$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/32091726626D11ED87BDAC82C4F9AE02.roa File: 32091726626D11ED87BDAC82C4F9AE02.roa (raw, json) Hash identifier: hbdkOUT0eBQ98Cc0oj/9P37h6+6Kubs6FMec8+3wPTM= Subject key identifier: 0C:9C:E4:6E:35:F3:88:E3:20:CA:2E:1D:4B:23:C2:F4:BE:08:C5:45 Certificate issuer: /CN=A917F4D3/serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Certificate serial: 01A1 Authority key identifier: 91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/32091726626D11ED87BDAC82C4F9AE02.roa Signing time: Wed 29 Jan 2025 01:55:26 +0000 ROA not before: Wed 29 Jan 2025 01:55:26 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 150406 IP address blocks: 103.35.176.0/23 maxlen: 23 103.35.176.0/24 maxlen: 24 103.35.177.0/24 maxlen: 24 2001:df1:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4D3, serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Validity Not Before: Jan 29 01:55:26 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67998a8d-4957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0d:50:e3:a2:7c:59:9d:68:a7:00:4b:73:b1: 5b:d3:8a:cd:d3:6c:88:04:3b:01:f5:96:93:35:18: 4e:6c:00:22:ee:e2:1f:af:63:be:b2:15:c4:5f:4a: 01:d1:fa:ff:45:5b:88:49:b9:37:d5:f8:14:f7:29: 81:64:b5:d8:9e:1b:65:af:99:36:63:56:ba:3a:a1: a7:ec:60:04:b1:4c:ee:79:6a:25:f3:2f:e8:98:4c: 94:1f:d9:d2:26:38:81:79:74:c3:26:63:bb:f3:1c: 70:13:1e:7e:05:42:98:a9:05:e0:a7:d9:33:f9:6e: 76:df:4c:25:9e:c5:95:b8:ee:9f:33:0f:39:0c:dc: 41:a1:8a:35:ad:e4:33:2f:05:a8:f2:ad:57:d2:c4: 17:6f:18:7b:8e:f2:ed:04:bd:07:79:33:86:a6:4c: 3f:d0:f4:14:6b:99:4e:71:d0:1b:53:fd:39:4d:ce: 8a:3e:fb:ee:ba:42:b5:79:0e:1a:39:31:7f:dd:ab: 39:ea:43:3a:9b:c1:e9:d2:8d:96:73:88:56:94:17: 15:1d:78:ae:c3:79:bb:28:9a:39:2b:d8:e5:07:fa: af:6c:db:60:55:8b:f1:54:e3:72:82:42:93:95:c4: b5:6d:fe:4c:e1:12:51:f9:be:12:d3:d0:15:32:17: ae:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9C:E4:6E:35:F3:88:E3:20:CA:2E:1D:4B:23:C2:F4:BE:08:C5:45 X509v3 Authority Key Identifier: keyid:91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/32091726626D11ED87BDAC82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.35.176.0/23 IPv6: 2001:df1:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 01:93:05:11:7c:10:7f:d7:05:68:6e:a0:66:a3:df:e6:2a:fc: 47:d2:51:9d:83:2e:4f:0d:71:f8:c2:2b:35:76:d0:54:52:6d: e8:3e:3b:6a:4c:fb:88:5d:32:1c:6b:57:8f:7e:14:a0:f7:69: 4d:82:55:3e:f0:de:e2:bc:1b:69:3a:be:f0:4b:04:8c:4e:43: 09:02:ae:5d:cd:20:68:90:5e:7e:36:f6:11:3d:d9:fb:8e:9a: 42:fc:c8:d7:c3:47:3c:9a:38:7a:eb:56:66:11:49:a2:02:90: 39:0d:db:f5:5d:1f:b8:2d:f6:3c:de:fa:fc:db:e2:6b:2c:28: 2b:91:11:32:0f:1c:2c:76:90:1b:b9:2e:0d:2e:7a:3e:cd:81: 79:5a:8d:4b:8f:58:ed:4b:6c:8c:0d:9e:fa:72:a4:53:07:38: f1:b1:be:d9:af:1e:69:ed:7c:f7:f6:bb:49:b6:99:6d:f5:48: d6:96:d7:db:26:6d:cf:9f:94:fa:ac:ad:17:b7:2a:8b:f8:2b: 7d:c1:71:39:db:21:33:df:dd:b0:ce:42:cf:58:f2:f8:66:b2: 9b:f7:98:e1:40:b8:1b:66:9f:21:79:81:1f:0d:f4:a9:c5:08: ac:47:c7:07:f7:91:76:fc:60:11:92:50:aa:5d:03:dc:88:5a: 4c:70:6a:2c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RDMxMTAvBgNVBAUTKDkxMjZFRkU1MEQ1RTNCNTMxRkVFRTQ1NDlBQjMwQkZF N0E1NDU1MDcwHhcNMjUwMTI5MDE1NTI2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk5OGE4ZC00OTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApw1Q46J8WZ1opwBLc7Fb04rN02yIBDsB9ZaTNRhObAAi7uIfr2O+shXEX0oB 0fr/RVuISbk31fgU9ymBZLXYnhtlr5k2Y1a6OqGn7GAEsUzueWol8y/omEyUH9nS JjiBeXTDJmO78xxwEx5+BUKYqQXgp9kz+W5230wlnsWVuO6fMw85DNxBoYo1reQz LwWo8q1X0sQXbxh7jvLtBL0HeTOGpkw/0PQUa5lOcdAbU/05Tc6KPvvuukK1eQ4a OTF/3as56kM6m8Hp0o2Wc4hWlBcVHXiuw3m7KJo5K9jlB/qvbNtgVYvxVONygkKT lcS1bf5M4RJR+b4S09AVMheukwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAyc5G41 84jjIMouHUsjwvS+CMVFMB8GA1UdIwQYMBaAFJEm7+UNXjtTH+7kVJqzC/56VFUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjREMy82ODAzNEM2ODYy NjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8xTWY3dVJVbXJNTF9ucFVW UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTYnY1UTFlTzFNZjd1UlVtck1MX25wVVZRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Y0RDMvNjgwMzRDNjg2MjY2MTFFRDgyNDJDNzg2QzRGOUFFMDIvMzIwOTE3MjY2 MjZEMTFFRDg3QkRBQzgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnI7AwDwQCAAIwCQMHACABDfGAwDANBgkqhkiG9w0BAQsF AAOCAQEAAZMFEXwQf9cFaG6gZqPf5ir8R9JRnYMuTw1x+MIrNXbQVFJt6D47akz7 iF0yHGtXj34UoPdpTYJVPvDe4rwbaTq+8EsEjE5DCQKuXc0gaJBefjb2ET3Z+46a QvzI18NHPJo4eutWZhFJogKQOQ3b9V0fuC32PN76/NviaywoK5ERMg8cLHaQG7ku DS56Ps2BeVqNS49Y7UtsjA2e+nKkUwc48bG+2a8eae189/a7SbaZbfVI1pbX2yZt z5+U+qytF7cqi/grfcFxOdshM9/dsM5Cz1jy+Gaym/eY4UC4G2afIXmBHw30qcUI rEfHB/eRdvxgEZJQql0D3IhaTHBqLA== -----END CERTIFICATE-----Generated at Sat Apr 26 15:24:18 2025 by rpki-client