$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/1042D952157F11F0BA309342C4F9AE02.roa File: 1042D952157F11F0BA309342C4F9AE02.roa (raw, json) Hash identifier: yui+zHagVlKqBtz9x/Tip9C5MuNKw1xwiJ1l2T37XAs= Subject key identifier: 0D:9B:EE:F1:13:5C:81:17:E9:D2:C2:34:CA:39:7B:6E:84:A3:E4:DE Certificate issuer: /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E Certificate serial: 0136 Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/1042D952157F11F0BA309342C4F9AE02.roa Signing time: Wed 09 Apr 2025 20:13:13 +0000 ROA not before: Wed 09 Apr 2025 20:13:13 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 134222 IP address blocks: 103.255.66.0/24 maxlen: 24 103.255.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E Validity Not Before: Apr 9 20:13:13 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67f6d4d8-fe42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:3c:1a:17:1a:b2:9c:74:24:bb:d5:89:ed: a3:5f:f8:16:ab:37:63:d4:f8:83:e5:29:46:0e:25: d7:58:02:d7:d1:64:61:4f:d7:16:3e:ad:f9:41:66: e7:31:28:67:29:76:2e:5e:cf:a3:41:ad:c1:ae:ff: 2c:1d:d5:2d:69:e1:42:f9:68:16:86:2f:06:be:4f: d3:a5:96:d0:9b:f6:5a:7f:47:16:dc:05:01:23:cc: b3:1d:49:96:61:73:74:a9:a0:68:a7:82:6d:3e:1e: 97:d0:98:b9:7e:eb:62:05:fa:6e:20:e3:c1:ff:2b: 7e:41:8b:9b:03:73:a4:88:bb:9f:2d:a5:c0:3f:87: 63:a2:80:ae:6b:86:88:99:12:3e:6d:9b:76:4a:7a: 48:3c:e1:f8:cb:8f:86:15:31:cf:5f:3e:a7:7e:bb: 20:c9:06:bb:f4:42:b8:b3:e0:bd:61:11:c7:9a:e6: fa:b6:b5:bb:e1:40:82:3e:76:fb:0f:64:e8:c1:5c: 3b:39:e6:5c:13:5f:44:3c:38:a0:85:55:7c:d4:26: 9e:41:75:5e:8e:87:16:dc:06:6d:78:81:22:44:ec: 2d:f3:59:8d:fb:0e:15:eb:59:6f:10:64:cb:5c:bb: 25:38:e5:b9:63:c7:06:6c:5a:dd:d7:2b:7e:44:49: 8f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9B:EE:F1:13:5C:81:17:E9:D2:C2:34:CA:39:7B:6E:84:A3:E4:DE X509v3 Authority Key Identifier: keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/1042D952157F11F0BA309342C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.255.66.0/23 Signature Algorithm: sha256WithRSAEncryption 78:8f:23:a8:04:c6:ee:3f:86:89:b6:a2:d8:58:67:bf:de:b1: ac:75:97:2e:e3:25:74:cd:be:cf:e4:f3:13:de:c3:68:12:7f: dd:28:1d:35:39:f8:b6:93:00:1b:be:92:68:58:0c:0d:d3:bb: 24:e1:17:85:af:88:90:41:62:8b:40:65:6f:0a:3c:00:4c:cb: 47:3a:47:86:12:19:b1:3a:0c:c1:23:47:86:65:b6:2f:f4:e4: 58:a6:c3:0d:a3:7c:b5:18:4b:e6:91:39:0e:d9:cb:b7:cb:75: ea:bb:c7:4f:5d:82:bc:27:f8:61:78:9d:78:03:a9:6d:bb:67: ed:c4:86:31:e0:f7:53:7b:d5:46:fb:45:a2:11:a8:29:ca:10: ef:30:95:fb:d7:23:32:79:ad:a8:0d:60:df:2c:80:e4:11:2f: 5d:a9:1d:ff:db:9e:79:43:dc:b8:5c:15:1b:3d:2d:21:40:a6: dc:18:c6:d9:8f:8c:e3:c2:4f:69:60:36:76:76:60:b7:0f:da: cd:54:e3:cb:8b:91:0c:b0:17:3b:92:f9:8a:b0:26:50:63:d4: 67:99:77:78:ad:5c:3c:29:4a:fc:cb:6d:a9:af:9b:df:c2:7d: 77:43:6d:c1:28:07:1c:a0:18:34:01:6c:ff:b4:1d:fd:d7:e6: 99:1b:79:68 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyOEQxMTAvBgNVBAUTKDFFNjAxM0FGMUY4NTY0RUFBMDA5N0RCMUYyMTY4NzRD NEI3ODY3MEUwHhcNMjUwNDA5MjAxMzEzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y2ZDRkOC1mZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1U8Ghcaspx0JLvVie2jX/gWqzdj1PiD5SlGDiXXWALX0WRhT9cWPq35QWbn MShnKXYuXs+jQa3Brv8sHdUtaeFC+WgWhi8Gvk/TpZbQm/Zaf0cW3AUBI8yzHUmW YXN0qaBop4JtPh6X0Ji5futiBfpuIOPB/yt+QYubA3OkiLufLaXAP4djooCua4aI mRI+bZt2SnpIPOH4y4+GFTHPXz6nfrsgyQa79EK4s+C9YRHHmub6trW74UCCPnb7 D2TowVw7OeZcE19EPDighVV81CaeQXVejocW3AZteIEiROwt81mN+w4V61lvEGTL XLslOOW5Y8cGbFrd1yt+REmP2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFA2b7vET XIEX6dLCNMo5e26Eo+TeMB8GA1UdIwQYMBaAFB5gE68fhWTqoAl9sfIWh0xLeGcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4RC82MUExREYyRTQw MzIxMUVFQkRBNTA5NEFDNEY5QUUwMi9IbUFUcngtRlpPcWdDWDJ4OGhhSFRFdDRa dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htQVRyeC1GWk9xZ0NYMng4aGFIVEV0NFp3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkyOEQvNjFBMURGMkU0MDMyMTFFRUJEQTUwOTRBQzRGOUFFMDIvMTA0MkQ5NTIx NTdGMTFGMEJBMzA5MzQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn/0IwDQYJKoZIhvcNAQELBQADggEBAHiPI6gExu4/hom2 othYZ7/esax1ly7jJXTNvs/k8xPew2gSf90oHTU5+LaTABu+kmhYDA3TuyThF4Wv iJBBYotAZW8KPABMy0c6R4YSGbE6DMEjR4Zlti/05Fimww2jfLUYS+aROQ7Zy7fL deq7x09dgrwn+GF4nXgDqW27Z+3EhjHg91N71Ub7RaIRqCnKEO8wlfvXIzJ5ragN YN8sgOQRL12pHf/bnnlD3LhcFRs9LSFAptwYxtmPjOPCT2lgNnZ2YLcP2s1U48uL kQywFzuS+YqwJlBj1GeZd3itXDwpSvzLbamvm9/CfXdDbcEoBxygGDQBbP+0Hf3X 5pkbeWg= -----END CERTIFICATE-----Generated at Sat Apr 26 10:04:17 2025 by rpki-client