$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/4A81F344C34111EB855D7C84C4F9AE02.roa File: 4A81F344C34111EB855D7C84C4F9AE02.roa (raw, json) Hash identifier: uASyVgC1Cwioz2zhPx4P08otp7ZGZ17OkqWd5dxa/vo= Subject key identifier: 13:93:44:D3:E3:22:F1:AB:F0:00:C7:F0:E2:EA:A9:FA:20:99:42:EF Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Certificate serial: 16CA Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/4A81F344C34111EB855D7C84C4F9AE02.roa Signing time: Sun 22 Dec 2024 16:54:26 +0000 ROA not before: Sun 22 Dec 2024 16:54:26 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 137226 IP address blocks: 103.105.88.0/22 maxlen: 22 103.105.88.0/24 maxlen: 24 103.105.89.0/24 maxlen: 24 103.105.90.0/24 maxlen: 24 103.105.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 16:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5834 (0x16ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Validity Not Before: Dec 22 16:54:26 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67684442-e341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:df:99:3d:61:c2:2e:3b:c8:0b:ab:f1:b5:1d: 8c:8e:11:69:fa:78:35:62:6f:71:e0:1f:c7:69:e9: ed:ca:27:80:bc:7f:81:45:d0:93:b7:a3:8a:6a:b0: 27:17:32:4d:35:43:15:4a:22:a2:a6:79:33:b8:b2: 4b:f1:4a:d3:4f:35:2b:e9:05:33:52:ca:d4:bb:68: d3:78:7a:69:ab:52:16:b0:13:bf:4d:6a:61:7b:df: 73:64:2f:98:0b:1b:b7:d9:c6:43:61:09:1c:43:4e: 40:ce:7f:0a:a1:5b:5c:04:af:49:c4:29:f2:95:58: 03:95:d4:31:1a:9c:50:ed:ee:77:e2:69:77:46:4a: 19:7b:b3:20:ec:4a:d2:32:ee:6e:50:78:1c:2b:54: ba:3b:50:a8:0d:c8:36:ab:50:9d:00:23:0c:4f:61: 3b:43:8c:13:23:de:ed:e3:51:b0:86:45:f9:ae:24: 5d:63:12:cc:a6:e6:4b:cb:ad:4a:d5:df:0f:cb:63: c2:37:7f:1a:ab:7a:e4:b1:0f:21:ff:d0:45:ec:97: e7:0e:d4:85:a0:82:2d:44:39:c6:cf:09:7a:99:68: 1e:b5:44:fc:69:9a:12:85:ae:2b:6a:23:ab:42:4c: 70:ca:d4:f8:b8:ea:54:af:d6:ed:db:b8:d3:4f:5d: 86:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:93:44:D3:E3:22:F1:AB:F0:00:C7:F0:E2:EA:A9:FA:20:99:42:EF X509v3 Authority Key Identifier: keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/4A81F344C34111EB855D7C84C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.105.88.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:bb:78:cd:c0:6b:b2:48:84:70:9e:79:66:e5:7a:ae:eb:4b: ac:c1:38:4d:8b:e6:85:45:32:10:a0:b3:9d:ad:0f:e8:3e:02: a5:5b:e1:df:77:12:c9:e7:a6:c4:65:11:a7:40:db:79:13:75: dc:2d:90:10:5e:eb:37:1a:d5:16:7a:ff:4a:44:3a:cf:dd:2c: 5b:b9:16:18:d1:62:9d:d4:1b:57:fe:4b:d3:7c:ba:dc:94:21: 0d:24:68:aa:74:fa:76:24:10:a7:a4:df:25:b8:64:0a:12:0a: 28:71:7f:67:ff:c8:e8:74:a5:cc:cb:6a:ed:fc:46:20:62:40: bf:30:c0:c8:c0:b8:10:e1:ba:3f:9f:88:9a:74:a9:95:a2:9e: 6b:57:68:3b:c2:fd:e8:b9:46:db:d5:80:9d:22:d9:6d:a9:5d: df:5a:b0:84:e8:ba:a2:85:2a:01:70:cc:94:9a:b2:52:85:b9: 16:b1:4f:f4:27:62:92:36:99:61:95:16:7f:72:6c:22:61:b2: df:ce:b9:9a:a3:b1:fa:04:ce:54:35:0a:d9:58:0a:8e:16:38: fe:8a:dc:47:f1:16:a6:f7:ad:d5:d4:bd:38:c2:48:95:55:6b: 69:ec:15:e2:78:0a:48:35:ee:37:6d:6b:90:d4:08:55:0c:59: 44:40:97:c2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE3MjkxMTAvBgNVBAUTKENFOEUwRjJCQTQ5OUM1RTU4N0IwMTVFMTA0NEYwOThD RTYyQ0E3NTgwHhcNMjQxMjIyMTY1NDI2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY4NDQ0Mi1lMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9+ZPWHCLjvIC6vxtR2MjhFp+ng1Ym9x4B/HaentyieAvH+BRdCTt6OKarAn FzJNNUMVSiKipnkzuLJL8UrTTzUr6QUzUsrUu2jTeHppq1IWsBO/TWphe99zZC+Y Cxu32cZDYQkcQ05Azn8KoVtcBK9JxCnylVgDldQxGpxQ7e534ml3RkoZe7Mg7ErS Mu5uUHgcK1S6O1CoDcg2q1CdACMMT2E7Q4wTI97t41GwhkX5riRdYxLMpuZLy61K 1d8Py2PCN38aq3rksQ8h/9BF7JfnDtSFoIItRDnGzwl6mWgetUT8aZoSha4raiOr QkxwytT4uOpUr9bt27jTT12GPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBOTRNPj IvGr8ADH8OLqqfogmULvMB8GA1UdIwQYMBaAFM6ODyukmcXlh7AV4QRPCYzmLKdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTcyOS8yOEI5RDAxQ0U1 RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhlV0hzQlhoQkU4SmpPWXNw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pvNFBLNlNaeGVXSHNCWGhCRThKak9Zc3AxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE3MjkvMjhCOUQwMUNFNUY4MTFFNzlBN0Q4NDMzQzRGOUFFMDIvNEE4MUYzNDRD MzQxMTFFQjg1NUQ3Qzg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnaVgwDQYJKoZIhvcNAQELBQADggEBABu7eM3Aa7JIhHCe eWbleq7rS6zBOE2L5oVFMhCgs52tD+g+AqVb4d93EsnnpsRlEadA23kTddwtkBBe 6zca1RZ6/0pEOs/dLFu5FhjRYp3UG1f+S9N8utyUIQ0kaKp0+nYkEKek3yW4ZAoS Cihxf2f/yOh0pczLau38RiBiQL8wwMjAuBDhuj+fiJp0qZWinmtXaDvC/ei5RtvV gJ0i2W2pXd9asITouqKFKgFwzJSaslKFuRaxT/QnYpI2mWGVFn9ybCJhst/OuZqj sfoEzlQ1CtlYCo4WOP6K3EfxFqb3rdXUvTjCSJVVa2nsFeJ4Ckg17jdta5DUCFUM WURAl8I= -----END CERTIFICATE-----Generated at Sun May 4 09:09:35 2025 by rpki-client