$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa File: F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa (raw, json) Hash identifier: h0Bd3mrZsqytRvgmEj0DxUL66b35/lpEECIlTQlJZwE= Subject key identifier: A7:6A:16:AA:B5:99:F6:58:D6:80:80:84:1C:8A:A2:ED:23:E9:86:EA Certificate issuer: /CN=A91BEC31/serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Certificate serial: 02 Authority key identifier: 67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa Signing time: Thu 06 Feb 2025 16:11:08 +0000 ROA not before: Thu 06 Feb 2025 16:11:08 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 151317 IP address blocks: 103.250.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEC31, serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Validity Not Before: Feb 6 16:11:08 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67a4df1b-70d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:be:a3:19:55:51:a2:a5:88:dd:08:af:2f:2e: d0:ed:5f:94:1a:bd:d2:3d:bb:1a:c2:93:7c:fc:28: 83:e0:ef:59:ba:70:56:a7:80:18:44:de:b9:d5:fd: 66:d8:d5:ea:c3:ba:f2:1f:8d:95:e2:c3:6e:69:c9: ff:01:58:32:60:8c:90:01:14:91:ac:7d:f1:e7:bf: 12:53:ea:ec:f9:47:b0:83:94:de:70:46:0e:59:09: 5b:a6:e0:12:ce:a0:b8:84:ba:e8:99:d7:3f:ec:68: 79:7f:5a:5d:3c:c6:24:4d:b9:dd:3d:82:b0:a2:2b: 8e:c5:1e:42:47:e2:fb:58:37:1c:bf:2e:37:c0:e4: 3f:b7:ec:5e:ca:52:a4:56:7b:00:e2:74:74:d4:12: f2:30:1e:63:20:78:ad:83:7c:28:d2:08:f6:62:0e: 3d:1f:de:bc:61:bb:28:80:6d:43:e0:75:c2:71:4b: 96:97:4b:f2:55:d8:13:b6:ce:d9:dd:b6:fd:aa:69: 96:8f:76:6c:94:14:d4:2f:28:6a:21:e3:e0:f5:b1: 38:fc:e9:6e:c0:d1:ce:4a:29:89:e5:cd:a9:6d:b6: 93:1f:fe:fe:ea:1e:e6:8c:f9:02:49:ca:05:90:59: 30:0f:77:5e:15:d2:9b:2c:c5:47:5c:bc:18:64:16: ff:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6A:16:AA:B5:99:F6:58:D6:80:80:84:1C:8A:A2:ED:23:E9:86:EA X509v3 Authority Key Identifier: keyid:67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.250.62.0/24 Signature Algorithm: sha256WithRSAEncryption be:a4:ca:ec:87:15:a6:52:21:34:a9:4d:c4:fa:31:e8:c0:bf: c4:22:e9:91:eb:d0:f6:0d:a6:95:36:f6:26:16:2a:75:4f:5a: 26:11:45:f7:7a:31:71:99:af:6b:c4:9b:de:fe:72:d6:12:48: f5:14:71:17:03:81:59:fa:50:a2:e4:7a:0b:84:99:97:79:17: 25:85:12:33:3e:db:f8:63:8b:f8:00:22:84:34:33:c4:9c:05: 26:05:de:1a:3a:01:63:5f:43:1a:92:28:d7:ed:be:3f:3a:66: 8b:6d:54:75:2a:50:47:0e:f3:90:b4:97:1b:85:bc:49:9f:56: 4d:ab:bd:1f:bc:d6:93:6c:cf:22:ab:90:42:f7:ee:1d:34:fa: f3:1b:8a:71:f8:08:40:71:eb:12:cf:0e:62:7e:e2:f0:dd:0c: fb:ac:03:6c:e4:ca:8a:cf:a0:fa:ce:e6:57:19:2d:89:49:21: da:d5:fa:b6:77:3b:17:36:a7:3c:c9:f0:4b:8e:2f:cf:21:23: 88:ff:26:6f:e9:8d:93:10:b2:91:59:50:b4:af:75:b1:dd:e6: 26:5c:b1:cb:6b:c6:ef:c7:6a:00:d2:b4:b7:d4:7f:5b:2a:71: 3f:be:35:0a:19:65:10:98:41:7d:fe:cb:03:33:8e:3a:9f:0e: 9d:5c:d8:ed -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUMzMTExMC8GA1UEBRMoNjdENzlDM0IxMTE2RDM2RkI5RTE3MUQ2NjU4RjhGNDNC NTNDNzJGQTAeFw0yNTAyMDYxNjExMDhaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YTRkZjFiLTcwZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwvqMZVVGipYjdCK8vLtDtX5QavdI9uxrCk3z8KIPg71m6cFangBhE3rnV/WbY 1erDuvIfjZXiw25pyf8BWDJgjJABFJGsffHnvxJT6uz5R7CDlN5wRg5ZCVum4BLO oLiEuuiZ1z/saHl/Wl08xiRNud09grCiK47FHkJH4vtYNxy/LjfA5D+37F7KUqRW ewDidHTUEvIwHmMgeK2DfCjSCPZiDj0f3rxhuyiAbUPgdcJxS5aXS/JV2BO2ztnd tv2qaZaPdmyUFNQvKGoh4+D1sTj86W7A0c5KKYnlzalttpMf/v7qHuaM+QJJygWQ WTAPd14V0pssxUdcvBhkFv+ZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUp2oWqrWZ 9ljWgICEHIqi7SPphuowHwYDVR0jBBgwFoAUZ9ecOxEW02+54XHWZY+PQ7U8cvow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQzMxLzNDRjUzNjIyRTRB NDExRUZCMjc2RjI1REM0RjlBRTAyL1o5ZWNPeEVXMDItNTRYSFdaWS1QUTdVOGN2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjllY094RVcwMi01NFhIV1pZLVBRN1U4Y3ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUMzMS8zQ0Y1MzYyMkU0QTQxMUVGQjI3NkYyNURDNEY5QUUwMi9GOEIwQkZFRUU0 QTQxMUVGOEMyRDA0NjBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGf6PjANBgkqhkiG9w0BAQsFAAOCAQEAvqTK7IcVplIhNKlN xPox6MC/xCLpkevQ9g2mlTb2JhYqdU9aJhFF93oxcZmva8Sb3v5y1hJI9RRxFwOB WfpQouR6C4SZl3kXJYUSMz7b+GOL+AAihDQzxJwFJgXeGjoBY19DGpIo1+2+Pzpm i21UdSpQRw7zkLSXG4W8SZ9WTau9H7zWk2zPIquQQvfuHTT68xuKcfgIQHHrEs8O Yn7i8N0M+6wDbOTKis+g+s7mVxktiUkh2tX6tnc7FzanPMnwS44vzyEjiP8mb+mN kxCykVlQtK91sd3mJlyxy2vG78dqANK0t9R/WypxP741ChllEJhBff7LAzOOOp8O nVzY7Q== -----END CERTIFICATE-----Generated at Sat Apr 26 08:00:20 2025 by rpki-client