$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/5B5A8050DDBC11EC8378E737C4F9AE02.roa File: 5B5A8050DDBC11EC8378E737C4F9AE02.roa (raw, json) Hash identifier: na5Q578rSQBZFcX5/CcksCy+xsZYnJfxZssE9M4rEDg= Subject key identifier: 3E:B0:D7:5C:31:3F:64:FB:48:C0:26:BE:D7:81:75:20:D1:8D:28:82 Certificate issuer: /CN=A91A5BCD/serialNumber=859D184F41C34898B7298C991075CCCF51679AF1 Certificate serial: 09DC Authority key identifier: 85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/5B5A8050DDBC11EC8378E737C4F9AE02.roa Signing time: Sun 06 Apr 2025 20:00:13 +0000 ROA not before: Sun 06 Apr 2025 20:00:13 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138471 IP address blocks: 103.150.65.0/24 maxlen: 24 2001:df3:5c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2524 (0x9dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5BCD, serialNumber=859D184F41C34898B7298C991075CCCF51679AF1 Validity Not Before: Apr 6 20:00:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f2dd4d-6cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:31:74:19:d8:d9:4e:b1:3f:ed:86:e1:6a:42: af:c0:8a:e4:ca:8c:da:f1:1d:90:b7:6e:b9:4e:58: 23:cc:e5:94:15:eb:57:0a:c7:b7:fb:de:2c:cd:ec: 3f:17:cc:a2:cb:58:50:bd:6c:2c:8b:4e:77:a6:3c: 5c:6d:2e:0d:37:36:7b:79:3c:82:31:13:68:1c:59: 30:41:ea:6a:0b:ee:79:94:3a:11:d4:77:38:26:7c: ad:bf:d3:79:ee:8f:38:e3:d9:98:25:1d:b5:dc:96: be:36:45:c3:c1:8c:e1:42:05:4e:d5:49:d4:99:fa: 9e:54:cf:71:98:69:f6:ea:22:17:f4:aa:28:96:02: 40:01:45:f0:b8:98:b6:83:19:ed:41:01:38:3a:f6: 2b:05:6c:d2:39:59:d4:5c:fd:34:fa:7a:cf:1d:23: 79:b8:6b:31:86:dd:9d:59:ed:c4:74:33:21:20:1e: 3a:3c:52:68:10:fd:c0:86:6f:3f:2d:e2:64:de:2f: 07:5e:22:a4:df:6f:ac:4b:96:5f:5b:63:d3:9f:eb: df:4f:03:a3:5b:66:a3:28:5b:fe:52:b7:fb:e3:63: 6f:09:dc:5c:15:31:c9:8c:5f:4e:3c:51:1e:0c:db: 36:cb:a6:c5:6d:bb:09:07:21:a5:46:df:4e:09:1d: ea:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B0:D7:5C:31:3F:64:FB:48:C0:26:BE:D7:81:75:20:D1:8D:28:82 X509v3 Authority Key Identifier: keyid:85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/5B5A8050DDBC11EC8378E737C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.65.0/24 IPv6: 2001:df3:5c80::/48 Signature Algorithm: sha256WithRSAEncryption 38:d1:0f:c7:e0:98:3d:ce:ab:59:da:97:ac:ce:c4:ef:d2:4e: 79:50:d9:62:23:cf:a1:33:7d:a4:41:04:f1:a8:b5:42:39:28: 3c:da:ed:7c:98:30:df:81:97:b9:f6:49:db:1d:42:fb:48:f5: 81:e1:98:33:48:12:5a:2a:92:63:40:b9:d3:01:20:da:a9:b5: bc:80:a6:0f:7c:4f:5c:85:ac:ee:e1:61:17:ea:1c:88:1a:92: e5:56:93:12:82:8d:b1:32:11:79:fd:64:86:89:3e:23:67:e6: b9:e5:41:31:22:1f:e3:18:b1:10:83:02:27:8b:1c:3d:52:85: cc:b3:59:e2:85:e7:eb:f0:05:7a:1d:77:78:3f:6b:c0:36:d6: 73:a9:af:1e:1c:0a:60:70:9e:3d:98:2a:29:ef:b0:79:07:17: 76:39:6b:ce:28:7c:dc:5b:e3:f8:54:98:6e:28:65:39:11:67: 9a:6c:40:2c:f5:77:7b:b9:90:57:41:a0:2b:c8:7e:22:4d:d2: 41:4d:15:21:0e:ba:1d:e8:5e:17:ca:2a:bc:07:a8:e9:80:56: 2d:65:e3:b5:76:3b:76:89:bd:c1:51:70:55:4d:05:a9:1c:9f: 97:2d:77:3a:53:00:b2:b7:46:ad:56:67:9b:17:58:47:3e:39: 81:5c:e0:32 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCQ0QxMTAvBgNVBAUTKDg1OUQxODRGNDFDMzQ4OThCNzI5OEM5OTEwNzVDQ0NG NTE2NzlBRjEwHhcNMjUwNDA2MjAwMDEzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YyZGQ0ZC02Y2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDF0GdjZTrE/7YbhakKvwIrkyoza8R2Qt265TlgjzOWUFetXCse3+94szew/ F8yiy1hQvWwsi053pjxcbS4NNzZ7eTyCMRNoHFkwQepqC+55lDoR1Hc4Jnytv9N5 7o8449mYJR213Ja+NkXDwYzhQgVO1UnUmfqeVM9xmGn26iIX9KoolgJAAUXwuJi2 gxntQQE4OvYrBWzSOVnUXP00+nrPHSN5uGsxht2dWe3EdDMhIB46PFJoEP3Ahm8/ LeJk3i8HXiKk32+sS5ZfW2PTn+vfTwOjW2ajKFv+Urf742NvCdxcFTHJjF9OPFEe DNs2y6bFbbsJByGlRt9OCR3qPwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFD6w11wx P2T7SMAmvteBdSDRjSiCMB8GA1UdIwQYMBaAFIWdGE9Bw0iYtymMmRB1zM9RZ5rx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUJDRC82MUQwQzQ4NjdB M0ExMUVBQkY4QjU4MjZDNEY5QUUwMi9oWjBZVDBIRFNKaTNLWXlaRUhYTXoxRm5t dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haMFlUMEhEU0ppM0tZeVpFSFhNejFGbm12RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTVCQ0QvNjFEMEM0ODY3QTNBMTFFQUJGOEI1ODI2QzRGOUFFMDIvNUI1QTgwNTBE REJDMTFFQzgzNzhFNzM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnlkEwDwQCAAIwCQMHACABDfNcgDANBgkqhkiG9w0BAQsF AAOCAQEAONEPx+CYPc6rWdqXrM7E79JOeVDZYiPPoTN9pEEE8ai1QjkoPNrtfJgw 34GXufZJ2x1C+0j1geGYM0gSWiqSY0C50wEg2qm1vICmD3xPXIWs7uFhF+ociBqS 5VaTEoKNsTIRef1khok+I2fmueVBMSIf4xixEIMCJ4scPVKFzLNZ4oXn6/AFeh13 eD9rwDbWc6mvHhwKYHCePZgqKe+weQcXdjlrzih83Fvj+FSYbihlORFnmmxALPV3 e7mQV0GgK8h+Ik3SQU0VIQ66HeheF8oqvAeo6YBWLWXjtXY7dom9wVFwVU0FqRyf ly13OlMAsrdGrVZnmxdYRz45gVzgMg== -----END CERTIFICATE-----Generated at Sat Apr 26 13:08:50 2025 by rpki-client