$ rpki-client -vvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/1A377B907A7811EF9D5ED47CC4F9AE02.roa File: 1A377B907A7811EF9D5ED47CC4F9AE02.roa (raw, json) Hash identifier: 2FKrneZIYdwek2LQDep+qpyFwMcW7v1PTDAdjyafS0U= Subject key identifier: 20:6B:EE:D9:21:12:6D:CB:58:94:4D:39:3C:3B:6F:95:E3:97:08:8D Certificate issuer: /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Certificate serial: 0360 Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/1A377B907A7811EF9D5ED47CC4F9AE02.roa Signing time: Mon 03 Mar 2025 02:55:31 +0000 ROA not before: Mon 03 Mar 2025 02:55:31 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 149522 IP address blocks: 103.182.122.0/23 maxlen: 24 2400:5ce0::/44 maxlen: 44 2400:5ce0:10::/46 maxlen: 46 2400:5ce0:18::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 864 (0x360) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F86D2, serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Validity Not Before: Mar 3 02:55:31 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c51a22-53d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a8:d4:fc:9b:a1:37:cd:2d:a6:e2:23:fb:4d: bf:2c:06:a4:e5:34:67:be:ca:06:80:15:af:ce:f1: 18:49:3c:d9:1a:9f:b8:ff:14:8e:1b:88:54:38:f7: 1e:dd:da:a8:f3:ce:54:0f:ac:ac:c6:69:72:30:2d: 81:1f:59:fc:79:1a:e9:41:b6:41:b1:b0:1f:0e:d4: 87:1d:22:96:9b:5c:12:15:30:e6:38:ae:9c:dd:79: 48:3a:2d:26:a9:1c:8d:fb:63:5c:e1:24:04:7e:75: 80:24:6b:44:14:62:78:e5:c3:b7:61:3c:33:64:61: 51:49:2e:cd:3a:c2:16:ca:ff:34:47:06:87:6e:7a: 9a:73:88:86:f3:ec:d7:45:b7:04:c0:62:b8:53:eb: ee:a0:4b:09:b3:20:1b:45:a1:58:04:af:43:e8:9a: 07:a3:db:5b:1e:42:c2:53:23:ad:fc:0f:d9:d5:81: 82:f4:2f:0c:4a:9e:66:2f:c7:06:08:f2:50:b0:2e: 05:ff:a0:23:cf:4c:6f:61:6b:eb:39:96:1e:21:11: d9:94:7b:1a:ae:c1:95:a5:f9:b6:dd:eb:34:da:02: 5d:b7:01:d1:84:64:d5:9f:ce:4f:96:a6:32:bb:c9: 34:96:f5:a2:66:92:48:33:79:e6:0a:2f:c1:25:96: 7d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6B:EE:D9:21:12:6D:CB:58:94:4D:39:3C:3B:6F:95:E3:97:08:8D X509v3 Authority Key Identifier: keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/1A377B907A7811EF9D5ED47CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.122.0/23 IPv6: 2400:5ce0::-2400:5ce0:13:ffff:ffff:ffff:ffff:ffff 2400:5ce0:18::/45 Signature Algorithm: sha256WithRSAEncryption 78:93:74:f5:4f:a2:13:90:d2:44:bf:79:d8:b6:b5:a7:7f:d3: 5a:b6:ca:a2:30:68:63:7e:af:da:19:e6:40:6b:b4:96:cf:cf: 5a:8a:79:75:2c:0a:16:ea:be:46:7d:77:bd:89:3f:9d:ef:31: 68:35:f3:de:c3:63:40:e3:5f:2b:f4:ca:fc:81:49:74:d1:6d: fa:8f:b5:17:dd:73:f3:87:d5:38:b4:85:4d:50:07:78:1c:e7: 3f:87:87:2f:5d:a9:63:cf:6c:bd:37:fa:98:bb:48:de:8c:09: 04:7d:4f:ef:d9:95:cd:63:83:6a:0d:d5:6e:89:47:a4:f1:d3: 7d:95:66:c6:c1:83:27:6d:e9:f2:e0:cf:e0:1f:04:d7:17:53: 28:ed:b0:02:f8:92:8f:8f:15:b4:89:e1:db:b4:06:21:0a:21: 14:80:72:22:a8:6f:53:0c:a6:4f:ae:c7:36:bb:7c:2e:93:4b: 81:3c:0f:72:33:7b:80:a4:16:6a:f2:7e:5c:34:00:97:60:7d: 6e:f6:45:ae:73:cf:9f:f1:3b:fb:d8:11:c9:e5:77:aa:a7:bb: bd:81:82:22:1d:98:69:b2:5e:21:0c:12:64:c9:33:84:7c:6c: 7f:43:21:82:e4:5e:58:74:0c:6a:67:17:0c:c5:e6:4b:8c:24: 3d:10:ed:f4 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICA2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg2RDIxMTAvBgNVBAUTKEI4QURENUY4NEQxMUJBRDc0N0ZCRTk1OEQ0NkJBRDNC QTkxMzE5MDMwHhcNMjUwMzAzMDI1NTMxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2M1MWEyMi01M2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKjU/JuhN80tpuIj+02/LAak5TRnvsoGgBWvzvEYSTzZGp+4/xSOG4hUOPce 3dqo885UD6ysxmlyMC2BH1n8eRrpQbZBsbAfDtSHHSKWm1wSFTDmOK6c3XlIOi0m qRyN+2Nc4SQEfnWAJGtEFGJ45cO3YTwzZGFRSS7NOsIWyv80RwaHbnqac4iG8+zX RbcEwGK4U+vuoEsJsyAbRaFYBK9D6JoHo9tbHkLCUyOt/A/Z1YGC9C8MSp5mL8cG CPJQsC4F/6Ajz0xvYWvrOZYeIRHZlHsarsGVpfm23es02gJdtwHRhGTVn85PlqYy u8k0lvWiZpJIM3nmCi/BJZZ9cwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFCBr7tkh Em3LWJRNOTw7b5XjlwiNMB8GA1UdIwQYMBaAFLit1fhNEbrXR/vpWNRrrTupExkD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODZEMi8zOUREQ0NEQ0E5 NzUxMUVDQkE1QkRDMzNDNEY5QUUwMi91SzNWLUUwUnV0ZEgtLWxZMUd1dE82a1RH UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLM1YtRTBSdXRkSC0tbFkxR3V0TzZrVEdRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg2RDIvMzlERENDRENBOTc1MTFFQ0JBNUJEQzMzQzRGOUFFMDIvMUEzNzdCOTA3 QTc4MTFFRjlENUVENDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMAwEAgABMAYDBAFntnowIQQCAAIwGzAQAwUFJABc4AMHAiQAXOAAEAMHAyQA XOAAGDANBgkqhkiG9w0BAQsFAAOCAQEAeJN09U+iE5DSRL952La1p3/TWrbKojBo Y36v2hnmQGu0ls/PWop5dSwKFuq+Rn13vYk/ne8xaDXz3sNjQONfK/TK/IFJdNFt +o+1F91z84fVOLSFTVAHeBznP4eHL12pY89svTf6mLtI3owJBH1P79mVzWODag3V bolHpPHTfZVmxsGDJ23p8uDP4B8E1xdTKO2wAviSj48VtInh27QGIQohFIByIqhv UwymT67HNrt8LpNLgTwPcjN7gKQWavJ+XDQAl2B9bvZFrnPPn/E7+9gRyeV3qqe7 vYGCIh2YabJeIQwSZMkzhHxsf0MhguReWHQMamcXDMXmS4wkPRDt9A== -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:22 2025 by rpki-client