$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/B0245792094611F089247D2CC4F9AE02.roa File: B0245792094611F089247D2CC4F9AE02.roa (raw, json) Hash identifier: WzcjSkbp1L3UZdNgdiavQerl/BKgE6QHhDZV6MZpLAY= Subject key identifier: 35:3E:A5:C3:A3:6C:C8:96:DF:2B:44:0D:7E:66:58:FF:DB:8F:F4:67 Certificate issuer: /CN=A91B9C52/serialNumber=CBC14D405778462F9C5D91583A5C71836F23C19D Certificate serial: 09 Authority key identifier: CB:C1:4D:40:57:78:46:2F:9C:5D:91:58:3A:5C:71:83:6F:23:C1:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8FNQFd4Ri-cXZFYOlxxg28jwZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/B0245792094611F089247D2CC4F9AE02.roa Signing time: Tue 25 Mar 2025 06:59:26 +0000 ROA not before: Tue 25 Mar 2025 06:59:26 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 136969 IP address blocks: 103.151.236.0/24 maxlen: 24 103.151.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/y8FNQFd4Ri-cXZFYOlxxg28jwZ0.crl rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/y8FNQFd4Ri-cXZFYOlxxg28jwZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8FNQFd4Ri-cXZFYOlxxg28jwZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9C52, serialNumber=CBC14D405778462F9C5D91583A5C71836F23C19D Validity Not Before: Mar 25 06:59:26 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67e2544d-77e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:df:67:3a:cd:c0:c6:2b:cb:f3:be:fd:20:1a: 80:b8:1c:2e:cf:03:a2:3d:43:c5:25:e9:4e:ad:2e: eb:a3:51:6a:8d:74:78:46:41:c5:87:57:7b:1e:17: 35:d6:8d:ee:fb:d6:f4:ca:6a:0c:42:e4:8d:c7:b7: 8a:1b:3f:ff:2c:69:c2:0e:a3:ea:0b:fe:2a:01:ba: 93:b4:44:0f:2b:81:8d:79:62:ec:73:86:03:b0:5d: a1:55:28:d5:59:08:5a:76:89:f3:17:42:0e:7b:8e: dc:51:81:c5:2a:33:55:a8:37:bc:35:7c:83:54:d3: cc:fb:40:ab:85:f5:f0:0f:76:fb:e1:30:fb:f2:65: b1:2e:ac:0b:4a:e8:93:a9:c7:85:dd:8b:82:4a:4b: 21:30:9a:fc:6d:5a:00:e1:78:79:02:27:4e:c5:3c: 63:d2:26:8c:46:45:ca:a8:f2:34:f3:3c:f8:7f:b9: c7:cf:82:ed:55:cc:6a:a4:bf:56:15:e2:6b:60:90: 74:a4:4f:19:11:48:2a:76:66:f7:30:1f:e3:1c:61: b8:d4:5b:6e:1d:3e:80:45:92:bb:c1:25:d5:d1:e7: 98:c8:ad:29:9b:bb:10:83:78:35:bd:56:82:7b:78: 61:2c:c6:c1:1e:08:c5:90:01:50:f6:e4:90:84:9a: ef:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3E:A5:C3:A3:6C:C8:96:DF:2B:44:0D:7E:66:58:FF:DB:8F:F4:67 X509v3 Authority Key Identifier: keyid:CB:C1:4D:40:57:78:46:2F:9C:5D:91:58:3A:5C:71:83:6F:23:C1:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/y8FNQFd4Ri-cXZFYOlxxg28jwZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8FNQFd4Ri-cXZFYOlxxg28jwZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/B0245792094611F089247D2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.236.0/23 