$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/DF5D49F6985611ECBE7ED328C4F9AE02.roa File: DF5D49F6985611ECBE7ED328C4F9AE02.roa (raw, json) Hash identifier: oySlLPz0K/UmHCqFTFPFIY5DaigueFo/oV/JPUia/uU= Subject key identifier: 14:BB:87:20:89:4C:9C:98:8F:D2:6C:E9:E3:E7:CC:44:40:3E:0B:2D Certificate issuer: /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Certificate serial: 0E45 Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/DF5D49F6985611ECBE7ED328C4F9AE02.roa Signing time: Sat 12 Apr 2025 17:57:20 +0000 ROA not before: Sat 12 Apr 2025 17:57:20 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.85.214.0/24 maxlen: 24 103.85.215.0/24 maxlen: 24 2001:df5:6d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3653 (0xe45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA69, serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Validity Not Before: Apr 12 17:57:20 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67faa97f-1d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a7:d8:d9:9f:ae:9f:07:0b:2b:c6:c6:7f:e3: b3:5d:73:e2:90:80:6a:1d:f6:c5:ef:a2:0d:ef:b4: ef:6b:80:cc:5d:d7:eb:b2:4b:44:37:d8:61:8f:91: 70:dd:94:34:9a:5d:81:a6:64:15:4e:c0:e8:71:b8: 6b:71:53:a9:e1:c7:44:f8:4e:92:58:6d:89:40:73: 53:cc:66:3c:4b:b9:d2:36:80:16:b0:4c:30:47:ba: 14:3a:0c:27:fd:a5:e7:46:6f:55:45:0a:ee:ce:18: e0:d9:3f:5d:84:b4:95:43:8f:f4:1f:81:5d:2e:37: 30:3e:63:ea:2f:3e:b6:6e:10:9c:d1:cf:db:f5:fb: 37:2d:39:8c:23:43:57:91:c3:d9:1e:38:8a:00:3d: 4c:62:da:cd:ae:ff:81:75:27:42:c8:10:f7:87:81: f6:7d:4c:d7:6b:d4:73:4c:87:1a:96:58:63:ba:89: f7:7c:9e:d2:62:2a:c3:d0:5d:22:03:5e:04:82:ba: 9b:bd:d9:fe:e7:2c:e8:e4:6e:e8:17:86:b0:04:f7: 4c:8d:e2:c9:c4:11:44:24:de:81:04:cb:12:63:5b: ee:ad:33:83:b5:39:78:01:ae:ce:2a:42:68:16:20: 26:c7:27:df:52:e2:6c:5e:29:21:ef:8b:f2:11:f2: 1d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BB:87:20:89:4C:9C:98:8F:D2:6C:E9:E3:E7:CC:44:40:3E:0B:2D X509v3 Authority Key Identifier: keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/DF5D49F6985611ECBE7ED328C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.214.0/23 IPv6: 2001:df5:6d00::/48 Signature Algorithm: sha256WithRSAEncryption 88:9c:af:d6:72:a7:b2:50:96:c9:0b:6a:76:97:ba:ae:0e:05: 8e:51:7f:89:f2:f7:c4:7b:43:a6:7b:4b:10:7a:eb:eb:61:e0: fb:6e:39:ef:1b:ad:ad:94:cb:5a:ef:89:24:12:bc:dd:f9:58: 07:1d:7c:88:1f:ca:46:3d:91:de:45:f1:bf:a7:11:f2:cf:e0: 7c:7e:24:af:b6:c2:68:48:4c:67:39:3e:56:fe:cd:60:39:d7: ac:b3:70:e5:7b:8e:3e:9d:ac:88:d8:4e:9d:67:aa:86:ff:b0: 29:68:e5:94:75:81:77:ee:1e:5a:f4:59:72:98:cd:4c:62:7c: 0a:e7:5d:74:fb:81:61:66:f1:2e:1b:14:f3:6c:03:2e:b0:f6: 18:31:bc:b6:10:49:8c:66:9a:e3:17:47:13:95:b4:19:1c:45: 38:48:0d:24:fc:51:39:5e:97:5c:42:c7:6f:aa:01:78:69:bb: 4b:f8:52:8b:a1:93:44:8c:9d:fc:bc:f2:10:ef:04:b8:50:02: 41:52:13:8b:78:48:d4:dd:ee:bf:61:f8:b9:36:c9:82:a7:bc: 74:ee:b5:1c:02:70:17:14:0c:e1:ce:af:72:b7:f1:59:98:69: 4d:c8:58:4f:e9:e5:12:72:ad:df:7a:93:e9:bb:27:d6:9f:dc: 80:95:f3:13 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5 QjlDMkQxNEQwHhcNMjUwNDEyMTc1NzIwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZhYTk3Zi0xZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2afY2Z+unwcLK8bGf+OzXXPikIBqHfbF76IN77Tva4DMXdfrsktEN9hhj5Fw 3ZQ0ml2BpmQVTsDocbhrcVOp4cdE+E6SWG2JQHNTzGY8S7nSNoAWsEwwR7oUOgwn /aXnRm9VRQruzhjg2T9dhLSVQ4/0H4FdLjcwPmPqLz62bhCc0c/b9fs3LTmMI0NX kcPZHjiKAD1MYtrNrv+BdSdCyBD3h4H2fUzXa9RzTIcallhjuon3fJ7SYirD0F0i A14Egrqbvdn+5yzo5G7oF4awBPdMjeLJxBFEJN6BBMsSY1vurTODtTl4Aa7OKkJo FiAmxyffUuJsXikh74vyEfIdlQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBS7hyCJ TJyYj9Js6ePnzERAPgstMB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0FBNjkvNDBFMUZDOUM5RUIwMTFFOUIwN0U3QTgyQzRGOUFFMDIvREY1RDQ5RjY5 ODU2MTFFQ0JFN0VEMzI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnVdYwDwQCAAIwCQMHACABDfVtADANBgkqhkiG9w0BAQsF AAOCAQEAiJyv1nKnslCWyQtqdpe6rg4FjlF/ifL3xHtDpntLEHrr62Hg+2457xut rZTLWu+JJBK83flYBx18iB/KRj2R3kXxv6cR8s/gfH4kr7bCaEhMZzk+Vv7NYDnX rLNw5XuOPp2siNhOnWeqhv+wKWjllHWBd+4eWvRZcpjNTGJ8CudddPuBYWbxLhsU 82wDLrD2GDG8thBJjGaa4xdHE5W0GRxFOEgNJPxROV6XXELHb6oBeGm7S/hSi6GT RIyd/LzyEO8EuFACQVITi3hI1N3uv2H4uTbJgqe8dO61HAJwFxQM4c6vcrfxWZhp TchYT+nlEnKt33qT6bsn1p/cgJXzEw== -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:45 2025 by rpki-client