$ rpki-client -vvf rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/841585749B1211EFBFBF913CC4F9AE02.roa File: 841585749B1211EFBFBF913CC4F9AE02.roa (raw, json) Hash identifier: 0M5YhxGhV5QHRGKOQlvw9XsWvMIjTk3A7Z1MV3xW494= Subject key identifier: 98:17:9D:B0:FB:73:9C:DB:E6:C3:A8:D4:84:80:BD:0F:47:6B:4E:45 Certificate issuer: /CN=A91F09FE/serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814 Certificate serial: 62 Authority key identifier: 64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/841585749B1211EFBFBF913CC4F9AE02.roa Signing time: Wed 07 May 2025 06:14:16 +0000 ROA not before: Wed 07 May 2025 06:14:16 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 138976 IP address blocks: 103.137.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F09FE, serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814 Validity Not Before: May 7 06:14:16 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681afa37-593c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:3d:f2:e3:17:c3:c0:0a:ac:7a:2b:81:99: d7:2b:9d:a7:13:c7:76:b1:52:35:05:ee:3f:a6:66: 8b:09:1e:80:ab:65:75:f5:c1:36:dc:b4:7a:ef:d5: ad:43:58:a7:cc:15:49:c5:72:bb:b9:bc:09:98:1f: 36:46:58:2e:42:d3:2b:f2:d6:57:1d:e9:70:91:ad: 77:21:c3:37:50:d9:7c:b2:0a:c6:31:07:b8:8b:da: 0a:39:50:d2:d8:db:7d:06:09:90:06:5a:db:2f:a2: 44:0f:6c:b6:41:41:5b:85:06:99:bf:98:78:b1:a4: 0a:8e:3d:a7:fb:61:eb:39:11:43:50:da:8f:c7:0f: 8d:2f:91:fa:8b:a3:02:c6:57:87:a4:57:0c:f3:d8: 0d:82:31:0f:99:63:0d:09:81:2b:c0:79:36:2b:7b: 17:52:a0:39:f3:b2:39:22:81:d4:b6:6e:ee:d6:eb: 30:bf:cb:81:50:f0:4b:15:1c:6e:fd:c6:ec:95:d3: 43:ac:71:33:37:2b:12:49:26:f6:c7:4a:75:af:5c: 25:67:97:09:31:10:63:e1:24:5d:f4:a9:9f:a3:f9: 53:56:ff:ca:4a:5c:4b:fa:2a:3a:47:ce:1f:ff:0b: d0:80:9f:d8:bf:0c:03:bd:db:2a:6e:e7:17:31:0f: ac:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:17:9D:B0:FB:73:9C:DB:E6:C3:A8:D4:84:80:BD:0F:47:6B:4E:45 X509v3 Authority Key Identifier: keyid:64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/841585749B1211EFBFBF913CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.253.0/24 Signature Algorithm: sha256WithRSAEncryption 07:94:3d:95:9b:a7:cb:38:f7:f9:96:4a:0f:39:cc:ad:1c:ff: 56:65:46:b7:4b:d0:52:7f:25:41:72:29:f2:8a:e1:ae:a5:2b: 0e:bc:c5:ff:11:3c:66:c6:57:73:46:84:2e:4c:75:26:62:77: 4e:7d:3b:4e:ee:81:e1:da:b3:6d:89:36:33:11:12:49:81:b8: db:12:0f:cf:c8:71:a7:57:15:67:3c:49:63:04:b0:f7:e4:20: 54:99:ab:11:7e:c3:2c:77:dd:e8:e2:84:86:b1:fc:87:78:dd: e6:f6:fa:bc:fc:2c:36:8f:8e:cd:b7:da:6a:f3:20:47:e1:de: 6f:d4:9e:b1:f9:4d:6a:8e:9a:ab:b3:dd:87:4c:2e:ab:7b:15: 12:dd:1d:ef:4f:88:2b:61:34:27:5a:9b:cc:8a:c9:a6:d9:b5: 24:f9:03:8b:7f:a0:b1:53:80:3c:29:7c:28:43:62:2d:86:22: 8a:18:28:a3:15:f6:e6:d7:08:cf:58:e3:f9:9b:6b:af:f2:f9: 50:14:f4:cd:d4:56:0b:65:45:8e:d6:93:5e:fe:3b:08:54:da: 87:fe:1c:66:76:9e:fd:09:75:55:c0:4d:a5:d1:36:e7:ec:9a: 32:ad:5f:07:15:3d:e5:98:74:9f:b4:d5:20:d9:5d:42:af:57: b8:53:b4:23 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDlGRTExMC8GA1UEBRMoNjRDQ0MxNjZDNThDMzhGRThDQzE5NzZGNUNGMDdDMURE MDZGNjgxNDAeFw0yNTA1MDcwNjE0MTZaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MWFmYTM3LTU5M2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9sz3y4xfDwAqseiuBmdcrnacTx3axUjUF7j+mZosJHoCrZXX1wTbctHrv1a1D WKfMFUnFcru5vAmYHzZGWC5C0yvy1lcd6XCRrXchwzdQ2XyyCsYxB7iL2go5UNLY 230GCZAGWtsvokQPbLZBQVuFBpm/mHixpAqOPaf7Yes5EUNQ2o/HD40vkfqLowLG V4ekVwzz2A2CMQ+ZYw0JgSvAeTYrexdSoDnzsjkigdS2bu7W6zC/y4FQ8EsVHG79 xuyV00OscTM3KxJJJvbHSnWvXCVnlwkxEGPhJF30qZ+j+VNW/8pKXEv6KjpHzh// C9CAn9i/DAO92ypu5xcxD6xRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUmBedsPtz nNvmw6jUhIC9D0drTkUwHwYDVR0jBBgwFoAUZMzBZsWMOP6MwZdvXPB8HdBvaBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOUZFLzM4MDNBQTFDOUIx MjExRUZBODdCQjQzQkM0RjlBRTAyL1pNekJac1dNT1A2TXdaZHZYUEI4SGRCdmFC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk16QlpzV01PUDZNd1pkdlhQQjhIZEJ2YUJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDlGRS8zODAzQUExQzlCMTIxMUVGQTg3QkI0M0JDNEY5QUUwMi84NDE1ODU3NDlC MTIxMUVGQkZCRjkxM0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeJ/TANBgkqhkiG9w0BAQsFAAOCAQEAB5Q9lZunyzj3+ZZK DznMrRz/VmVGt0vQUn8lQXIp8orhrqUrDrzF/xE8ZsZXc0aELkx1JmJ3Tn07Tu6B 4dqzbYk2MxESSYG42xIPz8hxp1cVZzxJYwSw9+QgVJmrEX7DLHfd6OKEhrH8h3jd 5vb6vPwsNo+OzbfaavMgR+Heb9SesflNao6aq7Pdh0wuq3sVEt0d70+IK2E0J1qb zIrJptm1JPkDi3+gsVOAPCl8KENiLYYiihgooxX25tcIz1jj+Ztrr/L5UBT0zdRW C2VFjtaTXv47CFTah/4cZnae/Ql1VcBNpdE25+yaMq1fBxU95Zh0n7TVINldQq9X uFO0Iw== -----END CERTIFICATE-----Generated at Fri May 16 22:50:03 2025 by rpki-client