$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/4A7E3036340811ED9D3D7620C4F9AE02.roa File: 4A7E3036340811ED9D3D7620C4F9AE02.roa (raw, json) Hash identifier: e0ssa3aYMf93SekbtHzPrUvWJb3pV0vdOrt0LlRsi20= Subject key identifier: 4E:69:D9:91:D8:ED:EE:AF:FC:79:FA:C7:B8:0E:CF:43:D2:10:2F:62 Certificate issuer: /CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C Certificate serial: 1507 Authority key identifier: 87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/4A7E3036340811ED9D3D7620C4F9AE02.roa Signing time: Fri 02 May 2025 17:25:24 +0000 ROA not before: Fri 02 May 2025 17:25:24 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 396982 IP address blocks: 103.114.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5383 (0x1507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65E4, serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C Validity Not Before: May 2 17:25:24 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68150004-2fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bd:ec:b3:85:7e:f9:e8:bb:89:c0:df:db:a4: 1c:b9:f0:03:c0:0f:86:67:1d:95:d3:8d:1f:a5:a2: 55:3d:89:3c:2e:e0:52:bc:e4:14:b9:62:1a:76:49: d7:2d:12:ac:6e:9d:58:a3:2e:8f:09:33:4f:56:ea: 32:78:43:00:bb:a6:8a:44:7f:3a:a2:0b:e9:8b:d1: 53:4e:b1:bf:17:1b:fe:2c:ea:93:ed:28:39:a3:a1: 22:1c:7c:63:a8:09:70:8f:ee:0e:2a:c5:22:db:53: 16:44:24:b3:23:48:cb:b6:93:04:ce:47:6a:39:fe: 7d:54:32:86:07:14:58:cd:a0:9f:c1:2e:4d:ec:49: cf:3e:4b:11:36:92:b3:c6:20:94:06:f4:4a:31:d8: 29:32:b1:b4:f2:13:21:ac:33:4d:5a:f1:68:e5:87: 08:18:50:21:91:20:30:75:b3:00:81:12:ec:3b:a3: ce:9b:03:cb:b1:1c:d3:64:78:a3:29:02:f5:80:03: d1:50:e3:9b:a8:36:90:85:16:25:31:67:2b:53:69: 31:c5:a0:47:83:4f:68:87:65:92:d4:ab:93:b1:da: 05:22:d6:ed:5d:9c:3c:c6:78:2e:a4:9b:53:7e:7b: dd:9e:74:41:cb:f9:af:e1:c4:4e:ba:fc:9b:14:d1: 67:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:69:D9:91:D8:ED:EE:AF:FC:79:FA:C7:B8:0E:CF:43:D2:10:2F:62 X509v3 Authority Key Identifier: keyid:87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/4A7E3036340811ED9D3D7620C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.114.176.0/22 Signature Algorithm: sha256WithRSAEncryption b9:fe:10:66:23:fa:23:a1:59:74:c5:d7:66:e5:b7:08:7c:a0: 17:9e:06:1c:ff:cf:1f:af:df:51:bd:d6:20:be:f5:ef:75:e8: 22:e3:55:e0:90:48:56:80:5d:32:f0:24:1a:1f:d5:40:42:a3: 47:78:8a:f3:20:65:56:1b:c2:b3:b3:42:68:5c:e0:c0:57:50: d2:81:68:bf:ca:f0:0b:57:73:c0:f5:53:0e:f4:97:7b:ed:43: b6:b9:4b:57:bc:7e:ad:9b:e4:5a:5a:cd:88:45:87:dc:d0:e9: 6a:39:73:7d:0a:08:d8:44:c3:e9:64:55:b8:66:05:c7:4c:fd: ed:3d:f9:58:de:70:65:5f:67:d2:84:19:4d:b4:c8:d5:21:21: b9:8e:d6:e2:44:7c:15:9a:2a:4a:c9:36:8a:c2:f9:4b:40:65: 24:61:cc:87:f8:0d:77:22:6c:d2:b9:06:8e:16:55:c5:d4:82: b6:a7:8c:15:8c:bc:33:b4:10:c5:f3:eb:86:84:5c:9d:19:85: ca:3d:85:79:c2:09:ae:10:c2:ba:71:34:57:fe:43:ba:1b:9a: 71:2a:20:b8:3e:b6:c6:6f:7f:f7:6d:6b:93:7e:12:1d:8a:06: 74:11:21:2e:bb:e2:51:68:c5:e2:ca:74:3f:2e:87:64:2b:bd: ab:5d:68:f6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1RTQxMTAvBgNVBAUTKDg3Q0EzOTQ4Q0UxQ0NCRTFBMjA0QzVGODBEQjQzMDQx MDlBODMxN0MwHhcNMjUwNTAyMTcyNTI0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1MDAwNC0yZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA073ss4V++ei7icDf26QcufADwA+GZx2V040fpaJVPYk8LuBSvOQUuWIadknX LRKsbp1Yoy6PCTNPVuoyeEMAu6aKRH86ogvpi9FTTrG/Fxv+LOqT7Sg5o6EiHHxj qAlwj+4OKsUi21MWRCSzI0jLtpMEzkdqOf59VDKGBxRYzaCfwS5N7EnPPksRNpKz xiCUBvRKMdgpMrG08hMhrDNNWvFo5YcIGFAhkSAwdbMAgRLsO6POmwPLsRzTZHij KQL1gAPRUOObqDaQhRYlMWcrU2kxxaBHg09oh2WS1KuTsdoFItbtXZw8xngupJtT fnvdnnRBy/mv4cROuvybFNFnWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFE5p2ZHY 7e6v/Hn6x7gOz0PSEC9iMB8GA1UdIwQYMBaAFIfKOUjOHMvhogTF+A20MEEJqDF8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVFNC83OTM5NzMyMDRE MDAxMUU4QTAyNkUxNEFDNEY5QUUwMi9oOG81U000Y3ktR2lCTVg0RGJRd1FRbW9N WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4bzVTTTRjeS1HaUJNWDREYlF3UVFtb01Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjY1RTQvNzkzOTczMjA0RDAwMTFFOEEwMjZFMTRBQzRGOUFFMDIvNEE3RTMwMzYz NDA4MTFFRDlEM0Q3NjIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJncrAwDQYJKoZIhvcNAQELBQADggEBALn+EGYj+iOhWXTF 12bltwh8oBeeBhz/zx+v31G91iC+9e916CLjVeCQSFaAXTLwJBof1UBCo0d4ivMg ZVYbwrOzQmhc4MBXUNKBaL/K8AtXc8D1Uw70l3vtQ7a5S1e8fq2b5FpazYhFh9zQ 6Wo5c30KCNhEw+lkVbhmBcdM/e09+VjecGVfZ9KEGU20yNUhIbmO1uJEfBWaKkrJ NorC+UtAZSRhzIf4DXcibNK5Bo4WVcXUgranjBWMvDO0EMXz64aEXJ0Zhco9hXnC Ca4QwrpxNFf+Q7obmnEqILg+tsZvf/dta5N+Eh2KBnQRIS674lFoxeLKdD8uh2Qr vatdaPY= -----END CERTIFICATE-----Generated at Thu May 15 15:25:01 2025 by rpki-client