$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/7659B89AADCC11ED84051211C4F9AE02.roa File: 7659B89AADCC11ED84051211C4F9AE02.roa (raw, json) Hash identifier: S0QCets6nYQwhXbRnwnSRy3OBYGEXLOm6h5sFxoClJ8= Subject key identifier: 65:90:CC:FA:13:CB:50:8E:63:C3:5F:D7:A8:9A:3D:F0:5E:76:47:F4 Certificate issuer: /CN=A91F0721/serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6 Certificate serial: 0170 Authority key identifier: 04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/7659B89AADCC11ED84051211C4F9AE02.roa Signing time: Wed 29 Jan 2025 02:37:00 +0000 ROA not before: Wed 29 Jan 2025 02:37:00 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 139802 IP address blocks: 103.145.102.0/23 maxlen: 23 103.145.102.0/24 maxlen: 24 103.145.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0721, serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6 Validity Not Before: Jan 29 02:37:00 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6799944b-0147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:7f:50:c5:ac:8b:46:52:92:32:95:7d:d6: c6:92:7f:f4:19:d0:f3:a3:e7:d7:ea:98:3f:b6:08: dc:af:4f:1e:d1:7f:01:55:a8:16:ff:10:65:f2:b9: bb:b0:71:48:d8:5c:0b:4a:63:02:c1:d3:d4:0c:51: 1b:a2:53:4f:c2:27:69:54:5d:cc:b5:66:3e:a1:87: 97:2c:95:65:b9:bd:86:e3:ac:d4:f7:56:f5:c3:ee: bc:a6:63:32:c5:7b:7e:66:48:ef:3a:90:e1:dc:e2: e6:cc:3a:df:fa:c3:de:ba:d2:d3:9c:bb:e2:2f:c3: 9b:e9:6d:28:88:0d:00:9b:3d:73:6c:62:3c:72:76: 30:19:e1:3e:d6:b2:a9:1e:0c:9e:23:b3:6c:91:a5: 21:4e:b3:52:9c:58:91:d0:c4:f6:03:0b:cb:a7:ff: 22:aa:df:f9:c0:11:c0:ed:1e:41:34:bb:2f:f7:1b: e8:ca:d8:8b:24:26:ce:60:17:dc:44:11:25:1d:d9: ae:b7:ed:18:00:68:71:bc:b7:f4:7e:0b:55:5e:8e: 9a:34:5c:34:e7:d5:5c:4d:65:31:29:3f:5d:b0:2b: 94:89:34:70:cf:d1:8e:ea:02:41:fa:02:0d:2a:af: e9:82:35:ed:0f:a2:72:7a:c5:87:1d:11:0a:f4:cc: 8d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:90:CC:FA:13:CB:50:8E:63:C3:5F:D7:A8:9A:3D:F0:5E:76:47:F4 X509v3 Authority Key Identifier: keyid:04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/7659B89AADCC11ED84051211C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.102.0/23 Signature Algorithm: sha256WithRSAEncryption 16:64:24:45:d1:26:d4:66:3d:4e:65:70:b2:ba:7a:37:07:6c: a6:fb:46:ed:04:a8:2d:56:1f:60:9e:c4:76:8d:6c:92:61:e3: 7c:e7:13:81:f5:f2:83:10:3b:cd:06:cd:bf:6e:1d:12:cf:20: fb:b3:93:cc:8b:f0:5b:b4:db:25:3f:a1:4b:f2:d7:c8:9a:f7: 30:60:ed:ca:36:f0:f7:cd:cb:2e:ca:a9:00:a1:96:bc:4c:df: 69:ce:c6:43:45:90:7e:9d:de:b7:28:be:2c:c8:5e:c7:ef:0b: 13:61:5f:af:e9:7a:0c:97:9b:90:49:7f:5a:24:de:6c:cf:a6: c9:ab:0d:08:fa:ee:aa:05:f4:4c:c0:73:ed:02:3a:6d:02:aa: 38:c2:7c:dc:71:52:0b:7e:e3:0e:bc:0c:46:87:eb:21:2c:5e: e3:38:d8:d8:4b:e6:1b:c4:26:3a:12:74:6c:f7:98:88:6a:a0: d2:ac:20:6f:1a:fd:27:a2:fe:4f:40:1f:84:34:69:ce:08:8e: f3:e5:45:ba:59:48:eb:6b:7b:75:45:5c:86:d8:68:8d:e1:f1: a3:d9:86:e9:ec:b6:e0:4d:6c:92:c6:6e:71:22:84:64:02:66: 74:a9:23:75:d0:1f:db:a5:ab:45:d6:fd:d0:84:a1:1d:e7:88: d3:5d:bb:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA3MjExMTAvBgNVBAUTKDA0RDg0ODIxRTEzQjgwMzAzMzU0QzRCRTM0MzMxRDUx MTFGMkJDQTYwHhcNMjUwMTI5MDIzNzAwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk5OTQ0Yi0wMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufp/UMWsi0ZSkjKVfdbGkn/0GdDzo+fX6pg/tgjcr08e0X8BVagW/xBl8rm7 sHFI2FwLSmMCwdPUDFEbolNPwidpVF3MtWY+oYeXLJVlub2G46zU91b1w+68pmMy xXt+ZkjvOpDh3OLmzDrf+sPeutLTnLviL8Ob6W0oiA0Amz1zbGI8cnYwGeE+1rKp HgyeI7NskaUhTrNSnFiR0MT2AwvLp/8iqt/5wBHA7R5BNLsv9xvoytiLJCbOYBfc RBElHdmut+0YAGhxvLf0fgtVXo6aNFw059VcTWUxKT9dsCuUiTRwz9GO6gJB+gIN Kq/pgjXtD6JyesWHHREK9MyNewIDAQABo4IClTCCApEwHQYDVR0OBBYEFGWQzPoT y1COY8Nf16iaPfBedkf0MB8GA1UdIwQYMBaAFATYSCHhO4AwM1TEvjQzHVER8rym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDcyMS9DOTEyN0IzRUFE QzgxMUVEOTIxNjIyMEVDNEY5QUUwMi9CTmhJSWVFN2dEQXpWTVMtTkRNZFVSSHl2 S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JOaElJZUU3Z0RBelZNUy1ORE1kVVJIeXZLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjA3MjEvQzkxMjdCM0VBREM4MTFFRDkyMTYyMjBFQzRGOUFFMDIvNzY1OUI4OUFB RENDMTFFRDg0MDUxMjExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnkWYwDQYJKoZIhvcNAQELBQADggEBABZkJEXRJtRmPU5l cLK6ejcHbKb7Ru0EqC1WH2CexHaNbJJh43znE4H18oMQO80Gzb9uHRLPIPuzk8yL 8Fu02yU/oUvy18ia9zBg7co28PfNyy7KqQChlrxM32nOxkNFkH6d3rcovizIXsfv CxNhX6/pegyXm5BJf1ok3mzPpsmrDQj67qoF9EzAc+0COm0CqjjCfNxxUgt+4w68 DEaH6yEsXuM42NhL5hvEJjoSdGz3mIhqoNKsIG8a/Sei/k9AH4Q0ac4IjvPlRbpZ SOtre3VFXIbYaI3h8aPZhunstuBNbJLGbnEihGQCZnSpI3XQH9ulq0XW/dCEoR3n iNNduzk= -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:35 2025 by rpki-client