$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/8E321A2AF96011EF89D9E37DC4F9AE02.roa File: 8E321A2AF96011EF89D9E37DC4F9AE02.roa (raw, json) Hash identifier: c/khpR0D5Q+6xT3VzBLeSnoQ2dSS6+k6yToKP9EsAdg= Subject key identifier: A1:66:17:13:66:64:FA:B2:FB:A8:0B:56:54:5A:3B:36:13:D4:B1:E4 Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Certificate serial: 02 Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/8E321A2AF96011EF89D9E37DC4F9AE02.roa Signing time: Wed 05 Mar 2025 01:24:17 +0000 ROA not before: Wed 05 Mar 2025 01:24:17 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 142046 IP address blocks: 103.244.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Validity Not Before: Mar 5 01:24:17 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67c7a7c1-e475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:1b:25:f8:7f:30:1a:28:84:77:37:0c:b9: 85:70:b5:48:79:ba:4a:e1:34:be:f2:ab:01:0d:5f: b6:a8:90:c2:a6:a5:83:cd:6f:29:be:be:7b:c8:e1: 42:6f:c2:b4:0c:0b:ab:48:a9:fe:e3:9f:01:82:68: c6:c5:76:df:3a:33:c5:81:12:05:17:df:61:76:fb: a9:9e:45:7e:68:a3:55:cb:51:44:a9:3b:69:2e:dc: f2:4f:6b:00:35:2a:ad:58:31:44:fa:29:78:e2:d8: 69:ce:43:e6:d4:c5:60:e3:0a:9d:a6:c3:d2:8d:06: ac:04:ae:7f:a7:a2:9b:27:d8:1f:4c:55:1c:25:ba: 3e:c4:bc:fb:54:d6:5b:c2:80:a7:17:e7:ea:63:bf: 32:c2:68:fe:86:13:3b:1b:32:2f:d8:f8:b6:54:7b: fa:d8:c8:1f:78:e7:6c:c0:be:8f:83:49:2e:f3:ea: a0:80:00:3f:b8:7c:c0:1c:1a:4a:77:ac:55:89:41: 78:72:6d:36:f9:03:d3:f9:9e:9f:13:0f:3a:3d:d1: ad:18:97:56:19:78:fa:f6:85:02:40:e0:70:9f:3e: 7e:8f:b3:31:17:b5:90:88:01:6c:65:9e:27:aa:5e: a1:ce:a6:f4:93:e7:76:be:72:8a:6f:26:af:ee:07: 33:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:66:17:13:66:64:FA:B2:FB:A8:0B:56:54:5A:3B:36:13:D4:B1:E4 X509v3 Authority Key Identifier: keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/8E321A2AF96011EF89D9E37DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.244.163.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:fe:d2:78:7d:59:dc:53:df:9f:0d:04:5a:35:44:ba:46:41: b4:4b:47:26:38:7b:1f:55:a5:f6:25:d2:eb:6c:3a:95:d4:24: 68:83:53:5a:04:58:68:61:ca:7d:a7:5f:34:96:78:e6:58:df: 8e:48:77:fc:20:59:da:67:7f:dd:93:13:c9:b6:6d:e6:2e:54: fa:de:31:2a:58:6f:1e:3a:83:c1:dc:ee:1e:6d:24:7b:0b:2e: 44:ef:2e:95:ef:dc:6a:a1:60:ef:bd:03:b2:5e:85:3d:05:be: 56:70:34:64:33:13:a7:e1:88:e5:d9:b8:40:8c:0c:c7:27:a7: 63:6d:d4:d3:79:a6:de:a8:fc:c8:1b:8d:f6:50:69:30:b8:d0: bd:2a:30:fa:8c:22:5c:93:6e:12:f2:91:09:3d:88:ec:2a:86: 3b:69:0e:4c:07:60:2c:14:44:2b:3a:61:3f:48:9d:4e:b5:8c: f5:6c:65:65:f1:b2:35:40:0d:a2:fc:1c:28:3a:20:fa:ae:f6: 3a:a0:bf:ac:56:3c:3d:ea:d0:9c:05:d9:d7:80:fd:a7:ba:8b: 98:29:27:f1:1d:d9:d6:2a:62:d4:5c:03:2d:e9:3a:ca:b2:19: ad:b0:85:6b:e5:87:9c:77:35:80:d7:ae:3b:d0:fe:17:dd:28: a1:5b:26:32 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OERGNTExMC8GA1UEBRMoQzZGNzU4RUNEREM0QzlCMEY3MkYwNjVDMzVBRDU0Njk3 NDMyNzExQjAeFw0yNTAzMDUwMTI0MTdaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzdhN2MxLWU0NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyfhsl+H8wGiiEdzcMuYVwtUh5ukrhNL7yqwENX7aokMKmpYPNbym+vnvI4UJv wrQMC6tIqf7jnwGCaMbFdt86M8WBEgUX32F2+6meRX5oo1XLUUSpO2ku3PJPawA1 Kq1YMUT6KXji2GnOQ+bUxWDjCp2mw9KNBqwErn+nopsn2B9MVRwluj7EvPtU1lvC gKcX5+pjvzLCaP6GEzsbMi/Y+LZUe/rYyB9452zAvo+DSS7z6qCAAD+4fMAcGkp3 rFWJQXhybTb5A9P5np8TDzo90a0Yl1YZePr2hQJA4HCfPn6PszEXtZCIAWxlnieq XqHOpvST53a+copvJq/uBzNFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUoWYXE2Zk +rL7qAtWVFo7NhPUseQwHwYDVR0jBBgwFoAUxvdY7N3EybD3LwZcNa1UaXQycRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4REY1LzMxRTBGMTZBRjk2 MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJEM0x3WmNOYTFVYVhReWNS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHZkWTdOM0V5YkQzTHdaY05hMVVhWFF5Y1JzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OERGNS8zMUUwRjE2QUY5NjAxMUVGOUQ2NzlDN0FDNEY5QUUwMi84RTMyMUEyQUY5 NjAxMUVGODlEOUUzN0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGf0ozANBgkqhkiG9w0BAQsFAAOCAQEAS/7SeH1Z3FPfnw0E WjVEukZBtEtHJjh7H1Wl9iXS62w6ldQkaINTWgRYaGHKfadfNJZ45ljfjkh3/CBZ 2md/3ZMTybZt5i5U+t4xKlhvHjqDwdzuHm0kewsuRO8ule/caqFg770Dsl6FPQW+ VnA0ZDMTp+GI5dm4QIwMxyenY23U03mm3qj8yBuN9lBpMLjQvSow+owiXJNuEvKR CT2I7CqGO2kOTAdgLBREKzphP0idTrWM9WxlZfGyNUANovwcKDog+q72OqC/rFY8 PerQnAXZ14D9p7qLmCkn8R3Z1ipi1FwDLek6yrIZrbCFa+WHnHc1gNeuO9D+F90o oVsmMg== -----END CERTIFICATE-----Generated at Sat Apr 26 17:05:18 2025 by rpki-client