$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/CB16EA82FB6411EF90E1E429C4F9AE02.roa File: CB16EA82FB6411EF90E1E429C4F9AE02.roa (raw, json) Hash identifier: Q6MiHP+R88hVP5uJ4adxJpvxkQ/xGhsrM9tNu/bI7KQ= Subject key identifier: 63:48:85:53:0A:8F:2B:8D:0F:73:41:CF:E0:9D:78:F1:ED:2C:E8:A0 Certificate issuer: /CN=A91B6066/serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508 Certificate serial: 02 Authority key identifier: 1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/CB16EA82FB6411EF90E1E429C4F9AE02.roa Signing time: Fri 07 Mar 2025 14:59:40 +0000 ROA not before: Fri 07 Mar 2025 14:59:40 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 135357 IP address blocks: 103.234.96.0/22 maxlen: 22 103.234.96.0/24 maxlen: 24 103.234.97.0/24 maxlen: 24 103.234.98.0/24 maxlen: 24 103.234.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6066, serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508 Validity Not Before: Mar 7 14:59:40 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67cb09db-28bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:fa:ac:8c:14:f7:5c:0e:b2:5f:78:c9:0d: 5d:62:fa:7e:4a:e0:76:7a:1a:89:34:34:68:4f:cf: 29:7c:c8:62:b6:22:ee:5a:1c:db:18:af:ef:58:76: e0:1d:5b:d7:3f:3a:95:84:ef:0c:1e:06:05:7b:2f: ac:6c:33:33:7f:8a:62:34:63:a2:f8:b8:31:75:d2: 32:3e:fd:77:d6:c4:35:1c:03:c8:29:8b:de:8b:12: 7f:ac:df:64:75:a4:ab:11:bc:98:5e:de:a7:e9:e7: a3:73:1e:8f:09:4b:62:36:90:0e:6c:7c:4b:81:2e: ad:f3:bf:86:ab:d0:6b:7a:02:d2:61:80:2f:e8:fb: 01:1f:cb:1f:f4:3a:bb:01:d2:75:70:40:a7:d8:b7: 37:23:6e:bc:fc:12:06:99:0a:5e:53:c2:df:39:c9: ed:a1:ad:7f:02:b2:a8:a2:ab:03:2d:a1:44:b3:c7: cc:ec:d1:b6:0d:65:52:7e:66:f3:53:7f:a4:94:2c: 70:c9:9e:e6:ce:93:39:65:fe:8a:1f:5c:35:76:22: ea:f4:40:99:99:57:cb:86:10:42:f4:55:f9:b2:9f: 92:18:0f:e2:5f:a3:0f:ea:c0:39:ee:24:12:54:37: ed:60:12:31:de:2c:35:cf:74:46:2b:55:a0:0e:30: 66:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:48:85:53:0A:8F:2B:8D:0F:73:41:CF:E0:9D:78:F1:ED:2C:E8:A0 X509v3 Authority Key Identifier: keyid:1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/CB16EA82FB6411EF90E1E429C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.234.96.0/22 Signature Algorithm: sha256WithRSAEncryption a1:a3:09:b4:e9:26:b5:0e:70:6c:13:64:97:31:05:c6:ed:cb: 72:23:b2:c8:fd:df:32:6b:8f:4f:8d:d6:03:f7:0f:8c:88:da: cd:19:ca:f1:5c:e5:ec:5d:4d:fc:97:5e:1c:95:f3:8d:f1:ff: 43:2f:a8:d1:89:1f:84:47:09:b6:61:ee:39:af:a5:22:ad:a7: 8c:c3:1a:7a:1e:98:38:1b:02:2e:dd:d1:ce:1c:1d:12:cd:20: 9b:78:3d:9f:d7:95:1a:ba:08:ac:0c:c5:56:92:29:4c:18:90: 14:f6:6a:bf:2a:9c:12:92:33:d2:dd:64:68:d0:9b:2c:90:9f: a3:a6:1e:13:0d:34:ed:4c:9b:f8:06:88:7e:17:05:10:ca:65: 82:f2:56:1d:b7:4f:ca:68:87:b3:6d:44:be:d2:cb:15:7a:48: c5:b3:1b:d1:aa:1f:b2:db:c2:41:54:e4:b2:14:88:9c:6b:84: c9:7f:f8:18:40:12:7f:2c:83:01:e9:a3:f6:33:08:1c:9b:e5: a4:27:92:28:29:eb:79:35:6b:7b:1f:70:54:9c:0a:09:e8:22: 9c:8a:c3:61:4a:c5:ec:7c:8d:be:e6:55:9e:f1:7e:e2:76:5b: 42:d5:a0:5f:46:c8:84:10:65:f4:be:13:8b:71:93:b1:29:12: 16:ee:cc:b0 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjA2NjExMC8GA1UEBRMoMUQ0RUM0MjUzMzEzQjYyQzQ4NDQ5MTZCODVEQzBGRkU0 QjA3RDUwODAeFw0yNTAzMDcxNDU5NDBaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3Y2IwOWRiLTI4YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCefqsjBT3XA6yX3jJDV1i+n5K4HZ6Gok0NGhPzyl8yGK2Iu5aHNsYr+9YduAd W9c/OpWE7wweBgV7L6xsMzN/imI0Y6L4uDF10jI+/XfWxDUcA8gpi96LEn+s32R1 pKsRvJhe3qfp56NzHo8JS2I2kA5sfEuBLq3zv4ar0Gt6AtJhgC/o+wEfyx/0OrsB 0nVwQKfYtzcjbrz8EgaZCl5Twt85ye2hrX8CsqiiqwMtoUSzx8zs0bYNZVJ+ZvNT f6SULHDJnubOkzll/oofXDV2Iur0QJmZV8uGEEL0Vfmyn5IYD+Jfow/qwDnuJBJU N+1gEjHeLDXPdEYrVaAOMGZNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUY0iFUwqP K40Pc0HP4J148e0s6KAwHwYDVR0jBBgwFoAUHU7EJTMTtixIRJFrhdwP/ksH1Qgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MDY2LzY0OEE4ODMyRkI2 NDExRUZCQzlCMzUyOUM0RjlBRTAyL0hVN0VKVE1UdGl4SVJKRnJoZHdQX2tzSDFR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFU3RUpUTVR0aXhJUkpGcmhkd1Bfa3NIMVFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjA2Ni82NDhBODgzMkZCNjQxMUVGQkM5QjM1MjlDNEY5QUUwMi9DQjE2RUE4MkZC NjQxMUVGOTBFMUU0MjlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmfqYDANBgkqhkiG9w0BAQsFAAOCAQEAoaMJtOkmtQ5wbBNk lzEFxu3LciOyyP3fMmuPT43WA/cPjIjazRnK8Vzl7F1N/JdeHJXzjfH/Qy+o0Ykf hEcJtmHuOa+lIq2njMMaeh6YOBsCLt3RzhwdEs0gm3g9n9eVGroIrAzFVpIpTBiQ FPZqvyqcEpIz0t1kaNCbLJCfo6YeEw007Uyb+AaIfhcFEMplgvJWHbdPymiHs21E vtLLFXpIxbMb0aofstvCQVTkshSInGuEyX/4GEASfyyDAemj9jMIHJvlpCeSKCnr eTVrex9wVJwKCeginIrDYUrF7HyNvuZVnvF+4nZbQtWgX0bIhBBl9L4Ti3GTsSkS Fu7MsA== -----END CERTIFICATE-----Generated at Sat Apr 26 09:34:54 2025 by rpki-client