$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/D240E2EE814D11EBB1CE367FC4F9AE02.roa File: D240E2EE814D11EBB1CE367FC4F9AE02.roa (raw, json) Hash identifier: OcDk0+b+7yUXsyGIwS3/BcoBm4sD7lmajtFFAPMecA4= Subject key identifier: CB:D7:A8:60:74:47:58:94:1D:60:61:95:F4:2A:E3:08:4A:5E:D7:1C Certificate issuer: /CN=A91B2131/serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1 Certificate serial: 0679 Authority key identifier: 14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/D240E2EE814D11EBB1CE367FC4F9AE02.roa Signing time: Thu 12 Jun 2025 22:21:28 +0000 ROA not before: Thu 12 Jun 2025 22:21:28 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 138002 IP address blocks: 103.115.233.0/24 maxlen: 24 2001:df5:3f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2131, serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1 Validity Not Before: Jun 12 22:21:28 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684b52e8-574c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:0f:95:5b:2f:0e:65:ab:5d:56:03:6b:02:3a: 3b:e3:4d:34:52:53:71:44:88:45:0c:ac:9d:b6:26: 07:aa:02:31:6e:86:78:bd:1f:1f:0e:f2:f1:82:5f: 0e:f7:df:d8:52:71:12:90:88:ce:37:91:eb:49:78: 3d:94:7d:e7:6c:08:83:03:b4:45:64:70:8d:c8:c2: b1:9c:b7:9f:0a:69:2c:aa:cb:ab:c0:7f:58:b7:46: 45:f7:df:c9:1b:23:b1:a2:1c:0f:6e:50:71:d2:8a: 63:3f:c5:b4:85:3b:6a:a1:12:0f:7b:b5:52:5d:c6: 22:3f:b9:70:74:15:5b:91:75:27:74:30:d7:af:e4: 96:e2:74:48:cb:6c:7c:d0:6c:8c:55:bd:b1:31:ad: 70:f7:2c:9a:68:51:9b:31:e1:4b:c1:6c:14:fa:0a: 97:0c:08:59:bc:4b:37:af:20:6e:75:6e:66:31:dd: 49:85:64:6a:8d:5e:80:2c:ba:46:b5:82:ff:ee:5a: 4d:33:be:07:76:80:85:4c:1e:71:8f:63:f2:a6:4e: dc:ff:bc:88:a0:3f:ab:28:ac:84:a9:a4:be:cb:2b: c2:b1:fb:f8:fa:00:a7:da:be:81:50:5d:10:7f:aa: e9:88:5a:4f:c5:7d:51:af:c4:b7:c8:55:ed:49:22: f2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D7:A8:60:74:47:58:94:1D:60:61:95:F4:2A:E3:08:4A:5E:D7:1C X509v3 Authority Key Identifier: keyid:14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/D240E2EE814D11EBB1CE367FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.233.0/24 IPv6: 2001:df5:3f00::/48 Signature Algorithm: sha256WithRSAEncryption 7b:6b:ba:8c:c0:c7:69:e9:a9:a2:52:73:4a:8e:75:97:34:90: 6e:1b:26:80:bf:c0:63:52:38:b3:70:f1:7b:1d:6b:0b:60:25: 9b:eb:6c:61:f0:b1:56:07:cb:f3:43:08:cd:6a:f0:0a:53:cc: d8:59:25:3e:c4:0e:b2:5b:43:d0:65:2d:3e:d0:50:dc:11:02: a3:8c:c7:ba:04:f6:51:37:74:ef:6c:5c:87:a8:d0:84:36:30: ee:a1:64:78:d3:d2:4a:a4:6b:d1:71:07:16:83:5c:7a:65:0e: a4:c6:6e:2d:37:a6:d2:66:b3:44:b4:18:60:a6:7e:45:51:37: 68:d5:9c:c2:0f:54:28:59:d4:e2:c5:50:08:37:31:bd:97:b1: 59:fb:4c:b2:f6:61:8d:d8:30:6d:d7:54:46:8c:22:3e:43:57: a8:02:69:48:28:8c:69:67:b3:89:1a:21:f1:2b:3b:d5:08:93: ca:42:85:e6:6f:5f:e4:24:02:00:d6:eb:40:3c:ec:a0:a1:5a: 9c:99:61:01:0e:1e:c0:e4:93:f7:a6:69:60:c8:78:4d:88:2e: 7b:8a:be:0f:b8:a5:38:dd:84:13:02:1a:e3:e5:61:4e:95:7c: 46:0b:59:00:ff:f2:0f:02:2c:eb:1f:6c:3a:26:38:8a:3a:d8: f2:1b:92:e6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIxMzExMTAvBgNVBAUTKDE0MDdFMzFDODdFMTE2MjQ1OUQ4M0MzQUVCNDg4Qzk3 NUE5QzIzRjEwHhcNMjUwNjEyMjIyMTI4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRiNTJlOC01NzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+A+VWy8OZatdVgNrAjo74000UlNxRIhFDKydtiYHqgIxboZ4vR8fDvLxgl8O 99/YUnESkIjON5HrSXg9lH3nbAiDA7RFZHCNyMKxnLefCmksqsurwH9Yt0ZF99/J GyOxohwPblBx0opjP8W0hTtqoRIPe7VSXcYiP7lwdBVbkXUndDDXr+SW4nRIy2x8 0GyMVb2xMa1w9yyaaFGbMeFLwWwU+gqXDAhZvEs3ryBudW5mMd1JhWRqjV6ALLpG tYL/7lpNM74HdoCFTB5xj2Pypk7c/7yIoD+rKKyEqaS+yyvCsfv4+gCn2r6BUF0Q f6rpiFpPxX1Rr8S3yFXtSSLycwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMvXqGB0 R1iUHWBhlfQq4whKXtccMB8GA1UdIwQYMBaAFBQH4xyH4RYkWdg8OutIjJdanCPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjEzMS9CRTRBNkNEMDdE NzIxMUVCOENCNjM2NjVDNEY5QUUwMi9GQWZqSElmaEZpUloyRHc2NjBpTWwxcWNJ X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZBZmpISWZoRmlSWjJEdzY2MGlNbDFxY0lfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjIxMzEvQkU0QTZDRDA3RDcyMTFFQjhDQjYzNjY1QzRGOUFFMDIvRDI0MEUyRUU4 MTREMTFFQkIxQ0UzNjdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnc+kwDwQCAAIwCQMHACABDfU/ADANBgkqhkiG9w0BAQsF AAOCAQEAe2u6jMDHaempolJzSo51lzSQbhsmgL/AY1I4s3Dxex1rC2Alm+tsYfCx VgfL80MIzWrwClPM2FklPsQOsltD0GUtPtBQ3BECo4zHugT2UTd072xch6jQhDYw 7qFkeNPSSqRr0XEHFoNcemUOpMZuLTem0mazRLQYYKZ+RVE3aNWcwg9UKFnU4sVQ CDcxvZexWftMsvZhjdgwbddURowiPkNXqAJpSCiMaWeziRoh8Ss71QiTykKF5m9f 5CQCANbrQDzsoKFanJlhAQ4ewOST96ZpYMh4TYgue4q+D7ilON2EEwIa4+VhTpV8 RgtZAP/yDwIs6x9sOiY4ijrY8huS5g== -----END CERTIFICATE-----Generated at Tue Jun 17 15:33:47 2025 by rpki-client