$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/457C2AF8210811F092050034C4F9AE02.roa File: 457C2AF8210811F092050034C4F9AE02.roa (raw, json) Hash identifier: OjVTFs0VsRJxE3nsbT8pc64Ppj8ueIQpuGe0jj3NYdw= Subject key identifier: DD:ED:13:43:3E:8D:39:55:00:0E:8D:79:79:A1:EE:77:AA:01:98:BA Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 06CC Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/457C2AF8210811F092050034C4F9AE02.roa Signing time: Thu 24 Apr 2025 12:33:06 +0000 ROA not before: Thu 24 Apr 2025 12:33:06 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 212879 IP address blocks: 103.208.253.0/24 maxlen: 24 103.208.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Validity Not Before: Apr 24 12:33:06 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=680a2f82-d896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:c0:fa:9a:e7:e0:64:88:b7:5e:3d:88:cb: 0e:aa:5e:77:35:c4:bd:e4:96:0f:07:1c:39:1b:81: e6:91:b8:f9:55:3d:24:2d:3d:6c:96:38:7a:75:3a: e7:8e:84:98:3b:78:ab:be:53:5f:74:c0:8c:aa:d2: 70:92:e1:d2:24:94:33:d8:71:e1:17:ad:25:1d:93: cf:a3:16:1e:bf:a2:54:4d:a2:d5:7d:4a:b9:0c:35: 1f:6d:94:67:f1:b6:b5:16:c4:75:a6:d2:da:2e:82: 2b:65:24:47:b5:8a:52:12:b2:4b:dc:50:ed:0c:2c: c4:6f:f4:82:82:4b:6b:0f:f9:18:7b:67:d5:ac:5e: b2:16:f8:1e:3b:8f:1e:0a:d2:61:68:b6:39:42:e4: 50:d5:e6:3f:43:e2:2d:7d:b9:a0:d7:1e:d2:39:8e: ad:04:2c:ee:b1:8b:66:36:b1:65:95:60:2e:cb:72: 50:c8:d9:c5:74:4b:8a:83:c8:12:d1:4d:74:82:58: e0:e3:6b:89:09:ef:3b:42:aa:44:81:b3:38:a1:c9: 0b:76:7d:8a:7f:61:d4:24:70:2b:12:64:28:98:cd: 35:26:fa:e9:e3:45:42:2e:98:0c:ce:ea:7f:69:55: e1:e5:21:db:c4:7c:b7:d1:df:46:67:53:36:e8:40: ce:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:ED:13:43:3E:8D:39:55:00:0E:8D:79:79:A1:EE:77:AA:01:98:BA X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/457C2AF8210811F092050034C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.208.253.0-103.208.254.255 Signature Algorithm: sha256WithRSAEncryption 7b:1d:18:63:d6:5b:e4:94:71:0d:4a:76:25:b2:c0:1b:8b:60: da:78:d9:85:05:1c:e4:88:6a:b2:28:98:46:0f:62:18:dd:76: 71:40:60:ac:4a:db:60:b2:59:97:91:a7:b9:1a:f9:8b:de:cd: f0:4e:20:d9:b2:40:0a:f0:d3:68:d8:56:82:6d:f4:f1:4d:73: cd:06:d7:19:3e:a6:b3:4b:aa:c8:f0:20:5c:4f:06:26:62:9a: 9a:e7:4e:38:12:e8:9f:9d:de:ce:ef:ad:21:21:7c:90:7b:31: 73:35:6c:c8:f5:e8:43:86:dc:c7:e6:84:5d:24:2e:d3:25:28: e6:4c:51:96:03:13:c1:f8:c7:22:c2:ac:42:75:0f:5d:ad:3f: b9:1e:cd:e2:17:e6:b3:a2:6e:9b:c6:d9:97:09:b7:ca:55:be: 4a:2b:b9:99:2f:a5:16:d8:d4:7c:56:eb:8d:10:45:ce:c5:17: 47:4e:d1:55:29:b7:7d:d8:39:e8:ee:f8:08:36:d6:99:23:20: c8:b1:fa:80:55:ba:f5:f7:bc:e7:1e:30:ea:59:a9:4e:3b:4b: 9b:56:4a:33:c9:73:92:12:ad:1f:d3:94:f7:c0:33:05:5a:c1: 24:a1:99:6d:b6:04:e1:83:19:48:98:2e:28:26:af:89:35:26: c7:52:3b:02 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjUwNDI0MTIzMzA2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhMmY4Mi1kODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/jA+prn4GSIt149iMsOql53NcS95JYPBxw5G4Hmkbj5VT0kLT1sljh6dTrn joSYO3irvlNfdMCMqtJwkuHSJJQz2HHhF60lHZPPoxYev6JUTaLVfUq5DDUfbZRn 8ba1FsR1ptLaLoIrZSRHtYpSErJL3FDtDCzEb/SCgktrD/kYe2fVrF6yFvgeO48e CtJhaLY5QuRQ1eY/Q+Itfbmg1x7SOY6tBCzusYtmNrFllWAuy3JQyNnFdEuKg8gS 0U10gljg42uJCe87QqpEgbM4ockLdn2Kf2HUJHArEmQomM01Jvrp40VCLpgMzup/ aVXh5SHbxHy30d9GZ1M26EDOCwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFN3tE0M+ jTlVAA6NeXmh7neqAZi6MB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVFMUIvMjA2REZDMjg2NDM4MTFFQjk0NjgzQjRFQzRGOUFFMDIvNDU3QzJBRjgy MTA4MTFGMDkyMDUwMDM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGfQ/QMEAGfQ/jANBgkqhkiG9w0BAQsFAAOCAQEAex0Y Y9Zb5JRxDUp2JbLAG4tg2njZhQUc5IhqsiiYRg9iGN12cUBgrErbYLJZl5GnuRr5 i97N8E4g2bJACvDTaNhWgm308U1zzQbXGT6ms0uqyPAgXE8GJmKamudOOBLon53e zu+tISF8kHsxczVsyPXoQ4bcx+aEXSQu0yUo5kxRlgMTwfjHIsKsQnUPXa0/uR7N 4hfms6Jum8bZlwm3ylW+Siu5mS+lFtjUfFbrjRBFzsUXR07RVSm3fdg56O74CDbW mSMgyLH6gFW69fe85x4w6lmpTjtLm1ZKM8lzkhKtH9OU98AzBVrBJKGZbbYE4YMZ SJguKCaviTUmx1I7Ag== -----END CERTIFICATE-----Generated at Sat Apr 26 08:12:26 2025 by rpki-client