$ rpki-client -vvf rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/98DBD8B660D311EEA9C80344C4F9AE02.roa File: 98DBD8B660D311EEA9C80344C4F9AE02.roa (raw, json) Hash identifier: Iq6DjDAWYaikvNVka5L51lFXKJ+7UZRQJoPc5OKJvsI= Subject key identifier: 4F:A2:80:1B:78:56:D8:1B:7D:96:15:69:99:91:D3:F5:06:1F:75:3B Certificate issuer: /CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D Certificate serial: 0AC1 Authority key identifier: D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/98DBD8B660D311EEA9C80344C4F9AE02.roa Signing time: Tue 22 Apr 2025 19:49:34 +0000 ROA not before: Tue 22 Apr 2025 19:49:34 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 140213 IP address blocks: 103.148.172.0/23 maxlen: 23 103.148.173.0/24 maxlen: 24 2001:df2:df80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2753 (0xac1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E726, serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D Validity Not Before: Apr 22 19:49:34 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6807f2cd-8d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:4d:c5:c7:45:86:c2:f3:69:0f:65:d7:2e: 97:74:cb:79:96:85:47:bc:56:41:bb:f9:b7:0e:42: c0:f6:1b:3a:a7:42:2c:4e:e9:21:9c:6b:72:3a:ec: c6:c2:6b:6f:a4:73:d0:f6:ed:a7:17:c2:03:a2:c8: 5f:d7:3b:15:80:52:c7:92:7c:f3:23:ee:45:d1:87: ab:b1:ae:c2:4c:54:6f:63:ba:06:a1:34:5f:98:57: 72:95:99:12:fe:fb:91:f8:5d:90:08:42:55:0f:df: a6:c5:f1:54:29:72:ab:bb:39:db:f6:fe:db:09:66: 1f:ec:82:46:ad:14:66:a8:51:99:6b:b5:42:19:ab: db:9b:53:53:97:98:2e:c4:ec:83:30:21:5c:0c:1e: d4:79:e7:ae:90:6d:06:7a:84:b4:c1:3b:6a:4b:01: ec:49:fd:9b:f1:19:09:3d:54:b2:b9:5e:d1:38:1d: e9:d9:40:41:9e:e2:70:ea:d3:ac:65:b3:94:0e:0f: 02:85:25:39:70:79:54:f2:78:41:50:f3:60:8b:10: 27:6f:55:ab:38:9c:b9:e1:2f:7b:f3:05:5a:a8:9c: 91:c2:45:56:85:0e:f9:ce:92:d0:37:c0:d8:44:2e: 7e:c4:b7:16:4f:30:7b:ab:d0:9e:f7:8d:e2:9a:1e: 62:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A2:80:1B:78:56:D8:1B:7D:96:15:69:99:91:D3:F5:06:1F:75:3B X509v3 Authority Key Identifier: keyid:D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/98DBD8B660D311EEA9C80344C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.172.0/23 IPv6: 2001:df2:df80::/48 Signature Algorithm: sha256WithRSAEncryption 1d:8e:97:bb:13:31:39:c0:75:fb:4c:91:b6:d9:7b:16:85:33: 19:7e:bc:d2:f1:3b:bb:87:b9:2c:f8:b3:0b:58:f6:ce:96:69: 76:b5:13:c1:4e:93:9c:3d:81:f4:22:2c:8c:16:bf:1b:c0:66: 37:50:32:ae:9a:e3:59:fb:89:ba:13:ed:8d:94:83:87:13:98: 33:4a:c4:05:c1:b0:a2:7b:46:a2:a2:f1:a9:4c:bd:97:b2:f5: 86:6e:40:f2:5e:c9:4f:8a:fd:63:f1:a6:4e:31:a0:57:96:d0: cb:24:f3:7f:e2:8f:06:23:76:5f:f8:80:66:fb:be:e8:70:d3: b6:d3:6b:0f:e4:bf:f0:0a:ec:5c:ad:3b:07:40:9c:f7:b8:32: 10:9a:92:b5:3d:c4:b6:0f:87:98:c3:1b:b9:4f:67:d5:aa:e7: 3c:de:dd:02:60:bd:e6:12:45:97:c7:83:fd:b8:c2:0f:a4:f2: 7b:71:51:fc:ac:29:12:1b:5b:91:2e:9e:4c:0a:de:65:d9:7d: 8b:ea:35:6e:99:6a:4f:f4:42:d7:0d:64:fa:e7:dd:0a:b4:e1: d7:6a:7b:a5:39:41:bb:88:5f:d4:e0:29:f3:97:27:53:f1:5c: 78:b9:b3:de:18:0c:96:ee:9c:3a:f0:01:fa:9a:e1:d0:fa:2a: 6e:c7:64:88 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3MjYxMTAvBgNVBAUTKEQ3NEFDMUI4QTMzMzUyNDNGQ0IyRjk5MDVCQzUxREJE Q0IwRTIzNkQwHhcNMjUwNDIyMTk0OTM0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODA3ZjJjZC04ZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxRNxcdFhsLzaQ9l1y6XdMt5loVHvFZBu/m3DkLA9hs6p0IsTukhnGtyOuzG wmtvpHPQ9u2nF8IDoshf1zsVgFLHknzzI+5F0Yersa7CTFRvY7oGoTRfmFdylZkS /vuR+F2QCEJVD9+mxfFUKXKruznb9v7bCWYf7IJGrRRmqFGZa7VCGavbm1NTl5gu xOyDMCFcDB7UeeeukG0GeoS0wTtqSwHsSf2b8RkJPVSyuV7ROB3p2UBBnuJw6tOs ZbOUDg8ChSU5cHlU8nhBUPNgixAnb1WrOJy54S978wVaqJyRwkVWhQ75zpLQN8DY RC5+xLcWTzB7q9Ce943imh5i/wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFE+igBt4 VtgbfZYVaZmR0/UGH3U7MB8GA1UdIwQYMBaAFNdKwbijM1JD/LL5kFvFHb3LDiNt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTcyNi82REJGQTM4QTUy RDkxMUVBODI3REQwODJDNEY5QUUwMi8xMHJCdUtNelVrUDhzdm1RVzhVZHZjc09J MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwckJ1S016VWtQOHN2bVFXOFVkdmNzT0kyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U3MjYvNkRCRkEzOEE1MkQ5MTFFQTgyN0REMDgyQzRGOUFFMDIvOThEQkQ4QjY2 MEQzMTFFRUE5QzgwMzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlKwwDwQCAAIwCQMHACABDfLfgDANBgkqhkiG9w0BAQsF AAOCAQEAHY6XuxMxOcB1+0yRttl7FoUzGX680vE7u4e5LPizC1j2zpZpdrUTwU6T nD2B9CIsjBa/G8BmN1AyrprjWfuJuhPtjZSDhxOYM0rEBcGwontGoqLxqUy9l7L1 hm5A8l7JT4r9Y/GmTjGgV5bQyyTzf+KPBiN2X/iAZvu+6HDTttNrD+S/8ArsXK07 B0Cc97gyEJqStT3Etg+HmMMbuU9n1arnPN7dAmC95hJFl8eD/bjCD6Tye3FR/Kwp EhtbkS6eTAreZdl9i+o1bplqT/RC1w1k+ufdCrTh12p7pTlBu4hf1OAp85cnU/Fc eLmz3hgMlu6cOvAB+prh0PoqbsdkiA== -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:28 2025 by rpki-client