$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/A91AF6A8CE7811EF89FA3944C4F9AE02.roa File: A91AF6A8CE7811EF89FA3944C4F9AE02.roa (raw, json) Hash identifier: xYipp+ZcmQFz/ogxlth1vHSd96eYxW/drt1nbOwk66E= Subject key identifier: 6A:49:30:62:41:61:DE:E6:41:D6:37:6C:60:88:FB:76:F7:4F:6F:B6 Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Certificate serial: 0164 Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/A91AF6A8CE7811EF89FA3944C4F9AE02.roa Signing time: Thu 09 Jan 2025 10:58:30 +0000 ROA not before: Thu 09 Jan 2025 10:58:30 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 149023 IP address blocks: 103.176.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Validity Not Before: Jan 9 10:58:30 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=677fabd6-36c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a3:ec:95:b8:ed:83:d8:04:3f:a5:64:08:c2: e6:fb:16:1e:18:29:07:5a:87:f2:b4:18:3f:43:5b: 36:61:e3:d3:57:0d:ad:cb:d0:b3:93:e5:52:23:ef: 45:1f:60:45:e1:da:db:70:98:b9:64:2d:7f:29:45: d2:18:c4:e6:15:fe:bf:43:76:e9:e5:4a:8b:a6:19: ff:2f:c2:5c:ed:d8:d4:a6:1d:99:b5:70:44:04:b5: 9b:7e:3a:56:d3:66:ad:a3:0e:07:0f:d7:ad:03:aa: d6:dd:32:87:a1:93:68:e7:ff:3b:5f:87:e3:be:54: b3:7b:b7:25:2d:8b:23:b8:ba:51:b2:95:46:09:4e: a8:84:67:77:b7:a8:68:b7:1a:e6:78:7a:dd:69:72: e0:79:0b:2f:41:fb:0c:5d:9c:92:bf:39:86:00:32: 39:f7:0f:ee:e6:95:22:50:8a:15:52:d1:01:fe:77: 3a:0b:82:31:08:ca:0e:8f:d0:d4:6f:be:a4:49:17: 27:29:ce:b0:19:71:55:e5:fb:19:81:c5:92:a1:81: cc:c6:c5:1e:69:0f:b3:55:4d:92:cc:2e:c2:5f:cb: 50:04:be:94:32:42:08:ce:41:a7:f3:11:08:11:57: 99:6f:39:f4:8c:bf:38:56:7c:70:ef:fc:34:80:87: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:49:30:62:41:61:DE:E6:41:D6:37:6C:60:88:FB:76:F7:4F:6F:B6 X509v3 Authority Key Identifier: keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/A91AF6A8CE7811EF89FA3944C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.246.0/24 Signature Algorithm: sha256WithRSAEncryption b8:6c:01:8a:20:5a:2a:cc:b3:44:32:52:1a:bc:6e:92:32:95: b8:51:9d:90:d6:26:b1:cc:8f:8c:02:8a:de:61:31:9c:bd:c8: af:c6:28:17:23:1e:a2:98:2f:41:95:c8:1a:9c:89:a8:02:c1: 93:68:0c:de:32:01:48:47:b3:ca:cd:f6:38:65:61:b5:30:39: 41:f0:4e:da:f1:61:e1:c3:98:a8:dc:91:bd:74:62:a3:ba:a8: dc:da:e8:3f:21:ff:2b:8c:0c:51:0c:11:14:2d:53:83:3c:35: 3f:7e:ad:b8:28:d3:3e:97:46:b0:4a:5f:c5:84:26:4e:28:71: f2:24:e6:f5:43:02:a5:c2:e5:21:ca:dc:fa:de:2d:89:0c:2e: 90:4f:16:15:02:c3:ff:43:18:ff:94:92:f1:ba:ee:fc:5b:e2: be:ea:41:83:b5:ac:78:09:cd:9d:b7:6b:0c:78:db:ee:cd:49: 68:fc:2b:4d:4d:8b:1d:03:d2:87:69:0e:45:b2:b6:6d:5a:fa: 25:eb:42:98:45:18:28:0f:cf:0d:99:2f:10:be:86:d1:b7:68: a8:82:34:d0:9c:6f:df:4f:58:79:ac:2e:a6:6e:15:3c:0c:cc: 7d:1b:fe:47:13:e5:eb:5a:ec:98:f2:c2:a1:2f:fd:ed:02:14: 1d:3f:9d:00 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG MjE0MDdDODEwHhcNMjUwMTA5MTA1ODMwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdmYWJkNi0zNmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KPslbjtg9gEP6VkCMLm+xYeGCkHWofytBg/Q1s2YePTVw2ty9Czk+VSI+9F H2BF4drbcJi5ZC1/KUXSGMTmFf6/Q3bp5UqLphn/L8Jc7djUph2ZtXBEBLWbfjpW 02atow4HD9etA6rW3TKHoZNo5/87X4fjvlSze7clLYsjuLpRspVGCU6ohGd3t6ho txrmeHrdaXLgeQsvQfsMXZySvzmGADI59w/u5pUiUIoVUtEB/nc6C4IxCMoOj9DU b76kSRcnKc6wGXFV5fsZgcWSoYHMxsUeaQ+zVU2SzC7CX8tQBL6UMkIIzkGn8xEI EVeZbzn0jL84Vnxw7/w0gIe+mwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGpJMGJB Yd7mQdY3bGCI+3b3T2+2MB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2 N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNCMkUvMEY1NUM2OTZENjdEMTFFRDg2RDMzNzUwQzRGOUFFMDIvQTkxQUY2QThD RTc4MTFFRjg5RkEzOTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnsPYwDQYJKoZIhvcNAQELBQADggEBALhsAYogWirMs0Qy Uhq8bpIylbhRnZDWJrHMj4wCit5hMZy9yK/GKBcjHqKYL0GVyBqciagCwZNoDN4y AUhHs8rN9jhlYbUwOUHwTtrxYeHDmKjckb10YqO6qNza6D8h/yuMDFEMERQtU4M8 NT9+rbgo0z6XRrBKX8WEJk4ocfIk5vVDAqXC5SHK3PreLYkMLpBPFhUCw/9DGP+U kvG67vxb4r7qQYO1rHgJzZ23awx42+7NSWj8K01Nix0D0odpDkWytm1a+iXrQphF GCgPzw2ZLxC+htG3aKiCNNCcb99PWHmsLqZuFTwMzH0b/kcT5eta7JjywqEv/e0C FB0/nQA= -----END CERTIFICATE-----Generated at Sat Apr 26 08:03:55 2025 by rpki-client