$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/B3250BC6307B11E989188B3BC4F9AE02.roa File: B3250BC6307B11E989188B3BC4F9AE02.roa (raw, json) Hash identifier: i5f3IsLQcqkFQbLcTMdHVFZRfy5na+MUmyuuokwDYXo= Subject key identifier: 29:8A:59:86:73:00:E4:DB:BE:45:CD:CB:C0:ED:88:AC:89:04:B5:E2 Certificate issuer: /CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Certificate serial: 108F Authority key identifier: 78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/B3250BC6307B11E989188B3BC4F9AE02.roa Signing time: Tue 04 Mar 2025 18:05:28 +0000 ROA not before: Tue 04 Mar 2025 18:05:28 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136260 IP address blocks: 103.85.134.0/24 maxlen: 24 103.141.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4239 (0x108f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CE9, serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Validity Not Before: Mar 4 18:05:28 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c740e8-e4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a3:8e:c3:8c:a0:7b:ea:6c:87:8e:c0:29:58: 22:a6:79:dc:18:16:c5:16:5d:86:6e:32:ca:9b:d0: 93:9f:5e:a4:71:94:09:0f:f6:9d:5b:ad:f0:d3:0b: 3e:db:5c:aa:19:fe:8e:bf:48:97:c6:6c:35:dc:f3: e1:13:b1:75:42:50:40:96:d0:d0:cc:ed:f3:7e:4c: 0c:40:40:35:64:53:4d:ec:ea:f0:87:d8:ad:77:ef: e9:04:79:28:ed:42:46:8b:88:0b:74:73:44:68:32: aa:5a:6a:8a:08:c3:db:42:d4:37:a7:3a:01:dd:9c: 59:ad:bc:75:08:fb:a4:79:82:54:47:0c:88:1f:30: a4:dc:16:1b:c7:15:e8:a9:ec:43:b7:f6:c1:20:a0: 24:72:d3:1c:7c:79:76:41:72:ed:e3:c3:36:e3:81: 14:98:e3:c8:7d:99:d3:f0:f2:46:90:0f:e3:a8:38: 5a:07:35:5b:4d:1d:8c:ef:79:da:2f:26:d8:78:02: f2:14:33:f8:cc:4e:65:2b:a3:e0:74:86:9b:bf:8b: 36:70:12:7c:30:04:0e:a3:c9:c6:18:50:13:cd:27: d1:ef:7f:6f:0a:17:01:a9:e5:fd:4e:8c:6c:16:60: 54:38:71:f0:23:73:8d:47:66:51:d7:bd:7d:74:4e: 16:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8A:59:86:73:00:E4:DB:BE:45:CD:CB:C0:ED:88:AC:89:04:B5:E2 X509v3 Authority Key Identifier: keyid:78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/B3250BC6307B11E989188B3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.134.0/24 103.141.29.0/24 Signature Algorithm: sha256WithRSAEncryption 91:16:3f:f8:4a:d4:9b:dd:0c:cd:a9:d6:e5:3e:d3:63:94:e4: 68:84:b2:b0:21:75:b6:f9:cc:db:b1:13:eb:3a:4a:a6:ec:a5: 00:4d:5b:48:59:eb:e1:ed:14:cd:7a:cb:48:1a:f8:c8:b5:62: dc:81:1b:bb:c8:7f:6f:45:13:9e:a7:4c:13:04:d3:3a:89:10: e7:72:0e:ea:f5:8a:54:07:f1:db:d9:74:ab:4d:32:ad:c7:ff: 3e:4d:ff:c4:96:2f:c2:8e:b1:81:56:d2:93:43:ae:94:64:02: 52:ac:ca:2c:c5:4a:f6:29:b6:8d:2d:66:71:d7:da:20:ef:9f: 30:97:e3:20:8e:40:69:01:2d:a9:d3:7d:69:84:c7:16:ec:6f: cd:11:15:55:e8:2c:8e:e3:54:b6:53:cd:24:35:76:41:04:38: 41:db:06:ee:65:f3:e2:df:f6:bf:1c:bb:b3:e2:4e:1e:5e:83: 5b:77:32:dd:b2:08:ce:6f:97:ba:9a:f6:e9:3d:1d:7f:d9:f9: 50:c1:01:db:4e:0d:66:22:c8:2f:a2:c0:9a:fe:58:14:e2:92: 19:d6:ac:b4:32:17:a3:6b:2b:28:e1:29:05:a5:71:c8:80:32: 90:2e:d6:db:78:c8:e4:5f:81:cb:ab:18:09:f9:1f:81:14:8b: 2a:e4:12:7b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICEI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDRTkxMTAvBgNVBAUTKDc4NUFCMEIyMkRDRTVBMTI2NjUwMEMxMDY2QjRGNkIw NUY3NUNBQzAwHhcNMjUwMzA0MTgwNTI4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3NDBlOC1lNGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06OOw4yge+psh47AKVgipnncGBbFFl2GbjLKm9CTn16kcZQJD/adW63w0ws+ 21yqGf6Ov0iXxmw13PPhE7F1QlBAltDQzO3zfkwMQEA1ZFNN7Orwh9itd+/pBHko 7UJGi4gLdHNEaDKqWmqKCMPbQtQ3pzoB3ZxZrbx1CPukeYJURwyIHzCk3BYbxxXo qexDt/bBIKAkctMcfHl2QXLt48M244EUmOPIfZnT8PJGkA/jqDhaBzVbTR2M73na LybYeALyFDP4zE5lK6PgdIabv4s2cBJ8MAQOo8nGGFATzSfR739vChcBqeX9Toxs FmBUOHHwI3ONR2ZR1719dE4WVQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCmKWYZz AOTbvkXNy8DtiKyJBLXiMB8GA1UdIwQYMBaAFHhasLItzloSZlAMEGa09rBfdcrA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNFOS84NzEwNkQzRTI3 MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1doSm1VQXdRWnJUMnNGOTF5 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGcXdzaTNPV2hKbVVBd1FaclQyc0Y5MXlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzJDRTkvODcxMDZEM0UyNzAwMTFFOUE3N0I2RTJDQzRGOUFFMDIvQjMyNTBCQzYz MDdCMTFFOTg5MTg4QjNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnVYYDBABnjR0wDQYJKoZIhvcNAQELBQADggEBAJEWP/hK 1JvdDM2p1uU+02OU5GiEsrAhdbb5zNuxE+s6SqbspQBNW0hZ6+HtFM16y0ga+Mi1 YtyBG7vIf29FE56nTBME0zqJEOdyDur1ilQH8dvZdKtNMq3H/z5N/8SWL8KOsYFW 0pNDrpRkAlKsyizFSvYpto0tZnHX2iDvnzCX4yCOQGkBLanTfWmExxbsb80RFVXo LI7jVLZTzSQ1dkEEOEHbBu5l8+Lf9r8cu7PiTh5eg1t3Mt2yCM5vl7qa9uk9HX/Z +VDBAdtODWYiyC+iwJr+WBTikhnWrLQyF6NrKyjhKQWlcciAMpAu1tt4yORfgcur GAn5H4EUiyrkEns= -----END CERTIFICATE-----Generated at Sat Apr 26 05:57:28 2025 by rpki-client