$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/CF072592709211EAB1D2FA0FC4F9AE02.roa File: CF072592709211EAB1D2FA0FC4F9AE02.roa (raw, json) Hash identifier: ZFArAKV3zxqhsKeUT1pzygcRoAdRSBE7vBttPv/BKqM= Subject key identifier: 68:F9:F8:55:A1:13:BF:1E:E3:DE:27:FD:41:53:B9:70:5D:B9:B7:7E Certificate issuer: /CN=A91DCBAD/serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Certificate serial: 09EE Authority key identifier: 53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/CF072592709211EAB1D2FA0FC4F9AE02.roa Signing time: Tue 28 Jan 2025 22:51:41 +0000 ROA not before: Tue 28 Jan 2025 22:51:41 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 135406 IP address blocks: 103.7.188.0/23 maxlen: 24 103.81.219.0/24 maxlen: 24 103.107.16.0/24 maxlen: 24 103.120.49.0/24 maxlen: 24 103.217.106.0/24 maxlen: 24 203.55.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2542 (0x9ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCBAD, serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Validity Not Before: Jan 28 22:51:41 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67995f7d-fcdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:60:bc:88:24:99:ac:ae:f2:71:5d:89:75: 65:cd:0c:df:22:40:b0:9d:60:23:3d:dc:6b:f1:15: 5a:2b:45:fa:0e:7d:a1:07:b5:d2:34:82:5a:8c:2c: 12:d9:db:49:c3:91:a4:76:7b:4c:bd:90:50:6c:15: db:c3:12:81:90:84:28:73:10:cf:ac:11:15:7e:99: 25:f8:36:5b:53:41:d0:fd:64:df:de:79:98:70:a6: 45:fc:07:a4:98:c7:d2:68:c0:48:f3:64:1e:9c:a3: 94:45:9e:00:3a:59:fe:f5:f1:cc:71:bd:8b:35:7a: a8:25:52:0a:1a:c6:ea:0d:35:5c:ae:d4:06:b3:ca: 6b:c9:fa:f2:0b:d3:ff:20:51:d1:8a:6c:a7:93:68: 4b:bd:a7:b2:69:ba:0a:db:3a:5d:36:81:03:9c:e1: cd:c6:19:0e:6d:54:58:64:07:e5:d6:df:a0:c2:fc: f6:1a:d1:9f:0d:1c:a7:98:c5:e5:85:f5:ca:c6:14: ec:03:bb:f4:e4:c3:22:c6:3e:8e:66:b1:e2:03:1e: be:68:13:64:83:73:3b:94:6e:a7:e8:23:ae:e6:39: e8:b5:66:36:c4:79:48:03:b4:91:33:90:64:6e:91: bb:e7:d5:16:e2:8d:e5:04:8f:e1:3c:96:52:60:76: 66:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F9:F8:55:A1:13:BF:1E:E3:DE:27:FD:41:53:B9:70:5D:B9:B7:7E X509v3 Authority Key Identifier: keyid:53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/CF072592709211EAB1D2FA0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.7.188.0/23 103.81.219.0/24 103.107.16.0/24 103.120.49.0/24 103.217.106.0/24 203.55.212.0/24 Signature Algorithm: sha256WithRSAEncryption a1:35:c0:b3:bd:c5:aa:69:d2:04:2e:fc:77:96:22:55:3a:83: 