$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/99551366132E11F0B588DB49C4F9AE02.roa File: 99551366132E11F0B588DB49C4F9AE02.roa (raw, json) Hash identifier: DK7InRG1Akm4gEw8WNTsc8guif69cCOd624CwmuWSX8= Subject key identifier: 7E:21:AF:A5:09:B5:43:BF:D4:93:B5:85:64:7D:8C:91:6B:0B:E9:B5 Certificate issuer: /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A Certificate serial: 0776 Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/99551366132E11F0B588DB49C4F9AE02.roa Signing time: Sun 06 Apr 2025 21:32:11 +0000 ROA not before: Sun 06 Apr 2025 21:32:11 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 141234 IP address blocks: 103.156.244.0/24 maxlen: 24 103.156.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1910 (0x776) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A Validity Not Before: Apr 6 21:32:11 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67f2f2db-0e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:a1:32:ea:0a:41:21:05:d5:13:77:4c:c0: f4:c7:58:0b:57:50:3d:ba:c2:1f:c2:e2:6b:27:8b: 34:85:79:d7:e8:b5:46:d5:de:05:bf:c2:c0:e8:ad: 9e:e5:71:90:f5:23:87:d1:02:43:a9:b0:58:55:c1: 52:d1:99:72:f8:41:86:d0:b3:28:05:af:15:b7:eb: 84:ac:a3:35:a8:69:72:d5:a4:d4:f5:9b:aa:2a:a1: 7b:21:61:9e:35:ea:6b:b0:ca:95:b0:6e:d5:c2:8c: 68:80:fe:cf:e5:6e:44:54:55:5c:83:60:b8:25:c0: 15:29:38:20:44:c5:cb:a6:a0:18:b2:9a:ec:19:b3: 42:83:17:97:9e:d7:58:60:a6:a1:6d:38:f0:17:63: 88:c2:52:1a:4c:82:07:ef:88:53:22:d2:b2:95:1a: 78:6c:a6:9c:f6:13:c8:1c:d0:95:f4:ae:e9:04:2f: f7:5e:f0:60:f4:43:b3:e4:75:1d:11:c7:72:b0:78: c9:7e:72:31:16:03:6e:84:3a:63:24:6f:36:b7:86: 06:aa:17:8e:58:49:f2:33:11:f3:81:25:81:09:7d: 1a:b8:1e:6c:f5:9f:51:18:d4:15:02:b3:2c:23:b6: 90:2d:47:44:fc:ed:49:d8:2a:5a:e2:d0:29:81:dc: 02:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:21:AF:A5:09:B5:43:BF:D4:93:B5:85:64:7D:8C:91:6B:0B:E9:B5 X509v3 Authority Key Identifier: keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/99551366132E11F0B588DB49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.244.0/23 Signature Algorithm: sha256WithRSAEncryption 15:dd:88:6e:54:a4:c6:64:3f:25:1f:15:32:07:b3:ad:12:d3: 95:84:30:64:25:35:5a:25:5e:a4:33:df:ed:04:30:e5:d3:ce: 49:b7:ef:27:24:11:8e:12:29:9a:64:64:16:af:4f:ec:71:d1: c8:a5:bf:66:2d:d8:48:75:64:0a:91:30:8c:09:e4:5b:c9:62: 4c:16:ac:95:c8:de:c8:ad:0f:f4:2d:33:32:66:c7:6f:53:d9: 9a:10:9f:32:78:90:12:74:1f:cd:43:80:e5:cd:e8:3c:43:c6: c4:a5:5b:4f:00:f7:51:f9:eb:67:90:39:a1:09:0d:c6:cb:ce: b6:23:7a:c2:50:96:70:6d:2f:80:3d:4d:56:06:81:71:8b:fb: 0e:b2:1d:34:f3:94:8f:5e:0c:7c:e7:ec:8d:cc:dd:1d:17:d1: 6d:3c:64:b0:95:d9:a8:25:51:30:04:cb:66:a9:fe:f7:a7:1f: 74:d2:44:88:ca:73:65:72:da:48:13:d9:a5:ad:60:ae:62:8e: 1d:22:bd:d2:b7:48:17:23:c7:8d:94:7c:47:9e:d7:cb:88:0c: 96:da:d8:1c:96:d7:59:3c:43:58:44:94:ff:64:c8:38:f8:79: 6a:c0:2d:79:36:91:df:1b:81:cb:2a:cb:4c:75:4e:18:95:f2: 34:b7:0c:e2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwN0UxMTAvBgNVBAUTKDcwQTQ1Q0NDMDU5M0M0NzEyMzYzNTA1QTBBNjRERDNC NzM1NzZFOEEwHhcNMjUwNDA2MjEzMjExWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YyZjJkYi0wZTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnihMuoKQSEF1RN3TMD0x1gLV1A9usIfwuJrJ4s0hXnX6LVG1d4Fv8LA6K2e 5XGQ9SOH0QJDqbBYVcFS0Zly+EGG0LMoBa8Vt+uErKM1qGly1aTU9ZuqKqF7IWGe NeprsMqVsG7VwoxogP7P5W5EVFVcg2C4JcAVKTggRMXLpqAYsprsGbNCgxeXntdY YKahbTjwF2OIwlIaTIIH74hTItKylRp4bKac9hPIHNCV9K7pBC/3XvBg9EOz5HUd EcdysHjJfnIxFgNuhDpjJG82t4YGqheOWEnyMxHzgSWBCX0auB5s9Z9RGNQVArMs I7aQLUdE/O1J2Cpa4tApgdwC0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFH4hr6UJ tUO/1JO1hWR9jJFrC+m1MB8GA1UdIwQYMBaAFHCkXMwFk8RxI2NQWgpk3TtzV26K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODA3RS9DNEI0RTJDNjE3 OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhIRWpZMUJhQ21UZE8zTlhi b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NLUmN6QVdUeEhFalkxQmFDbVRkTzNOWGJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTgwN0UvQzRCNEUyQzYxNzkyMTFFQjkwQkZBMDg0QzRGOUFFMDIvOTk1NTEzNjYx MzJFMTFGMEI1ODhEQjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnPQwDQYJKoZIhvcNAQELBQADggEBABXdiG5UpMZkPyUf FTIHs60S05WEMGQlNVolXqQz3+0EMOXTzkm37yckEY4SKZpkZBavT+xx0cilv2Yt 2Eh1ZAqRMIwJ5FvJYkwWrJXI3sitD/QtMzJmx29T2ZoQnzJ4kBJ0H81DgOXN6DxD xsSlW08A91H562eQOaEJDcbLzrYjesJQlnBtL4A9TVYGgXGL+w6yHTTzlI9eDHzn 7I3M3R0X0W08ZLCV2aglUTAEy2ap/venH3TSRIjKc2Vy2kgT2aWtYK5ijh0ivdK3 SBcjx42UfEee18uIDJba2ByW11k8Q1hElP9kyDj4eWrALXk2kd8bgcsqy0x1ThiV 8jS3DOI= -----END CERTIFICATE-----Generated at Sat Apr 26 12:39:47 2025 by rpki-client