$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/F3484DBA34CE11EEBBA9D046C4F9AE02.roa File: F3484DBA34CE11EEBBA9D046C4F9AE02.roa (raw, json) Hash identifier: e+rpsrJfE3yU94kVnBShl6jDwyCOKp3rugpFTdwj4Dw= Subject key identifier: FA:EC:74:28:29:C9:7E:22:79:41:4B:A4:96:38:10:3C:38:B9:89:8F Certificate issuer: /CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22 Certificate serial: 013C Authority key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/F3484DBA34CE11EEBBA9D046C4F9AE02.roa Signing time: Thu 03 Apr 2025 04:01:08 +0000 ROA not before: Thu 03 Apr 2025 04:01:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141766 IP address blocks: 103.163.156.0/24 maxlen: 24 103.184.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF9B9, serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22 Validity Not Before: Apr 3 04:01:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67ee0804-dc20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e0:5a:87:3d:16:c3:33:35:9c:69:1e:fd:29: e2:6c:01:31:54:de:f5:76:21:55:97:5d:c9:0a:c2: d0:02:34:9d:6e:32:dc:6f:5e:93:2c:69:b6:09:c9: be:51:b7:4b:4b:c2:3d:69:ea:eb:27:a9:a7:a3:4b: 2f:d2:18:88:7a:98:88:1c:8d:92:af:79:b1:c2:90: 23:1c:e8:2c:cd:0b:0b:8d:18:9e:64:2f:c3:b7:23: 6a:32:44:4e:f0:73:25:01:48:3e:8f:a3:3d:45:e9: ab:32:1b:e1:3d:72:d1:04:c8:e0:53:7a:49:81:71: dc:96:4e:3c:d1:af:e5:e8:b0:65:e6:1c:7b:f8:22: 44:a8:f1:1a:61:26:6e:99:b9:f8:ea:df:13:cd:34: b0:99:28:72:17:58:70:8e:70:ca:dd:26:15:c1:87: bf:71:f7:60:a8:ae:05:85:7d:3e:5e:79:ad:79:58: fd:2f:d0:de:c4:dd:65:62:71:b0:ad:6d:a8:2a:21: bf:be:5f:7a:b8:58:e3:e7:5f:ac:e0:3d:1c:b7:c0: d8:ce:e9:82:d7:b0:58:0e:9f:a0:24:f8:3b:c1:4d: b7:f7:90:07:7b:ed:3d:c7:0f:1a:1a:c1:e7:c7:28: 23:d2:1c:16:bd:ce:87:65:a3:b0:89:03:a5:60:f1: 24:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EC:74:28:29:C9:7E:22:79:41:4B:A4:96:38:10:3C:38:B9:89:8F X509v3 Authority Key Identifier: keyid:42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/F3484DBA34CE11EEBBA9D046C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.156.0/24 103.184.129.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:52:ea:0d:6f:6e:c6:9c:be:ea:59:81:9b:e8:67:9f:7a:57: 9d:90:3f:4d:e1:de:2c:12:eb:f3:e4:7f:90:0a:ac:39:5b:a5: bc:bd:52:ab:e2:64:44:46:c5:4d:bc:49:c0:90:7c:3f:fa:6c: 6f:01:16:92:95:c5:62:30:dd:34:ef:44:db:bf:ae:4f:da:d5: 09:8e:8c:f2:1f:ba:c9:22:c0:94:6e:16:68:b4:9c:c0:83:d3: a7:48:e6:28:3e:39:b9:19:b0:1a:c2:7c:f5:be:b9:2e:51:79: 50:52:32:8b:dd:e3:92:9a:99:b8:31:1a:d2:a6:d1:79:4f:f5: 7d:e1:99:11:81:e7:be:3c:e0:12:c9:ee:b5:37:40:66:48:e6: a6:df:3f:7f:05:e2:86:f2:c3:5c:2e:8b:88:e0:e7:e2:92:fc: 0d:2e:c5:2a:0a:14:f7:a3:f1:5f:b1:9f:b2:1b:49:84:5b:f6: 7a:0a:9e:eb:62:74:65:8e:7e:13:79:08:1e:3a:12:85:98:47: 9d:2a:2e:48:4d:93:d4:3c:12:26:df:68:96:91:22:f5:e7:1f: 21:09:b0:47:2a:ba:52:07:0f:07:71:6b:40:cf:c1:da:31:92: fb:87:05:57:ec:0b:8e:ec:04:49:ee:80:b2:f7:b0:ae:6c:ab: 9a:8b:1c:e7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5QjkxMTAvBgNVBAUTKDQyQ0U1MEUxQUM3MzNENUExNjZCNTQyQzNDNDkzMDlG MzY1NkJGMjIwHhcNMjUwNDAzMDQwMTA4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VlMDgwNC1kYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+Bahz0WwzM1nGke/SnibAExVN71diFVl13JCsLQAjSdbjLcb16TLGm2Ccm+ UbdLS8I9aerrJ6mno0sv0hiIepiIHI2Sr3mxwpAjHOgszQsLjRieZC/DtyNqMkRO 8HMlAUg+j6M9RemrMhvhPXLRBMjgU3pJgXHclk480a/l6LBl5hx7+CJEqPEaYSZu mbn46t8TzTSwmShyF1hwjnDK3SYVwYe/cfdgqK4FhX0+XnmteVj9L9DexN1lYnGw rW2oKiG/vl96uFjj51+s4D0ct8DYzumC17BYDp+gJPg7wU2395AHe+09xw8aGsHn xygj0hwWvc6HZaOwiQOlYPEk/wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPrsdCgp yX4ieUFLpJY4EDw4uYmPMB8GA1UdIwQYMBaAFELOUOGscz1aFmtULDxJMJ82Vr8i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjlCOS85NTFGOThFQTMy RDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBWb1dhMVFzUEVrd256Wld2 eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzNVE0YXh6UFZvV2ExUXNQRWt3bnpaV3Z5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY5QjkvOTUxRjk4RUEzMkQyMTFFRTg2OUZEQjcxQzRGOUFFMDIvRjM0ODREQkEz NENFMTFFRUJCQTlEMDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABno5wDBABnuIEwDQYJKoZIhvcNAQELBQADggEBAEpS6g1v bsacvupZgZvoZ596V52QP03h3iwS6/Pkf5AKrDlbpby9UqviZERGxU28ScCQfD/6 bG8BFpKVxWIw3TTvRNu/rk/a1QmOjPIfuskiwJRuFmi0nMCD06dI5ig+ObkZsBrC fPW+uS5ReVBSMovd45KambgxGtKm0XlP9X3hmRGB57484BLJ7rU3QGZI5qbfP38F 4obyw1wui4jg5+KS/A0uxSoKFPej8V+xn7IbSYRb9noKnutidGWOfhN5CB46EoWY R50qLkhNk9Q8EibfaJaRIvXnHyEJsEcqulIHDwdxa0DPwdoxkvuHBVfsC47sBEnu gLL3sK5sq5qLHOc= -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:32 2025 by rpki-client