$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/B35788BC2E6111E7B9FA6971C4F9AE02.roa File: B35788BC2E6111E7B9FA6971C4F9AE02.roa (raw, json) Hash identifier: hXTTzP3kFcpIZ/DM7zay0NC5KhlwF/RDBBTbxArfKKA= Subject key identifier: 26:36:3F:2A:7F:48:9D:36:2D:63:AD:8C:DE:D5:06:34:38:C8:B7:EB Certificate issuer: /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD Certificate serial: 1AEB Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/B35788BC2E6111E7B9FA6971C4F9AE02.roa Signing time: Mon 10 Feb 2025 16:33:54 +0000 ROA not before: Mon 10 Feb 2025 16:33:54 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 136151 IP address blocks: 103.81.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6891 (0x1aeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD Validity Not Before: Feb 10 16:33:54 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67aa2a72-0d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:78:b6:8b:5c:2a:b2:a0:e6:fb:f3:40:49: 28:73:6c:36:ab:eb:07:6e:69:c2:5c:74:0c:15:d4: c0:e4:56:5f:f2:56:80:1b:f5:3a:12:c4:b9:59:2f: 4e:41:cf:00:b6:75:60:55:85:68:44:e9:43:c7:68: ec:1a:1e:75:5b:ec:1b:81:99:c6:de:46:58:b7:ab: 8c:6a:c4:a7:dd:03:1c:18:77:df:15:4e:dd:32:09: b4:84:1a:ea:0e:0a:5d:74:d6:47:20:52:43:2b:09: 2d:ed:20:ce:bf:7c:d8:b4:87:50:6e:4f:a4:48:bf: 3b:e5:0f:6b:c9:6f:c5:b2:98:fd:8a:95:c7:37:a2: ff:ce:cd:4c:1b:50:8f:db:a1:da:91:cf:ab:ca:70: a5:4e:c5:f8:86:10:60:96:24:80:8f:48:54:58:6f: af:37:f0:45:ed:46:61:94:9c:12:1d:2b:1a:58:2f: 8d:15:f1:ce:2c:5f:c3:fb:13:14:5b:4e:66:06:69: ac:d4:45:17:1b:63:64:f4:42:ae:61:c9:84:41:06: e9:d6:58:34:19:4f:24:b6:6a:b8:d9:1d:57:65:70: 51:b8:9e:1b:cd:90:60:fb:1a:45:ce:d4:54:30:e3: 8c:6a:4c:b9:84:e1:f7:21:2b:2a:bc:71:73:13:ff: fe:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:36:3F:2A:7F:48:9D:36:2D:63:AD:8C:DE:D5:06:34:38:C8:B7:EB X509v3 Authority Key Identifier: keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/B35788BC2E6111E7B9FA6971C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.81.207.0/24 Signature Algorithm: sha256WithRSAEncryption b8:52:9e:df:5a:e3:fa:c6:50:10:24:d1:9a:e3:d7:6d:05:ef: 79:12:d9:6a:a9:99:bc:d8:47:e3:c2:8e:bb:07:9a:c0:75:e8: 0b:86:15:19:22:60:b7:9f:ee:72:92:a6:db:df:a1:71:49:25: 6f:32:e8:d6:72:6e:4a:ea:1f:b1:1c:3d:86:9c:db:f8:d1:eb: c5:df:be:44:eb:4e:36:5d:d4:a0:52:71:54:b3:86:82:33:90: bd:f6:be:ae:f6:df:de:65:e0:5a:10:a8:e2:ee:a0:e8:6a:e6: 9d:d0:ff:84:eb:92:3e:1c:ac:3c:3b:39:cb:e8:95:7e:2a:b0: 80:ab:6e:99:76:04:04:6a:e9:f7:48:45:90:18:e6:13:c3:93: 03:37:02:13:1a:f2:bf:25:91:ec:af:f0:d4:0a:30:aa:81:9b: 5f:ff:40:84:d7:21:ee:4c:9c:92:19:05:e7:0c:94:34:d6:47: ab:10:53:24:de:9b:58:de:59:fa:ac:2f:1a:4b:66:e2:21:1d: 93:47:af:e5:19:15:43:11:90:6e:2c:5a:1e:ee:8e:2e:d8:b0: 1c:24:00:64:4a:9b:12:fd:8d:dc:51:00:ed:75:82:88:d8:a2: a6:27:61:c7:05:bb:14:71:28:75:a3:ee:84:bc:73:86:ee:13: c7:69:d6:ec -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMwODMxMTAvBgNVBAUTKEI3QUE1MzczODMyMTRENjQ4RTYzM0JDQzQyMEQzQkQ2 ODYxNjc4RkQwHhcNMjUwMjEwMTYzMzU0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FhMmE3Mi0wZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTx4totcKrKg5vvzQEkoc2w2q+sHbmnCXHQMFdTA5FZf8laAG/U6EsS5WS9O Qc8AtnVgVYVoROlDx2jsGh51W+wbgZnG3kZYt6uMasSn3QMcGHffFU7dMgm0hBrq DgpddNZHIFJDKwkt7SDOv3zYtIdQbk+kSL875Q9ryW/Fspj9ipXHN6L/zs1MG1CP 26Hakc+rynClTsX4hhBgliSAj0hUWG+vN/BF7UZhlJwSHSsaWC+NFfHOLF/D+xMU W05mBmms1EUXG2Nk9EKuYcmEQQbp1lg0GU8ktmq42R1XZXBRuJ4bzZBg+xpFztRU MOOMaky5hOH3ISsqvHFzE//+NwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCY2Pyp/ SJ02LWOtjN7VBjQ4yLfrMB8GA1UdIwQYMBaAFLeqU3ODIU1kjmM7zEINO9aGFnj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA4My9BMENGMDU5QTJF NjAxMUU3Qjc0NzNFNzBDNEY5QUUwMi90NnBUYzRNaFRXU09ZenZNUWcwNzFvWVdl UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q2cFRjNE1oVFdTT1l6dk1RZzA3MW9ZV2VQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzMwODMvQTBDRjA1OUEyRTYwMTFFN0I3NDczRTcwQzRGOUFFMDIvQjM1Nzg4QkMy RTYxMTFFN0I5RkE2OTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnUc8wDQYJKoZIhvcNAQELBQADggEBALhSnt9a4/rGUBAk 0Zrj120F73kS2WqpmbzYR+PCjrsHmsB16AuGFRkiYLef7nKSptvfoXFJJW8y6NZy bkrqH7EcPYac2/jR68XfvkTrTjZd1KBScVSzhoIzkL32vq72395l4FoQqOLuoOhq 5p3Q/4Trkj4crDw7OcvolX4qsICrbpl2BARq6fdIRZAY5hPDkwM3AhMa8r8lkeyv 8NQKMKqBm1//QITXIe5MnJIZBecMlDTWR6sQUyTem1jeWfqsLxpLZuIhHZNHr+UZ FUMRkG4sWh7uji7YsBwkAGRKmxL9jdxRAO11gojYoqYnYccFuxRxKHWj7oS8c4bu E8dp1uw= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:07 2025 by rpki-client