$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/F9B7A3BEB0A911EF8706BE26C4F9AE02.roa File: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (raw, json) Hash identifier: qjrZgvPz0JrFG9Wn1XQqIINgClH8kerS1ZkagSq1RJI= Subject key identifier: 6B:CD:2E:D5:B4:9A:A1:A8:80:97:60:90:15:05:4F:38:4D:3C:1D:26 Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Certificate serial: 2850 Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/F9B7A3BEB0A911EF8706BE26C4F9AE02.roa Signing time: Mon 06 Jan 2025 15:42:16 +0000 ROA not before: Mon 06 Jan 2025 15:42:16 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 141681 IP address blocks: 103.254.120.0/24 maxlen: 24 103.254.121.0/24 maxlen: 24 2401:ae0::/32 maxlen: 32 2401:ae0::/48 maxlen: 48 2401:ae0:1::/48 maxlen: 48 2401:ae0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10320 (0x2850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Validity Not Before: Jan 6 15:42:16 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=677bf9d8-3312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:72:1f:6a:c0:c8:d2:d4:e9:58:5f:a4:ca:d2: 77:12:a0:db:e0:4e:77:81:77:02:67:e4:95:54:73: 74:b7:fa:92:2c:5e:43:17:b4:6f:bf:ea:1d:ed:85: e6:54:a3:5c:5c:89:65:95:4e:e4:24:98:0f:7b:4a: 95:0a:4b:3f:89:d0:ad:b1:60:69:c7:ea:ef:c4:dd: 8e:cc:64:9a:b9:5c:6a:41:ac:68:bd:f3:0e:50:47: ae:75:36:1f:43:4a:2c:c4:c7:13:bd:a9:4d:85:1f: 12:f6:ad:8e:21:b8:b3:3f:a2:a1:0c:e9:23:a7:f1: 88:c5:94:8c:71:ac:d1:c3:4d:26:b5:0a:de:ca:42: 84:79:c4:2d:7f:c0:eb:ab:f0:c3:9b:5d:67:56:64: 0a:12:16:d8:c4:e3:ed:32:dc:b4:cc:e6:24:4f:05: e1:f1:55:17:ec:3f:20:6d:2b:22:c4:f5:a5:ee:02: 78:59:16:a2:74:de:06:ee:d7:4d:d9:6f:b2:10:0b: e1:0f:56:44:47:21:02:2e:43:f1:c9:1b:86:f3:73: a3:be:ab:d5:1a:36:c0:80:ab:77:ef:9c:e3:c7:f3: 26:0f:42:f1:51:87:2c:bf:08:b3:58:c0:1e:4b:60: 64:07:c9:cf:07:c3:f5:4e:20:16:11:7f:34:69:fd: 4d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CD:2E:D5:B4:9A:A1:A8:80:97:60:90:15:05:4F:38:4D:3C:1D:26 X509v3 Authority Key Identifier: keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/F9B7A3BEB0A911EF8706BE26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.254.120.0/23 IPv6: 2401:ae0::/32 Signature Algorithm: sha256WithRSAEncryption 87:2d:02:20:aa:07:8d:75:85:52:f6:05:78:5c:c1:e3:e5:ad: f6:de:75:34:06:ed:30:65:26:a9:f3:28:66:64:ad:92:69:da: a8:52:4f:fe:63:60:76:42:01:f9:26:9a:7c:db:24:3f:e4:e2: bf:fc:c7:52:04:ef:5c:ff:47:ae:7b:7f:09:d7:fd:75:f8:94: ae:f9:d3:28:0a:95:67:c6:83:f1:4a:0d:a3:02:6f:e7:a3:24: cc:f4:9a:b1:fc:05:76:3d:43:82:4c:34:b1:2b:76:18:46:26: bc:59:41:fe:77:9b:20:26:e7:a7:4e:03:10:66:db:0d:14:b5: b5:52:48:6f:c8:7f:29:f4:a9:12:98:9c:74:46:2b:9e:13:7c: 98:8c:b6:6b:f6:cf:7c:b0:42:6c:7d:47:ee:8f:e1:47:78:c2: 56:aa:9b:04:15:94:ff:3b:68:a8:16:0a:f7:6a:1c:6b:06:9d: 71:0d:e2:8a:24:d6:89:02:5a:67:39:6b:cf:1e:09:ca:2c:d0: 2d:42:09:71:5c:b0:75:76:96:69:ee:aa:97:3c:b1:9b:2b:ed: 54:9e:5a:4f:20:7b:a4:3b:e5:16:7f:7f:b6:0d:65:9d:70:68: 1b:47:40:d2:c2:85:57:b9:aa:e7:8e:94:a5:18:49:c6:01:b4: b0:e3:a8:97 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICKFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4 RTkzM0ZEQ0EwHhcNMjUwMTA2MTU0MjE2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdiZjlkOC0zMzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HIfasDI0tTpWF+kytJ3EqDb4E53gXcCZ+SVVHN0t/qSLF5DF7Rvv+od7YXm VKNcXIlllU7kJJgPe0qVCks/idCtsWBpx+rvxN2OzGSauVxqQaxovfMOUEeudTYf Q0osxMcTvalNhR8S9q2OIbizP6KhDOkjp/GIxZSMcazRw00mtQreykKEecQtf8Dr q/DDm11nVmQKEhbYxOPtMty0zOYkTwXh8VUX7D8gbSsixPWl7gJ4WRaidN4G7tdN 2W+yEAvhD1ZERyECLkPxyRuG83OjvqvVGjbAgKt375zjx/MmD0LxUYcsvwizWMAe S2BkB8nPB8P1TiAWEX80af1NFQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGvNLtW0 mqGogJdgkBUFTzhNPB0mMB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjEzQjkvMTg5N0IyNTI5RjlEMTFFNDk2MTk1MzJEQzRGOUFFMDIvRjlCN0EzQkVC MEE5MTFFRjg3MDZCRTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFn/ngwDQQCAAIwBwMFACQBCuAwDQYJKoZIhvcNAQELBQAD ggEBAIctAiCqB411hVL2BXhcwePlrfbedTQG7TBlJqnzKGZkrZJp2qhST/5jYHZC AfkmmnzbJD/k4r/8x1IE71z/R657fwnX/XX4lK750ygKlWfGg/FKDaMCb+ejJMz0 mrH8BXY9Q4JMNLErdhhGJrxZQf53myAm56dOAxBm2w0UtbVSSG/Ifyn0qRKYnHRG K54TfJiMtmv2z3ywQmx9R+6P4Ud4wlaqmwQVlP87aKgWCvdqHGsGnXEN4ook1okC Wmc5a88eCcos0C1CCXFcsHV2lmnuqpc8sZsr7VSeWk8ge6Q75RZ/f7YNZZ1waBtH QNLChVe5queOlKUYScYBtLDjqJc= -----END CERTIFICATE-----Generated at Sat Apr 26 08:17:34 2025 by rpki-client