40:c7:4d:c1:5a:19:9f:e1:96:e1:80:da:a2:27:ca:61:00:5f: 46:bd:85:12:6a:44:6a:1b:a7:40:e0:65:5e:dd:43:54:10:39: 54:0d:f8:0a:0d:d8:ef:47:d5:54:19:dc:83:98:3f:ce:56:51: 02:62:ea:cd:32:10:ea:3a:4b:b4:cf:bd:ff:c2:25:20:98:8e: 3a:14:49:1e:5f:03:30:69:f3:51:f9:a8:25:65:9d:a4:d0:96: f4:7c:a9:b8:e4:b2:51:79:5d:2d:a2:98:15:4b:a0:a1:8f:92: fb:88:d4:14:22:57:33:ba:4b:cd:2f:63:92:e5:e1:f6:e8:e2: dc:6e:eb:f1:56:a7:b5:08:84:58:c5:d5:6a:4f:91:4c:50:36: 37:77:3d:70:7e:1b:15:6f:0f:ff:bb:62:5d:65:f3:df:24:00: 8a:16:03:64:96:b1:1b:5c:29:01:99:86:3f:0b:be:75:f1:22: 74:d7:be:ae:4b:4b:18:37:79:65:10:59:49:4d:73:27:03:54: 6c:d2:d8:3d:44:43:c0:e4:31:76:d6:78:b6:bf:12:1a:6f:da: af:4a:64:29:00:be:76:50:73:93:b9:b0:b3:dc:77:f4:94:77: d6:6d:b3:a5 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICCe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCQUQxMTAvBgNVBAUTKDUzMjY4QTI3MzZBNUZGNTU0Qjk0MDcwM0YzNzRGQzM1 NzkyMjhDMzAwHhcNMjUwMTI4MjI1MTQxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk5NWY3ZC1mY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlpgvIgkmayu8nFdiXVlzQzfIkCwnWAjPdxr8RVaK0X6Dn2hB7XSNIJajCwS 2dtJw5GkdntMvZBQbBXbwxKBkIQocxDPrBEVfpkl+DZbU0HQ/WTf3nmYcKZF/Aek mMfSaMBI82QenKOURZ4AOln+9fHMcb2LNXqoJVIKGsbqDTVcrtQGs8pryfryC9P/ IFHRimynk2hLvaeyaboK2zpdNoEDnOHNxhkObVRYZAfl1t+gwvz2GtGfDRynmMXl hfXKxhTsA7v05MMixj6OZrHiAx6+aBNkg3M7lG6n6COu5jnotWY2xHlIA7SRM5Bk bpG759UW4o3lBI/hPJZSYHZmlQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFGj5+FWh E78e494n/UFTuXBdubd+MB8GA1UdIwQYMBaAFFMmiic2pf9VS5QHA/N0/DV5Ioww MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0JBRC8zNjU5RTdBRTcw OTExMUVBOEE5QjRFMERDNEY5QUUwMi9VeWFLSnphbF8xVkxsQWNEODNUOE5Ya2lq REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5YUtKemFsXzFWTGxBY0Q4M1Q4TlhraWpEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENCQUQvMzY1OUU3QUU3MDkxMTFFQThBOUI0RTBEQzRGOUFFMDIvQ0YwNzI1OTI3 MDkyMTFFQUIxRDJGQTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAFnB7wDBABnUdsDBABnaxADBABneDEDBABn2WoDBADLN9Qw DQYJKoZIhvcNAQELBQADggEBAKE1wLO9xapp0gQu/HeWIlU6g0DHTcFaGZ/hluGA 2qInymEAX0a9hRJqRGobp0DgZV7dQ1QQOVQN+AoN2O9H1VQZ3IOYP85WUQJi6s0y EOo6S7TPvf/CJSCYjjoUSR5fAzBp81H5qCVlnaTQlvR8qbjkslF5XS2imBVLoKGP kvuI1BQiVzO6S80vY5Ll4fbo4txu6/FWp7UIhFjF1WpPkUxQNjd3PXB+GxVvD/+7 Yl1l898kAIoWA2SWsRtcKQGZhj8LvnXxInTXvq5LSxg3eWUQWUlNcycDVGzS2D1E Q8DkMXbWeLa/Ehpv2q9KZCkAvnZQc5O5sLPcd/SUd9Zts6U= -----END CERTIFICATE-----Generated at Sat Apr 26 09:31:15 2025 by rpki-client