$ rpki-client -vvf rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/A135DDD4162211EC9B4B6F77C4F9AE02.roa File: A135DDD4162211EC9B4B6F77C4F9AE02.roa (raw, json) Hash identifier: gE7cug0EHsEUbFwgT17gxGmIIkwaJjakWdAGw753tTM= Subject key identifier: 3C:DF:02:E7:51:D5:77:99:70:67:03:6D:9C:00:41:E6:B3:98:CE:7E Certificate issuer: /CN=A91D671F/serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A Certificate serial: 160B Authority key identifier: B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/A135DDD4162211EC9B4B6F77C4F9AE02.roa Signing time: Mon 28 Apr 2025 17:25:15 +0000 ROA not before: Mon 28 Apr 2025 17:25:15 +0000 ROA not after: Thu 28 Aug 2025 00:00:00 +0000 asID: 137464 IP address blocks: 103.109.236.0/24 maxlen: 24 103.109.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5643 (0x160b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D671F, serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A Validity Not Before: Apr 28 17:25:15 2025 GMT Not After : Aug 28 00:00:00 2025 GMT Subject: CN=680fb9fb-61ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f8:91:e0:8b:32:48:be:4a:62:d8:2b:42:9c: e5:af:b9:01:0c:b7:80:8a:97:b5:c8:1b:8a:16:a5: a6:18:42:44:22:d4:47:8e:40:0c:22:92:38:92:4e: 50:79:ca:d8:71:63:7b:ae:60:52:44:ec:c4:7b:f0: eb:06:2e:36:1e:a0:a8:b0:d0:6b:13:00:35:01:3c: 89:c2:05:02:82:03:89:23:81:3a:f7:a6:28:a0:5c: 0e:c8:81:9e:e1:5b:63:56:70:67:8b:d4:f9:b1:e3: bf:4b:ba:d5:4e:46:10:df:32:17:e4:e6:56:5a:74: a7:e3:67:6c:c4:6a:08:b6:0f:45:5e:d7:e5:65:d4: c5:58:4d:79:cf:bd:7f:da:2f:49:c8:3b:64:bf:8c: 97:4a:62:60:b4:75:f9:50:9e:a6:09:da:dd:c3:0f: 38:f4:d9:b8:71:32:99:13:5f:32:4f:5c:bf:3d:65: c6:2b:fc:52:24:3c:78:e5:8f:ad:af:d3:98:32:1c: 18:92:04:35:2c:37:77:16:8a:4e:21:42:29:d0:b4: bf:ef:75:ce:ff:57:b9:d4:d3:30:e6:65:02:85:a4: f5:73:7f:7d:23:32:10:1e:85:79:09:e7:f6:b8:b9: 3f:10:02:7f:33:6c:47:ea:0e:72:e2:8e:93:74:44: c4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DF:02:E7:51:D5:77:99:70:67:03:6D:9C:00:41:E6:B3:98:CE:7E X509v3 Authority Key Identifier: keyid:B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/A135DDD4162211EC9B4B6F77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.109.236.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:6f:27:ed:30:5d:fa:1e:ba:9b:25:61:9e:25:65:37:42:34: 7e:4e:ff:ce:91:0c:c9:a7:a6:df:51:bc:72:05:5c:13:ac:30: 20:ea:63:55:1c:f8:e0:05:da:f9:be:e3:31:f9:9b:68:aa:ff: 17:e3:26:dd:91:9d:c9:6b:f8:42:02:21:61:25:13:1e:a4:23: 36:62:95:93:95:de:af:ad:aa:87:1b:2f:8b:8c:b4:f9:f8:77: 22:a2:c4:6f:f3:84:b6:94:94:6f:57:54:ff:67:a3:72:33:16: 62:4b:5e:fc:0e:5b:21:c7:51:81:01:7d:8c:d4:53:65:10:66: db:fa:11:c4:82:db:0b:3f:cf:09:43:4e:54:4f:38:66:16:ab: a5:dc:d7:f4:fb:fc:19:83:31:c5:14:f3:3d:84:74:72:3f:02: 41:7d:9f:3c:65:5f:c8:37:e0:33:bf:30:01:83:8a:45:8e:ec: 54:85:9b:66:e2:02:7b:b6:d7:3a:00:89:20:13:e7:39:f1:52: 36:40:93:fd:db:65:08:07:fc:8f:74:70:a8:f4:e1:60:c9:ef: 83:e2:94:25:66:30:a6:b5:1a:18:9b:7e:bc:fc:2d:7e:ef:9f: fa:b1:d2:43:9c:54:25:22:db:c3:0e:76:23:39:30:5b:3c:fb: ec:b6:50:a3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3MUYxMTAvBgNVBAUTKEIzQzhGN0UwNjREQTlCNUFBNkVBNzk2MDE3RUM2MEQy ODkwMzc4MkEwHhcNMjUwNDI4MTcyNTE1WhcNMjUwODI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODBmYjlmYi02MWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/iR4IsySL5KYtgrQpzlr7kBDLeAipe1yBuKFqWmGEJEItRHjkAMIpI4kk5Q ecrYcWN7rmBSROzEe/DrBi42HqCosNBrEwA1ATyJwgUCggOJI4E696YooFwOyIGe 4VtjVnBni9T5seO/S7rVTkYQ3zIX5OZWWnSn42dsxGoItg9FXtflZdTFWE15z71/ 2i9JyDtkv4yXSmJgtHX5UJ6mCdrdww849Nm4cTKZE18yT1y/PWXGK/xSJDx45Y+t r9OYMhwYkgQ1LDd3FopOIUIp0LS/73XO/1e51NMw5mUChaT1c399IzIQHoV5Cef2 uLk/EAJ/M2xH6g5y4o6TdETEvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDzfAudR 1XeZcGcDbZwAQeazmM5+MB8GA1UdIwQYMBaAFLPI9+Bk2ptapup5YBfsYNKJA3gq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjcxRi8xRURDMTBCQzE3 MUUxMUU4ODU2QkM0NDNDNEY5QUUwMi9zOGozNEdUYW0xcW02bmxnRi14ZzBva0Rl Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4ajM0R1RhbTFxbTZubGdGLXhnMG9rRGVDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDY3MUYvMUVEQzEwQkMxNzFFMTFFODg1NkJDNDQzQzRGOUFFMDIvQTEzNURERDQx NjIyMTFFQzlCNEI2Rjc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnbewwDQYJKoZIhvcNAQELBQADggEBAH5vJ+0wXfoeupsl YZ4lZTdCNH5O/86RDMmnpt9RvHIFXBOsMCDqY1Uc+OAF2vm+4zH5m2iq/xfjJt2R nclr+EICIWElEx6kIzZilZOV3q+tqocbL4uMtPn4dyKixG/zhLaUlG9XVP9no3Iz FmJLXvwOWyHHUYEBfYzUU2UQZtv6EcSC2ws/zwlDTlRPOGYWq6Xc1/T7/BmDMcUU 8z2EdHI/AkF9nzxlX8g34DO/MAGDikWO7FSFm2biAnu21zoAiSAT5znxUjZAk/3b ZQgH/I90cKj04WDJ74PilCVmMKa1Ghibfrz8LX7vn/qx0kOcVCUi28MOdiM5MFs8 ++y2UKM= -----END CERTIFICATE-----Generated at Wed May 14 16:26:34 2025 by rpki-client