$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/D0EAEA3EB85811EF96935B81C4F9AE02.roa File: D0EAEA3EB85811EF96935B81C4F9AE02.roa (raw, json) Hash identifier: Nbyc9rPbEVQJKGo8N91eHTaOUJwwDIylew69dKgtqpM= Subject key identifier: F7:4B:BE:02:5C:4B:82:A7:FE:93:94:F8:C4:BF:99:15:90:B0:F9:25 Certificate issuer: /CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Certificate serial: 06D3 Authority key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/D0EAEA3EB85811EF96935B81C4F9AE02.roa Signing time: Thu 06 Mar 2025 22:13:21 +0000 ROA not before: Thu 06 Mar 2025 22:13:21 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 153462 IP address blocks: 103.28.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1747 (0x6d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA594, serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Validity Not Before: Mar 6 22:13:21 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ca1e00-4f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:3f:91:4c:a4:e9:62:03:2e:6d:95:65:b5: 42:41:2a:2b:de:0e:48:4f:0e:7c:bb:08:f4:58:b4: 4d:4c:5c:8f:97:50:08:0f:93:70:4d:fe:e7:21:eb: e9:9f:f0:22:5f:ad:1c:7d:16:54:0e:67:7a:2a:57: 5b:a9:be:46:62:fe:90:26:e1:81:39:0b:c8:af:b7: 40:73:02:95:b6:15:ba:a0:69:e6:d6:b5:fd:39:d4: bc:6e:20:84:e4:c1:76:e4:8f:27:1b:36:ad:8c:e8: ab:11:e3:08:71:6e:89:bc:59:00:0f:6e:50:c9:86: b2:8d:02:0c:56:17:c1:d7:18:b0:b9:34:ff:55:b4: 9b:bb:61:6d:99:52:70:80:c6:ad:93:42:90:d1:ec: d4:ce:cd:ec:71:5a:da:21:f5:40:42:47:a9:61:55: eb:e6:a0:50:5a:93:bc:31:0a:2e:eb:8c:30:58:4b: 75:9a:b3:d2:36:8b:32:f2:2b:f0:91:43:64:87:d6: 38:e2:d7:78:25:6d:c8:2e:c6:0f:9a:d7:c8:ea:79: 24:86:dc:82:5b:9f:fa:37:7d:e1:96:71:7b:a2:f4: f3:1f:c6:a4:86:58:f2:2e:68:7b:9f:4b:f3:f8:83: 32:e3:12:0b:66:f1:ae:48:57:06:d6:c1:a7:c2:14: f7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4B:BE:02:5C:4B:82:A7:FE:93:94:F8:C4:BF:99:15:90:B0:F9:25 X509v3 Authority Key Identifier: keyid:DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/D0EAEA3EB85811EF96935B81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.28.76.0/22 Signature Algorithm: sha256WithRSAEncryption 20:22:fd:1a:82:b4:e2:5a:8a:81:be:5c:d2:e4:b0:0c:ea:01: 08:af:3c:ab:7c:6f:47:1e:56:d3:73:b0:68:c5:ec:e9:51:78: d6:99:ba:f4:ad:f5:48:39:e0:72:31:fc:cc:a6:e6:c4:05:14: d4:96:4a:38:df:8e:75:17:a5:10:6a:7d:8e:2e:52:e0:3d:bd: a5:60:99:ca:58:f2:02:48:10:8b:22:53:cc:0e:80:78:7c:25: 2c:e3:57:22:a6:a6:be:d5:63:d6:7e:df:b4:1b:42:5b:84:10: 4c:41:c1:39:30:2f:33:fc:b7:64:33:5b:45:44:30:6a:32:43: fa:84:2c:a7:83:76:72:0e:de:40:f2:d6:a9:b0:af:0b:22:f8: c8:8e:95:a5:31:80:1f:93:09:79:6a:c5:a7:cf:92:14:da:53: ca:c6:3f:7a:f2:96:6d:6e:3d:fc:63:af:cf:e8:3c:26:dd:64: ac:23:da:8f:47:06:a2:a3:b5:74:b4:23:f6:f8:b2:03:bf:52: 84:ad:9e:d4:63:fd:ac:6f:42:99:a4:30:7e:be:e6:9d:45:a5: 11:99:82:5e:f2:16:74:02:2e:bf:c9:b6:34:d2:68:fc:ac:fe: 58:7f:17:96:3d:9c:50:05:ef:0b:9d:4f:76:21:f9:14:b9:33: a7:69:d6:d0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1OTQxMTAvBgNVBAUTKERCMUY3Nzk4QzAwMTE3QjIwQzZGM0JDMzI5OTQ4MDJD RjIwOTQ4MzcwHhcNMjUwMzA2MjIxMzIxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NhMWUwMC00ZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ck/kUyk6WIDLm2VZbVCQSor3g5ITw58uwj0WLRNTFyPl1AID5NwTf7nIevp n/AiX60cfRZUDmd6Kldbqb5GYv6QJuGBOQvIr7dAcwKVthW6oGnm1rX9OdS8biCE 5MF25I8nGzatjOirEeMIcW6JvFkAD25QyYayjQIMVhfB1xiwuTT/VbSbu2FtmVJw gMatk0KQ0ezUzs3scVraIfVAQkepYVXr5qBQWpO8MQou64wwWEt1mrPSNosy8ivw kUNkh9Y44td4JW3ILsYPmtfI6nkkhtyCW5/6N33hlnF7ovTzH8akhljyLmh7n0vz +IMy4xILZvGuSFcG1sGnwhT3cwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPdLvgJc S4Kn/pOU+MS/mRWQsPklMB8GA1UdIwQYMBaAFNsfd5jAAReyDG87wymUgCzyCUg3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTU5NC81MjJCNkQ2RTU1 M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3SU1ienZES1pTQUxQSUpT RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4OTNtTUFCRjdJTWJ6dkRLWlNBTFBJSlNEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkE1OTQvNTIyQjZENkU1NTNDMTFFQjhGMDg1QzcxQzRGOUFFMDIvRDBFQUVBM0VC ODU4MTFFRjk2OTM1QjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnHEwwDQYJKoZIhvcNAQELBQADggEBACAi/RqCtOJaioG+ XNLksAzqAQivPKt8b0ceVtNzsGjF7OlReNaZuvSt9Ug54HIx/Mym5sQFFNSWSjjf jnUXpRBqfY4uUuA9vaVgmcpY8gJIEIsiU8wOgHh8JSzjVyKmpr7VY9Z+37QbQluE EExBwTkwLzP8t2QzW0VEMGoyQ/qELKeDdnIO3kDy1qmwrwsi+MiOlaUxgB+TCXlq xafPkhTaU8rGP3rylm1uPfxjr8/oPCbdZKwj2o9HBqKjtXS0I/b4sgO/UoStntRj /axvQpmkMH6+5p1FpRGZgl7yFnQCLr/JtjTSaPys/lh/F5Y9nFAF7wudT3Yh+RS5 M6dp1tA= -----END CERTIFICATE-----Generated at Sat Apr 26 08:06:32 2025 by rpki-client