$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/B5D3426854F111ED85A7AC66C4F9AE02.roa File: B5D3426854F111ED85A7AC66C4F9AE02.roa (raw, json) Hash identifier: AlDXjMzrluQLs6V85p5i3jcfN6x00fmAUpJ1+5KxZR0= Subject key identifier: 00:A3:6D:0C:F0:A8:1B:37:C9:ED:73:4D:66:4B:B8:67:CE:33:E3:D5 Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Certificate serial: 0ACB Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/B5D3426854F111ED85A7AC66C4F9AE02.roa Signing time: Sun 20 Apr 2025 19:49:02 +0000 ROA not before: Sun 20 Apr 2025 19:49:02 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 140216 IP address blocks: 103.148.178.0/24 maxlen: 24 2001:df2:e180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2763 (0xacb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Validity Not Before: Apr 20 19:49:02 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68054fae-61fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:99:20:6a:64:16:80:aa:6b:97:95:bd:56:a0: a6:07:34:c7:47:b9:8c:b5:80:e2:9d:e0:40:1e:44: e1:75:a6:57:2e:63:83:33:d1:d6:01:e2:a0:85:18: 55:a4:8f:96:04:c0:28:c4:f9:58:98:b3:8f:7a:e2: 2c:03:8f:cf:08:7c:8a:93:de:df:c6:cb:f4:29:d5: 73:75:31:cb:68:56:f1:c7:69:90:36:e3:fe:99:1b: 4c:df:89:1c:53:99:f1:bf:df:46:0d:e0:2f:07:55: 59:3f:cd:85:ef:c5:28:da:e2:20:de:33:ce:e8:7d: ea:10:b7:8c:57:0d:3d:26:f3:19:1f:91:93:c1:67: 22:ee:05:d5:8d:0e:0c:ae:ee:02:98:c3:80:52:54: 97:b8:05:11:db:f4:e1:d9:ba:81:ff:ad:8f:4a:93: 6f:92:75:71:32:a1:a8:34:11:7a:4d:dd:28:68:3b: 38:0c:5b:fa:9b:38:e7:7f:88:12:c1:06:1a:45:49: 67:10:49:ce:5e:f0:e2:25:e5:bc:b2:fd:85:09:6f: b2:f4:ca:50:c6:66:38:e9:4f:b4:5b:97:cc:65:57: 92:26:95:fd:55:4d:db:c6:e4:39:ad:f3:67:88:ff: 76:2a:21:16:32:3a:f0:20:1f:0c:95:09:88:f0:31: c6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A3:6D:0C:F0:A8:1B:37:C9:ED:73:4D:66:4B:B8:67:CE:33:E3:D5 X509v3 Authority Key Identifier: keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/B5D3426854F111ED85A7AC66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.178.0/24 IPv6: 2001:df2:e180::/48 Signature Algorithm: sha256WithRSAEncryption 00:47:4c:a5:c0:00:f0:58:80:1a:ed:bc:9d:2b:db:a8:1a:39: fd:ce:a3:c1:c5:c9:52:4c:f9:82:3a:5a:57:cd:9a:d3:55:eb: 8d:d0:35:16:51:42:d6:dd:d2:35:46:83:a7:b7:a4:d1:05:2e: d5:7b:5c:cb:53:ea:97:2c:b0:3f:9b:23:e8:c6:51:96:a1:ee: c1:ef:f4:8f:c0:d1:1a:08:3a:54:f7:e5:8c:6b:9e:f8:39:e3: d3:4d:af:06:0c:7b:1b:3d:0d:98:1a:98:a0:df:5f:ef:24:8b: 99:1b:79:dd:fc:e9:10:d9:71:72:93:86:48:e5:ed:77:6f:a6: 7d:f6:88:1f:bd:6a:d5:13:c9:a9:5b:b7:90:f3:96:fb:12:00: 38:a3:33:0a:08:24:b3:56:9c:a4:6f:61:7d:81:ac:c7:d8:94: 31:bb:bc:0b:c0:35:c2:55:0e:13:b8:a5:5a:76:3e:4a:dd:a5: 29:b9:d1:44:49:1b:da:f6:7e:0b:97:57:1f:2f:1e:60:d4:e1: e6:61:2e:7f:6e:8d:48:2e:e8:d4:7b:a4:23:8a:fe:c2:bf:bd: 35:19:7a:1c:88:4b:67:91:6f:be:d5:ed:ec:f5:82:0a:dc:bd: c8:1c:12:8b:80:e9:e5:49:e2:9d:53:7c:39:ae:b4:20:29:76: 4d:60:5c:f8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMzYxMTAvBgNVBAUTKEVEODVFRjc3MzQzQzU1NDEyQjA2QTUzQzJBNEUyMDc2 N0FEMTJGMjUwHhcNMjUwNDIwMTk0OTAyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODA1NGZhZS02MWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpkgamQWgKprl5W9VqCmBzTHR7mMtYDineBAHkThdaZXLmODM9HWAeKghRhV pI+WBMAoxPlYmLOPeuIsA4/PCHyKk97fxsv0KdVzdTHLaFbxx2mQNuP+mRtM34kc U5nxv99GDeAvB1VZP82F78Uo2uIg3jPO6H3qELeMVw09JvMZH5GTwWci7gXVjQ4M ru4CmMOAUlSXuAUR2/Th2bqB/62PSpNvknVxMqGoNBF6Td0oaDs4DFv6mzjnf4gS wQYaRUlnEEnOXvDiJeW8sv2FCW+y9MpQxmY46U+0W5fMZVeSJpX9VU3bxuQ5rfNn iP92KiEWMjrwIB8MlQmI8DHGCwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFACjbQzw qBs3ye1zTWZLuGfOM+PVMB8GA1UdIwQYMBaAFO2F73c0PFVBKwalPCpOIHZ60S8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIzNi9ENDI4Nzk2RTUz MjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZVRXJCcVU4S2s0Z2RuclJM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZWHZkelE4VlVFckJxVThLazRnZG5yUkx5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzgyMzYvRDQyODc5NkU1MzI3MTFFQThDNTdFMzdBQzRGOUFFMDIvQjVEMzQyNjg1 NEYxMTFFRDg1QTdBQzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnlLIwDwQCAAIwCQMHACABDfLhgDANBgkqhkiG9w0BAQsF AAOCAQEAAEdMpcAA8FiAGu28nSvbqBo5/c6jwcXJUkz5gjpaV82a01XrjdA1FlFC 1t3SNUaDp7ek0QUu1Xtcy1PqlyywP5sj6MZRlqHuwe/0j8DRGgg6VPfljGue+Dnj 002vBgx7Gz0NmBqYoN9f7ySLmRt53fzpENlxcpOGSOXtd2+mffaIH71q1RPJqVu3 kPOW+xIAOKMzCggks1acpG9hfYGsx9iUMbu8C8A1wlUOE7ilWnY+St2lKbnRREkb 2vZ+C5dXHy8eYNTh5mEuf26NSC7o1HukI4r+wr+9NRl6HIhLZ5FvvtXt7PWCCty9 yBwSi4Dp5UninVN8Oa60ICl2TWBc+A== -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:26 2025 by rpki-client