$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/5A65F048F19211EFA4D9CD34C4F9AE02.roa File: 5A65F048F19211EFA4D9CD34C4F9AE02.roa (raw, json) Hash identifier: 00Gxu/B4q0Oej8/UcNpQ1rIkErXZo9wae3oYgISIoHo= Subject key identifier: 42:3D:3A:49:22:53:C7:8D:49:7B:5E:62:86:CD:59:2D:EE:58:D3:C3 Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Certificate serial: A5 Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/5A65F048F19211EFA4D9CD34C4F9AE02.roa Signing time: Sun 23 Feb 2025 03:00:36 +0000 ROA not before: Sun 23 Feb 2025 03:00:36 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 133766 IP address blocks: 103.40.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Validity Not Before: Feb 23 03:00:36 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67ba8f53-93f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:93:d9:4b:4f:e3:39:00:01:4b:f0:d7:92:df: a3:60:16:cd:89:9b:4f:ee:e0:fe:53:66:ec:e3:88: ad:98:72:ad:07:28:5f:2e:c6:3c:87:f8:36:57:89: 61:87:90:20:32:5d:0e:14:6a:35:04:00:40:7a:3c: be:2f:7e:9c:60:6b:ad:99:64:38:77:02:48:0d:cf: a3:32:9b:b3:aa:b4:03:73:ff:52:c7:91:1f:fb:e7: e3:f2:fd:e0:c8:89:0b:fb:a9:37:53:43:6a:e5:74: 06:a8:a0:9b:77:62:b0:ad:2e:46:ad:50:f9:67:ef: 2e:11:bd:0c:fe:1b:ea:49:f5:fe:7d:d4:87:6b:60: 94:9d:e4:5a:a1:ed:3b:71:cd:5a:3f:ba:70:43:ad: b7:b2:e3:99:02:e4:6d:46:9f:dd:f5:40:c1:61:02: a1:6b:26:e5:45:cd:b3:98:f0:9f:c5:32:57:78:f3: 1e:c3:f8:37:e0:1d:60:86:e8:e2:ee:9f:1f:eb:cf: 31:a8:a0:12:18:20:4f:13:9e:52:87:60:86:99:62: f6:5c:2c:bf:cb:f9:cd:a1:38:16:67:92:87:5e:cd: 64:51:ed:10:d4:f9:3d:fb:73:55:2a:7a:09:96:3f: f2:7c:84:ca:52:f9:a6:9f:70:b1:99:d4:69:8a:83: 51:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3D:3A:49:22:53:C7:8D:49:7B:5E:62:86:CD:59:2D:EE:58:D3:C3 X509v3 Authority Key Identifier: keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/5A65F048F19211EFA4D9CD34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.166.0/24 Signature Algorithm: sha256WithRSAEncryption a0:46:f5:bd:0c:70:c0:76:42:df:24:b1:d9:a9:dd:73:9d:80: 68:87:4c:61:2e:24:08:8f:f0:0b:a7:0a:a4:f0:c5:c5:86:76: 2d:14:2e:a2:3a:43:44:d1:44:ca:1d:c5:d3:31:5f:e5:79:21: 1c:72:27:2c:1a:ed:52:73:77:ee:0e:6c:e5:fa:61:6c:85:29: a8:2b:0c:fe:cd:48:b9:a4:af:1d:9d:5d:61:ef:eb:2a:fe:20: 3e:0a:ff:ce:fa:12:a1:d3:ab:31:4e:29:c7:5e:df:72:7e:4d: 4d:ca:71:f4:88:d4:2d:e4:9f:58:2a:a9:7d:a4:d4:b2:76:2a: a0:06:53:f5:df:a2:22:72:e8:bc:fa:b3:6f:3d:d0:77:41:5c: e6:6e:2b:df:2e:8c:c8:d5:57:84:e0:0e:47:27:d3:7c:b5:aa: 8b:be:e9:44:2e:94:d0:d3:0c:62:71:8e:44:c9:ff:c0:d5:36: ab:d2:32:9a:a9:4a:be:ce:f3:63:17:ae:b6:e1:60:9a:9d:af: 3b:fc:80:28:77:30:9d:0b:ab:2a:30:9b:b8:3e:c6:52:3c:38: 8d:c8:49:da:99:89:25:8a:89:ed:4d:cb:00:11:04:4e:68:43: d4:be:1e:c3:13:c4:82:18:c6:13:c5:57:d8:c0:2a:3c:31:50: f0:ff:1e:5b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwMDIxMTAvBgNVBAUTKDlFRjNFNjA0QTYzRjJDRUY0QkRERTM3RENBODkwRDA0 NTE5NjdBRUMwHhcNMjUwMjIzMDMwMDM2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JhOGY1My05M2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5PZS0/jOQABS/DXkt+jYBbNiZtP7uD+U2bs44itmHKtByhfLsY8h/g2V4lh h5AgMl0OFGo1BABAejy+L36cYGutmWQ4dwJIDc+jMpuzqrQDc/9Sx5Ef++fj8v3g yIkL+6k3U0Nq5XQGqKCbd2KwrS5GrVD5Z+8uEb0M/hvqSfX+fdSHa2CUneRaoe07 cc1aP7pwQ623suOZAuRtRp/d9UDBYQKhayblRc2zmPCfxTJXePMew/g34B1ghuji 7p8f688xqKASGCBPE55Sh2CGmWL2XCy/y/nNoTgWZ5KHXs1kUe0Q1Pk9+3NVKnoJ lj/yfITKUvmmn3CxmdRpioNRtwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEI9Okki U8eNSXteYobNWS3uWNPDMB8GA1UdIwQYMBaAFJ7z5gSmPyzvS93jfcqJDQRRlnrs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjAwMi9FMjRGODIzNDAy MkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xPOUwzZU45eW9rTkJGR1dl dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252UG1CS1lfTE85TDNlTjl5b2tOQkZHV2V1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUIwMDIvRTI0RjgyMzQwMjJFMTFFRjg1NkY1MTMyQzRGOUFFMDIvNUE2NUYwNDhG MTkyMTFFRkE0RDlDRDM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnKKYwDQYJKoZIhvcNAQELBQADggEBAKBG9b0McMB2Qt8k sdmp3XOdgGiHTGEuJAiP8AunCqTwxcWGdi0ULqI6Q0TRRModxdMxX+V5IRxyJywa 7VJzd+4ObOX6YWyFKagrDP7NSLmkrx2dXWHv6yr+ID4K/876EqHTqzFOKcde33J+ TU3KcfSI1C3kn1gqqX2k1LJ2KqAGU/XfoiJy6Lz6s2890HdBXOZuK98ujMjVV4Tg Dkcn03y1qou+6UQulNDTDGJxjkTJ/8DVNqvSMpqpSr7O82MXrrbhYJqdrzv8gCh3 MJ0Lqyowm7g+xlI8OI3ISdqZiSWKie1NywARBE5oQ9S+HsMTxIIYxhPFV9jAKjwx UPD/Hls= -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:29 2025 by rpki-client