$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/8CB86F5AC21A11EFAB75870CC4F9AE02.roa File: 8CB86F5AC21A11EFAB75870CC4F9AE02.roa (raw, json) Hash identifier: WQb8lcNBaBBkPoF6ncdjgRAg3hdCvuxgxSDRSWRx1cY= Subject key identifier: 1E:36:D7:07:AC:2B:73:D7:E5:48:A4:11:76:98:16:C1:92:19:0D:4B Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Certificate serial: 08C2 Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/8CB86F5AC21A11EFAB75870CC4F9AE02.roa Signing time: Wed 16 Apr 2025 17:26:22 +0000 ROA not before: Wed 16 Apr 2025 17:26:22 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138619 IP address blocks: 103.134.200.0/24 maxlen: 24 2404:6ac0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2242 (0x8c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Validity Not Before: Apr 16 17:26:22 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ffe83d-0332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6f:42:73:d3:2f:27:c8:55:a7:d4:74:82:b3: f4:83:9c:0e:c8:d6:ea:2a:38:23:a6:1a:a7:04:da: 3e:89:dd:9b:ad:8f:d7:95:aa:45:c5:d9:b7:58:62: 4a:e9:3c:ed:b3:12:f5:46:2f:dd:21:85:ae:c8:87: 90:ba:d3:7f:a2:c5:bd:9f:f2:a8:d5:75:25:84:46: 72:94:c9:25:a8:1a:0b:09:11:e0:d0:12:c4:2b:fd: 04:ba:8c:3a:4a:86:37:c2:0f:49:39:f6:ff:75:e5: ba:98:be:d2:d5:5f:92:da:9e:32:4c:67:96:e8:81: 00:d9:ee:f3:89:48:7f:20:38:21:03:3c:1f:6b:93: 0a:d9:76:aa:8e:fd:c0:55:d9:33:70:a2:af:b4:a9: 00:80:dc:05:e1:35:4d:93:57:42:6f:19:11:de:35: fe:34:08:f5:d7:7f:0f:5b:59:35:e4:6f:75:70:4b: e1:ac:87:1d:86:89:a2:ec:b9:f7:7d:01:cd:aa:90: 7f:1e:d7:be:97:a7:c5:c9:97:02:8d:99:e1:b9:af: c6:ac:e5:71:12:f5:2d:2d:c5:18:ef:39:a2:2e:d9: ff:8b:ac:9f:33:de:33:93:c2:df:45:ad:9d:e8:33: df:4b:d0:ba:36:c4:5c:b1:6c:12:ef:9a:64:fc:53: 36:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:36:D7:07:AC:2B:73:D7:E5:48:A4:11:76:98:16:C1:92:19:0D:4B X509v3 Authority Key Identifier: keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/8CB86F5AC21A11EFAB75870CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.200.0/24 IPv6: 2404:6ac0::/32 Signature Algorithm: sha256WithRSAEncryption 92:08:f1:fa:d5:9d:1f:a0:3c:dc:10:f8:ea:bc:99:7f:7c:69: 84:9c:d6:01:cb:f4:2c:ee:d1:8c:29:12:1e:c1:17:5b:bf:fc: 8c:53:dc:0a:b4:6d:fb:59:a4:48:1e:68:1d:57:e0:3f:a3:93: 19:f1:4e:61:99:e2:00:d1:6f:f8:e9:ef:08:e8:e6:4f:32:30: f2:a0:79:e4:57:92:a9:de:da:5c:4c:ac:18:91:3b:95:ab:8b: 18:c4:cf:54:0c:89:14:e4:d2:38:02:8a:33:d9:03:a1:d4:f0: f3:eb:84:5f:8e:ef:eb:5f:0d:86:e3:fd:db:2d:8f:ae:2e:f0: f2:26:ea:e6:7f:36:9c:eb:22:93:21:8c:7b:17:fc:3f:e0:5a: ad:f7:24:b8:40:af:70:bf:99:02:96:5f:72:a8:73:07:1a:6c: c2:1a:e3:b1:af:70:35:31:ad:cc:19:21:b6:8c:30:57:c5:3c: 74:7f:34:e4:71:a3:01:21:2b:fb:51:c4:2b:51:ab:9b:7a:22: 0b:5a:e5:dc:e1:13:9c:3a:89:63:2c:0a:4c:87:11:ca:f6:9b: b1:fa:18:2f:bb:da:56:61:df:76:4e:fa:82:c6:51:97:96:c1: af:96:74:35:cb:23:28:01:bf:cb:f2:94:db:34:b8:63:52:85: 36:4e:f0:51 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG Rjc5RDFFMDEwHhcNMjUwNDE2MTcyNjIyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZmZTgzZC0wMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7m9Cc9MvJ8hVp9R0grP0g5wOyNbqKjgjphqnBNo+id2brY/XlapFxdm3WGJK 6TztsxL1Ri/dIYWuyIeQutN/osW9n/Ko1XUlhEZylMklqBoLCRHg0BLEK/0Euow6 SoY3wg9JOfb/deW6mL7S1V+S2p4yTGeW6IEA2e7ziUh/IDghAzwfa5MK2Xaqjv3A VdkzcKKvtKkAgNwF4TVNk1dCbxkR3jX+NAj1138PW1k15G91cEvhrIcdhomi7Ln3 fQHNqpB/Hte+l6fFyZcCjZnhua/GrOVxEvUtLcUY7zmiLtn/i6yfM94zk8LfRa2d 6DPfS9C6NsRcsWwS75pk/FM2AwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFB421wes K3PX5UikEXaYFsGSGQ1LMB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjUwNzMvNDNGMTYyNjQzMzk1MTFFOUJGQjFDMjFBQzRGOUFFMDIvOENCODZGNUFD MjFBMTFFRkFCNzU4NzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABnhsgwDQQCAAIwBwMFACQEasAwDQYJKoZIhvcNAQELBQAD ggEBAJII8frVnR+gPNwQ+Oq8mX98aYSc1gHL9Czu0YwpEh7BF1u//IxT3Aq0bftZ pEgeaB1X4D+jkxnxTmGZ4gDRb/jp7wjo5k8yMPKgeeRXkqne2lxMrBiRO5WrixjE z1QMiRTk0jgCijPZA6HU8PPrhF+O7+tfDYbj/dstj64u8PIm6uZ/NpzrIpMhjHsX /D/gWq33JLhAr3C/mQKWX3KocwcabMIa47GvcDUxrcwZIbaMMFfFPHR/NORxowEh K/tRxCtRq5t6Igta5dzhE5w6iWMsCkyHEcr2m7H6GC+72lZh33ZO+oLGUZeWwa+W dDXLIygBv8vylNs0uGNShTZO8FE= -----END CERTIFICATE-----Generated at Sat Apr 26 09:34:16 2025 by rpki-client