$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/675707260BDA11F0A768300AC4F9AE02.roa File: 675707260BDA11F0A768300AC4F9AE02.roa (raw, json) Hash identifier: wilBGqna+OfcXED1b/uTuE5R5bjXwDBDwAo+DwpXl+8= Subject key identifier: 5B:B6:AB:F6:F7:1C:EB:73:75:01:0D:50:65:36:28:43:51:27:84:1C Certificate issuer: /CN=A91820CC/serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Certificate serial: 02 Authority key identifier: B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/675707260BDA11F0A768300AC4F9AE02.roa Signing time: Fri 28 Mar 2025 13:41:51 +0000 ROA not before: Fri 28 Mar 2025 13:41:51 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 30967 IP address blocks: 103.94.214.0/24 maxlen: 24 103.94.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CC, serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787 Validity Not Before: Mar 28 13:41:51 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67e6a71f-9dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:69:ee:b8:bf:e0:90:98:9d:5a:e2:1b:f3: 64:e2:9c:9b:25:a1:74:a0:16:36:4f:a6:29:04:25: 58:6d:b4:d2:9a:05:b9:59:07:f5:5b:15:51:d7:67: d4:f3:7c:b6:22:0f:82:bb:26:c5:ca:f4:3d:94:e1: 59:dd:57:72:fd:5d:a7:fa:5f:95:d2:4f:49:24:bc: f1:51:55:81:be:7e:d1:76:c3:58:88:95:93:b3:16: 4a:38:69:cf:b3:23:95:d3:17:e2:96:55:cd:f9:18: 8f:b5:5a:07:dd:91:2a:93:2f:93:7a:b1:75:c3:3d: dd:60:bf:33:80:91:ba:a1:02:24:d0:86:0f:6f:f9: 90:53:65:7e:99:e6:e5:54:1a:f7:28:13:c1:29:8d: 5c:e7:ba:22:08:f8:9d:79:eb:a2:23:94:96:99:94: 39:ad:84:df:0e:bb:e8:34:d5:78:6d:17:1d:6a:4c: 1a:22:e6:62:b4:e9:12:fa:54:7b:83:fe:67:82:5d: 63:a4:d7:b1:b1:27:28:9b:1f:4f:41:e4:f2:ae:6d: 12:8e:0f:5e:f9:2c:d8:64:2c:14:45:56:df:5c:1c: 33:a7:50:7c:5a:1a:ca:21:03:f5:2d:d5:78:3d:2b: eb:b7:39:09:9e:00:99:b6:0d:cb:bf:fd:b8:0c:e8: 49:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B6:AB:F6:F7:1C:EB:73:75:01:0D:50:65:36:28:43:51:27:84:1C X509v3 Authority Key Identifier: keyid:B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/675707260BDA11F0A768300AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.94.214.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:26:6b:2a:16:70:81:78:36:4a:f5:f1:0a:67:5a:c1:91:ee: ce:74:2b:72:5d:9b:13:b1:37:76:6b:c9:91:7a:92:74:6d:47: 5a:0b:e2:c6:40:58:fa:e2:b9:bf:73:b1:31:ac:3e:3e:a4:9b: 9b:a0:88:5e:ba:20:ec:74:3a:e4:96:dc:01:cc:3c:f6:96:ea: 30:5f:cf:36:63:2f:e4:09:b4:26:8a:91:89:21:9d:78:bf:fc: 22:36:98:cc:c2:0b:47:aa:b2:a6:7b:8e:44:ff:46:c1:22:62: ff:b4:d8:87:8a:17:ab:71:85:e1:ae:31:75:94:ad:4d:cf:e5: 3f:ca:a1:e9:09:44:8b:99:47:b1:4a:7a:0c:00:d5:79:a5:24: 83:7a:55:56:51:ae:92:88:17:1d:10:1d:84:87:ce:da:fa:35: e5:04:ce:17:07:21:9a:20:3b:58:cf:48:a6:02:18:5c:5f:55: 73:11:fd:f9:c8:28:a9:a9:91:3c:f8:49:9c:4f:2d:77:ef:1d: 70:12:b3:7a:bd:26:3c:74:2f:f3:bb:cc:86:cb:d2:11:fb:0b: 9f:01:fe:2b:39:1b:ec:45:62:11:68:71:f1:d4:ac:40:9b:ba: 89:b7:0f:d8:9d:03:6e:51:ab:ba:f0:ee:74:0a:11:69:8d:04: 3b:83:fd:72 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjBDQzExMC8GA1UEBRMoQjc0NjQyNEUzNEU4OTlFMTRDRDMzOUQwNzNCQjVGNDkx OEZEMDc4NzAeFw0yNTAzMjgxMzQxNTFaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZTZhNzFmLTlkZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkmWnuuL/gkJidWuIb82TinJsloXSgFjZPpikEJVhttNKaBblZB/VbFVHXZ9Tz fLYiD4K7JsXK9D2U4VndV3L9Xaf6X5XST0kkvPFRVYG+ftF2w1iIlZOzFko4ac+z I5XTF+KWVc35GI+1WgfdkSqTL5N6sXXDPd1gvzOAkbqhAiTQhg9v+ZBTZX6Z5uVU GvcoE8EpjVznuiII+J1566IjlJaZlDmthN8Ou+g01XhtFx1qTBoi5mK06RL6VHuD /meCXWOk17GxJyibH09B5PKubRKOD175LNhkLBRFVt9cHDOnUHxaGsohA/Ut1Xg9 K+u3OQmeAJm2Dcu//bgM6EktAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUW7ar9vcc 63N1AQ1QZTYoQ1EnhBwwHwYDVR0jBBgwFoAUt0ZCTjTomeFM0znQc7tfSRj9B4cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMENDLzkzNkI0MzMyMEJE OTExRjA4QzYwN0Y4N0M0RjlBRTAyL3QwWkNUalRvbWVGTTB6blFjN3RmU1JqOUI0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdDBaQ1RqVG9tZUZNMHpuUWM3dGZTUmo5QjRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjBDQy85MzZCNDMzMjBCRDkxMUYwOEM2MDdGODdDNEY5QUUwMi82NzU3MDcyNjBC REExMUYwQTc2ODMwMEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWde1jANBgkqhkiG9w0BAQsFAAOCAQEAjyZrKhZwgXg2SvXx CmdawZHuznQrcl2bE7E3dmvJkXqSdG1HWgvixkBY+uK5v3OxMaw+PqSbm6CIXrog 7HQ65JbcAcw89pbqMF/PNmMv5Am0JoqRiSGdeL/8IjaYzMILR6qypnuORP9GwSJi /7TYh4oXq3GF4a4xdZStTc/lP8qh6QlEi5lHsUp6DADVeaUkg3pVVlGukogXHRAd hIfO2vo15QTOFwchmiA7WM9IpgIYXF9VcxH9+cgoqamRPPhJnE8td+8dcBKzer0m PHQv87vMhsvSEfsLnwH+Kzkb7EViEWhx8dSsQJu6ibcP2J0DblGruvDudAoRaY0E O4P9cg== -----END CERTIFICATE-----Generated at Sat Apr 26 14:20:55 2025 by rpki-client