$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/D0103496FD6611EE9188C568C4F9AE02.roa File: D0103496FD6611EE9188C568C4F9AE02.roa (raw, json) Hash identifier: PxpNeamT7nJAO8ypf86mF4tTFHjbBgphhBI0WaQ2K6I= Subject key identifier: 79:94:5F:DD:B2:80:39:14:87:A4:3C:7A:FB:F8:C0:C9:39:7E:8F:03 Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Certificate serial: 017A Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/D0103496FD6611EE9188C568C4F9AE02.roa Signing time: Thu 27 Feb 2025 05:27:22 +0000 ROA not before: Thu 27 Feb 2025 05:27:22 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 17941 IP address blocks: 103.83.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Validity Not Before: Feb 27 05:27:22 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67bff7ba-af3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:8b:e2:1a:98:81:2f:24:17:7c:8f:e1:cc: f4:d5:90:e7:ee:79:ec:98:d1:ff:15:50:e8:01:7f: 0a:5c:8e:9f:b8:d9:70:bc:5c:d0:3d:35:12:b2:51: f5:5c:a5:f6:5f:29:68:9e:6d:5e:52:f4:d6:3f:1a: 79:47:5f:59:23:f3:66:d1:9d:ff:ec:52:22:71:ce: 76:12:36:89:a3:53:88:5a:f2:91:d3:fd:41:be:50: f6:b7:02:cb:13:24:ec:df:46:93:2e:a7:52:7f:92: 10:ce:f6:c3:46:8b:8b:18:3e:b0:9e:7f:c5:6d:27: 3d:63:a0:8a:30:ae:4a:9d:01:5f:d5:1c:02:25:4f: 16:54:ba:9d:5a:86:50:ae:82:aa:1c:43:82:9f:18: 22:54:0a:66:7c:92:96:46:02:55:9c:35:25:19:eb: 9c:1e:be:5f:d7:33:59:c2:30:a8:7f:73:c0:85:bc: 60:34:db:16:e8:e3:ad:df:b0:9f:0f:20:b9:54:69: 25:94:11:2d:fa:94:fa:45:32:da:3c:7f:c7:7d:bb: f4:05:38:a5:87:03:2d:bb:08:6f:53:67:ea:f5:9f: 2d:66:1d:66:f0:02:43:0d:7f:af:78:c6:9f:17:d3: cd:9e:75:a3:f9:ad:11:be:72:96:c7:45:e2:72:d8: 3b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:94:5F:DD:B2:80:39:14:87:A4:3C:7A:FB:F8:C0:C9:39:7E:8F:03 X509v3 Authority Key Identifier: keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/D0103496FD6611EE9188C568C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.40.0/22 Signature Algorithm: sha256WithRSAEncryption 27:b9:05:f3:f7:fd:ac:15:48:47:8a:31:4a:28:27:70:b0:fc: 1c:27:14:9f:01:ba:80:91:80:90:94:4a:63:cf:eb:53:92:86: 1f:51:22:7d:69:95:4f:12:b2:31:ac:b2:13:48:77:99:e2:99: d6:3b:ec:0c:58:16:a4:23:e4:46:eb:fe:11:17:01:b5:00:ce: 0d:f7:61:47:7f:42:2f:4f:23:9c:af:d0:b7:24:5e:d6:4a:37: b6:d8:3a:39:49:a3:86:c2:27:6f:55:73:26:7c:b6:49:32:c3: 01:eb:0e:bb:38:69:04:46:9d:bd:cd:a3:25:99:a4:75:3b:73: 21:75:69:a2:51:d5:28:3a:88:30:ee:7e:3e:27:65:98:d3:fa: 96:67:be:5f:5e:d3:07:29:1e:e9:46:f9:30:ef:54:29:79:1d: 1d:5e:5b:e1:47:80:3b:68:53:45:bc:bc:82:3c:13:ee:bb:e4: c5:d6:55:16:f7:bf:41:c0:56:64:25:26:33:b1:29:d8:06:71: 77:d6:ba:28:9f:0e:28:80:04:ad:b9:e0:19:8c:a7:4c:dc:5d: 76:14:d6:a9:75:1c:72:d1:c4:b4:7c:88:cb:bc:37:fd:bb:f4: b0:26:29:30:7a:e1:83:e5:e0:b7:5a:4e:e3:b8:95:8d:2f:a8: d6:1a:60:d5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0 NkREMDI2NTcwHhcNMjUwMjI3MDUyNzIyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JmZjdiYS1hZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4eL4hqYgS8kF3yP4cz01ZDn7nnsmNH/FVDoAX8KXI6fuNlwvFzQPTUSslH1 XKX2Xylonm1eUvTWPxp5R19ZI/Nm0Z3/7FIicc52EjaJo1OIWvKR0/1BvlD2twLL EyTs30aTLqdSf5IQzvbDRouLGD6wnn/FbSc9Y6CKMK5KnQFf1RwCJU8WVLqdWoZQ roKqHEOCnxgiVApmfJKWRgJVnDUlGeucHr5f1zNZwjCof3PAhbxgNNsW6OOt37Cf DyC5VGkllBEt+pT6RTLaPH/Hfbv0BTilhwMtuwhvU2fq9Z8tZh1m8AJDDX+veMaf F9PNnnWj+a0RvnKWx0Xictg73QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHmUX92y gDkUh6Q8evv4wMk5fo8DMB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkFBOTEvOTQyMEQyMTAwQTVBMTFFRUEzRjVCNDQxQzRGOUFFMDIvRDAxMDM0OTZG RDY2MTFFRTkxODhDNTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnUygwDQYJKoZIhvcNAQELBQADggEBACe5BfP3/awVSEeK MUooJ3Cw/BwnFJ8BuoCRgJCUSmPP61OShh9RIn1plU8SsjGsshNId5nimdY77AxY FqQj5Ebr/hEXAbUAzg33YUd/Qi9PI5yv0LckXtZKN7bYOjlJo4bCJ29VcyZ8tkky wwHrDrs4aQRGnb3NoyWZpHU7cyF1aaJR1Sg6iDDufj4nZZjT+pZnvl9e0wcpHulG +TDvVCl5HR1eW+FHgDtoU0W8vII8E+675MXWVRb3v0HAVmQlJjOxKdgGcXfWuiif DiiABK254BmMp0zcXXYU1ql1HHLRxLR8iMu8N/279LAmKTB64YPl4LdaTuO4lY0v qNYaYNU= -----END CERTIFICATE-----Generated at Sat Apr 26 13:09:42 2025 by rpki-client