Signature Algorithm: sha256WithRSAEncryption 84:ca:1a:6e:02:2b:12:8a:ba:b0:a9:bf:a7:fa:25:0d:56:84: 54:10:19:b4:81:90:f7:1b:11:42:fa:bd:21:1f:b3:4b:40:38: f8:62:7a:ca:59:f9:dc:e5:a2:ab:d4:f2:7e:e3:56:82:90:59: 26:5c:3d:c7:88:2f:74:f4:f0:62:fd:f0:79:2a:ca:d6:11:2b: 50:1c:b7:1a:03:1d:c0:3d:85:0d:60:7f:1a:e2:cb:2b:fe:a9: b0:d1:e7:c8:36:37:30:ea:5b:56:13:93:90:04:e6:b4:da:81: 8c:6d:4e:e3:cf:20:d9:4a:4e:d7:44:04:b2:c3:ae:ad:8b:0a: ed:62:19:df:ae:27:52:48:dd:03:01:5e:51:2d:24:22:3a:91: e0:f5:a1:1a:01:15:ed:77:9b:c4:b9:66:93:dd:79:c5:ba:e2: 36:5a:f9:c6:f1:16:f0:40:a9:d8:f2:3d:32:39:32:86:46:bf: 8b:37:11:98:bf:33:1e:fc:3d:99:8d:c6:cf:b8:6a:89:dc:f8: 60:b4:b2:33:d2:17:89:fc:ee:66:4a:26:dc:be:41:49:9a:54: 1a:55:bd:0b:69:8f:27:36:05:35:58:9a:2a:da:09:27:d8:3a: da:9f:17:98:72:39:9a:1c:b9:9e:bb:e2:0a:b1:49:dc:f3:2b: d1:9f:01:bd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OUM1MjExMC8GA1UEBRMoQ0JDMTRENDA1Nzc4NDYyRjlDNUQ5MTU4M0E1QzcxODM2 RjIzQzE5RDAeFw0yNTAzMjUwNjU5MjZaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZTI1NDRkLTc3ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG32c6zcDGK8vzvv0gGoC4HC7PA6I9Q8Ul6U6tLuujUWqNdHhGQcWHV3seFzXW je771vTKagxC5I3Ht4obP/8sacIOo+oL/ioBupO0RA8rgY15YuxzhgOwXaFVKNVZ CFp2ifMXQg57jtxRgcUqM1WoN7w1fINU08z7QKuF9fAPdvvhMPvyZbEurAtK6JOp x4Xdi4JKSyEwmvxtWgDheHkCJ07FPGPSJoxGRcqo8jTzPPh/ucfPgu1VzGqkv1YV 4mtgkHSkTxkRSCp2ZvcwH+McYbjUW24dPoBFkrvBJdXR55jIrSmbuxCDeDW9VoJ7 eGEsxsEeCMWQAVD25JCEmu/9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUNT6lw6Ns yJbfK0QNfmZY/9uP9GcwHwYDVR0jBBgwFoAUy8FNQFd4Ri+cXZFYOlxxg28jwZ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5QzUyLzZCNzE1MTYyMEQ3 RTExRUM5QzBCNUY3NUM0RjlBRTAyL3k4Rk5RRmQ0UmktY1haRllPbHh4ZzI4anda MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveThGTlFGZDRSaS1jWFpGWU9seHhnMjhqd1owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUM1Mi82QjcxNTE2MjBEN0UxMUVDOUMwQjVGNzVDNEY5QUUwMi9CMDI0NTc5MjA5 NDYxMUYwODkyNDdEMkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeX7DANBgkqhkiG9w0BAQsFAAOCAQEAhMoabgIrEoq6sKm/ p/olDVaEVBAZtIGQ9xsRQvq9IR+zS0A4+GJ6yln53OWiq9TyfuNWgpBZJlw9x4gv dPTwYv3weSrK1hErUBy3GgMdwD2FDWB/GuLLK/6psNHnyDY3MOpbVhOTkATmtNqB jG1O488g2UpO10QEssOurYsK7WIZ364nUkjdAwFeUS0kIjqR4PWhGgEV7XebxLlm k915xbriNlr5xvEW8ECp2PI9Mjkyhka/izcRmL8zHvw9mY3Gz7hqidz4YLSyM9IX ifzuZkom3L5BSZpUGlW9C2mPJzYFNViaKtoJJ9g62p8XmHI5mhy5nrviCrFJ3PMr 0Z8BvQ== -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:50 2025 by rpki-client