$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/D79607EEDCDD11EE85DBEB12C4F9AE02.roa File: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (raw, json) Hash identifier: vltJ7Buw53igWVIfCgs9blss6VeKEkgF9l7xhGZDnwo= Subject key identifier: EF:07:2D:73:A1:0A:10:75:1D:1C:7C:5E:C8:27:21:DD:EC:4E:D2:59 Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Certificate serial: 3528 Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/D79607EEDCDD11EE85DBEB12C4F9AE02.roa Signing time: Thu 10 Apr 2025 15:20:51 +0000 ROA not before: Thu 10 Apr 2025 15:20:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132509 IP address blocks: 103.244.180.0/24 maxlen: 24 103.244.181.0/24 maxlen: 24 103.244.182.0/24 maxlen: 24 103.244.183.0/24 maxlen: 24 2405:f900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13608 (0x3528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Validity Not Before: Apr 10 15:20:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f7e1d3-0404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b0:77:f6:a0:42:67:b2:d0:a0:1a:14:18:a6: 48:b7:b6:08:55:78:24:e4:56:d6:69:44:15:3d:77: 37:d4:60:e0:e6:3b:af:60:1a:92:cb:9a:4e:65:af: 68:bf:15:fa:91:b1:a8:91:0d:b5:66:67:ba:7c:09: 95:4a:b3:88:84:31:fe:8f:cc:9d:44:45:a4:00:81: cc:3a:72:b6:bf:96:e3:3e:72:09:64:4c:e4:7a:52: 09:90:7b:69:81:64:54:a5:8b:0e:68:44:fe:cd:ac: 64:04:6a:32:88:4b:13:96:67:f1:70:81:f9:29:80: 1a:a4:4d:2b:0b:0c:12:b7:0c:45:57:ac:10:76:5d: d5:76:ba:41:fb:3e:4a:22:6b:da:b3:d2:e4:2d:df: 62:75:34:70:df:74:69:bc:cf:ef:01:42:3a:35:4a: 4d:5a:c6:30:fe:14:fa:16:37:7f:40:be:af:8f:5d: 35:a3:e2:21:63:02:90:36:1f:35:93:e8:f6:ea:c7: d5:7c:56:8a:cf:29:d0:4d:70:e1:a5:6b:cc:dd:41: a0:31:55:ba:2e:70:d9:48:bc:d7:bd:8d:cb:90:9f: 99:b7:04:91:64:28:50:0a:c5:09:3a:b4:27:28:c0: cf:60:aa:c2:81:d9:0d:1f:cc:82:d5:13:71:ad:63: 73:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:07:2D:73:A1:0A:10:75:1D:1C:7C:5E:C8:27:21:DD:EC:4E:D2:59 X509v3 Authority Key Identifier: keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/D79607EEDCDD11EE85DBEB12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.244.180.0/22 IPv6: 2405:f900::/32 Signature Algorithm: sha256WithRSAEncryption 5c:52:b1:9b:dc:c2:0d:0d:9f:be:55:c6:ec:c7:a0:d2:08:3b: e3:e0:9e:3f:0d:f8:cc:7c:73:85:a9:77:ba:2d:66:d4:4e:ff: 0f:a5:2a:22:84:6f:da:a3:d7:56:14:43:f7:ad:41:4c:54:6b: 9a:e1:e6:92:a3:6f:6a:df:e6:0d:5d:f8:dd:a9:70:87:37:e2: 3b:85:76:80:9f:52:1d:40:58:11:1c:7e:90:9d:95:6f:66:1f: ca:a1:b0:6e:09:10:7d:8d:69:81:cf:cb:ce:23:f4:ec:b0:c3: be:f0:69:70:5f:f2:87:d6:7a:77:73:6f:28:cd:ec:70:b0:32: 59:e3:40:6c:bf:b8:86:4d:5a:c9:6c:5b:99:63:bc:c7:38:9b: 43:73:98:32:1e:8b:06:ff:87:5b:64:d1:8c:4b:53:c3:3d:ae: 60:40:47:7a:a4:25:ff:2b:a2:22:fd:ac:f7:a9:df:10:70:02: 5a:20:69:77:19:c4:a6:7c:f7:33:28:5b:c8:52:58:87:28:36: 1d:65:7b:9a:e4:5d:f5:9f:a5:88:e5:e6:af:a3:dd:9d:23:89: 8c:07:3e:f1:c5:3d:b0:30:29:fe:e8:c1:21:84:e6:f2:36:f6: ec:98:d6:3d:61:33:f5:38:f4:af:18:5b:22:e3:3c:f5:fc:58: 76:a5:99:cf -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICNSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NzgxMTAvBgNVBAUTKDZBMUU0RjcyODQ3RUIzNjk5NTIyQzkzRDI2NzczRjBE RjgzOTZFQkUwHhcNMjUwNDEwMTUyMDUxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y3ZTFkMy0wNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrB39qBCZ7LQoBoUGKZIt7YIVXgk5FbWaUQVPXc31GDg5juvYBqSy5pOZa9o vxX6kbGokQ21Zme6fAmVSrOIhDH+j8ydREWkAIHMOnK2v5bjPnIJZEzkelIJkHtp gWRUpYsOaET+zaxkBGoyiEsTlmfxcIH5KYAapE0rCwwStwxFV6wQdl3VdrpB+z5K Imvas9LkLd9idTRw33RpvM/vAUI6NUpNWsYw/hT6Fjd/QL6vj101o+IhYwKQNh81 k+j26sfVfFaKzynQTXDhpWvM3UGgMVW6LnDZSLzXvY3LkJ+ZtwSRZChQCsUJOrQn KMDPYKrCgdkNH8yC1RNxrWNz6QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFO8HLXOh ChB1HRx8XsgnId3sTtJZMB8GA1UdIwQYMBaAFGoeT3KEfrNplSLJPSZ3Pw34OW6+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk3OC8zMjIzRjM1RTFE OTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMybVZJc2s5Sm5jX0RmZzVi cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVBjb1ItczJtVklzazlKbmNfRGZnNWJyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U5NzgvMzIyM0YzNUUxRDk4MTFFMjhBOEMyRTgyMDhCMDJDRDIvRDc5NjA3RUVE Q0REMTFFRTg1REJFQjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJn9LQwDQQCAAIwBwMFACQF+QAwDQYJKoZIhvcNAQELBQAD ggEBAFxSsZvcwg0Nn75VxuzHoNIIO+Pgnj8N+Mx8c4Wpd7otZtRO/w+lKiKEb9qj 11YUQ/etQUxUa5rh5pKjb2rf5g1d+N2pcIc34juFdoCfUh1AWBEcfpCdlW9mH8qh sG4JEH2NaYHPy84j9Oyww77waXBf8ofWendzbyjN7HCwMlnjQGy/uIZNWslsW5lj vMc4m0NzmDIeiwb/h1tk0YxLU8M9rmBAR3qkJf8roiL9rPep3xBwAlogaXcZxKZ8 9zMoW8hSWIcoNh1le5rkXfWfpYjl5q+j3Z0jiYwHPvHFPbAwKf7owSGE5vI29uyY 1j1hM/U49K8YWyLjPPX8WHalmc8= -----END CERTIFICATE-----Generated at Sat Apr 26 20:27:10 2025 by rpki-client