$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/D613984822CB11F09C084A4BC4F9AE02.roa File: D613984822CB11F09C084A4BC4F9AE02.roa (raw, json) Hash identifier: z7hyvJBiLu2Vv2ed166vCckEPOGn8EvD+mMijkp9tCA= Subject key identifier: 1B:6E:A4:12:B0:C7:15:95:8C:EF:C1:0F:5F:6E:40:D6:45:0D:FE:19 Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Certificate serial: 071E Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/D613984822CB11F09C084A4BC4F9AE02.roa Signing time: Sat 26 Apr 2025 18:25:31 +0000 ROA not before: Sat 26 Apr 2025 18:25:31 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 134204 IP address blocks: 103.165.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1822 (0x71e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Validity Not Before: Apr 26 18:25:31 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=680d251b-dade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:29:f7:4d:c5:e6:c8:d7:9a:57:2e:f8:bc:22: 2c:5d:dd:49:2a:e2:a7:03:8c:81:e8:4a:f7:55:9b: 46:eb:8d:63:6e:39:13:7a:a1:c0:01:73:0b:3b:12: 42:ed:2f:ea:f2:81:11:ac:da:58:20:90:a0:17:1c: b7:49:d5:ae:34:2f:60:1c:ba:ac:7e:b1:a4:a6:ac: 6c:61:15:ea:e3:01:ec:82:c5:d6:9e:f1:7b:64:b5: 56:d7:83:59:5a:db:60:0f:c6:cc:b7:aa:48:5a:7c: 0e:68:36:35:37:cf:e3:a7:7b:76:cb:36:36:4a:cf: e9:8d:6b:dc:55:8a:38:85:86:9b:40:ad:ec:22:b4: 9e:6c:61:88:4c:3a:f5:9e:c1:e9:a0:0f:ad:e9:58: 01:67:43:04:24:09:52:9a:ec:48:3d:f3:58:93:7b: 71:8a:6f:44:f6:89:5c:33:c7:ab:ee:b7:04:12:90: 27:49:73:26:5c:6e:ea:d5:51:17:30:ae:16:96:c4: 7c:23:9b:a8:64:25:84:e6:42:81:8e:37:33:ff:ac: e1:e4:a3:0e:03:a0:4b:93:09:a3:cc:9e:11:35:b7: 25:f8:c7:76:93:0f:6a:0b:04:5b:d1:84:d5:ca:3a: 98:3c:50:66:7b:63:38:a3:01:bb:5e:2d:71:6f:f7: fd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6E:A4:12:B0:C7:15:95:8C:EF:C1:0F:5F:6E:40:D6:45:0D:FE:19 X509v3 Authority Key Identifier: keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/D613984822CB11F09C084A4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.158.0/24 Signature Algorithm: sha256WithRSAEncryption bc:ed:c8:2a:57:de:d5:8d:44:23:ad:52:5a:45:fe:3e:6f:78: b2:34:a1:6e:cb:89:a6:a0:a5:06:6b:95:93:2d:1a:fe:0a:88: bd:0d:cc:7b:f9:40:cb:92:a3:ff:f2:5f:94:60:95:e0:17:d0: 40:9f:ca:ef:d1:0d:a9:f6:ac:99:5d:49:ce:44:19:ea:2d:1b: 43:45:0b:f1:17:1e:18:ad:a5:92:9d:79:22:bf:d5:93:54:b7: 50:fa:5c:f9:a2:84:a3:02:c4:7b:0a:08:45:2b:6b:d8:cd:ed: 42:22:dd:2e:5e:d0:3e:91:28:16:f5:6d:a5:60:24:0a:73:76: 34:90:2c:56:cf:e5:89:01:30:ca:9f:b0:2f:de:47:ab:e0:72: d8:9f:f7:90:6d:c9:85:82:1e:20:a4:0d:03:60:73:42:30:82: 50:9b:47:91:c1:98:00:56:a6:a8:31:73:c7:d7:fb:f1:7b:c4: 66:1f:b1:56:7b:6c:3d:dc:d7:95:a3:f8:11:0a:64:74:5f:b1: 58:b7:bb:75:fe:60:ec:85:0d:fc:2b:fc:4a:ae:cc:d0:42:c7: bc:79:a1:5e:28:4e:38:cc:fb:ef:29:3f:24:23:0a:1d:41:6c: c8:e6:d7:2b:40:8d:98:d9:73:a1:61:69:1e:d1:62:8c:fa:9d: f2:ff:91:9b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2QjcxMTAvBgNVBAUTKDgzRDk2RjFERUE3MkE5OUQyMzRCNDQ1NkQ2RjY2NzVE QzdFNjA2MUUwHhcNMjUwNDI2MTgyNTMxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBkMjUxYi1kYWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Cn3TcXmyNeaVy74vCIsXd1JKuKnA4yB6Er3VZtG641jbjkTeqHAAXMLOxJC 7S/q8oERrNpYIJCgFxy3SdWuNC9gHLqsfrGkpqxsYRXq4wHsgsXWnvF7ZLVW14NZ WttgD8bMt6pIWnwOaDY1N8/jp3t2yzY2Ss/pjWvcVYo4hYabQK3sIrSebGGITDr1 nsHpoA+t6VgBZ0MEJAlSmuxIPfNYk3txim9E9olcM8er7rcEEpAnSXMmXG7q1VEX MK4WlsR8I5uoZCWE5kKBjjcz/6zh5KMOA6BLkwmjzJ4RNbcl+Md2kw9qCwRb0YTV yjqYPFBme2M4owG7Xi1xb/f92QIDAQABo4IClTCCApEwHQYDVR0OBBYEFBtupBKw xxWVjO/BD19uQNZFDf4ZMB8GA1UdIwQYMBaAFIPZbx3qcqmdI0tEVtb2Z13H5gYe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZCNy85NUVGN0RCQTk2 N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFaMGpTMFJXMXZablhjZm1C aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c5bHZIZXB5cVowalMwUlcxdlpuWGNmbUJoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU2QjcvOTVFRjdEQkE5NjdEMTFFQkFERDUwRDJDQzRGOUFFMDIvRDYxMzk4NDgy MkNCMTFGMDlDMDg0QTRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnpZ4wDQYJKoZIhvcNAQELBQADggEBALztyCpX3tWNRCOt UlpF/j5veLI0oW7LiaagpQZrlZMtGv4KiL0NzHv5QMuSo//yX5RgleAX0ECfyu/R Dan2rJldSc5EGeotG0NFC/EXHhitpZKdeSK/1ZNUt1D6XPmihKMCxHsKCEUra9jN 7UIi3S5e0D6RKBb1baVgJApzdjSQLFbP5YkBMMqfsC/eR6vgctif95BtyYWCHiCk DQNgc0IwglCbR5HBmABWpqgxc8fX+/F7xGYfsVZ7bD3c15Wj+BEKZHRfsVi3u3X+ YOyFDfwr/EquzNBCx7x5oV4oTjjM++8pPyQjCh1BbMjm1ytAjZjZc6FhaR7RYoz6 nfL/kZs= -----END CERTIFICATE-----