$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/AA134FD6BD1411EE95F45624C4F9AE02.roa File: AA134FD6BD1411EE95F45624C4F9AE02.roa (raw, json) Hash identifier: 0ui5S8hmz9C0Ock78UXOuJaT2l8PyKzUulCehXJDbXM= Subject key identifier: 62:24:B4:88:39:13:57:14:2D:F9:D7:8A:4F:DE:43:5A:E7:EE:01:E8 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: F7 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/AA134FD6BD1411EE95F45624C4F9AE02.roa Signing time: Sat 05 Apr 2025 05:10:23 +0000 ROA not before: Sat 05 Apr 2025 05:10:23 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 18013 IP address blocks: 103.149.182.0/24 maxlen: 24 103.149.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Apr 5 05:10:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f0bb3e-058f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a5:ce:bd:ff:d5:b8:4b:3d:13:87:a9:3a:ad: 83:5a:33:ff:c7:87:f7:ca:db:47:01:a0:b0:76:b0: 08:80:15:e4:05:0a:8b:a5:a8:26:2a:3d:a1:c6:0c: e5:df:9d:35:2d:61:c7:16:50:ce:67:61:9c:fa:c5: c5:00:47:14:d9:1e:95:cd:4f:26:30:0f:84:f6:82: db:32:c7:69:a6:e0:4e:e4:ef:d4:b4:6e:da:e0:f5: 36:d5:44:e9:4f:99:de:ab:99:1b:5e:6b:31:cb:4b: 2e:19:e2:33:ba:05:70:0f:71:0f:fe:77:96:ba:5c: 32:dc:e8:91:aa:40:12:c3:c0:65:57:91:57:3e:52: 22:2c:20:dc:d9:1a:c2:1c:70:d6:18:e3:7e:02:3d: e1:34:9f:5b:38:e6:c5:fc:22:c5:b2:1e:f4:f2:6d: c3:12:14:9a:f0:53:f7:fb:99:4f:8c:f7:d4:af:f6: 31:52:da:8a:54:cf:eb:a1:31:a9:79:78:04:fd:b4: fe:fc:eb:ae:c6:b6:36:fc:4d:ea:71:08:96:96:64: ba:ab:7e:3d:af:a5:36:64:4e:89:e2:e0:9f:aa:76: 0e:07:a2:88:92:9e:ad:89:49:45:e5:7d:92:55:d4: 1d:31:06:1c:86:54:6a:57:12:43:5d:a0:d7:aa:d9: 3f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:24:B4:88:39:13:57:14:2D:F9:D7:8A:4F:DE:43:5A:E7:EE:01:E8 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/AA134FD6BD1411EE95F45624C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.182.0/23 Signature Algorithm: sha256WithRSAEncryption d5:7a:4d:2d:86:0f:fd:91:e2:23:b5:b9:04:70:42:de:21:bc: 00:d6:f2:d7:a6:58:46:27:dd:f5:d3:31:c4:51:91:e1:49:a5: 45:36:3d:c2:5c:ba:9f:31:98:ea:4a:72:8f:c9:61:de:5f:5a: aa:e1:33:af:96:05:b7:f3:a8:06:e3:17:17:5c:8e:32:e8:53: a2:8d:9d:55:2a:91:cc:62:c6:eb:82:b6:d7:f1:3f:ae:0e:c7: ca:41:58:9b:67:1d:c5:12:8c:9d:90:71:9d:3c:b9:e9:4d:76: 0f:84:5e:6b:56:df:08:24:16:41:86:6b:49:db:b4:d3:eb:14: f0:54:b7:be:f7:41:8e:2c:c2:d2:6a:b9:e0:4e:f6:e5:7e:09: 56:bd:5e:7c:e0:28:d3:32:21:f0:a2:ae:34:7b:cf:aa:1e:35: 39:a6:e0:d9:d4:0e:0b:be:ae:9c:0e:7c:05:e3:e2:b3:b3:db: 12:f2:87:fc:11:67:0e:5c:d8:12:bc:6e:45:1f:43:88:ca:90: 3f:b8:ca:f0:ad:0e:4d:00:94:e3:c7:42:72:ae:08:dc:a3:35: c9:a4:a7:d1:eb:56:d2:ee:30:d1:ee:38:18:9b:3f:16:02:10: 68:7c:68:2c:91:ba:80:30:13:88:5e:38:fb:cc:f4:07:c7:e3: 03:75:d8:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjUwNDA1MDUxMDIzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YwYmIzZS0wNThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKXOvf/VuEs9E4epOq2DWjP/x4f3yttHAaCwdrAIgBXkBQqLpagmKj2hxgzl 3501LWHHFlDOZ2Gc+sXFAEcU2R6VzU8mMA+E9oLbMsdppuBO5O/UtG7a4PU21UTp T5neq5kbXmsxy0suGeIzugVwD3EP/neWulwy3OiRqkASw8BlV5FXPlIiLCDc2RrC HHDWGON+Aj3hNJ9bOObF/CLFsh708m3DEhSa8FP3+5lPjPfUr/YxUtqKVM/roTGp eXgE/bT+/OuuxrY2/E3qcQiWlmS6q349r6U2ZE6J4uCfqnYOB6KIkp6tiUlF5X2S VdQdMQYchlRqVxJDXaDXqtk/LQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGIktIg5 E1cULfnXik/eQ1rn7gHoMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDY1QzIvNzZFRTc5NUNCMDYwMTFFRUJCQkY2NTdDQzRGOUFFMDIvQUExMzRGRDZC RDE0MTFFRTk1RjQ1NjI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlbYwDQYJKoZIhvcNAQELBQADggEBANV6TS2GD/2R4iO1 uQRwQt4hvADW8temWEYn3fXTMcRRkeFJpUU2PcJcup8xmOpKco/JYd5fWqrhM6+W BbfzqAbjFxdcjjLoU6KNnVUqkcxixuuCttfxP64Ox8pBWJtnHcUSjJ2QcZ08uelN dg+EXmtW3wgkFkGGa0nbtNPrFPBUt773QY4swtJqueBO9uV+CVa9XnzgKNMyIfCi rjR7z6oeNTmm4NnUDgu+rpwOfAXj4rOz2xLyh/wRZw5c2BK8bkUfQ4jKkD+4yvCt Dk0AlOPHQnKuCNyjNcmkp9HrVtLuMNHuOBibPxYCEGh8aCyRuoAwE4heOPvM9AfH 4wN12Dk= -----END CERTIFICATE-----Generated at Sat Apr 26 13:39:00 2025 by rpki-client