$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/7D670EA8F67A11EC92B5670FC4F9AE02.roa File: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (raw, json) Hash identifier: 9Odh9o3TlIW60dRdjsxDVQV+3vyhn2H48fPAT6vn3+M= Subject key identifier: 12:DC:DF:AE:30:04:18:DC:97:80:CD:4A:0A:3D:EB:2C:AC:9D:87:A5 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 1120 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/7D670EA8F67A11EC92B5670FC4F9AE02.roa Signing time: Wed 02 Apr 2025 17:46:29 +0000 ROA not before: Wed 02 Apr 2025 17:46:29 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 0 IP address blocks: 103.135.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4384 (0x1120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: Apr 2 17:46:29 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ed77f5-fb37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:a7:57:22:f2:b2:64:08:13:29:2f:75:e7: c2:8e:3b:a3:61:f6:fd:45:c0:47:bd:b4:c0:2d:ad: 99:e7:b2:a7:ff:cf:8e:fb:30:68:ec:ec:de:ce:08: 5b:81:2a:db:ed:ac:e9:3c:dc:cd:78:bc:0f:d2:42: ae:ff:48:db:6c:c1:06:f3:1c:79:e8:46:05:f0:bd: 2e:32:8d:55:37:cd:37:7d:99:8c:c1:7a:72:5c:1d: f9:fe:a5:25:66:fb:18:53:83:14:e0:af:75:b0:4b: d2:3e:2d:d0:5e:25:05:86:f0:bf:6b:d1:19:34:ab: 16:e3:ad:b3:b8:88:46:26:18:ef:0f:e8:4b:55:ab: 92:88:0b:1b:dc:69:f2:65:a0:18:85:90:c0:9a:65: 9d:c3:4d:94:bc:bb:2a:d8:f8:2f:c9:83:d9:b7:c6: c0:22:7a:4f:ff:aa:ac:23:a9:cb:3c:a1:b9:7d:ab: 67:5a:68:49:f7:ba:89:5b:de:7a:87:b7:55:81:d4: 35:12:5b:12:c5:25:58:20:a9:70:53:b7:de:02:49: f5:54:3b:43:53:4e:77:83:50:27:a1:ce:bf:ca:c0: 30:b5:ea:ad:1a:f4:35:1b:a6:ab:50:cd:13:13:4a: 02:92:33:8e:8b:e5:98:81:da:8f:66:a0:52:5f:36: cd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DC:DF:AE:30:04:18:DC:97:80:CD:4A:0A:3D:EB:2C:AC:9D:87:A5 X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/7D670EA8F67A11EC92B5670FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.100.0/24 Signature Algorithm: sha256WithRSAEncryption 02:9c:f0:39:8e:b7:29:e8:15:a5:3c:af:7f:4b:cb:54:dc:27: 90:55:4c:6c:0c:1c:e5:0f:1a:63:32:94:6d:dd:95:8b:0c:2e: 30:7c:6f:75:84:d7:6f:3f:26:b5:3b:65:75:0e:31:5b:97:72: 1d:c9:7b:ee:30:2e:10:c7:a4:5a:d4:6d:a3:fd:ea:f2:3c:3d: f2:fc:14:98:21:c8:9c:78:7d:d7:8e:01:48:fb:d4:66:76:00: 5c:cf:b4:ae:a8:16:98:6a:37:0c:da:17:db:4d:58:ca:74:7e: 6e:3a:d9:ef:7c:cd:31:b5:71:6a:e4:81:13:2b:93:13:3f:e0: b9:fb:e9:c4:54:9c:e8:d4:56:84:25:87:56:fc:a4:31:08:63: 29:5f:14:65:8d:77:8a:a6:ad:89:a1:e6:c5:10:c6:11:17:2d: 43:ab:41:93:f8:a4:0b:06:1c:f6:7f:3f:f1:4b:81:0f:64:4d: 95:b1:9f:3d:d2:07:35:e4:40:2e:cd:9d:dd:73:f6:96:f2:ac: 14:93:0b:f7:29:56:c8:74:17:28:ef:3a:09:4a:b8:c8:1e:f2: 8e:7e:0f:7f:40:e0:96:a6:61:24:f8:96:c3:26:8b:b0:30:6c: 9d:aa:c2:dd:44:d5:b1:e9:42:c2:bd:4f:06:b3:40:59:0d:8c: e9:6f:9b:71 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICESAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjUwNDAyMTc0NjI5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkNzdmNS1mYjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6GnVyLysmQIEykvdefCjjujYfb9RcBHvbTALa2Z57Kn/8+O+zBo7Ozezghb gSrb7azpPNzNeLwP0kKu/0jbbMEG8xx56EYF8L0uMo1VN803fZmMwXpyXB35/qUl ZvsYU4MU4K91sEvSPi3QXiUFhvC/a9EZNKsW462zuIhGJhjvD+hLVauSiAsb3Gny ZaAYhZDAmmWdw02UvLsq2PgvyYPZt8bAInpP/6qsI6nLPKG5fatnWmhJ97qJW956 h7dVgdQ1ElsSxSVYIKlwU7feAkn1VDtDU053g1Anoc6/ysAwteqtGvQ1G6arUM0T E0oCkjOOi+WYgdqPZqBSXzbNpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBLc364w BBjcl4DNSgo96yysnYelMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE2QTMvNzcyN0NFNUMzOEM3MTFFOUE3QjVDMjMzQzRGOUFFMDIvN0Q2NzBFQThG NjdBMTFFQzkyQjU2NzBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnh2QwDQYJKoZIhvcNAQELBQADggEBAAKc8DmOtynoFaU8 r39Ly1TcJ5BVTGwMHOUPGmMylG3dlYsMLjB8b3WE128/JrU7ZXUOMVuXch3Je+4w LhDHpFrUbaP96vI8PfL8FJghyJx4fdeOAUj71GZ2AFzPtK6oFphqNwzaF9tNWMp0 fm462e98zTG1cWrkgRMrkxM/4Ln76cRUnOjUVoQlh1b8pDEIYylfFGWNd4qmrYmh 5sUQxhEXLUOrQZP4pAsGHPZ/P/FLgQ9kTZWxnz3SBzXkQC7Nnd1z9pbyrBSTC/cp Vsh0FyjvOglKuMge8o5+D39A4JamYST4lsMmi7AwbJ2qwt1E1bHpQsK9TwazQFkN jOlvm3E= -----END CERTIFICATE-----Generated at Sat Apr 26 08:32:45 2025 by rpki-client