$ rpki-client -vvf rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/37759456617811ECBB095A62C4F9AE02.roa File: 37759456617811ECBB095A62C4F9AE02.roa (raw, json) Hash identifier: v3SUpuH8xWSras56GKvRnCYqonsTS7bWwXVAuKOWPmw= Subject key identifier: E2:90:89:C3:F9:CA:A8:FC:33:EF:8F:25:66:EA:DB:E6:35:76:61:E9 Certificate issuer: /CN=A91B829A/serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25 Certificate serial: 0C3A Authority key identifier: 89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/37759456617811ECBB095A62C4F9AE02.roa Signing time: Tue 22 Apr 2025 18:47:08 +0000 ROA not before: Tue 22 Apr 2025 18:47:08 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132169 IP address blocks: 103.138.202.0/23 maxlen: 23 103.138.202.0/24 maxlen: 24 103.138.203.0/24 maxlen: 24 2001:df0:5280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3130 (0xc3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B829A, serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25 Validity Not Before: Apr 22 18:47:08 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6807e42b-ce94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:df:4f:a4:d0:b9:72:bd:a7:28:af:1e:c2:63: 2c:35:b2:34:d3:01:63:5d:f8:ae:a1:15:a7:5d:4a: 50:f7:b1:5c:71:19:61:d6:cc:c8:31:9e:25:d1:b3: 48:a5:b6:92:e9:b4:61:fa:88:3f:0d:7b:d3:80:03: 65:9b:38:3a:40:63:5f:ba:fb:21:96:73:95:cb:d1: a1:49:11:da:90:e7:4b:a3:ac:08:4d:2e:c6:f1:af: 86:f4:d2:de:cf:a5:29:ec:69:f4:09:71:09:ea:95: 9e:e3:0f:b4:20:1b:92:3f:c9:dd:9e:dd:0e:ce:23: 4d:81:cd:ec:06:9a:3d:09:1e:c8:85:e7:cd:ac:c5: 90:c3:20:3f:fb:37:c7:aa:92:f5:35:37:3a:bb:88: 24:55:16:80:f1:ba:79:5f:bc:a3:e5:9f:0d:5f:4d: b4:6a:3d:88:f9:39:72:b6:28:ba:2f:6a:bd:34:71: c7:d3:1d:96:52:7c:1d:3a:91:0a:50:83:27:6f:20: 9a:d8:a1:e8:60:0e:df:4f:f0:34:a0:66:35:cd:fd: 89:03:20:ed:ff:75:e5:24:b3:5f:7f:fd:01:78:db: 5d:9a:b9:04:c4:46:0d:7f:68:4a:ab:6a:3f:1b:78: 15:7a:fb:41:98:8b:66:ea:78:9e:36:45:c4:be:c9: 8d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:90:89:C3:F9:CA:A8:FC:33:EF:8F:25:66:EA:DB:E6:35:76:61:E9 X509v3 Authority Key Identifier: keyid:89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/37759456617811ECBB095A62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.202.0/23 IPv6: 2001:df0:5280::/48 Signature Algorithm: sha256WithRSAEncryption 91:7c:5c:da:15:03:11:e0:8f:ff:cb:5c:7c:59:92:6e:99:e1: c7:2a:c0:88:02:92:a9:91:5e:39:82:4d:ff:47:31:ed:44:10: 38:b7:bc:46:67:a6:ac:8d:45:d2:05:c8:cc:b0:da:30:7d:48: b2:bd:75:f7:13:a5:81:eb:9c:1d:d7:1e:86:37:2f:65:7a:52: 89:c5:11:2f:d4:5b:2f:3c:f5:b8:dc:71:14:42:4b:bf:84:c0: e6:ed:ac:86:57:d1:b2:89:dc:b0:e6:93:d8:d4:59:fb:d1:9d: 37:1e:3d:74:5e:e6:66:b6:b6:27:c3:39:f5:98:41:df:da:f7: d4:71:b6:6e:43:93:f2:4a:f8:2b:d2:ec:db:1d:4c:b4:16:69: 6d:d6:10:83:67:82:e0:42:b2:be:1e:03:63:66:7b:8e:4b:2b: a4:f8:6a:8b:b5:ef:cf:90:2a:e8:e5:58:0c:b9:af:73:fa:96: de:ce:16:19:e4:fc:dd:f9:34:02:ba:15:18:b6:d2:04:92:d2: ac:93:a1:3c:22:21:02:8e:05:15:a2:e0:61:9b:57:da:f0:fa: 51:ed:0e:c3:cf:b8:b9:28:ba:23:20:4e:9d:40:0d:7e:05:fc: 8c:e3:82:87:2b:9c:ce:d1:7a:8b:1a:19:b8:f7:7c:ba:f5:70: b8:2e:ce:42 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyOUExMTAvBgNVBAUTKDg5NUU2QkNBN0E1QzM2RDlGMzA0NDcyRDBEMjcxM0E0 ODJDOURCMjUwHhcNMjUwNDIyMTg0NzA4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA3ZTQyYi1jZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzN9PpNC5cr2nKK8ewmMsNbI00wFjXfiuoRWnXUpQ97FccRlh1szIMZ4l0bNI pbaS6bRh+og/DXvTgANlmzg6QGNfuvshlnOVy9GhSRHakOdLo6wITS7G8a+G9NLe z6Up7Gn0CXEJ6pWe4w+0IBuSP8ndnt0OziNNgc3sBpo9CR7IhefNrMWQwyA/+zfH qpL1NTc6u4gkVRaA8bp5X7yj5Z8NX020aj2I+Tlytii6L2q9NHHH0x2WUnwdOpEK UIMnbyCa2KHoYA7fT/A0oGY1zf2JAyDt/3XlJLNff/0BeNtdmrkExEYNf2hKq2o/ G3gVevtBmItm6nieNkXEvsmNIQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOKQicP5 yqj8M++PJWbq2+Y1dmHpMB8GA1UdIwQYMBaAFIlea8p6XDbZ8wRHLQ0nE6SCydsl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI5QS8xRjIzRTA1ODA1 N0YxMUVBQTU1MTZCM0ZDNEY5QUUwMi9pVjVyeW5wY050bnpCRWN0RFNjVHBJTEoy eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWNXJ5bnBjTnRuekJFY3REU2NUcElMSjJ5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgyOUEvMUYyM0UwNTgwNTdGMTFFQUE1NTE2QjNGQzRGOUFFMDIvMzc3NTk0NTY2 MTc4MTFFQ0JCMDk1QTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnisowDwQCAAIwCQMHACABDfBSgDANBgkqhkiG9w0BAQsF AAOCAQEAkXxc2hUDEeCP/8tcfFmSbpnhxyrAiAKSqZFeOYJN/0cx7UQQOLe8Rmem rI1F0gXIzLDaMH1Isr119xOlgeucHdcehjcvZXpSicURL9RbLzz1uNxxFEJLv4TA 5u2shlfRsoncsOaT2NRZ+9GdNx49dF7mZra2J8M59ZhB39r31HG2bkOT8kr4K9Ls 2x1MtBZpbdYQg2eC4EKyvh4DY2Z7jksrpPhqi7Xvz5Aq6OVYDLmvc/qW3s4WGeT8 3fk0AroVGLbSBJLSrJOhPCIhAo4FFaLgYZtX2vD6Ue0Ow8+4uSi6IyBOnUANfgX8 jOOChyucztF6ixoZuPd8uvVwuC7OQg== -----END CERTIFICATE-----Generated at Sat Apr 26 08:10:20 2025 by rpki-client