$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/8F350932F96011EF89D9E37DC4F9AE02.roa File: 8F350932F96011EF89D9E37DC4F9AE02.roa (raw, json) Hash identifier: EiButkFaJmxH2f9GmfvH+3lmi0BQDdaX71kUaJ4cIPE= Subject key identifier: BD:D6:73:EA:AE:15:E8:8B:DB:64:C3:0B:F7:09:82:92:09:55:1D:23 Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Certificate serial: 34 Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/8F350932F96011EF89D9E37DC4F9AE02.roa Signing time: Tue 27 May 2025 07:46:28 +0000 ROA not before: Tue 27 May 2025 07:46:28 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 215364 IP address blocks: 103.224.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 04:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Validity Not Before: May 27 07:46:28 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68356dd4-8806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:14:0a:d3:09:0c:36:9c:cf:cc:9d:c1:00:57: 9b:ff:ff:88:c5:c5:aa:72:3e:9e:bd:8e:b0:40:a6: b6:4f:3a:29:c3:8e:10:aa:e5:62:ad:96:d8:10:07: 6e:68:dc:51:eb:b4:03:5c:be:2e:35:63:90:23:10: 0a:53:b3:84:47:17:d3:2d:73:55:cf:ca:b6:9c:60: d4:22:82:97:19:06:13:78:5b:f7:07:4b:97:7c:79: a9:d9:ce:6a:d1:61:b0:b1:28:03:91:b8:5b:ef:3a: 01:44:10:20:a7:39:d8:39:c7:85:6c:33:b5:f7:49: cf:60:06:6f:ce:53:10:b9:cb:4b:3a:80:cc:63:06: db:c6:b5:d5:93:f1:5f:2d:f1:15:8f:2d:3a:eb:e1: 4c:2c:76:87:8c:fb:20:80:54:e2:cd:83:bc:54:be: ee:99:ee:00:a1:6e:65:26:db:c1:60:4b:e4:63:d8: 72:3b:df:cf:35:26:2a:98:58:76:04:0d:5b:d0:45: d4:e7:3c:7c:60:31:bc:30:25:23:0c:64:9c:b0:eb: a8:27:50:b7:31:47:8f:d2:7b:69:52:35:bc:20:fd: b4:44:fa:fb:7e:82:95:77:36:12:9b:3c:73:b9:fe: 64:ea:4d:6c:97:89:19:e6:61:42:25:c0:84:01:e6: 3b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D6:73:EA:AE:15:E8:8B:DB:64:C3:0B:F7:09:82:92:09:55:1D:23 X509v3 Authority Key Identifier: keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/8F350932F96011EF89D9E37DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.224.92.0/24 Signature Algorithm: sha256WithRSAEncryption bf:96:4b:32:92:8a:55:7d:37:b0:f0:af:19:c1:a9:d7:b9:48: e2:ca:26:d6:c0:55:24:bb:f5:0c:04:51:12:75:be:a3:dc:de: b9:66:f6:54:1f:00:14:8e:46:ed:23:60:5b:15:b5:5e:d9:d2: 3b:4d:f1:85:92:61:84:25:ed:a5:c8:89:bc:e8:cd:b6:78:b0: 63:3c:fe:c9:6a:a2:a5:d0:b4:8c:19:b4:fd:30:a5:b1:1d:5f: e3:4d:fc:60:fe:de:4a:9a:f5:bb:f6:5d:3c:1b:1b:7a:c6:23: 41:fa:c2:1c:06:f8:c1:90:d6:4c:ae:ff:d1:96:d7:9b:44:c7: be:ba:51:ec:98:e3:37:75:d5:9e:86:1c:f1:53:1c:ae:9e:7d: 9c:4b:cf:c6:ea:8c:ec:1c:12:46:83:5f:c4:15:b8:7c:80:22: a5:ff:a6:2e:cb:d7:47:52:46:50:33:b9:d0:e2:0d:08:06:27: be:e6:ed:27:5c:96:f2:2c:ee:dc:46:b8:3d:e9:4b:c4:c5:e7: ac:3c:f3:b0:af:88:5b:6f:4e:ee:98:bd:9f:1c:ca:46:fd:50: 0e:e1:07:e5:fd:ce:8a:39:25:11:b9:e9:26:ad:09:7b:01:56: 77:07:87:ee:22:44:92:dc:03:eb:77:55:01:3e:a0:50:bb:b7: e6:53:88:a0 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OERGNTExMC8GA1UEBRMoQzZGNzU4RUNEREM0QzlCMEY3MkYwNjVDMzVBRDU0Njk3 NDMyNzExQjAeFw0yNTA1MjcwNzQ2MjhaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MzU2ZGQ0LTg4MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdFArTCQw2nM/MncEAV5v//4jFxapyPp69jrBAprZPOinDjhCq5WKtltgQB25o 3FHrtANcvi41Y5AjEApTs4RHF9Mtc1XPyracYNQigpcZBhN4W/cHS5d8eanZzmrR YbCxKAORuFvvOgFEECCnOdg5x4VsM7X3Sc9gBm/OUxC5y0s6gMxjBtvGtdWT8V8t 8RWPLTrr4UwsdoeM+yCAVOLNg7xUvu6Z7gChbmUm28FgS+Rj2HI73881JiqYWHYE DVvQRdTnPHxgMbwwJSMMZJyw66gnULcxR4/Se2lSNbwg/bRE+vt+gpV3NhKbPHO5 /mTqTWyXiRnmYUIlwIQB5juFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUvdZz6q4V 6IvbZMML9wmCkglVHSMwHwYDVR0jBBgwFoAUxvdY7N3EybD3LwZcNa1UaXQycRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4REY1LzMxRTBGMTZBRjk2 MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJEM0x3WmNOYTFVYVhReWNS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHZkWTdOM0V5YkQzTHdaY05hMVVhWFF5Y1JzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OERGNS8zMUUwRjE2QUY5NjAxMUVGOUQ2NzlDN0FDNEY5QUUwMi84RjM1MDkzMkY5 NjAxMUVGODlEOUUzN0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGfgXDANBgkqhkiG9w0BAQsFAAOCAQEAv5ZLMpKKVX03sPCv GcGp17lI4som1sBVJLv1DARREnW+o9zeuWb2VB8AFI5G7SNgWxW1XtnSO03xhZJh hCXtpciJvOjNtniwYzz+yWqipdC0jBm0/TClsR1f4038YP7eSpr1u/ZdPBsbesYj QfrCHAb4wZDWTK7/0ZbXm0THvrpR7JjjN3XVnoYc8VMcrp59nEvPxuqM7BwSRoNf xBW4fIAipf+mLsvXR1JGUDO50OINCAYnvubtJ1yW8izu3Ea4PelLxMXnrDzzsK+I W29O7pi9nxzKRv1QDuEH5f3OijklEbnpJq0JewFWdweH7iJEktwD63dVAT6gULu3 5lOIoA== -----END CERTIFICATE-----Generated at Wed Jun 18 13:52:47 2025 by rpki-client