$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/9AB64290908211EF9877C022C4F9AE02.roa File: 9AB64290908211EF9877C022C4F9AE02.roa (raw, json) Hash identifier: 53832RqqEhC0WAnEbw/uqzZOjibGBYS5qoQ5I8q+Q+o= Subject key identifier: 71:2D:91:D9:21:6A:7B:3E:EA:05:09:0A:34:6F:86:25:FD:88:0E:B8 Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 0186 Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/9AB64290908211EF9877C022C4F9AE02.roa Signing time: Fri 07 Mar 2025 02:48:58 +0000 ROA not before: Fri 07 Mar 2025 02:48:58 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 62390 IP address blocks: 103.163.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Mar 7 02:48:58 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ca5e9a-e8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:86:7c:11:64:67:75:16:f1:35:a2:bc:64:2a: fb:99:53:5d:f7:df:b2:7c:85:d0:f8:e4:db:72:94: 85:c7:d8:66:2a:7d:ca:6b:18:b9:c7:3c:8b:43:67: 53:08:43:60:5f:59:fa:89:d7:f1:06:f9:ea:3d:39: 57:0f:f2:a0:2b:ac:7b:e2:09:9e:88:c9:49:58:35: e2:c3:50:93:64:09:a6:0d:e0:ef:e9:5b:16:0c:6f: a9:0e:84:45:e2:c3:14:2e:ab:db:64:b7:c1:dc:fa: a2:c9:ea:74:57:c6:0e:e5:aa:04:b0:ba:56:1c:a7: 7e:46:bf:4f:50:9e:3a:5b:1c:86:12:cd:50:d4:8e: 0f:60:07:cd:07:4f:34:80:48:10:6f:d8:55:e5:be: 32:cf:cb:af:69:a6:6d:1d:39:56:3c:8a:04:b3:b0: f9:03:a2:d8:b2:26:e5:7e:8c:f9:ea:37:f6:d1:d8: 6f:c3:eb:bf:77:d7:6a:83:41:03:42:27:62:d1:f9: 9f:32:31:41:81:f9:11:94:18:1d:c3:8d:78:bd:cb: a0:24:b6:a6:15:f7:66:87:3a:d6:6a:3e:ae:6f:0d: c9:e9:98:9e:3d:cc:85:c1:a0:99:89:bc:37:ea:3b: 0d:1a:cf:e6:35:c1:75:15:91:6b:16:bb:a2:e6:53: 22:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2D:91:D9:21:6A:7B:3E:EA:05:09:0A:34:6F:86:25:FD:88:0E:B8 X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/9AB64290908211EF9877C022C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.209.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:30:23:7e:49:f5:de:be:4a:99:3c:8c:26:c7:2a:10:e6:ee: 69:91:98:35:28:f8:ff:a0:62:29:fd:b7:05:58:bd:31:2d:16: 6b:66:ef:97:93:fb:88:48:61:df:76:34:af:5e:04:bc:08:fc: 6f:ba:a6:70:56:ee:c6:bd:7d:07:6b:a7:58:64:ca:14:a4:73: 8c:50:61:33:2d:41:9e:35:3b:16:f1:9b:36:6a:77:f7:7d:02: 0a:65:9f:8a:64:7c:d7:37:55:4c:50:e3:04:05:2b:02:17:1a: f4:18:0f:eb:66:cc:42:48:87:d1:97:cb:94:9d:3c:7b:d5:38: 2f:0d:5a:92:7c:cd:d7:34:04:49:bd:ff:64:3e:2d:ac:ab:ef: 02:9f:7c:3a:1a:df:71:7d:14:d2:44:51:fb:54:9a:25:9c:fa: a0:51:ad:41:06:5f:e4:ec:8e:9f:f5:14:0e:6f:03:55:e3:b7: 3f:c0:a3:af:63:0c:e0:c3:23:15:cf:6a:18:3c:5a:c4:7f:dd: a1:5c:9c:0e:3a:1a:d2:1d:3a:22:b6:08:4a:e5:2e:da:8d:e2: 8d:79:bc:79:b6:21:c2:98:4e:7a:5b:dd:9f:ed:69:de:40:d4: 43:02:08:68:09:f1:7c:3b:2d:57:23:26:87:92:9a:1e:ab:12: ab:40:48:c9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjUwMzA3MDI0ODU4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2NhNWU5YS1lOGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YZ8EWRndRbxNaK8ZCr7mVNd99+yfIXQ+OTbcpSFx9hmKn3Kaxi5xzyLQ2dT CENgX1n6idfxBvnqPTlXD/KgK6x74gmeiMlJWDXiw1CTZAmmDeDv6VsWDG+pDoRF 4sMULqvbZLfB3Pqiyep0V8YO5aoEsLpWHKd+Rr9PUJ46WxyGEs1Q1I4PYAfNB080 gEgQb9hV5b4yz8uvaaZtHTlWPIoEs7D5A6LYsiblfoz56jf20dhvw+u/d9dqg0ED Qidi0fmfMjFBgfkRlBgdw414vcugJLamFfdmhzrWaj6ubw3J6ZiePcyFwaCZibw3 6jsNGs/mNcF1FZFrFrui5lMiDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHEtkdkh ans+6gUJCjRvhiX9iA64MB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkY0QTEvMEY1ODdBODhCMUNDMTFFRDg1RjI1QTNEQzRGOUFFMDIvOUFCNjQyOTA5 MDgyMTFFRjk4NzdDMDIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABno9EwDQYJKoZIhvcNAQELBQADggEBADswI35J9d6+Spk8 jCbHKhDm7mmRmDUo+P+gYin9twVYvTEtFmtm75eT+4hIYd92NK9eBLwI/G+6pnBW 7sa9fQdrp1hkyhSkc4xQYTMtQZ41OxbxmzZqd/d9Agpln4pkfNc3VUxQ4wQFKwIX GvQYD+tmzEJIh9GXy5SdPHvVOC8NWpJ8zdc0BEm9/2Q+Layr7wKffDoa33F9FNJE UftUmiWc+qBRrUEGX+Tsjp/1FA5vA1Xjtz/Ao69jDODDIxXPahg8WsR/3aFcnA46 GtIdOiK2CErlLtqN4o15vHm2IcKYTnpb3Z/tad5A1EMCCGgJ8Xw7LVcjJoeSmh6r EqtASMk= -----END CERTIFICATE-----Generated at Sat Apr 26 08:14:58 2025 by rpki-client