$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C981BB3CF36A11E983B1D764C4F9AE02.roa File: C981BB3CF36A11E983B1D764C4F9AE02.roa (raw, json) Hash identifier: eD8TajPOjrIE4f1nFZu3J+ZWCoHsnqirX9VK+G/Tflw= Subject key identifier: 13:46:8C:4F:31:21:8C:48:F1:B2:FB:06:6E:F9:E6:A4:D9:D7:14:95 Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Certificate serial: 0C98 Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C981BB3CF36A11E983B1D764C4F9AE02.roa Signing time: Fri 28 Mar 2025 18:29:32 +0000 ROA not before: Fri 28 Mar 2025 18:29:32 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 63526 IP address blocks: 103.112.52.0/22 maxlen: 22 103.112.52.0/23 maxlen: 23 103.112.52.0/24 maxlen: 24 103.112.53.0/24 maxlen: 24 103.112.54.0/23 maxlen: 23 103.112.54.0/24 maxlen: 24 103.112.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3224 (0xc98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Validity Not Before: Mar 28 18:29:32 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e6ea8c-3d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:37:61:f5:0e:6a:ce:f9:fb:91:0f:3d:e9:68: 12:94:14:55:8a:e1:8b:f3:85:b7:25:df:e4:bb:a0: 1f:bf:15:c1:f0:9b:66:64:e2:c2:e3:35:63:c9:b3: e7:d0:ff:f5:6f:9b:3b:d6:f7:82:b7:41:99:43:cc: 6c:55:06:2c:9a:40:f2:46:99:bc:f4:60:70:a3:dd: 49:9e:3e:94:6b:11:e0:61:ec:f6:81:f8:52:ac:98: 7c:50:cf:04:2b:b1:0b:5c:2f:d0:98:cb:07:06:81: ca:68:6c:22:e5:f7:ae:2c:63:48:90:dd:1f:8b:c0: c3:f1:b8:0f:7c:4a:67:b2:52:a8:14:86:9c:f5:22: a3:e6:f6:af:15:00:3d:50:ee:2f:e3:c3:38:69:7b: 8b:47:0d:6f:96:5a:97:b9:2f:08:7f:72:37:2a:84: e3:05:bc:35:4e:14:c8:72:f7:98:23:e3:3a:b5:e5: 84:9d:f0:73:87:e5:0a:e5:ae:a6:8d:b4:75:67:30: d7:03:d5:0c:3f:1c:d6:68:b7:f9:ec:32:e5:31:c0: 0c:54:f6:e1:75:c2:e6:f9:89:78:80:c8:36:d1:fa: f1:cd:99:b2:cf:8f:fc:85:9b:67:5b:ac:64:c9:b9: d1:bc:3f:a2:ff:50:70:37:af:e3:a7:a5:16:8c:b2: aa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:46:8C:4F:31:21:8C:48:F1:B2:FB:06:6E:F9:E6:A4:D9:D7:14:95 X509v3 Authority Key Identifier: keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C981BB3CF36A11E983B1D764C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.52.0/22 Signature Algorithm: sha256WithRSAEncryption 30:22:6c:83:8f:b4:06:ec:4b:ac:17:0c:17:94:85:05:f4:25: 1f:b8:c2:29:a4:c6:d1:0c:2f:38:12:9f:15:31:08:65:6b:a8: 02:38:9e:04:4e:f1:0e:aa:dc:20:a1:4a:3e:76:b6:4c:01:02: 18:82:cf:e8:17:65:45:c3:4d:e2:69:3d:03:cd:91:6d:84:53: 45:1e:f2:ac:02:53:67:4c:e3:dd:87:54:3b:e5:37:82:5b:14: 1f:e4:56:d1:49:1e:0f:46:5e:48:90:4a:9d:01:a2:00:2f:07: 6c:a8:cc:bd:f9:03:29:d0:2f:6d:5a:07:cd:c3:7a:07:83:b3: f8:3d:e5:04:80:3d:64:92:e6:53:1b:75:b0:24:a5:e6:f4:91: 81:8e:65:77:4d:8a:2d:45:01:79:82:7f:3c:eb:27:3b:10:50: 71:7b:2d:be:2e:a1:1a:a0:2c:e2:52:c1:d7:ef:89:b7:1d:09: 0c:e7:25:ad:f1:e8:06:0d:58:df:02:89:d5:aa:43:0b:32:27: bd:bc:9c:c8:71:bf:df:57:73:99:78:cc:1d:d4:59:82:b1:b9: 34:6a:7a:1c:79:e2:3b:12:4d:6c:f0:10:cf:41:73:13:00:0d: 0e:c5:ef:51:04:f6:3b:9a:3f:41:4b:a8:0e:0f:81:89:a1:8b: ce:67:e5:6d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDczRjgxMTAvBgNVBAUTKDBCRjJCNTk0NEMzQTJDQ0FCNkMxRDEyQkMzNkE1QUYz QzJEQ0Y3N0YwHhcNMjUwMzI4MTgyOTMyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U2ZWE4Yy0zZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Tdh9Q5qzvn7kQ896WgSlBRViuGL84W3Jd/ku6AfvxXB8JtmZOLC4zVjybPn 0P/1b5s71veCt0GZQ8xsVQYsmkDyRpm89GBwo91Jnj6UaxHgYez2gfhSrJh8UM8E K7ELXC/QmMsHBoHKaGwi5feuLGNIkN0fi8DD8bgPfEpnslKoFIac9SKj5vavFQA9 UO4v48M4aXuLRw1vllqXuS8If3I3KoTjBbw1ThTIcveYI+M6teWEnfBzh+UK5a6m jbR1ZzDXA9UMPxzWaLf57DLlMcAMVPbhdcLm+Yl4gMg20frxzZmyz4/8hZtnW6xk ybnRvD+i/1BwN6/jp6UWjLKqRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBNGjE8x IYxI8bL7Bm755qTZ1xSVMB8GA1UdIwQYMBaAFAvytZRMOizKtsHRK8NqWvPC3Pd/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzNGOC80QjQ1NkM4OEYz NjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxNcTJ3ZEVydzJwYTg4TGM5 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NfSzFsRXc2TE1xMndkRXJ3MnBhODhMYzkzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDczRjgvNEI0NTZDODhGMzY5MTFFOTlDNjdBMDYxQzRGOUFFMDIvQzk4MUJCM0NG MzZBMTFFOTgzQjFENzY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJncDQwDQYJKoZIhvcNAQELBQADggEBADAibIOPtAbsS6wX DBeUhQX0JR+4wimkxtEMLzgSnxUxCGVrqAI4ngRO8Q6q3CChSj52tkwBAhiCz+gX ZUXDTeJpPQPNkW2EU0Ue8qwCU2dM492HVDvlN4JbFB/kVtFJHg9GXkiQSp0BogAv B2yozL35AynQL21aB83DegeDs/g95QSAPWSS5lMbdbAkpeb0kYGOZXdNii1FAXmC fzzrJzsQUHF7Lb4uoRqgLOJSwdfvibcdCQznJa3x6AYNWN8CidWqQwsyJ728nMhx v99Xc5l4zB3UWYKxuTRqehx54jsSTWzwEM9BcxMADQ7F71EE9juaP0FLqA4PgYmh i85n5W0= -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:24 2025 by rpki-client