$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/8F350932F96011EF89D9E37DC4F9AE02.roa File: 8F350932F96011EF89D9E37DC4F9AE02.roa (raw, json) Hash identifier: QrMwRSBguV4orNsh3cQZbQ07gQlvv90Dwbi2fjX1Q5w= Subject key identifier: E4:F8:CE:93:9A:51:C5:27:BF:E6:49:4B:60:FC:46:DA:1F:65:5B:3B Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Certificate serial: 04 Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/8F350932F96011EF89D9E37DC4F9AE02.roa Signing time: Wed 05 Mar 2025 01:24:19 +0000 ROA not before: Wed 05 Mar 2025 01:24:19 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 215364 IP address blocks: 103.224.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Validity Not Before: Mar 5 01:24:19 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67c7a7c2-dee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1f:92:f8:90:62:59:1e:f4:6d:b0:b2:df:1e: 47:9c:4e:7a:c0:6c:54:44:c6:b6:e0:89:11:22:0c: 1b:79:6b:73:75:dc:2c:c6:e3:16:56:74:d0:e3:6f: 83:0a:3e:62:fc:a7:57:f1:85:94:79:3a:68:2f:63: 53:ac:25:9a:78:03:8f:0b:a9:88:8a:90:dd:41:e8: 19:f0:0b:cc:c9:9e:43:be:32:c6:aa:d4:dd:10:23: 4e:a6:ac:31:32:33:a3:d1:87:5e:5d:d6:90:ca:39: fe:ab:b3:2d:67:b3:cb:8d:27:e9:cc:11:52:ae:10: b5:24:46:e9:6b:e0:09:1b:bf:25:03:20:a8:48:39: f4:a9:81:9f:8c:e7:6f:26:40:18:08:49:37:c7:fc: 5a:bb:37:b7:9f:4b:19:c9:86:e6:33:86:f5:07:43: 6b:2d:f9:74:9e:e5:c2:a2:ba:44:6b:2f:50:1c:93: 29:93:fe:5f:c2:06:62:4f:5d:5d:9c:55:00:af:49: aa:da:17:ca:2e:7f:45:c2:08:57:35:c5:88:d5:61: 28:b4:0f:c8:13:22:04:68:00:20:45:48:6c:88:c3: e0:45:07:8c:dd:f6:69:88:46:a6:1f:23:55:6f:42: da:2f:78:8f:22:cd:d9:ae:c4:b0:65:61:87:b1:4c: 36:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F8:CE:93:9A:51:C5:27:BF:E6:49:4B:60:FC:46:DA:1F:65:5B:3B X509v3 Authority Key Identifier: keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/8F350932F96011EF89D9E37DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.224.92.0/24 Signature Algorithm: sha256WithRSAEncryption d3:ff:36:22:6f:2d:95:9f:c7:ab:5e:1e:ed:5e:52:2c:c6:35: 00:30:12:7d:2b:5f:e6:63:30:59:d0:00:22:9a:29:f1:1f:39: 92:f3:06:c2:a2:2f:cc:84:5d:72:ee:d7:6d:6b:1f:ef:67:40: 8f:df:76:6c:11:72:b1:2b:03:3c:05:0d:4c:08:aa:bd:59:04: 71:cf:17:3f:4a:d1:a9:4c:e8:81:ae:01:67:b3:d1:67:f8:b5: ac:dc:08:71:74:8c:4a:89:db:9d:61:43:7b:de:6e:f3:e8:02: 3f:ce:5e:a4:66:20:02:dd:31:63:bf:3b:38:6c:99:8f:63:9d: 40:8d:47:27:25:03:5f:57:af:b5:32:51:37:ac:83:07:3c:7d: f4:4e:2e:f9:67:88:b0:6b:cc:98:7f:ba:03:94:73:77:59:90: e2:4d:e4:91:db:7c:ba:02:2c:5f:d9:0b:50:84:af:17:5a:b7: 25:89:f8:a0:22:f7:1b:fe:e0:b8:b8:2d:49:0d:f2:c4:45:f6: 1a:0f:01:7f:eb:4e:5f:06:6d:cd:9c:c4:65:0c:a0:43:32:9a: a4:ac:2c:ad:c7:93:1c:d3:d8:b4:98:dd:58:ac:41:9e:4d:60: d2:ed:91:f3:b9:0e:4d:74:ae:66:25:68:46:aa:88:10:61:3f: 5d:17:9c:97 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OERGNTExMC8GA1UEBRMoQzZGNzU4RUNEREM0QzlCMEY3MkYwNjVDMzVBRDU0Njk3 NDMyNzExQjAeFw0yNTAzMDUwMTI0MTlaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzdhN2MyLWRlZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeH5L4kGJZHvRtsLLfHkecTnrAbFRExrbgiREiDBt5a3N13CzG4xZWdNDjb4MK PmL8p1fxhZR5OmgvY1OsJZp4A48LqYiKkN1B6BnwC8zJnkO+Msaq1N0QI06mrDEy M6PRh15d1pDKOf6rsy1ns8uNJ+nMEVKuELUkRulr4AkbvyUDIKhIOfSpgZ+M528m QBgISTfH/Fq7N7efSxnJhuYzhvUHQ2st+XSe5cKiukRrL1AckymT/l/CBmJPXV2c VQCvSaraF8ouf0XCCFc1xYjVYSi0D8gTIgRoACBFSGyIw+BFB4zd9mmIRqYfI1Vv QtoveI8izdmuxLBlYYexTDbfAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU5PjOk5pR xSe/5klLYPxG2h9lWzswHwYDVR0jBBgwFoAUxvdY7N3EybD3LwZcNa1UaXQycRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4REY1LzMxRTBGMTZBRjk2 MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJEM0x3WmNOYTFVYVhReWNS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHZkWTdOM0V5YkQzTHdaY05hMVVhWFF5Y1JzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OERGNS8zMUUwRjE2QUY5NjAxMUVGOUQ2NzlDN0FDNEY5QUUwMi84RjM1MDkzMkY5 NjAxMUVGODlEOUUzN0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGfgXDANBgkqhkiG9w0BAQsFAAOCAQEA0/82Im8tlZ/Hq14e 7V5SLMY1ADASfStf5mMwWdAAIpop8R85kvMGwqIvzIRdcu7XbWsf72dAj992bBFy sSsDPAUNTAiqvVkEcc8XP0rRqUzoga4BZ7PRZ/i1rNwIcXSMSonbnWFDe95u8+gC P85epGYgAt0xY787OGyZj2OdQI1HJyUDX1evtTJRN6yDBzx99E4u+WeIsGvMmH+6 A5Rzd1mQ4k3kkdt8ugIsX9kLUISvF1q3JYn4oCL3G/7guLgtSQ3yxEX2Gg8Bf+tO XwZtzZzEZQygQzKapKwsrceTHNPYtJjdWKxBnk1g0u2R87kOTXSuZiVoRqqIEGE/ XReclw== -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:50 2025 by rpki-client