$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/C7A9FD140A1811EABA1D8360C4F9AE02.roa File: C7A9FD140A1811EABA1D8360C4F9AE02.roa (raw, json) Hash identifier: Uknlu+cVOx+/Wfd55Xm8q9rrjIfJZmgZBP6NACfQzcs= Subject key identifier: 0B:0C:B4:58:BB:97:FD:AB:EA:D7:9F:55:EE:B1:ED:24:02:07:45:2C Certificate issuer: /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Certificate serial: 0C40 Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/C7A9FD140A1811EABA1D8360C4F9AE02.roa Signing time: Fri 04 Apr 2025 18:57:52 +0000 ROA not before: Fri 04 Apr 2025 18:57:52 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 137440 IP address blocks: 103.108.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3136 (0xc40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBEA, serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Validity Not Before: Apr 4 18:57:52 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f02bb0-26fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:92:e8:7e:5c:d9:ea:9b:7b:f0:9a:19:0e:20: b5:50:54:a4:ef:82:e5:9c:9e:99:08:21:2c:92:b8: 15:e3:70:1c:2b:d4:7a:4b:70:c1:44:03:b8:b1:5e: 43:d3:b3:58:07:e0:6d:51:af:7b:bd:c0:38:cc:cb: c6:7d:c9:98:1a:22:af:91:0a:46:62:e5:e3:3f:3c: 43:b4:52:ab:e6:77:5a:9f:09:47:d9:42:b0:b5:78: a7:df:b6:ee:d6:63:52:7b:e0:d8:cd:1a:4d:11:85: 56:92:5d:72:bf:52:cc:75:3b:13:b8:84:7a:fb:62: 40:bd:f0:8d:84:a8:66:c8:81:56:f5:49:17:20:96: 9d:20:e6:9f:5c:50:c0:9c:aa:8b:f7:45:9e:ea:95: b2:70:63:48:ef:a8:5d:24:dd:93:c7:31:60:34:1d: 0b:d0:59:f5:7d:50:9b:63:9f:71:70:c5:fc:56:ca: 3c:84:74:71:4a:f4:23:8d:50:2f:27:96:da:f4:fa: 91:22:49:51:b3:f2:d8:d4:de:5c:23:95:6d:d2:0b: f6:3b:f0:07:95:ee:6b:84:66:b4:13:9d:b5:87:fe: 6e:0d:b6:3f:7a:88:67:25:72:0f:50:7a:d9:83:c6: cd:9c:47:47:a5:66:84:36:31:9d:7d:79:f4:d1:e0: 56:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0C:B4:58:BB:97:FD:AB:EA:D7:9F:55:EE:B1:ED:24:02:07:45:2C X509v3 Authority Key Identifier: keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/C7A9FD140A1811EABA1D8360C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.108.218.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:e1:5b:73:30:43:8e:b9:c6:0b:79:1e:52:fe:b9:44:af:35: 2d:b6:e2:be:52:36:40:a7:ae:d9:07:34:15:21:93:7c:a9:da: 34:de:67:af:6e:19:b8:78:54:61:c4:25:2a:00:72:44:2e:76: 57:ff:77:a7:7a:01:30:e5:f5:d7:c0:f9:c2:92:85:c8:fd:11: 6f:64:57:a6:59:13:16:91:8e:a8:de:b0:89:af:82:b2:5c:a2: 13:49:40:db:6f:b5:97:fb:d5:c5:03:a8:27:79:a7:00:89:93: 1e:8f:ea:be:ec:0b:7a:ac:2f:88:e6:e3:99:14:e7:79:94:4e: 7a:99:af:8e:a3:67:88:a5:83:b8:86:90:df:91:e3:00:b4:de: 88:8e:69:4d:57:06:c7:19:8b:f6:16:9c:de:00:26:2b:d2:b7: 80:fd:45:09:b4:f0:5f:0d:e9:32:f2:ed:12:17:64:88:bd:27: 89:54:c8:2b:79:cd:0d:c0:55:21:ba:d0:a2:d1:fd:f5:de:c4: 69:13:dd:9e:08:69:7d:40:1e:e6:2e:a8:09:54:52:db:7b:6a: 68:88:5f:65:7f:4e:09:b2:a6:2c:28:c4:30:e2:a5:23:83:58: d8:d5:84:8b:b7:35:2c:96:1b:9e:1d:91:10:08:ec:95:0c:a0: 8e:cd:15:c6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCRUExMTAvBgNVBAUTKEY5MzA4MjkyNDM2RDEwQUE5ODcyNkI0NkZDRkNCRUEw NzkxOTRGNEYwHhcNMjUwNDA0MTg1NzUyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2YwMmJiMC0yNmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJLoflzZ6pt78JoZDiC1UFSk74LlnJ6ZCCEskrgV43AcK9R6S3DBRAO4sV5D 07NYB+BtUa97vcA4zMvGfcmYGiKvkQpGYuXjPzxDtFKr5ndanwlH2UKwtXin37bu 1mNSe+DYzRpNEYVWkl1yv1LMdTsTuIR6+2JAvfCNhKhmyIFW9UkXIJadIOafXFDA nKqL90We6pWycGNI76hdJN2TxzFgNB0L0Fn1fVCbY59xcMX8Vso8hHRxSvQjjVAv J5ba9PqRIklRs/LY1N5cI5Vt0gv2O/AHle5rhGa0E521h/5uDbY/eohnJXIPUHrZ g8bNnEdHpWaENjGdfXn00eBWmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAsMtFi7 l/2r6tefVe6x7SQCB0UsMB8GA1UdIwQYMBaAFPkwgpJDbRCqmHJrRvz8vqB5GU9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJFQS83QzlDNTkxODAx RDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVLcVljbXRHX1B5LW9Ia1pU MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1UQ0Nra050RUtxWWNtdEdfUHktb0hrWlQwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUZCRUEvN0M5QzU5MTgwMUQ4MTFFQUI3RDdCNDQ0QzRGOUFFMDIvQzdBOUZEMTQw QTE4MTFFQUJBMUQ4MzYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnbNowDQYJKoZIhvcNAQELBQADggEBACvhW3MwQ465xgt5 HlL+uUSvNS224r5SNkCnrtkHNBUhk3yp2jTeZ69uGbh4VGHEJSoAckQudlf/d6d6 ATDl9dfA+cKShcj9EW9kV6ZZExaRjqjesImvgrJcohNJQNtvtZf71cUDqCd5pwCJ kx6P6r7sC3qsL4jm45kU53mUTnqZr46jZ4ilg7iGkN+R4wC03oiOaU1XBscZi/YW nN4AJivSt4D9RQm08F8N6TLy7RIXZIi9J4lUyCt5zQ3AVSG60KLR/fXexGkT3Z4I aX1AHuYuqAlUUtt7amiIX2V/TgmypiwoxDDipSODWNjVhIu3NSyWG54dkRAI7JUM oI7NFcY= -----END CERTIFICATE-----Generated at Sat Apr 26 08:01:11 2025 by rpki-client