$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/BF21F788EC5811EEB4293455C4F9AE02.roa File: BF21F788EC5811EEB4293455C4F9AE02.roa (raw, json) Hash identifier: 7cjb7VG94QioiNIQi5PeFGoVktUYbXdUPAEpMIjHRYc= Subject key identifier: E0:7C:9E:92:92:65:84:50:17:05:53:B9:5A:13:A2:E7:9D:0E:CB:77 Certificate issuer: /CN=A91CBFCF/serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Certificate serial: 0B7A Authority key identifier: 86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/BF21F788EC5811EEB4293455C4F9AE02.roa Signing time: Fri 31 Jan 2025 18:57:58 +0000 ROA not before: Fri 31 Jan 2025 18:57:58 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 134995 IP address blocks: 103.146.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2938 (0xb7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBFCF, serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Validity Not Before: Jan 31 18:57:58 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=679d1d36-a6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:8c:97:ed:67:78:e7:6e:47:a5:64:24:d6: 05:c4:a3:e8:0e:69:88:37:21:8f:a7:23:a6:11:9d: d0:60:92:ac:4f:ad:10:25:b0:f4:be:44:52:40:28: 4c:9e:91:74:25:33:f6:19:70:89:25:8a:b4:fe:3c: ea:92:f1:f8:76:6c:6c:94:8f:ad:64:5e:67:ac:ad: 59:56:01:b6:c0:39:86:a0:26:3c:c7:d4:1a:87:25: 86:f5:83:38:e8:59:02:6a:8d:dc:c3:b3:ee:d8:87: 2e:a0:0b:3f:d9:e5:6e:16:14:39:4c:d4:48:b2:d6: 7f:fa:88:f5:48:9f:e0:db:54:74:41:8a:81:4c:c2: f6:91:70:12:3a:3d:06:3b:00:c3:c1:4b:cd:8b:be: c0:7e:45:af:42:1e:d9:da:e2:72:38:4a:71:f7:17: 20:4a:7a:0c:8b:fd:bb:bb:67:67:82:30:83:ff:a5: 8c:15:4a:ef:8a:b6:5a:4f:e9:8e:8d:ab:ac:a9:94: 18:79:cc:b0:4b:22:76:8e:9f:59:0f:94:b1:58:0d: bc:0b:14:fc:4a:69:3f:32:34:09:ea:d3:0c:5e:0c: 0c:e9:41:8f:85:87:2e:a6:b1:aa:dd:a9:a1:46:16: 78:15:91:72:66:01:b3:a9:bc:05:c3:1e:55:58:ae: 4f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7C:9E:92:92:65:84:50:17:05:53:B9:5A:13:A2:E7:9D:0E:CB:77 X509v3 Authority Key Identifier: keyid:86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/BF21F788EC5811EEB4293455C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.149.0/24 Signature Algorithm: sha256WithRSAEncryption 78:2a:fb:8a:f9:59:e9:bb:a0:be:85:b2:57:06:84:93:53:b6: a9:a0:39:08:1e:81:65:0d:81:93:f5:fb:59:b4:21:b0:c9:76: ad:32:df:94:f0:4f:79:cb:0c:02:65:a8:93:e4:70:cd:e1:ce: 40:5b:a3:a3:a4:7d:d1:41:d0:f5:32:7c:10:35:a2:98:d3:18: 8e:cc:7f:75:e8:38:ae:db:ea:19:c4:e1:63:f1:12:7f:56:2a: 49:4d:18:6e:07:79:ec:6e:62:a5:c0:5d:b5:64:38:7c:8e:cb: ed:a5:1b:c8:be:cc:bf:70:1a:2b:e3:cb:f0:a4:38:48:27:59: 8d:34:00:14:0b:52:0d:42:d9:56:9a:d0:56:ee:23:fb:54:0a: 53:a2:dc:f1:f1:26:02:68:50:62:1d:73:9c:aa:31:17:54:a1: 65:16:48:6e:1d:30:c6:ec:ed:77:4f:53:d8:41:dc:21:bd:7e: f4:c9:7b:82:42:80:ee:43:9f:b3:41:45:a3:84:ac:9f:e5:c3: 97:db:9a:c1:65:bd:4d:77:fe:a2:d9:f1:c5:d8:93:d7:bc:50: dd:82:9f:90:5f:15:a7:e8:5c:9f:35:8d:46:86:19:ba:eb:96: b3:66:66:57:da:3f:56:2b:c0:02:c2:90:9d:9b:4b:2e:41:47: 0b:2f:c6:32 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGQ0YxMTAvBgNVBAUTKDg2QjFGMTFEMTgxREE2Q0M5REIwMzIzREU0M0JDOTZD NTkwOTY1RTEwHhcNMjUwMTMxMTg1NzU4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzlkMWQzNi1hNmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDOMl+1neOduR6VkJNYFxKPoDmmINyGPpyOmEZ3QYJKsT60QJbD0vkRSQChM npF0JTP2GXCJJYq0/jzqkvH4dmxslI+tZF5nrK1ZVgG2wDmGoCY8x9QahyWG9YM4 6FkCao3cw7Pu2IcuoAs/2eVuFhQ5TNRIstZ/+oj1SJ/g21R0QYqBTML2kXASOj0G OwDDwUvNi77AfkWvQh7Z2uJyOEpx9xcgSnoMi/27u2dngjCD/6WMFUrvirZaT+mO jausqZQYecywSyJ2jp9ZD5SxWA28CxT8Smk/MjQJ6tMMXgwM6UGPhYcuprGq3amh RhZ4FZFyZgGzqbwFwx5VWK5PVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOB8npKS ZYRQFwVTuVoTouedDst3MB8GA1UdIwQYMBaAFIax8R0YHabMnbAyPeQ7yWxZCWXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkZDRi85NTYzOUJGMDI0 OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBzeWRzREk5NUR2SmJGa0pa ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hySHhIUmdkcHN5ZHNESTk1RHZKYkZrSlplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JGQ0YvOTU2MzlCRjAyNDhEMTFFQUFEQTIwNTRFQzRGOUFFMDIvQkYyMUY3ODhF QzU4MTFFRUI0MjkzNDU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkpUwDQYJKoZIhvcNAQELBQADggEBAHgq+4r5Wem7oL6F slcGhJNTtqmgOQgegWUNgZP1+1m0IbDJdq0y35TwT3nLDAJlqJPkcM3hzkBbo6Ok fdFB0PUyfBA1opjTGI7Mf3XoOK7b6hnE4WPxEn9WKklNGG4HeexuYqXAXbVkOHyO y+2lG8i+zL9wGivjy/CkOEgnWY00ABQLUg1C2Vaa0FbuI/tUClOi3PHxJgJoUGId c5yqMRdUoWUWSG4dMMbs7XdPU9hB3CG9fvTJe4JCgO5Dn7NBRaOErJ/lw5fbmsFl vU13/qLZ8cXYk9e8UN2Cn5BfFafoXJ81jUaGGbrrlrNmZlfaP1YrwALCkJ2bSy5B RwsvxjI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:54:16 2025 by rpki-client