$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/4E67247C681911EFA2640B43C4F9AE02.roa File: 4E67247C681911EFA2640B43C4F9AE02.roa (raw, json) Hash identifier: ucm8jiY7/TEfoe7vYt6Xy9WiiLrmTGt3Yko/V2TTwzI= Subject key identifier: C5:BF:19:DB:B5:78:51:AB:C2:CF:D9:0F:61:C8:8F:52:0C:5A:36:C8 Certificate issuer: /CN=A91ECBD9/serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099 Certificate serial: 7D Authority key identifier: 63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/4E67247C681911EFA2640B43C4F9AE02.roa Signing time: Fri 25 Apr 2025 06:02:30 +0000 ROA not before: Fri 25 Apr 2025 06:02:30 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152729 IP address blocks: 103.57.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECBD9, serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099 Validity Not Before: Apr 25 06:02:30 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=680b2576-e6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:40:1b:15:2a:b4:92:59:1e:9e:6c:73:c7: f4:93:78:fa:38:3c:01:c4:08:5d:42:59:65:2b:b3: 2e:63:cf:ee:ec:db:cf:a4:26:45:39:13:9d:75:d3: df:2a:56:a2:a3:36:a9:42:7c:1a:f9:e6:1a:51:a9: 55:23:4e:cf:df:f6:e8:0b:cd:75:59:9e:a4:8d:0e: ca:1e:3a:4f:8a:71:c0:d5:33:4f:1e:80:f1:4a:41: d8:bc:55:97:fe:b3:e7:ae:fd:26:11:fd:24:2c:82: d4:7b:8a:21:28:56:55:f8:ba:32:ed:8a:08:19:44: 78:7d:fd:fe:4d:21:b9:92:61:0c:d0:2f:48:3e:bf: d2:5a:c7:5d:de:99:f1:92:67:50:11:13:8e:ae:4c: ac:3d:61:36:8e:e2:0f:44:a1:6c:ab:f7:ac:dc:c7: 7e:97:d1:e8:27:6f:2a:1b:49:3b:ea:a5:13:8e:2e: 36:56:71:10:df:da:75:a7:b8:f9:3f:0f:0c:0b:ef: 90:a2:13:0e:fb:8e:a9:ec:e3:1f:eb:7d:9f:ba:54: 4d:28:00:77:91:1d:c6:83:f9:07:2e:b7:96:ac:a1: 4b:ce:23:bc:e2:69:68:8b:95:f4:71:6d:5f:53:5d: 16:3b:0d:44:57:ec:ac:61:2b:4f:73:5c:1c:37:0b: b5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BF:19:DB:B5:78:51:AB:C2:CF:D9:0F:61:C8:8F:52:0C:5A:36:C8 X509v3 Authority Key Identifier: keyid:63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/4E67247C681911EFA2640B43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.57.148.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:72:06:7e:89:b2:ff:04:3b:5e:df:e7:e6:27:01:f5:ac:8c: 0a:1e:77:da:5a:35:a2:d4:2e:bf:32:c5:00:44:33:e2:68:57: 0b:7c:7e:12:62:15:a1:9f:7b:17:49:e3:d9:5d:0c:34:6b:50: 8d:27:17:4b:01:e8:d0:f8:ad:1a:af:81:38:39:4f:f8:eb:81: 18:0d:e2:ab:a8:6a:e1:60:93:ca:b2:df:c9:97:3a:f2:2e:84: 2a:e4:57:4f:d8:d5:89:cd:ea:a5:8c:97:a9:6f:35:8b:08:40: 9a:a5:35:7e:c8:06:27:5e:9f:ec:b4:50:ce:ef:11:88:ee:b6: 9e:ac:68:d7:76:58:8b:1d:97:1d:29:68:6f:27:2d:8c:12:55: 02:ef:b6:cb:4b:02:ec:99:15:67:2a:1b:88:86:b6:ba:c5:b4: a6:a7:9a:07:32:f4:03:c3:7c:0a:3a:de:fe:7a:28:3c:31:05: d8:7c:2c:01:41:37:67:ad:38:7a:01:ac:dc:f8:d0:48:8f:cf: e6:55:3d:78:b4:c4:1c:66:6c:49:02:0f:5d:57:10:e4:d9:93: 69:df:d1:0b:f9:19:56:f3:aa:39:bf:4d:9b:91:c6:fb:a9:27: f1:fe:6c:11:eb:a2:a0:38:20:43:29:e3:f3:63:a0:48:5c:24: c9:5d:bb:0a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Q0JEOTExMC8GA1UEBRMoNjNCQTI4MUQ1NkZBNEZFNkU1MzVCMTI1RTE2REY4MDFE MTJGODA5OTAeFw0yNTA0MjUwNjAyMzBaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MGIyNTc2LWU2ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4qkAbFSq0klkenmxzx/STePo4PAHECF1CWWUrsy5jz+7s28+kJkU5E511098q VqKjNqlCfBr55hpRqVUjTs/f9ugLzXVZnqSNDsoeOk+KccDVM08egPFKQdi8VZf+ s+eu/SYR/SQsgtR7iiEoVlX4ujLtiggZRHh9/f5NIbmSYQzQL0g+v9Jax13emfGS Z1ARE46uTKw9YTaO4g9EoWyr96zcx36X0egnbyobSTvqpROOLjZWcRDf2nWnuPk/ DwwL75CiEw77jqns4x/rfZ+6VE0oAHeRHcaD+Qcut5asoUvOI7ziaWiLlfRxbV9T XRY7DURX7KxhK09zXBw3C7WJAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUxb8Z27V4 UavCz9kPYciPUgxaNsgwHwYDVR0jBBgwFoAUY7ooHVb6T+blNbEl4W34AdEvgJkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDQkQ5L0UwNDZCMEI2Njgx ODExRUY5QTUzRTkxOEM0RjlBRTAyL1k3b29IVmI2VC1ibE5iRWw0VzM0QWRFdmdK ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTdvb0hWYjZULWJsTmJFbDRXMzRBZEV2Z0prLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0JEOS9FMDQ2QjBCNjY4MTgxMUVGOUE1M0U5MThDNEY5QUUwMi80RTY3MjQ3QzY4 MTkxMUVGQTI2NDBCNDNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWc5lDANBgkqhkiG9w0BAQsFAAOCAQEAa3IGfomy/wQ7Xt/n 5icB9ayMCh532lo1otQuvzLFAEQz4mhXC3x+EmIVoZ97F0nj2V0MNGtQjScXSwHo 0PitGq+BODlP+OuBGA3iq6hq4WCTyrLfyZc68i6EKuRXT9jVic3qpYyXqW81iwhA mqU1fsgGJ16f7LRQzu8RiO62nqxo13ZYix2XHSlobyctjBJVAu+2y0sC7JkVZyob iIa2usW0pqeaBzL0A8N8Cjre/nooPDEF2HwsAUE3Z604egGs3PjQSI/P5lU9eLTE HGZsSQIPXVcQ5NmTad/RC/kZVvOqOb9Nm5HG+6kn8f5sEeuioDggQynj82OgSFwk yV27Cg== -----END CERTIFICATE-----Generated at Sat Apr 26 08:14:11 2025 by rpki-client