$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/9C53117E83FB11EBB159507AC4F9AE02.roa File: 9C53117E83FB11EBB159507AC4F9AE02.roa (raw, json) Hash identifier: vkyP11luhnXeWA23/INygAjf676dmOUmLr8+nJsgHpw= Subject key identifier: 73:2F:DC:C9:41:ED:18:D5:B4:1E:7C:9B:B9:47:A0:0E:81:46:6D:9C Certificate issuer: /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710 Certificate serial: 0658 Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/9C53117E83FB11EBB159507AC4F9AE02.roa Signing time: Mon 21 Apr 2025 15:08:52 +0000 ROA not before: Mon 21 Apr 2025 15:08:52 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 139879 IP address blocks: 103.164.48.0/23 maxlen: 23 103.164.48.0/24 maxlen: 24 103.164.49.0/24 maxlen: 24 2001:df6:3c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33D6, serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710 Validity Not Before: Apr 21 15:08:52 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68065f84-4c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ac:d9:74:53:76:5d:b4:59:b6:2c:d1:24:69: 09:aa:a1:a7:a4:f2:bf:b8:ab:f1:1a:63:a5:f5:c6: 7d:15:9b:f6:22:99:46:f6:10:6d:34:72:85:79:dd: 8e:e2:f9:b7:f9:e4:04:ae:b6:d5:65:07:e5:d8:46: 9b:79:95:3b:58:a4:5a:fb:cd:65:6b:74:3c:2f:b7: 94:91:be:c9:2d:4c:d6:65:fb:fe:17:db:b4:8a:0e: f9:ea:a7:62:a4:cc:86:b1:0f:bd:4a:3a:bb:de:75: 69:29:4c:70:b6:b3:48:8d:55:e8:96:53:be:a4:0c: 31:c7:de:90:dd:de:71:a6:54:9e:af:d2:ae:8e:8d: 8e:a3:c4:ed:c6:13:40:b1:50:ea:7d:8e:5d:72:e0: b2:29:5a:22:c5:b1:62:5b:3e:12:c9:ba:f5:20:75: da:b8:3f:c3:b0:74:a3:87:42:d0:75:4f:e9:4e:82: 79:c3:05:e7:de:8a:6a:73:ac:eb:01:5f:f0:6b:25: 2e:52:6f:e0:92:9a:bc:98:58:ac:29:5d:57:b4:85: b6:8a:3d:b5:e4:2a:a0:a1:9c:63:7d:17:59:fd:d3: 79:90:d5:73:43:c4:33:86:f6:ce:8b:7d:05:d4:aa: 95:47:45:4c:2e:4e:41:11:28:16:22:b2:07:4d:9b: 29:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2F:DC:C9:41:ED:18:D5:B4:1E:7C:9B:B9:47:A0:0E:81:46:6D:9C X509v3 Authority Key Identifier: keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/9C53117E83FB11EBB159507AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.48.0/23 IPv6: 2001:df6:3c80::/48 Signature Algorithm: sha256WithRSAEncryption 67:8d:f5:c9:67:02:7b:ce:66:e1:61:fc:88:94:8d:01:a4:55: 1d:f4:9e:a6:7e:70:28:bd:a4:c8:70:14:7f:09:43:bb:3e:9a: 1a:f2:fe:92:42:bc:08:30:ea:35:99:2b:29:c1:88:2a:b3:b0: a2:19:37:bd:88:40:59:45:79:0e:94:fb:04:89:bf:87:bc:a4: e3:41:d2:49:4e:80:3f:a4:93:65:3f:e8:ba:cb:5d:0f:a1:a4: ee:e5:ff:6a:35:3d:cb:f4:dd:a5:a2:c8:ad:cd:2a:ee:55:4d: 9b:78:a8:93:f0:d1:3f:54:ac:17:09:f0:1a:0b:4e:cc:27:7c: 52:bb:18:f1:0b:9a:2a:05:1d:02:f9:51:dc:8c:5e:d2:c1:0d: ce:91:d3:e8:a0:f9:25:0a:c9:4c:bf:d9:1a:cc:d7:a5:12:fa: 48:31:6b:78:47:3a:cf:bc:32:2b:aa:c1:2b:17:12:44:a0:5b: b4:eb:9f:97:08:86:aa:bd:05:51:d5:0c:2f:b3:a6:94:da:d3: e0:18:3b:e8:c1:71:d8:61:70:39:19:9a:71:a5:b9:92:d3:ca: 81:43:16:41:72:68:4b:30:cd:25:83:ec:d5:5f:8b:cf:52:fe: 0a:22:0c:0f:66:2c:1a:8d:07:b8:ed:53:57:cb:44:08:c1:91: 84:6f:1e:07 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzRDYxMTAvBgNVBAUTKDgyQTNFNEUwMjE4NUZGQjcxQUM2QzY5OEMwNjc1NDhE OUNDMTg3MTAwHhcNMjUwNDIxMTUwODUyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODA2NWY4NC00YzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKzZdFN2XbRZtizRJGkJqqGnpPK/uKvxGmOl9cZ9FZv2IplG9hBtNHKFed2O 4vm3+eQErrbVZQfl2EabeZU7WKRa+81la3Q8L7eUkb7JLUzWZfv+F9u0ig756qdi pMyGsQ+9Sjq73nVpKUxwtrNIjVXollO+pAwxx96Q3d5xplSer9Kujo2Oo8TtxhNA sVDqfY5dcuCyKVoixbFiWz4Sybr1IHXauD/DsHSjh0LQdU/pToJ5wwXn3opqc6zr AV/wayUuUm/gkpq8mFisKV1XtIW2ij215CqgoZxjfRdZ/dN5kNVzQ8QzhvbOi30F 1KqVR0VMLk5BESgWIrIHTZspfQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHMv3MlB 7RjVtB58m7lHoA6BRm2cMB8GA1UdIwQYMBaAFIKj5OAhhf+3GsbGmMBnVI2cwYcQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNENi84M0I2NTE5Njgz RjkxMUVCQTcxNTc3NzdDNEY5QUUwMi9ncVBrNENHRl83Y2F4c2FZd0dkVWpaekJo eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxUGs0Q0dGXzdjYXhzYVl3R2RValp6Qmh4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjMzRDYvODNCNjUxOTY4M0Y5MTFFQkE3MTU3Nzc3QzRGOUFFMDIvOUM1MzExN0U4 M0ZCMTFFQkIxNTk1MDdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnpDAwDwQCAAIwCQMHACABDfY8gDANBgkqhkiG9w0BAQsF AAOCAQEAZ431yWcCe85m4WH8iJSNAaRVHfSepn5wKL2kyHAUfwlDuz6aGvL+kkK8 CDDqNZkrKcGIKrOwohk3vYhAWUV5DpT7BIm/h7yk40HSSU6AP6STZT/oustdD6Gk 7uX/ajU9y/TdpaLIrc0q7lVNm3iok/DRP1SsFwnwGgtOzCd8UrsY8QuaKgUdAvlR 3Ixe0sENzpHT6KD5JQrJTL/ZGszXpRL6SDFreEc6z7wyK6rBKxcSRKBbtOuflwiG qr0FUdUML7OmlNrT4Bg76MFx2GFwORmacaW5ktPKgUMWQXJoSzDNJYPs1V+Lz1L+ CiIMD2YsGo0HuO1TV8tECMGRhG8eBw== -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:24 2025 by rpki-client