$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/7AAFF88446BA11ECB8463B6AC4F9AE02.roa File: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (raw, json) Hash identifier: 99qqJ/9zYRnGxyVxwuHlA7p9+YSeHXLL4eIfJ57Oqyk= Subject key identifier: A7:40:90:AD:5D:EC:46:71:07:46:12:8D:C7:E9:51:62:8F:06:A2:DA Certificate issuer: /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Certificate serial: 0461 Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/7AAFF88446BA11ECB8463B6AC4F9AE02.roa Signing time: Thu 12 Dec 2024 23:43:33 +0000 ROA not before: Thu 12 Dec 2024 23:43:33 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 9744 IP address blocks: 103.203.48.0/22 maxlen: 24 116.213.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE34, serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Validity Not Before: Dec 12 23:43:33 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=675b7525-706e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6a:24:8b:37:1d:93:ad:6a:37:42:7e:5d:c4: 86:d5:bd:76:c7:f8:72:04:1f:5a:87:1a:ef:93:f4: 5a:e0:d5:d2:c0:dd:79:a6:bd:d5:8a:06:36:de:82: a3:1e:17:1a:91:f3:08:82:0b:b6:24:f0:3c:fd:4c: 47:29:0c:33:45:cb:33:f7:7a:8d:6b:ae:3d:8b:dc: cd:b3:5c:86:48:b1:17:54:6b:5a:e3:40:c7:4e:f2: f9:0b:d4:17:42:9d:d0:da:94:5d:4f:9e:a5:31:85: de:48:82:5e:85:d2:98:d9:d0:da:f6:21:31:4c:e8: d8:be:b7:f8:47:1f:6d:92:f9:ee:e0:3a:db:b7:c7: bd:70:da:6f:ee:3a:60:fa:dc:20:ed:b8:84:bb:31: b4:1e:d1:5a:cd:cd:b6:e4:7e:c4:25:9d:34:ef:e3: 54:8c:9c:dc:28:19:74:1f:d9:5f:de:1d:bb:fc:a3: 94:e9:f7:1d:52:de:f9:3d:90:b1:a4:86:be:5d:ce: 90:74:67:cc:b0:9f:df:7d:ef:aa:03:92:ab:0b:5f: a0:df:08:82:9a:a3:e7:05:19:3e:fa:7b:1a:85:db: 15:53:63:d0:8e:16:0b:44:5b:fb:3a:b0:8e:db:6f: aa:ce:13:b2:a3:28:0e:95:18:4c:0f:d2:fc:ef:48: 1c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:40:90:AD:5D:EC:46:71:07:46:12:8D:C7:E9:51:62:8F:06:A2:DA X509v3 Authority Key Identifier: keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/7AAFF88446BA11ECB8463B6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.203.48.0/22 116.213.36.0/22 Signature Algorithm: sha256WithRSAEncryption 52:cc:eb:de:a3:12:9a:7b:f9:b5:0a:75:4e:b0:c0:5f:69:98: 54:58:00:5c:3f:3a:36:04:23:4f:b3:ce:63:79:7e:ac:37:97: 8b:18:82:c2:8e:9d:ed:f4:34:4c:5c:36:d4:5a:38:33:60:84: bf:a2:6f:8e:f2:61:61:74:b7:03:66:99:31:00:3a:97:df:b6: 01:93:46:db:e7:96:4f:16:4d:79:06:99:12:2a:b2:c6:0c:63: bb:01:2d:a8:76:c2:18:d8:fe:09:31:03:34:ef:c1:0e:fc:fc: a9:5b:02:ba:92:a9:09:de:3a:da:3c:1f:6d:35:03:f6:b2:b9: 99:18:90:db:2b:4a:16:45:9a:ca:7b:37:9c:17:f5:35:14:79: 68:3b:af:a5:de:66:f9:00:b8:b5:a2:2f:c6:9a:82:f8:9b:27: bb:00:4c:c1:97:3f:13:f0:84:e6:3a:c9:4f:b2:3f:73:ff:16: 57:b6:b2:7a:85:a2:06:54:08:23:9b:20:34:dd:01:29:c3:e9: d9:4e:c1:3b:f5:4b:8c:88:f2:e9:9d:93:87:23:68:dd:1b:4e: 3d:37:3a:f8:d1:47:13:c1:9e:8d:96:99:51:f4:54:c8:e6:73: 7b:6b:f1:b2:9a:ad:f9:4e:eb:93:e6:ec:09:26:35:79:08:13: d2:90:43:d7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMzQxMTAvBgNVBAUTKEVGNjY3OERDMENFQjM0MTQxQzY0QTE4QUIyNEJGODZD QUIyRkJEMzUwHhcNMjQxMjEyMjM0MzMzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzViNzUyNS03MDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGokizcdk61qN0J+XcSG1b12x/hyBB9ahxrvk/Ra4NXSwN15pr3VigY23oKj HhcakfMIggu2JPA8/UxHKQwzRcsz93qNa649i9zNs1yGSLEXVGta40DHTvL5C9QX Qp3Q2pRdT56lMYXeSIJehdKY2dDa9iExTOjYvrf4Rx9tkvnu4Drbt8e9cNpv7jpg +twg7biEuzG0HtFazc225H7EJZ007+NUjJzcKBl0H9lf3h27/KOU6fcdUt75PZCx pIa+Xc6QdGfMsJ/ffe+qA5KrC1+g3wiCmqPnBRk++nsahdsVU2PQjhYLRFv7OrCO 22+qzhOyoygOlRhMD9L870gccwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKdAkK1d 7EZxB0YSjcfpUWKPBqLaMB8GA1UdIwQYMBaAFO9meNwM6zQUHGShirJL+GyrL701 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUzNC80QkVGQkVDQTMw QzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5CUWNaS0dLc2t2NGJLc3Z2 VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyWjQzQXpyTkJRY1pLR0tza3Y0YktzdnZUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFFMzQvNEJFRkJFQ0EzMEMyMTFFQzkxQTE3MDFEQzRGOUFFMDIvN0FBRkY4ODQ0 NkJBMTFFQ0I4NDYzQjZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnyzADBAJ01SQwDQYJKoZIhvcNAQELBQADggEBAFLM696j Epp7+bUKdU6wwF9pmFRYAFw/OjYEI0+zzmN5fqw3l4sYgsKOne30NExcNtRaODNg hL+ib47yYWF0twNmmTEAOpfftgGTRtvnlk8WTXkGmRIqssYMY7sBLah2whjY/gkx AzTvwQ78/KlbArqSqQneOto8H201A/ayuZkYkNsrShZFmsp7N5wX9TUUeWg7r6Xe ZvkAuLWiL8aagvibJ7sATMGXPxPwhOY6yU+yP3P/Fle2snqFogZUCCObIDTdASnD 6dlOwTv1S4yI8umdk4cjaN0bTj03OvjRRxPBno2WmVH0VMjmc3tr8bKarflO65Pm 7AkmNXkIE9KQQ9c= -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:01 2025 by rpki-client