$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/7E50DB58DE1E11EF96BAF829C4F9AE02.roa File: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (raw, json) Hash identifier: /ycT0LeM2B6SfJOIcutt73CO4dhLu842cRCTArO5hco= Subject key identifier: 6C:8B:26:05:7E:47:FD:CA:BE:CA:3D:9E:12:83:87:52:F9:0D:6E:F8 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 3457 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/7E50DB58DE1E11EF96BAF829C4F9AE02.roa Signing time: Wed 29 Jan 2025 08:53:22 +0000 ROA not before: Wed 29 Jan 2025 08:53:22 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153397 IP address blocks: 103.80.41.0/24 maxlen: 24 103.80.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13399 (0x3457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Jan 29 08:53:22 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6799ec82-35ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:ec:f3:c6:a8:d5:ee:a9:64:f0:67:41:4e: b7:91:94:33:c5:92:a3:2c:ac:4a:29:4d:be:22:e2: c0:18:19:39:7f:00:86:fc:36:62:28:6a:5f:87:8f: 4b:02:58:3a:5c:ac:b1:57:0f:cf:aa:1f:c9:3c:b5: 57:c1:ec:46:9d:e7:e8:54:2f:4e:d1:6b:c1:a0:06: 61:f6:5b:c3:06:4d:fd:6d:ab:27:b7:42:08:ca:fe: 71:9b:7a:dc:45:f3:c2:86:c4:ea:22:f7:1f:c4:90: 61:e1:6c:f8:7d:f2:fb:93:fe:0f:17:a5:9e:c5:3c: a3:fb:67:dd:d8:c1:92:02:4c:2c:e6:fd:e9:e9:da: d9:96:19:c0:45:f3:b3:a7:91:40:71:d2:bd:68:77: dc:56:24:95:7c:15:6f:48:7b:19:a3:16:fa:55:55: 0f:3b:5e:e9:b0:4a:9b:5a:d1:b3:68:c4:36:f9:64: e5:00:06:4f:02:6e:6f:cc:5c:de:71:86:06:90:dd: aa:b7:be:4c:f9:9e:bf:4f:b9:77:b3:84:1a:95:ea: b9:ab:b3:f9:a4:72:c8:45:6a:70:25:f9:18:87:71: 92:da:68:9d:ff:cd:4e:37:1c:a3:45:7a:40:54:dd: dd:ac:16:41:71:de:7c:7f:82:6f:50:88:f2:e8:94: 00:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8B:26:05:7E:47:FD:CA:BE:CA:3D:9E:12:83:87:52:F9:0D:6E:F8 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/7E50DB58DE1E11EF96BAF829C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.80.41.0-103.80.42.255 Signature Algorithm: sha256WithRSAEncryption 8a:3b:67:25:a9:50:86:11:36:c9:e9:42:0d:1d:d3:4d:70:9a: 9b:46:0a:e1:b8:34:e8:60:78:4c:51:ca:8e:e8:91:31:14:10: 8f:36:45:6c:d1:3e:16:47:e6:d1:95:80:51:f1:c0:8a:65:ca: d2:1d:f2:d9:aa:68:0a:0c:d4:15:28:e0:4a:21:50:ad:10:71: d7:52:d4:98:07:05:a0:a0:a2:19:7b:29:d2:a9:4c:39:4b:2a: fa:7a:35:24:d5:8c:08:0e:46:07:95:f9:b5:0d:a6:e9:bd:2d: 09:eb:86:ae:79:df:40:f0:1f:52:ef:87:6d:f6:6d:3a:a2:b6: bd:2c:48:f4:35:8e:e6:f7:6c:97:da:e8:7f:df:77:1e:7b:63: 7d:9e:07:90:5a:95:9e:6c:22:50:5c:bf:89:f7:ac:d1:27:0d: 47:1f:a5:0b:1e:76:d3:61:64:34:09:67:5b:45:09:62:f0:28: 60:67:34:9a:a1:d0:1e:f6:f5:49:21:24:14:9e:90:bc:18:58: e0:ea:95:d9:3c:12:a1:19:d0:6c:3f:fe:5b:a0:a0:22:bf:eb: e6:0e:28:78:53:94:17:22:bd:32:8a:bf:e7:13:e8:ba:86:75: a1:e0:27:a0:76:be:b7:e3:07:c3:30:8a:35:37:1d:5a:8a:ad: fe:2a:bb:42 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICNFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjUwMTI5MDg1MzIyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk5ZWM4Mi0zNWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBDs88ao1e6pZPBnQU63kZQzxZKjLKxKKU2+IuLAGBk5fwCG/DZiKGpfh49L Alg6XKyxVw/Pqh/JPLVXwexGnefoVC9O0WvBoAZh9lvDBk39basnt0IIyv5xm3rc RfPChsTqIvcfxJBh4Wz4ffL7k/4PF6WexTyj+2fd2MGSAkws5v3p6drZlhnARfOz p5FAcdK9aHfcViSVfBVvSHsZoxb6VVUPO17psEqbWtGzaMQ2+WTlAAZPAm5vzFze cYYGkN2qt75M+Z6/T7l3s4Qaleq5q7P5pHLIRWpwJfkYh3GS2mid/81ONxyjRXpA VN3drBZBcd58f4JvUIjy6JQAnQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFGyLJgV+ R/3Kvso9nhKDh1L5DW74MB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUQ4Q0IvMzI4RUQxNTQxRDhCMTFFMjkwNDlCQ0U1MDhCMDJDRDIvN0U1MERCNThE RTFFMTFFRjk2QkFGODI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGdQKQMEAGdQKjANBgkqhkiG9w0BAQsFAAOCAQEAijtn JalQhhE2yelCDR3TTXCam0YK4bg06GB4TFHKjuiRMRQQjzZFbNE+Fkfm0ZWAUfHA imXK0h3y2apoCgzUFSjgSiFQrRBx11LUmAcFoKCiGXsp0qlMOUsq+no1JNWMCA5G B5X5tQ2m6b0tCeuGrnnfQPAfUu+HbfZtOqK2vSxI9DWO5vdsl9rof993HntjfZ4H kFqVnmwiUFy/ifes0ScNRx+lCx5202FkNAlnW0UJYvAoYGc0mqHQHvb1SSEkFJ6Q vBhY4OqV2TwSoRnQbD/+W6CgIr/r5g4oeFOUFyK9Moq/5xPouoZ1oeAnoHa+t+MH wzCKNTcdWoqt/iq7Qg== -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:11 2025 by rpki-client