$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/6A3FA88A693C11EF8B032237C4F9AE02.roa File: 6A3FA88A693C11EF8B032237C4F9AE02.roa (raw, json) Hash identifier: xlsUk+nBjbtHnwZ4MERgcwqdT/rxsOcTBiheef/VMVI= Subject key identifier: 8D:0B:1D:C4:3E:1D:11:91:99:64:FC:04:07:E8:54:F7:BE:84:E7:7B Certificate issuer: /CN=A91F7D74/serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Certificate serial: 85 Authority key identifier: D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/6A3FA88A693C11EF8B032237C4F9AE02.roa Signing time: Tue 29 Apr 2025 06:43:19 +0000 ROA not before: Tue 29 Apr 2025 06:43:19 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135319 IP address blocks: 103.214.56.0/22 maxlen: 22 103.214.56.0/24 maxlen: 24 103.214.57.0/24 maxlen: 24 103.214.58.0/24 maxlen: 24 103.214.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D74, serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Validity Not Before: Apr 29 06:43:19 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68107507-204f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dd:08:f5:fa:71:d8:ed:01:1b:ca:23:7e:fa: 95:5e:75:42:b2:e0:bd:77:fb:a9:7e:76:b2:4c:34: f1:95:48:56:36:78:2e:ab:1c:c3:27:ae:8f:3e:b8: 6f:e4:67:07:c2:d2:08:1e:b8:ad:31:d2:05:39:56: b0:95:10:63:2e:11:ca:f2:da:bd:b7:0d:56:a1:44: 50:dd:d1:ec:bc:24:dd:98:aa:7c:17:e3:f4:65:ff: f2:86:89:20:23:42:da:f9:7b:05:02:3a:64:50:46: ee:48:3f:6f:62:f8:e3:1d:c5:ce:ef:ce:07:c0:60: 7c:68:70:40:fc:c7:9d:e4:24:9d:3e:05:bd:03:7d: 02:ee:c2:c6:b1:22:fb:c8:b9:49:11:6f:d0:94:19: d5:6b:68:ba:90:b3:88:cd:eb:5b:32:58:b8:6d:fc: 24:7a:54:93:ca:41:9a:3e:76:6e:00:71:ab:a9:07: 88:38:fa:02:7f:ae:53:60:32:ff:48:ca:a3:5f:7b: 22:b1:86:7b:41:1f:49:76:e1:ce:c2:55:2b:eb:da: 7a:4b:1c:84:3d:27:63:0f:b9:1f:8f:d0:91:38:1d: 5d:50:00:7b:5f:b4:cc:f1:1b:2b:2d:2e:e6:0c:33: 5c:2c:a5:88:dc:88:41:f6:0e:39:b3:b3:38:63:8e: d4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0B:1D:C4:3E:1D:11:91:99:64:FC:04:07:E8:54:F7:BE:84:E7:7B X509v3 Authority Key Identifier: keyid:D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/6A3FA88A693C11EF8B032237C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.214.56.0/22 Signature Algorithm: sha256WithRSAEncryption c8:dc:b7:5b:19:13:c0:c6:50:83:f7:1d:b9:7e:d7:2d:7d:d0: 41:41:39:ed:e3:2d:19:8d:ac:08:d5:62:e0:e4:a3:03:8c:ae: 07:a0:f4:95:11:0c:7d:25:cc:90:5d:20:6e:a1:8e:a2:2f:d9: f6:84:03:6d:4a:93:f2:69:28:e0:60:10:df:fe:65:29:89:42: c0:91:18:b3:5e:2d:c2:d4:f9:74:09:67:e6:b1:03:38:00:bb: ab:a9:be:d1:53:e4:79:83:61:e3:b9:33:18:d5:fd:2e:ef:b1: aa:01:42:be:7b:ca:af:bf:dd:8b:10:95:af:03:24:98:1b:76: 0d:48:e9:51:b0:9c:cc:0c:f1:55:29:eb:31:da:13:7a:1f:11: 13:af:bc:6c:64:22:6f:1c:95:9b:7d:5c:d3:76:e4:74:f2:74: ed:84:27:d2:d9:12:c5:d8:93:f1:6e:12:4c:c1:9a:59:9e:02: b3:a7:e2:a5:c6:28:7a:a0:1a:2c:ed:d7:38:6f:ab:6c:00:1d: 88:4f:bd:cc:df:5a:e4:01:8e:cd:21:f1:5a:36:e7:6e:6f:55: 4a:25:e5:ea:8c:3a:bc:eb:66:14:ed:72:c8:98:d1:70:e5:ed: 50:90:05:a9:b4:61:69:e1:e1:86:02:1d:19:8f:53:42:81:90: dc:ee:1a:2a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENzQxMTAvBgNVBAUTKEQzRENFMTcxNDNGOUNGNURGODAwNEY4QzY1OTdGQjJD OENDQzcwNDYwHhcNMjUwNDI5MDY0MzE5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEwNzUwNy0yMDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz90I9fpx2O0BG8ojfvqVXnVCsuC9d/upfnayTDTxlUhWNnguqxzDJ66PPrhv 5GcHwtIIHritMdIFOVawlRBjLhHK8tq9tw1WoURQ3dHsvCTdmKp8F+P0Zf/yhokg I0La+XsFAjpkUEbuSD9vYvjjHcXO784HwGB8aHBA/Med5CSdPgW9A30C7sLGsSL7 yLlJEW/QlBnVa2i6kLOIzetbMli4bfwkelSTykGaPnZuAHGrqQeIOPoCf65TYDL/ SMqjX3sisYZ7QR9JduHOwlUr69p6SxyEPSdjD7kfj9CROB1dUAB7X7TM8RsrLS7m DDNcLKWI3IhB9g45s7M4Y47UzQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI0LHcQ+ HRGRmWT8BAfoVPe+hOd7MB8GA1UdIwQYMBaAFNPc4XFD+c9d+ABPjGWX+yyMzHBG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q3NC8zNzhEOUEwQTY5 MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXoxMzRBRS1NWlpmN0xJek1j RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5emhjVVA1ejEzNEFFLU1aWmY3TEl6TWNFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjdENzQvMzc4RDlBMEE2OTI4MTFFRkFGNzExNDg3QzRGOUFFMDIvNkEzRkE4OEE2 OTNDMTFFRjhCMDMyMjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn1jgwDQYJKoZIhvcNAQELBQADggEBAMjct1sZE8DGUIP3 Hbl+1y190EFBOe3jLRmNrAjVYuDkowOMrgeg9JURDH0lzJBdIG6hjqIv2faEA21K k/JpKOBgEN/+ZSmJQsCRGLNeLcLU+XQJZ+axAzgAu6upvtFT5HmDYeO5MxjV/S7v saoBQr57yq+/3YsQla8DJJgbdg1I6VGwnMwM8VUp6zHaE3ofEROvvGxkIm8clZt9 XNN25HTydO2EJ9LZEsXYk/FuEkzBmlmeArOn4qXGKHqgGizt1zhvq2wAHYhPvczf WuQBjs0h8Vo2525vVUol5eqMOrzrZhTtcsiY0XDl7VCQBam0YWnh4YYCHRmPU0KB kNzuGio= -----END CERTIFICATE-----Generated at Sat May 17 03:33:52 2025 by rpki-client