$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/17687AB8D18F11EF8C6F8687C4F9AE02.roa File: 17687AB8D18F11EF8C6F8687C4F9AE02.roa (raw, json) Hash identifier: WWuXoRDgSFC35DFMV3idQp1hR/mdc4d4fur1hKvZ27k= Subject key identifier: B4:D1:89:1E:3D:E6:1B:D0:D1:36:7A:0E:BD:03:4C:A0:7B:3E:91:6E Certificate issuer: /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09 Certificate serial: 065A Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/17687AB8D18F11EF8C6F8687C4F9AE02.roa Signing time: Mon 13 Jan 2025 09:16:37 +0000 ROA not before: Mon 13 Jan 2025 09:16:37 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 9232 IP address blocks: 103.151.4.0/23 maxlen: 23 103.151.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1626 (0x65a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6353, serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09 Validity Not Before: Jan 13 09:16:37 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6784d9f5-afd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d8:b5:fb:9f:10:be:47:f9:6b:5e:86:68:24: 01:16:42:0b:88:8f:1a:d9:24:55:fc:aa:83:80:91: e7:e6:fd:55:77:8a:6a:cb:95:32:8e:15:8c:2a:0e: 82:20:d6:39:a5:2c:f3:34:86:11:65:e8:ac:82:b0: 88:e0:f2:ba:72:91:1d:c4:08:24:30:8b:d8:e1:1b: e9:70:86:e5:b9:97:c3:f5:8b:e7:79:72:8b:4f:c8: a7:4f:c0:1e:ef:a6:58:e1:cf:08:05:15:0d:db:5b: 52:c2:72:05:a4:44:90:1e:48:8e:68:b8:50:21:fd: 18:81:d7:53:28:dc:99:92:83:ad:15:1e:4a:4f:9a: 5b:4b:8c:a3:d7:a3:bf:27:e8:27:e0:c8:8b:8c:97: ba:52:90:4f:18:20:50:90:45:3e:90:95:0c:e0:56: d9:01:e3:fb:e5:48:26:76:c7:07:8b:e3:48:33:67: 8f:ff:95:d3:23:06:85:da:fa:f1:40:1f:b5:38:fb: 9e:0f:92:ce:ef:9a:5b:e6:51:92:f4:63:04:63:c7: 2c:fe:67:20:4e:1d:01:48:85:d4:e1:5c:b0:00:8c: a4:07:13:8a:11:e6:54:77:da:d9:f1:e5:3a:ad:2c: 28:77:ba:7c:91:9f:33:81:c7:d4:97:f2:78:8f:f9: d5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D1:89:1E:3D:E6:1B:D0:D1:36:7A:0E:BD:03:4C:A0:7B:3E:91:6E X509v3 Authority Key Identifier: keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/17687AB8D18F11EF8C6F8687C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.4.0/23 Signature Algorithm: sha256WithRSAEncryption 99:69:8f:eb:bb:1f:9a:8f:68:ee:79:93:2a:38:a3:2f:84:54: 48:59:93:56:b4:bd:9c:a2:be:46:68:b7:05:68:1e:99:11:69: 61:37:f3:fb:4f:17:85:ca:2d:8a:c4:d4:a3:76:7b:25:fb:ba: 09:6f:06:e8:2a:cd:89:57:64:8a:cd:a8:58:37:58:2c:7c:f5: 58:49:4d:dc:30:65:10:5d:83:fc:d1:22:8b:53:f2:37:8f:b5: e1:ce:c9:59:2d:93:ff:cf:35:ef:34:11:63:ad:8e:dd:9c:d6: 8c:70:06:f2:0d:ed:e2:e7:92:37:bf:03:2c:61:48:b0:c1:6f: 90:95:e5:09:21:64:e7:c6:62:02:cc:4e:85:68:29:77:a7:da: 18:eb:72:36:8b:8d:f6:26:dd:5b:ef:80:b3:18:bd:61:29:46: bc:32:f1:bf:07:4a:f7:69:dd:35:d2:26:86:af:ee:d5:1f:d8: e7:15:73:cc:3f:57:cb:ed:00:7f:f1:96:13:a8:b3:b9:60:37: a2:db:3f:35:85:8f:a6:f2:09:bd:08:f2:c1:e4:58:28:11:3f: 10:e7:4f:1c:a6:e9:75:69:04:b5:45:a6:a3:c6:be:c4:44:2e: a2:23:f6:a9:06:d6:50:45:5f:ec:54:14:15:41:50:87:99:40: a7:b2:b7:9f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYzNTMxMTAvBgNVBAUTKEFBQUVDNzFDQTM0REVGMDhEODhFRTc3QkQ5MUMxNTcx NzVDQzNDMDkwHhcNMjUwMTEzMDkxNjM3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg0ZDlmNS1hZmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9i1+58Qvkf5a16GaCQBFkILiI8a2SRV/KqDgJHn5v1Vd4pqy5UyjhWMKg6C INY5pSzzNIYRZeisgrCI4PK6cpEdxAgkMIvY4RvpcIbluZfD9YvneXKLT8inT8Ae 76ZY4c8IBRUN21tSwnIFpESQHkiOaLhQIf0YgddTKNyZkoOtFR5KT5pbS4yj16O/ J+gn4MiLjJe6UpBPGCBQkEU+kJUM4FbZAeP75UgmdscHi+NIM2eP/5XTIwaF2vrx QB+1OPueD5LO75pb5lGS9GMEY8cs/mcgTh0BSIXU4VywAIykBxOKEeZUd9rZ8eU6 rSwod7p8kZ8zgcfUl/J4j/nVdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLTRiR49 5hvQ0TZ6Dr0DTKB7PpFuMB8GA1UdIwQYMBaAFKquxxyjTe8I2I7ne9kcFXF1zDwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjM1My8zQkZERUQ2NDg2 QkExMUVCQkNDMzk4NzVDNEY5QUUwMi9xcTdISEtOTjd3allqdWQ3MlJ3VmNYWE1Q QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FxN0hIS05ON3dqWWp1ZDcyUndWY1hYTVBBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTYzNTMvM0JGREVENjQ4NkJBMTFFQkJDQzM5ODc1QzRGOUFFMDIvMTc2ODdBQjhE MThGMTFFRjhDNkY4Njg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlwQwDQYJKoZIhvcNAQELBQADggEBAJlpj+u7H5qPaO55 kyo4oy+EVEhZk1a0vZyivkZotwVoHpkRaWE38/tPF4XKLYrE1KN2eyX7uglvBugq zYlXZIrNqFg3WCx89VhJTdwwZRBdg/zRIotT8jePteHOyVktk//PNe80EWOtjt2c 1oxwBvIN7eLnkje/AyxhSLDBb5CV5QkhZOfGYgLMToVoKXen2hjrcjaLjfYm3Vvv gLMYvWEpRrwy8b8HSvdp3TXSJoav7tUf2OcVc8w/V8vtAH/xlhOos7lgN6LbPzWF j6byCb0I8sHkWCgRPxDnTxym6XVpBLVFpqPGvsRELqIj9qkG1lBFX+xUFBVBUIeZ QKeyt58= -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:34 2025 by rpki-client