$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/5EAA75CC28E511F0BE4DF317C4F9AE02.roa File: 5EAA75CC28E511F0BE4DF317C4F9AE02.roa (raw, json) Hash identifier: aZ97R0qET0w8nFTTAAMLi629/SQxZPM4icyK4OVkGiY= Subject key identifier: D2:BA:E9:F2:56:73:02:59:4E:D2:C7:78:B8:01:BD:E2:E6:73:3E:0F Certificate issuer: /CN=A91E4DFA/serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8 Certificate serial: 04E7 Authority key identifier: 20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/5EAA75CC28E511F0BE4DF317C4F9AE02.roa Signing time: Sun 04 May 2025 12:43:25 +0000 ROA not before: Sun 04 May 2025 12:43:25 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 59332 IP address blocks: 103.173.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 23:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4DFA, serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8 Validity Not Before: May 4 12:43:25 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=681760ed-da77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8d:55:ef:a9:ce:e4:80:c2:11:dc:9e:90:82: 42:ef:7c:d9:3a:89:1f:20:b0:84:d4:d3:4a:11:8e: 05:cb:c5:85:b8:8f:5a:62:fb:18:ca:d7:34:80:ba: c1:66:d1:f0:c9:c6:1d:45:33:cf:86:c4:79:5b:1e: 35:b1:39:cc:24:24:3e:f2:8c:4d:4f:4b:f6:05:68: 53:1a:72:d8:53:b8:e9:e0:6b:64:37:07:1a:a3:1f: d9:28:8b:da:64:34:0c:85:41:a1:26:85:f7:4f:78: 88:5e:84:52:36:43:d7:25:7e:66:18:a4:99:59:b3: 5a:d4:26:05:bb:3c:3f:91:09:89:67:9d:30:14:71: bc:59:bf:d6:b0:8f:87:1f:1c:1a:dd:13:b1:17:17: 2e:a5:56:01:03:a0:ab:6c:54:89:47:d1:52:79:ef: de:92:fa:2e:7b:02:62:3f:d9:b5:38:29:b0:b3:6d: 53:ec:b7:82:f7:3a:3f:40:25:93:13:c3:de:1a:d6: 2a:76:0e:dc:7c:0c:b1:ec:51:02:c9:b6:1a:ad:a2: fd:2e:47:77:52:44:93:23:b9:fa:01:ea:08:b3:89: 01:90:6c:39:83:22:61:6a:a4:50:25:ee:e6:01:1e: a1:47:1a:2b:b4:42:ab:c2:fa:7f:a7:e5:57:1f:11: d8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BA:E9:F2:56:73:02:59:4E:D2:C7:78:B8:01:BD:E2:E6:73:3E:0F X509v3 Authority Key Identifier: keyid:20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/5EAA75CC28E511F0BE4DF317C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.84.0/23 Signature Algorithm: sha256WithRSAEncryption b2:5f:9e:5a:6f:95:5d:95:b2:99:ac:31:90:ce:62:52:69:30: 72:2d:fd:50:03:80:c1:c6:17:e0:f6:e4:99:8d:19:69:49:7e: 0e:96:60:88:53:90:b3:8b:7d:71:54:8d:39:a4:10:75:4f:e3: 8f:b4:c7:ad:80:10:8d:d2:9a:95:d3:0f:1d:a1:5c:a3:4d:f7: e4:01:6e:06:d1:94:36:32:10:88:cc:1c:3b:d3:7c:cf:a6:f0: 23:df:76:27:ec:32:16:bc:cb:d2:42:47:d5:7a:63:9b:3f:fa: 9c:ad:57:c9:70:d9:56:f3:b9:59:84:a3:69:78:09:6b:6c:2f: d6:bc:6c:85:5e:cb:4d:49:7e:f0:9e:fa:77:91:c6:06:22:2c: 14:f4:09:b0:d8:79:43:2f:3c:35:00:99:44:fa:07:5f:75:9a: 78:6d:00:74:67:7b:f8:b2:cf:d3:bf:25:1a:06:ab:0b:b1:5b: f4:0e:a2:5f:70:a8:8e:b4:28:25:1f:75:2e:d7:24:a2:a2:3a: d7:4a:20:99:95:74:0e:c5:18:89:82:f1:f1:47:47:a5:2f:97: e4:32:79:f9:f6:f5:8a:8a:92:9f:2c:5b:04:71:f6:c5:61:2d: 51:ba:9e:2f:8c:e0:fa:e9:81:36:b8:b2:ab:55:23:d6:7c:33: 06:46:7b:7c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRERkExMTAvBgNVBAUTKDIwNzhBRDVCQkRGMUQ0QzVCOTcwQkJFMjkzNEQ5QTM1 NURCMzFDRTgwHhcNMjUwNTA0MTI0MzI1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE3NjBlZC1kYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Y1V76nO5IDCEdyekIJC73zZOokfILCE1NNKEY4Fy8WFuI9aYvsYytc0gLrB ZtHwycYdRTPPhsR5Wx41sTnMJCQ+8oxNT0v2BWhTGnLYU7jp4GtkNwcaox/ZKIva ZDQMhUGhJoX3T3iIXoRSNkPXJX5mGKSZWbNa1CYFuzw/kQmJZ50wFHG8Wb/WsI+H Hxwa3ROxFxcupVYBA6CrbFSJR9FSee/ekvouewJiP9m1OCmws21T7LeC9zo/QCWT E8PeGtYqdg7cfAyx7FECybYaraL9Lkd3UkSTI7n6AeoIs4kBkGw5gyJhaqRQJe7m AR6hRxortEKrwvp/p+VXHxHY4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNK66fJW cwJZTtLHeLgBveLmcz4PMB8GA1UdIwQYMBaAFCB4rVu98dTFuXC74pNNmjVdsxzo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNERGQS84NDU5ODRDRTFB ODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFNVzVjTHZpazAyYU5WMnpI T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIaXRXNzN4MU1XNWNMdmlrMDJhTlYyekhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRERkEvODQ1OTg0Q0UxQTg1MTFFQ0E3NkFFQTNBQzRGOUFFMDIvNUVBQTc1Q0My OEU1MTFGMEJFNERGMzE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnrVQwDQYJKoZIhvcNAQELBQADggEBALJfnlpvlV2Vspms MZDOYlJpMHIt/VADgMHGF+D25JmNGWlJfg6WYIhTkLOLfXFUjTmkEHVP44+0x62A EI3SmpXTDx2hXKNN9+QBbgbRlDYyEIjMHDvTfM+m8CPfdifsMha8y9JCR9V6Y5s/ +pytV8lw2VbzuVmEo2l4CWtsL9a8bIVey01JfvCe+neRxgYiLBT0CbDYeUMvPDUA mUT6B191mnhtAHRne/iyz9O/JRoGqwuxW/QOol9wqI60KCUfdS7XJKKiOtdKIJmV dA7FGImC8fFHR6Uvl+Qyefn29YqKkp8sWwRx9sVhLVG6ni+M4PrpgTa4sqtVI9Z8 MwZGe3w= -----END CERTIFICATE-----Generated at Sat May 10 23:13:45 2025 by rpki-client