$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2EB4CB7A717E11EFB0C5E227C4F9AE02.roa File: 2EB4CB7A717E11EFB0C5E227C4F9AE02.roa (raw, json) Hash identifier: mhP8BBfqw++2ozZujlhShzbMEXhQBc9JMbxlJhplPMk= Subject key identifier: BB:1A:04:EC:7B:07:B3:80:7C:0A:5A:80:97:D8:75:99:DA:C1:D7:AA Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4A73 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2EB4CB7A717E11EFB0C5E227C4F9AE02.roa Signing time: Wed 23 Apr 2025 14:40:12 +0000 ROA not before: Wed 23 Apr 2025 14:40:12 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135987 IP address blocks: 103.127.196.0/24 maxlen: 24 103.127.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19059 (0x4a73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Apr 23 14:40:12 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6808fbcc-110f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:da:2f:ff:8c:a7:9d:c5:1c:5a:58:e0:e1: c4:9b:14:39:53:7c:7a:29:53:e2:f0:5d:1b:12:34: e7:9c:b2:8a:70:b1:41:cc:c2:29:9d:de:4c:cf:29: 08:ee:b6:67:d9:67:10:9f:e3:46:74:dd:80:6e:8c: ca:c0:4d:b9:f1:ad:df:f8:d4:07:47:72:d3:08:50: 1e:91:f6:82:8c:4d:a4:e7:79:bb:25:ec:8c:7f:09: 7f:16:7f:c3:f6:96:83:db:58:cb:db:ff:18:56:66: 03:29:5a:a4:96:1f:ce:38:cb:60:f8:37:f9:25:86: c1:c1:c1:4a:6c:93:5c:71:2e:1b:d0:26:f0:09:75: f0:8c:84:bb:84:6b:de:39:52:a0:6c:93:08:de:40: 90:59:f1:bc:d7:2a:72:38:4d:48:48:b6:39:b1:3b: 01:4a:c7:0b:ac:4f:e4:a8:e6:9d:1d:d5:45:e5:73: a6:cf:28:48:c8:8a:28:56:40:56:e7:d9:c8:da:85: f7:f0:04:0b:6d:2c:19:2c:c9:2c:c8:21:2c:aa:73: c9:da:c9:69:08:f0:1a:b6:30:9f:61:f1:75:35:27: 75:b8:06:b8:82:de:61:a4:01:50:07:58:0f:10:0d: 5a:7d:17:4c:d5:dc:d2:ed:ea:67:77:8b:03:c9:f8: e8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1A:04:EC:7B:07:B3:80:7C:0A:5A:80:97:D8:75:99:DA:C1:D7:AA X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2EB4CB7A717E11EFB0C5E227C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.196.0/23 Signature Algorithm: sha256WithRSAEncryption 04:07:4c:a0:53:27:54:1c:1a:b3:1b:05:42:08:96:9b:7c:3c: 6a:c3:96:a6:b4:81:62:12:e1:45:99:95:00:66:af:a8:65:fc: f5:f5:5a:52:04:1e:aa:f5:b4:42:ce:07:6b:1c:3c:59:d7:8f: a6:6c:7e:96:82:ea:04:5d:80:db:de:56:a0:e4:a5:ed:43:24: a0:e5:16:38:98:1c:d4:ae:f5:aa:70:99:cf:96:13:5d:0f:37: 30:eb:3e:1a:47:cd:37:55:a0:09:1d:5e:74:77:48:5c:7f:5c: d8:50:8c:d5:60:78:03:d2:93:35:70:29:3a:7d:79:78:89:c2: 10:df:53:3c:52:01:e4:0c:8d:2e:87:34:1b:75:2e:d7:9a:e2: 78:6b:b3:07:55:14:43:88:39:cb:1e:d4:74:ac:bc:0e:b1:c0: e0:b0:48:16:10:72:98:b8:28:fc:5a:e2:fa:f9:4f:de:60:a2: 1b:5c:f3:b8:e6:2f:b6:a3:98:24:77:24:71:93:1e:90:fc:a3: d4:81:f1:99:e1:b1:3a:fe:d7:02:fd:5a:12:16:12:6b:0e:e7: 2f:b8:5c:7e:32:b7:8c:24:ca:be:b5:12:31:a1:09:3b:59:76: f0:54:83:46:b7:89:32:9d:f0:03:d0:e2:7f:7b:3a:af:b6:ad: 1b:4b:d4:55 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICSnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwNDIzMTQ0MDEyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA4ZmJjYy0xMTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtg/aL/+Mp53FHFpY4OHEmxQ5U3x6KVPi8F0bEjTnnLKKcLFBzMIpnd5MzykI 7rZn2WcQn+NGdN2AbozKwE258a3f+NQHR3LTCFAekfaCjE2k53m7JeyMfwl/Fn/D 9paD21jL2/8YVmYDKVqklh/OOMtg+Df5JYbBwcFKbJNccS4b0CbwCXXwjIS7hGve OVKgbJMI3kCQWfG81ypyOE1ISLY5sTsBSscLrE/kqOadHdVF5XOmzyhIyIooVkBW 59nI2oX38AQLbSwZLMksyCEsqnPJ2slpCPAatjCfYfF1NSd1uAa4gt5hpAFQB1gP EA1afRdM1dzS7epnd4sDyfjoIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLsaBOx7 B7OAfApagJfYdZnawdeqMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMkVCNENCN0E3 MTdFMTFFRkIwQzVFMjI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnf8QwDQYJKoZIhvcNAQELBQADggEBAAQHTKBTJ1QcGrMb BUIIlpt8PGrDlqa0gWIS4UWZlQBmr6hl/PX1WlIEHqr1tELOB2scPFnXj6ZsfpaC 6gRdgNveVqDkpe1DJKDlFjiYHNSu9apwmc+WE10PNzDrPhpHzTdVoAkdXnR3SFx/ XNhQjNVgeAPSkzVwKTp9eXiJwhDfUzxSAeQMjS6HNBt1Ltea4nhrswdVFEOIOcse 1HSsvA6xwOCwSBYQcpi4KPxa4vr5T95gohtc87jmL7ajmCR3JHGTHpD8o9SB8Znh sTr+1wL9WhIWEmsO5y+4XH4yt4wkyr61EjGhCTtZdvBUg0a3iTKd8APQ4n97Oq+2 rRtL1FU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:47 2025 by rpki-client