:e0:9e:9b:33:c3:a8:be:b3:e2:73:d5:f6:b2:9c:fb: 36:fd:8e:76:64:aa:86:0f:18:de:98:bf:7a:9b:35:fa:fa:a3: 2f:d7:11:ae:01:d8:6f:c6:81:a7:57:0a:d6:a0:da:0b:0b:58: 08:05:94:af:27:0c:93:5b:d0:be:d0:83:7a:98:f3:5e:3e:e3: 92:48:64:be:b0:f4:ff:a2:89:47:f5:7c:8f:15:96:81:04:81: 98:83:a1:08:9f:61:19:78:3d:ed:df:4f:f8:d2:1d:97:40:a8: c9:7a:4a:10:ae:6f:ca:aa:fd:07:f6:ef:ce:16:da:e6:1c:d7: 0c:fa:6e:77:c0:e6:11:b2:37:c1:e0:0b:19:4e:03:22:8e:9b: e4:21:7f:ab -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICChAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ3N0ExMTAvBgNVBAUTKDExMjk0MERGNTY1MzJCNUQ5QTU5Nzg2OUFDQTkzMUU3 ODNFOEFDQkYwHhcNMjUwNTEwMjAwNTM4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFmYjE5Mi0xZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGmQ+uJ/ZVTelap8Z+nDJipYDr/BvXEEKWWds/yErDIXzMrMUFmciDzIAb61 OAowelRe7Y0/dJEi6MpRZPKpvFKbpo3rOPyKg3vRAMv6ucTnO/yNfgQklIU9Mepb dUNCliVny+c3l+TJEAHSOBfbEY3gjAty/Vl1jf1NrP0w1PDZEBc15Le+N7O/HtrG zMAH1oiMEKaAItek5Cs9ULShtkyNL5npLRN5nJ67qHzUbEVFyGyeq1CiCVv9Bhdy 3jNVckoO20VL8BDuMRcFljXdCRvmhJNMfyiKNYeaOuKG1n0ZAjs2CDc0t7k5Y3cy ZjmKu9GVsypIA8NRZP0N65FO8wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLjQz3xO 50NYQ89C1cUovTvOjLBfMB8GA1UdIwQYMBaAFBEpQN9WUytdmll4aaypMeeD6Ky/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc3QS9DODI4OTQzMjcz RTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsxMmFXWGhwcktreDU0UG9y TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VTbEEzMVpUSzEyYVdYaHByS2t4NTRQb3JMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ3N0EvQzgyODk0MzI3M0U4MTFFQTg4RjAyMjdGQzRGOUFFMDIvNzM4MjQwQTI0 NkRDMTFFRUFGMUQyQzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJncPADBAJneHgwDQYJKoZIhvcNAQELBQADggEBAKX45T0w dF4EFLP/sPieeoRmFB9vg07LiedHQLguukgur5excXn5CR6slplJ+3HKft/2/aJj E0n+ktY9qIKf8eu7TYqTWpJByu7CdqQgqyziY1g+vWuJzk1vOYnwQ7WXujh2zuN0 sguvh07R/NZYTuCemzPDqL6z4nPV9rKc+zb9jnZkqoYPGN6Yv3qbNfr6oy/XEa4B 2G/GgadXCtag2gsLWAgFlK8nDJNb0L7Qg3qY814+45JIZL6w9P+iiUf1fI8VloEE gZiDoQifYRl4Pe3fT/jSHZdAqMl6ShCub8qq/Qf2784W2uYc1wz6bnfA5hGyN8Hg CxlOAyKOm+Qhf6s= -----END CERTIFICATE-----Generated at Thu May 15 09:53:39 2025 by rpki-client