$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/7D215B2CC3C111EE8F83CE1AC4F9AE02.roa File: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (raw, json) Hash identifier: F/z+I89rbfmUmRP3rbYTqCe+U6Y/OrtE9gxYZLyyaAE= Subject key identifier: 12:F3:56:7E:0F:7A:F7:64:95:A2:07:07:67:57:C8:F3:1F:E9:59:6B Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 01C6 Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/7D215B2CC3C111EE8F83CE1AC4F9AE02.roa Signing time: Tue 03 Jun 2025 03:21:08 +0000 ROA not before: Tue 03 Jun 2025 03:21:08 +0000 ROA not after: Wed 01 Oct 2025 00:00:00 +0000 asID: 139351 IP address blocks: 103.121.6.0/24 maxlen: 24 103.121.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: Jun 3 03:21:08 2025 GMT Not After : Oct 1 00:00:00 2025 GMT Subject: CN=683e6a24-4a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:78:f0:ad:fd:93:97:23:67:8f:4b:03:7f:2f: 97:3b:fc:8e:d4:2b:6f:cb:37:f9:79:51:a2:fb:7d: 24:ac:73:4e:d7:76:37:16:b4:3f:24:7c:15:f2:03: 9b:18:ca:d8:e0:98:63:fc:e1:57:3f:ea:f1:c1:8a: 98:59:f2:61:d4:37:1a:f3:9e:b0:b3:01:15:83:e6: 76:2c:10:e7:35:68:3c:e0:a6:6f:c5:7c:cc:e2:a3: 27:b2:ca:27:71:03:f4:e2:6a:c5:1c:27:2d:c7:22: 3a:fc:44:45:bb:dc:69:2e:60:81:00:d6:b9:a3:72: 9b:fb:ea:51:49:df:a5:2e:43:94:73:f2:ec:52:71: b1:3b:e7:58:48:86:0b:13:a4:25:36:ee:c2:84:8a: 47:a4:8b:39:a7:b7:ef:d1:7a:9e:86:c9:6a:bf:a2: 09:57:17:27:1a:b7:e8:5f:bc:6e:c2:d6:0c:e7:f3: ca:b5:a8:1b:52:26:dd:bc:40:c0:42:c4:7d:1c:2b: 5e:ba:f0:83:07:29:23:62:65:e6:a5:26:9c:94:41: 7c:7d:92:5e:d4:99:1b:3f:fd:af:5d:39:23:f9:4a: e8:5b:60:d4:52:06:e1:f1:d2:17:48:2b:fe:72:e9: 9f:45:43:df:78:ce:fc:a4:e6:48:13:76:3b:30:41: 16:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F3:56:7E:0F:7A:F7:64:95:A2:07:07:67:57:C8:F3:1F:E9:59:6B X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/7D215B2CC3C111EE8F83CE1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.6.0/23 Signature Algorithm: sha256WithRSAEncryption 33:2e:34:e9:f1:af:13:e4:7c:5f:61:03:95:d7:8b:1a:9f:56: 78:65:0b:73:52:67:0b:38:a7:03:63:d1:c0:4c:fc:a5:74:99: 34:d4:58:3b:92:e4:aa:25:b0:30:3a:51:bb:37:cd:24:57:c1: 8d:a7:95:f0:15:52:10:35:0b:1d:97:96:dc:2a:fa:62:e8:11: e4:b0:25:53:c8:89:42:f5:c7:7f:d2:95:59:1f:82:73:38:a5: a6:57:b6:4c:ac:04:87:7e:72:a5:ee:f8:52:ca:b2:a9:8a:0d: b3:c1:03:c2:66:32:2f:42:2b:08:c8:b4:e7:aa:6d:d1:23:5e: e8:15:9a:7f:f7:39:63:b1:f1:4c:ae:27:7c:78:2b:51:f1:f4: 63:c5:17:ec:6f:ff:c1:f6:ef:cb:35:81:c4:d1:e8:0f:2f:6b: 77:9a:d2:bc:79:4b:96:00:88:32:85:8d:5d:38:fa:89:cb:e0: 71:29:8a:33:53:ca:d8:ef:d8:87:f8:fb:fd:c7:34:1b:c7:9f: a6:bc:54:f4:59:3e:3f:9c:14:60:10:f3:e9:dd:dd:c7:1c:45: 84:d8:5f:ad:2e:83:81:7c:9a:b2:20:1a:f5:72:b2:4a:ed:18: 04:39:78:cc:3c:9a:dd:59:79:b3:36:be:8e:c9:4c:93:cf:2c: b2:da:c6:32 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjUwNjAzMDMyMTA4WhcNMjUxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlNmEyNC00YTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Hjwrf2TlyNnj0sDfy+XO/yO1Ctvyzf5eVGi+30krHNO13Y3FrQ/JHwV8gOb GMrY4Jhj/OFXP+rxwYqYWfJh1Dca856wswEVg+Z2LBDnNWg84KZvxXzM4qMnsson cQP04mrFHCctxyI6/ERFu9xpLmCBANa5o3Kb++pRSd+lLkOUc/LsUnGxO+dYSIYL E6QlNu7ChIpHpIs5p7fv0Xqehslqv6IJVxcnGrfoX7xuwtYM5/PKtagbUibdvEDA QsR9HCteuvCDBykjYmXmpSaclEF8fZJe1JkbP/2vXTkj+UroW2DUUgbh8dIXSCv+ cumfRUPfeM78pOZIE3Y7MEEWrQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBLzVn4P evdklaIHB2dXyPMf6VlrMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUZBRkYvRDA2MTFGMDRDQzQ0MTFFRDlBNzFFMTBDQzRGOUFFMDIvN0QyMTVCMkND M0MxMTFFRThGODNDRTFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFneQYwDQYJKoZIhvcNAQELBQADggEBADMuNOnxrxPkfF9h A5XXixqfVnhlC3NSZws4pwNj0cBM/KV0mTTUWDuS5KolsDA6Ubs3zSRXwY2nlfAV UhA1Cx2Xltwq+mLoEeSwJVPIiUL1x3/SlVkfgnM4paZXtkysBId+cqXu+FLKsqmK DbPBA8JmMi9CKwjItOeqbdEjXugVmn/3OWOx8UyuJ3x4K1Hx9GPFF+xv/8H278s1 gcTR6A8va3ea0rx5S5YAiDKFjV04+onL4HEpijNTytjv2If4+/3HNBvHn6a8VPRZ Pj+cFGAQ8+nd3cccRYTYX60ug4F8mrIgGvVyskrtGAQ5eMw8mt1ZebM2vo7JTJPP LLLaxjI= -----END CERTIFICATE-----Generated at Sun Jun 15 05:40:59 2025 by rpki-client