$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa File: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (raw, json) Hash identifier: NYRjezFURAIZr5dfzYcgObUcS0k2GZmBPMzd9N07gUQ= Subject key identifier: 3D:BE:77:11:CD:F4:57:C0:4D:50:F9:16:1A:CB:2D:4E:4D:8A:70:E7 Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Certificate serial: 03D2 Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa Signing time: Mon 17 Mar 2025 00:16:16 +0000 ROA not before: Mon 17 Mar 2025 00:16:16 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 139611 IP address blocks: 103.180.54.0/23 maxlen: 23 103.180.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Validity Not Before: Mar 17 00:16:16 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67d769d0-363f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:fb:db:da:2f:43:c7:be:eb:07:4a:f4:40: cb:69:c1:1e:93:64:aa:92:90:5f:6b:37:11:9e:c7: 6c:a2:f4:db:33:8e:9a:87:9c:66:1b:43:3f:37:6f: 54:16:42:a0:31:e9:1f:e9:3d:71:75:c0:41:87:28: c8:eb:15:ed:4b:28:4e:76:b2:13:d4:15:2f:f9:f8: fd:59:a4:3d:6c:43:c0:b4:c2:64:99:79:f3:9c:11: c2:80:a5:07:4a:01:84:33:51:3d:73:d2:8e:df:96: d9:f4:d8:99:9b:c2:b8:19:c1:ae:d3:81:ee:11:5c: db:f6:1c:62:05:82:13:7a:7d:87:69:92:aa:73:6b: 48:d2:20:21:40:e4:a7:44:24:02:00:cb:b5:0b:df: 81:31:60:cf:84:21:a4:bf:25:bd:0b:4d:cc:10:da: a6:94:4b:09:4b:56:2d:af:b1:8b:37:ab:4b:f0:e3: 2b:6c:45:e7:0c:2e:ca:9c:16:3f:85:c5:d0:9c:c8: 3a:0b:1c:dc:2c:34:16:11:c5:ba:89:92:f2:6a:86: b2:9d:95:93:3a:0c:07:82:d2:77:d7:52:e0:94:e6: 5b:ca:41:16:38:dd:d2:ab:18:fa:45:7e:4d:79:77: 5a:b0:37:ae:14:ee:89:4f:4e:ee:73:0f:5c:70:e0: c7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BE:77:11:CD:F4:57:C0:4D:50:F9:16:1A:CB:2D:4E:4D:8A:70:E7 X509v3 Authority Key Identifier: keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.180.54.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:b0:7b:86:3c:5a:32:37:c5:b4:85:f6:14:6e:a4:57:79:a5: 41:6e:aa:51:28:6f:9c:a8:fb:a9:8a:c3:72:0d:5a:66:30:c9: d9:0e:aa:78:69:70:20:a5:58:e4:15:6d:ef:0c:16:7b:a1:2a: 83:8c:d9:cd:a4:d3:8e:aa:be:5f:02:cf:cb:db:12:59:63:19: 0f:d6:f5:a6:a8:6d:12:d2:4d:9c:5f:b4:fd:c9:85:40:c3:0e: bc:12:9e:9e:d5:72:0b:e6:fe:bb:d9:e8:b8:bb:6b:bb:ca:95: f9:df:18:37:23:5d:f1:93:d1:dc:c8:b5:99:3d:2c:74:f1:5f: 71:9d:ad:ba:c5:81:79:7f:60:5f:5f:76:0f:51:b8:e0:4a:de: 7d:50:16:28:27:77:0e:f6:d1:03:62:8f:23:22:19:bc:d8:ee: 58:80:d6:e3:09:4c:68:89:04:ce:2b:9a:13:82:e6:c7:da:da: 02:8c:1a:34:93:9f:16:fa:71:d9:a4:41:25:53:23:ae:92:0b: 54:d2:a5:7d:b6:24:a6:bd:c1:95:26:45:9b:2e:9e:d6:f1:fd: e2:43:e4:55:a4:96:e8:3d:30:4f:66:d9:8f:e5:79:be:b5:2f: 50:a9:4c:af:77:3b:1c:f6:e0:ea:9d:1d:96:bd:1e:ab:f3:0e: 4b:cb:13:e9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz MUM1QUZEQTEwHhcNMjUwMzE3MDAxNjE2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q3NjlkMC0zNjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1z729ovQ8e+6wdK9EDLacEek2SqkpBfazcRnsdsovTbM46ah5xmG0M/N29U FkKgMekf6T1xdcBBhyjI6xXtSyhOdrIT1BUv+fj9WaQ9bEPAtMJkmXnznBHCgKUH SgGEM1E9c9KO35bZ9NiZm8K4GcGu04HuEVzb9hxiBYITen2HaZKqc2tI0iAhQOSn RCQCAMu1C9+BMWDPhCGkvyW9C03MENqmlEsJS1Ytr7GLN6tL8OMrbEXnDC7KnBY/ hcXQnMg6CxzcLDQWEcW6iZLyaoaynZWTOgwHgtJ311LglOZbykEWON3Sqxj6RX5N eXdasDeuFO6JT07ucw9ccODHzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD2+dxHN 9FfATVD5FhrLLU5NinDnMB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg3QkIvOURGMERGQkU3REU5MTFFQ0JFQTA4RTBGQzRGOUFFMDIvRERDQjZCMDJE OUQzMTFFRUJCM0JERjEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFntDYwDQYJKoZIhvcNAQELBQADggEBAE+we4Y8WjI3xbSF 9hRupFd5pUFuqlEob5yo+6mKw3INWmYwydkOqnhpcCClWOQVbe8MFnuhKoOM2c2k 046qvl8Cz8vbElljGQ/W9aaobRLSTZxftP3JhUDDDrwSnp7Vcgvm/rvZ6Li7a7vK lfnfGDcjXfGT0dzItZk9LHTxX3GdrbrFgXl/YF9fdg9RuOBK3n1QFigndw720QNi jyMiGbzY7liA1uMJTGiJBM4rmhOC5sfa2gKMGjSTnxb6cdmkQSVTI66SC1TSpX22 JKa9wZUmRZsuntbx/eJD5FWklug9ME9m2Y/leb61L1CpTK93Oxz24OqdHZa9Hqvz DkvLE+k= -----END CERTIFICATE-----Generated at Sat Apr 26 16:49:49 2025 by rpki-client