$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/45399802215111F0B94CA13FC4F9AE02.roa File: 45399802215111F0B94CA13FC4F9AE02.roa (raw, json) Hash identifier: ZskTY35K8ykA/nH/ub5366Swk1f5LDql1tAFnRxo0wg= Subject key identifier: D6:C0:81:A7:33:C4:22:35:26:4D:31:1C:FE:6F:22:B3:84:9B:E8:46 Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Certificate serial: 0181 Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/45399802215111F0B94CA13FC4F9AE02.roa Signing time: Thu 24 Apr 2025 21:15:39 +0000 ROA not before: Thu 24 Apr 2025 21:15:39 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 151197 IP address blocks: 103.140.194.0/24 maxlen: 24 103.140.194.0/25 maxlen: 25 103.140.194.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Validity Not Before: Apr 24 21:15:39 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=680aa9fa-83db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a2:7d:f3:c4:ad:73:f9:48:9d:69:b4:44:f8: 1c:52:00:c3:b8:5e:5b:65:d8:14:6b:57:67:36:c0: 9e:84:c3:1b:36:2a:06:60:13:d5:ef:2a:a7:bc:9d: 9b:aa:55:37:2a:4f:cf:43:ba:6d:8e:0e:38:7b:0e: d8:1c:61:63:f9:70:66:3d:51:72:24:99:a0:a1:d6: 6b:d0:bb:f2:e7:f3:2f:bd:78:7e:8c:3a:ad:1b:33: 3e:63:38:63:f1:ec:7e:63:0f:ea:59:3e:70:fb:f1: 7e:e4:3b:d2:5c:c7:43:2f:3e:e6:0a:64:96:71:a9: 4d:58:9f:a3:17:2a:89:95:42:16:6e:c2:61:c2:be: bd:a3:68:9f:d8:7d:83:c0:22:47:6f:79:0a:36:5c: 90:1d:52:9f:3b:c1:ae:2d:62:ff:d5:4e:57:53:87: d3:dd:32:25:3f:a9:bb:82:13:f4:52:90:18:af:ae: cc:24:54:59:81:c9:04:e3:ee:ea:0c:5b:86:48:05: 31:9e:19:28:70:aa:b3:97:80:db:8e:be:5f:0b:dc: 40:f3:9c:23:d6:5d:59:ac:78:0f:57:d1:9b:6a:65: d4:1e:76:aa:22:6b:6d:07:47:0d:e5:9f:25:ab:57: 07:66:34:cb:ca:7b:be:56:90:7f:7a:b4:f2:49:14: 91:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C0:81:A7:33:C4:22:35:26:4D:31:1C:FE:6F:22:B3:84:9B:E8:46 X509v3 Authority Key Identifier: keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/45399802215111F0B94CA13FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.194.0/24 Signature Algorithm: sha256WithRSAEncryption 61:d5:89:41:9b:a3:a2:4e:93:ac:9c:3a:c7:91:65:77:d4:72: 38:88:45:1e:88:ee:55:54:4d:81:05:c7:df:26:d2:3a:57:40: 8e:ec:00:d8:1e:73:66:07:fc:d6:d4:88:cd:fb:21:e9:4f:6e: 8d:78:37:38:a2:52:cb:f7:e1:b0:63:e2:55:52:8a:30:1a:8c: b1:fd:33:37:26:d3:91:07:09:33:9d:69:2e:f7:67:a5:47:0b: f4:8e:db:be:ff:43:98:7b:4c:04:19:1b:b7:47:d4:ba:b0:29: a1:28:a1:30:55:c6:7f:6a:8d:f6:fa:e7:d3:75:30:a4:d6:e6: ce:7a:4f:ba:c8:79:48:b6:b5:23:ee:3b:35:51:a6:88:32:77: 4e:f1:e7:a8:02:8e:4d:8a:74:5e:43:f0:0e:58:73:4d:bd:0a: 24:d2:e6:e1:35:81:31:40:cf:20:63:6e:3e:e9:05:90:8f:98: b1:66:1c:3e:20:09:47:5a:03:5e:28:09:2f:d1:3b:c3:6d:46: 13:4f:48:60:a9:5f:65:01:4c:2b:94:08:97:ff:ec:16:40:3b: c4:05:99:98:9a:85:40:f3:85:95:b2:f8:3e:a6:42:06:03:26: ce:6f:ac:ed:5b:62:5d:90:b4:fa:07:85:c2:f2:01:5e:8d:c6: d4:0b:08:c4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyRTMxMTAvBgNVBAUTKDhFRTUyMjZFMDU3QTY1NDQyNDIyRUFGRUQ5QzYyRTI5 MERGMzI0OEEwHhcNMjUwNDI0MjExNTM5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhYTlmYS04M2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkqJ988Stc/lInWm0RPgcUgDDuF5bZdgUa1dnNsCehMMbNioGYBPV7yqnvJ2b qlU3Kk/PQ7ptjg44ew7YHGFj+XBmPVFyJJmgodZr0Lvy5/MvvXh+jDqtGzM+Yzhj 8ex+Yw/qWT5w+/F+5DvSXMdDLz7mCmSWcalNWJ+jFyqJlUIWbsJhwr69o2if2H2D wCJHb3kKNlyQHVKfO8GuLWL/1U5XU4fT3TIlP6m7ghP0UpAYr67MJFRZgckE4+7q DFuGSAUxnhkocKqzl4Dbjr5fC9xA85wj1l1ZrHgPV9GbamXUHnaqImttB0cN5Z8l q1cHZjTLynu+VpB/erTySRSRiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNbAgacz xCI1Jk0xHP5vIrOEm+hGMB8GA1UdIwQYMBaAFI7lIm4FemVEJCLq/tnGLikN8ySK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJFMy9DNkI1MDEzQ0VB RTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpVUWtJdXItMmNZdUtRM3pK SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p1VWliZ1Y2WlVRa0l1ci0yY1l1S1EzekpJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjcyRTMvQzZCNTAxM0NFQUU5MTFFRDg3NUEyRDUxQzRGOUFFMDIvNDUzOTk4MDIy MTUxMTFGMEI5NENBMTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnjMIwDQYJKoZIhvcNAQELBQADggEBAGHViUGbo6JOk6yc OseRZXfUcjiIRR6I7lVUTYEFx98m0jpXQI7sANgec2YH/NbUiM37IelPbo14Nzii Usv34bBj4lVSijAajLH9Mzcm05EHCTOdaS73Z6VHC/SO277/Q5h7TAQZG7dH1Lqw KaEooTBVxn9qjfb659N1MKTW5s56T7rIeUi2tSPuOzVRpogyd07x56gCjk2KdF5D 8A5Yc029CiTS5uE1gTFAzyBjbj7pBZCPmLFmHD4gCUdaA14oCS/RO8NtRhNPSGCp X2UBTCuUCJf/7BZAO8QFmZiahUDzhZWy+D6mQgYDJs5vrO1bYl2QtPoHhcLyAV6N xtQLCMQ= -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:36 2025 by rpki-client