$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/D3C1BBD687DF11EC9FAA242CC4F9AE02.roa File: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (raw, json) Hash identifier: Lu0DnvWKzViBD3LlCEVvbQZrg7/F2h1sbFYCuGPJgY8= Subject key identifier: 0C:1C:C8:C9:6F:19:DE:3F:55:7B:B1:66:DA:B2:43:5F:0E:90:C0:C8 Certificate issuer: /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Certificate serial: 03AD Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/D3C1BBD687DF11EC9FAA242CC4F9AE02.roa Signing time: Fri 21 Mar 2025 00:36:01 +0000 ROA not before: Fri 21 Mar 2025 00:36:01 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 149499 IP address blocks: 103.181.70.0/24 maxlen: 24 103.181.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919290F, serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Validity Not Before: Mar 21 00:36:01 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67dcb471-1e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:95:a9:20:3e:d9:da:61:4b:4b:b7:80:5c:21: e2:45:b2:1c:e8:18:ef:68:1a:78:73:fb:89:8d:4a: 75:e3:b3:93:48:2e:86:97:a6:9c:4e:c2:2a:d7:76: 04:f6:90:ce:c2:86:45:34:0a:08:20:3a:6f:de:2d: 7f:34:87:10:e1:35:a6:cf:c3:df:b6:72:ba:fc:8d: be:cf:b4:33:c0:d1:40:b4:2b:7f:8c:61:2a:87:93: f2:48:6a:91:38:ce:7e:ef:2c:4d:70:d6:97:ec:4d: d1:15:15:ca:04:09:72:00:bd:5f:30:58:52:fe:81: e0:7d:14:b7:b1:7c:9b:7d:bc:47:fc:cb:89:be:e0: 82:4a:97:07:95:da:a3:10:8d:52:b9:d1:e3:8b:b2: 17:6c:6b:49:10:74:df:9f:69:87:f0:bc:f9:dc:24: 24:fe:bc:d9:b7:17:03:32:4f:2d:73:00:9f:9e:e7: e4:a3:b9:a0:da:e8:fc:75:d6:ed:d2:e2:2f:d0:01: bd:a5:b9:7b:86:5f:1e:a6:85:d7:e7:6c:b6:2c:8c: ff:4c:f8:29:4c:df:6a:43:64:d0:f5:87:c2:c1:1f: 65:5a:da:28:1d:8d:5c:30:7e:09:f1:e9:76:93:36: 6c:8f:76:29:5d:a3:ea:27:b0:65:e6:40:41:53:ff: 48:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1C:C8:C9:6F:19:DE:3F:55:7B:B1:66:DA:B2:43:5F:0E:90:C0:C8 X509v3 Authority Key Identifier: keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/D3C1BBD687DF11EC9FAA242CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.70.0/23 Signature Algorithm: sha256WithRSAEncryption b4:b9:a2:7d:ea:d0:75:f0:27:4e:3b:71:3d:76:a1:d9:3e:b3: ac:f9:66:61:20:4d:a0:74:2b:c9:62:a4:67:7f:5a:26:ce:1c: 13:8a:63:f0:c1:77:d7:03:c8:88:b2:09:a9:87:23:16:99:a2: 03:ad:1d:af:65:2a:ab:35:4c:7c:f6:cc:6c:a0:1c:fa:32:0e: ad:61:76:c2:83:7a:1e:92:2f:c0:f8:7a:2d:53:03:0d:35:e8: ef:61:6c:b3:26:d0:35:4b:68:61:0b:50:a5:37:65:74:bb:48: 32:2e:f0:c3:f9:27:fd:da:d8:ea:1d:62:3d:9c:94:7f:d4:40: 51:dc:4a:72:b1:c6:eb:6a:6b:7c:39:e6:5d:64:25:f8:04:bf: fb:b5:4a:68:b5:71:3f:f2:9c:9c:eb:14:cb:b2:c8:39:3f:ff: 05:06:3d:37:7f:61:13:63:31:71:67:98:ed:3a:9a:94:07:88: 81:34:32:f5:9e:c3:f4:f8:14:68:10:da:ff:cb:e1:e1:44:47: b1:47:8f:71:06:dc:95:e6:4d:64:8d:6e:64:63:83:02:8c:57: a5:ee:a4:9f:97:95:41:6d:b8:24:11:72:1b:51:61:f4:86:80: b2:b3:fd:25:79:84:01:33:d0:c5:9d:48:1b:12:3d:12:1b:1c: 1d:2f:b5:ed -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MEYxMTAvBgNVBAUTKDk4MjA5MEE1RUY2RDBGNTU4MzIyRENENUIzN0NCQzQ1 NkU3NUM1NDMwHhcNMjUwMzIxMDAzNjAxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RjYjQ3MS0xZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35WpID7Z2mFLS7eAXCHiRbIc6BjvaBp4c/uJjUp147OTSC6Gl6acTsIq13YE 9pDOwoZFNAoIIDpv3i1/NIcQ4TWmz8PftnK6/I2+z7QzwNFAtCt/jGEqh5PySGqR OM5+7yxNcNaX7E3RFRXKBAlyAL1fMFhS/oHgfRS3sXybfbxH/MuJvuCCSpcHldqj EI1SudHji7IXbGtJEHTfn2mH8Lz53CQk/rzZtxcDMk8tcwCfnufko7mg2uj8ddbt 0uIv0AG9pbl7hl8epoXX52y2LIz/TPgpTN9qQ2TQ9YfCwR9lWtooHY1cMH4J8el2 kzZsj3YpXaPqJ7Bl5kBBU/9IwwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAwcyMlv Gd4/VXuxZtqyQ18OkMDIMB8GA1UdIwQYMBaAFJggkKXvbQ9VgyLc1bN8vEVudcVD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkwRi81QUIyNzUzRTg3 REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQxV0RJdHpWczN5OFJXNTF4 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21DQ1FwZTl0RDFXREl0elZzM3k4Ulc1MXhVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTI5MEYvNUFCMjc1M0U4N0REMTFFQ0JEN0QzRDBCQzRGOUFFMDIvRDNDMUJCRDY4 N0RGMTFFQzlGQUEyNDJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFntUYwDQYJKoZIhvcNAQELBQADggEBALS5on3q0HXwJ047 cT12odk+s6z5ZmEgTaB0K8lipGd/WibOHBOKY/DBd9cDyIiyCamHIxaZogOtHa9l Kqs1THz2zGygHPoyDq1hdsKDeh6SL8D4ei1TAw016O9hbLMm0DVLaGELUKU3ZXS7 SDIu8MP5J/3a2OodYj2clH/UQFHcSnKxxutqa3w55l1kJfgEv/u1Smi1cT/ynJzr FMuyyDk//wUGPTd/YRNjMXFnmO06mpQHiIE0MvWew/T4FGgQ2v/L4eFER7FHj3EG 3JXmTWSNbmRjgwKMV6XupJ+XlUFtuCQRchtRYfSGgLKz/SV5hAEz0MWdSBsSPRIb HB0vte0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:48:29 2025 by rpki-client