$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/7510FBA2928911EBB0B38272C4F9AE02.roa File: 7510FBA2928911EBB0B38272C4F9AE02.roa (raw, json) Hash identifier: vY9vDu953Z8A1LvSP1j7BcrWJjcpDb2f8NtmWuSIPts= Subject key identifier: 52:43:E0:DA:1D:2F:80:D0:DE:74:48:A0:6A:8D:E7:27:BB:F0:BD:D3 Certificate issuer: /CN=A91D8392/serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Certificate serial: 05F4 Authority key identifier: 24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/7510FBA2928911EBB0B38272C4F9AE02.roa Signing time: Mon 06 Jan 2025 22:31:59 +0000 ROA not before: Mon 06 Jan 2025 22:31:59 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 134498 IP address blocks: 103.161.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1524 (0x5f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8392, serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Validity Not Before: Jan 6 22:31:59 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=677c59df-a3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b3:5c:37:ef:e4:02:db:ba:a7:31:7e:7f:d9: d5:4d:1a:5b:68:d6:10:6c:d6:a5:96:e1:83:90:dc: 09:5c:ea:b5:f7:2a:5f:52:bf:2e:c5:2f:1e:3b:5b: 74:c7:3e:7c:21:b6:05:1e:0c:08:0e:1c:52:39:0a: fa:25:a9:dc:7f:6e:e7:6e:87:26:38:d2:3d:d6:8e: 65:7a:79:c5:8f:dc:da:17:3e:ae:6f:04:6a:81:46: 1f:51:df:7f:38:f3:52:74:84:2e:80:18:ef:0b:b0: 72:8a:97:85:15:fd:73:85:e1:9c:92:1a:51:69:cf: 25:c3:6c:b3:c1:f4:2f:4c:f5:88:c8:d1:69:8a:b6: 46:98:03:b1:1e:c8:20:4f:dd:02:9b:56:0c:b0:d7: ba:84:3c:5b:20:93:d9:26:2a:2d:70:23:02:0a:ef: 3b:ff:5e:f9:44:9f:ec:61:de:c3:40:5a:9f:93:9e: f8:2a:3e:4b:d4:91:33:48:cf:b8:6f:4d:49:e6:81: 23:f4:7a:2f:da:4a:b0:33:3a:8b:8c:cc:68:63:2c: 38:26:2d:1f:8b:81:57:f2:f6:ca:ba:f4:21:c9:85: 97:ba:91:b1:60:e4:f3:e5:f2:05:07:4e:84:04:09: 6e:5d:b1:fc:7d:1c:7b:46:8d:58:60:1a:08:4e:e4: 8b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:43:E0:DA:1D:2F:80:D0:DE:74:48:A0:6A:8D:E7:27:BB:F0:BD:D3 X509v3 Authority Key Identifier: keyid:24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/7510FBA2928911EBB0B38272C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.58.0/24 Signature Algorithm: sha256WithRSAEncryption 00:41:1a:cc:a5:2e:e3:a4:d0:45:9e:05:9c:96:07:43:37:4d: 9e:e5:75:ad:4b:eb:c5:60:85:f6:27:71:ef:e1:cc:29:3a:15: bc:6a:e8:db:24:c7:fb:63:f5:76:6f:fa:9e:89:70:2b:17:e2: e0:de:89:86:2a:7f:a6:21:bb:55:7b:69:9f:a5:f7:09:98:9d: 33:08:66:c2:a9:7c:8f:65:f4:cf:5c:45:1b:48:c7:ba:4a:67: 9c:17:ee:8d:95:6b:08:5f:ab:fc:dc:6b:7c:27:e7:7e:51:3c: 26:bb:2f:70:de:90:93:81:43:e4:fa:11:da:a5:68:b7:67:60: 0c:f9:d4:48:0a:bc:87:6b:c6:1e:66:35:b9:3d:30:73:07:42: ce:47:19:b6:5b:d7:eb:ea:3b:f4:4b:bb:77:b7:e4:36:eb:e3: 62:1b:8b:f2:99:5a:c3:36:60:a0:a2:90:8d:d3:e6:22:09:3b: 00:eb:0a:08:4b:f1:ea:fb:07:c5:57:08:1e:e5:0a:1d:0e:25: 6f:9f:e7:f3:df:7c:d4:a7:cc:da:b1:c0:6c:af:97:60:cf:b3: 04:59:70:e0:cd:51:a5:0a:e7:da:58:f5:ba:ee:e9:86:79:8b: 17:7d:c0:c5:cc:06:ce:5c:ef:97:2f:01:d0:3c:27:9e:b1:03: 95:31:fd:da -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzOTIxMTAvBgNVBAUTKDI0NTIxODFDQjEwOEFGMTFGNDYyODczNzFCMDQxM0ZG NUY4MkU4MkUwHhcNMjUwMTA2MjIzMTU5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdjNTlkZi1hM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrNcN+/kAtu6pzF+f9nVTRpbaNYQbNalluGDkNwJXOq19ypfUr8uxS8eO1t0 xz58IbYFHgwIDhxSOQr6Jancf27nbocmONI91o5lennFj9zaFz6ubwRqgUYfUd9/ OPNSdIQugBjvC7ByipeFFf1zheGckhpRac8lw2yzwfQvTPWIyNFpirZGmAOxHsgg T90Cm1YMsNe6hDxbIJPZJiotcCMCCu87/175RJ/sYd7DQFqfk574Kj5L1JEzSM+4 b01J5oEj9Hov2kqwMzqLjMxoYyw4Ji0fi4FX8vbKuvQhyYWXupGxYOTz5fIFB06E BAluXbH8fRx7Ro1YYBoITuSLYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFJD4Nod L4DQ3nRIoGqN5ye78L3TMB8GA1UdIwQYMBaAFCRSGByxCK8R9GKHNxsEE/9fgugu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM5Mi8xNEQ5RTM4QTky ODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4SDBZb2MzR3dRVF8xLUM2 QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pGSVlITEVJcnhIMFlvYzNHd1FUXzEtQzZDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDgzOTIvMTREOUUzOEE5Mjg4MTFFQkJCRDQ1NjcxQzRGOUFFMDIvNzUxMEZCQTI5 Mjg5MTFFQkIwQjM4MjcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnoTowDQYJKoZIhvcNAQELBQADggEBAABBGsylLuOk0EWe BZyWB0M3TZ7lda1L68VghfYnce/hzCk6Fbxq6Nskx/tj9XZv+p6JcCsX4uDeiYYq f6Yhu1V7aZ+l9wmYnTMIZsKpfI9l9M9cRRtIx7pKZ5wX7o2Vawhfq/zca3wn535R PCa7L3DekJOBQ+T6EdqlaLdnYAz51EgKvIdrxh5mNbk9MHMHQs5HGbZb1+vqO/RL u3e35Dbr42Ibi/KZWsM2YKCikI3T5iIJOwDrCghL8er7B8VXCB7lCh0OJW+f5/Pf fNSnzNqxwGyvl2DPswRZcODNUaUK59pY9bru6YZ5ixd9wMXMBs5c75cvAdA8J56x A5Ux/do= -----END CERTIFICATE-----Generated at Sat Apr 26 15:26:42 2025 by rpki-client