$ rpki-client -vvf rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/AA973CB86A8B11EFB0774B61C4F9AE02.roa File: AA973CB86A8B11EFB0774B61C4F9AE02.roa (raw, json) Hash identifier: +w6DPiK2iGC1sFd6+H0KMfGyjFvRHYPwKc/prnzBHkc= Subject key identifier: 5F:92:7D:B2:E1:C8:4E:70:EA:FA:8D:5C:82:A1:E5:CC:96:A5:C5:2E Certificate issuer: /CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Certificate serial: 0846 Authority key identifier: A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/AA973CB86A8B11EFB0774B61C4F9AE02.roa Signing time: Thu 24 Apr 2025 20:50:56 +0000 ROA not before: Thu 24 Apr 2025 20:50:56 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 134809 IP address blocks: 103.92.150.0/23 maxlen: 23 103.92.150.0/24 maxlen: 24 103.92.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2118 (0x846) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A093A, serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Validity Not Before: Apr 24 20:50:56 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=680aa430-77fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:ae:57:93:6f:86:58:54:72:9c:e7:7a:71: 05:34:65:7c:3e:ac:74:5f:75:07:c7:c2:eb:6f:65: 4b:b8:38:9d:13:4b:0d:8d:d5:fd:a3:aa:cf:d8:ba: 53:10:38:89:12:c3:a8:09:57:7c:2a:26:eb:d9:11: f2:eb:c1:a7:f2:9a:69:a8:82:61:b6:60:ed:b8:5d: 79:27:b4:53:28:94:2b:5f:03:61:f8:76:04:f9:69: 34:0b:da:85:d1:26:a8:d7:e1:97:e0:e3:5d:43:d4: d2:75:93:8a:a4:37:85:1f:87:e7:3a:aa:aa:ef:93: f6:a6:bd:5d:ca:da:15:da:f7:5c:49:9a:81:b9:f7: 4f:59:e1:70:1f:b4:47:39:70:87:ae:46:7d:e9:0a: 83:53:c6:d4:c9:92:4a:20:e8:2e:ad:72:61:ee:80: f5:fe:0d:6b:4e:d0:c5:a8:c5:81:df:7f:71:b0:d0: 83:74:1a:72:68:66:87:7e:9e:16:17:eb:8e:77:97: 50:34:35:28:a2:80:2d:d0:42:f8:0b:8c:90:60:72: 52:90:39:3b:6c:6e:15:57:ea:5c:6f:81:64:5e:1c: 73:fc:6f:b9:6f:da:53:df:1c:67:db:b7:9c:26:1a: 9d:bf:5f:74:b6:74:20:e9:01:5b:8a:83:80:6d:d8: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:92:7D:B2:E1:C8:4E:70:EA:FA:8D:5C:82:A1:E5:CC:96:A5:C5:2E X509v3 Authority Key Identifier: keyid:A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/AA973CB86A8B11EFB0774B61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.92.150.0/23 Signature Algorithm: sha256WithRSAEncryption 58:8c:7d:b4:56:57:96:58:85:fb:9e:60:b9:2e:ce:ac:37:80: fa:b9:11:3d:50:40:09:4e:ea:0d:a8:d6:ee:69:e2:5b:65:d3: d4:2a:40:61:76:85:2a:48:dd:96:33:ff:e6:7e:d6:59:32:37: a1:44:d9:fb:51:e2:72:8d:b3:aa:b0:1d:93:2c:b1:64:1d:c7: cb:ed:8d:2b:2c:86:58:34:70:30:3a:18:ee:b9:13:79:7f:5f: 40:2f:c5:72:1d:1e:6a:fa:3e:fa:27:af:0b:89:b9:80:2a:7c: 9f:23:86:8b:b8:9d:05:bc:80:d5:2f:46:fa:9d:f4:87:86:11: 00:56:99:10:7f:42:09:2b:f0:6a:36:49:36:f6:29:64:35:b2: a5:ad:76:27:5b:7c:15:ee:49:89:c9:c3:e1:8e:56:28:fe:3b: 94:85:9b:80:c4:9d:4b:29:4f:84:d7:fc:59:78:a9:72:b4:73: 07:ab:c0:e7:99:6f:a3:ec:54:77:b3:89:a2:f0:e9:69:b3:0b: 60:13:8a:51:b9:52:94:b7:2f:89:b3:0c:1b:27:38:0a:3d:be: d2:9b:08:30:9e:59:3c:5b:05:b8:19:57:e4:38:51:8e:d2:50: 5f:37:c8:90:58:2f:45:1d:e2:c5:c6:0a:97:3f:af:c6:4f:7a: 7d:71:9d:e5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5M0ExMTAvBgNVBAUTKEExNzkyQzc4RDMwRTEwNzMwQTNDNDQ1NjFDN0U1ODIy RTdGMUMyRjgwHhcNMjUwNDI0MjA1MDU2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhYTQzMC03N2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjyuV5NvhlhUcpznenEFNGV8Pqx0X3UHx8Lrb2VLuDidE0sNjdX9o6rP2LpT EDiJEsOoCVd8Kibr2RHy68Gn8pppqIJhtmDtuF15J7RTKJQrXwNh+HYE+Wk0C9qF 0Sao1+GX4ONdQ9TSdZOKpDeFH4fnOqqq75P2pr1dytoV2vdcSZqBufdPWeFwH7RH OXCHrkZ96QqDU8bUyZJKIOgurXJh7oD1/g1rTtDFqMWB339xsNCDdBpyaGaHfp4W F+uOd5dQNDUoooAt0EL4C4yQYHJSkDk7bG4VV+pcb4FkXhxz/G+5b9pT3xxn27ec Jhqdv190tnQg6QFbioOAbdgQnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF+SfbLh yE5w6vqNXIKh5cyWpcUuMB8GA1UdIwQYMBaAFKF5LHjTDhBzCjxEVhx+WCLn8cL4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDkzQS9FQkEzNTMxRUNC RDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VITUtQRVJXSEg1WUl1Znh3 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Ya3NlTk1PRUhNS1BFUldISDVZSXVmeHd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA5M0EvRUJBMzUzMUVDQkQ4MTFFQTg2N0FGQjRGQzRGOUFFMDIvQUE5NzNDQjg2 QThCMTFFRkIwNzc0QjYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnXJYwDQYJKoZIhvcNAQELBQADggEBAFiMfbRWV5ZYhfue YLkuzqw3gPq5ET1QQAlO6g2o1u5p4ltl09QqQGF2hSpI3ZYz/+Z+1lkyN6FE2ftR 4nKNs6qwHZMssWQdx8vtjSsshlg0cDA6GO65E3l/X0AvxXIdHmr6PvonrwuJuYAq fJ8jhou4nQW8gNUvRvqd9IeGEQBWmRB/Qgkr8Go2STb2KWQ1sqWtdidbfBXuSYnJ w+GOVij+O5SFm4DEnUspT4TX/Fl4qXK0cwerwOeZb6PsVHeziaLw6WmzC2ATilG5 UpS3L4mzDBsnOAo9vtKbCDCeWTxbBbgZV+Q4UY7SUF83yJBYL0Ud4sXGCpc/r8ZP en1xneU= -----END CERTIFICATE-----Generated at Sat Apr 26 08:26:56 2025 by rpki-client