$ rpki-client -vvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/80F75824FAAD11EDB0C98683C4F9AE02.roa File: 80F75824FAAD11EDB0C98683C4F9AE02.roa (raw, json) Hash identifier: rMbpJoWHf1iUdvaVh3Kk+Bpj7rhb6c9ybWRGPS4X+R4= Subject key identifier: 6B:CD:FC:1A:BA:55:87:31:FE:28:60:6E:F1:43:8C:71:A2:B8:4E:95 Certificate issuer: /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4 Certificate serial: 0168 Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/80F75824FAAD11EDB0C98683C4F9AE02.roa Signing time: Thu 17 Apr 2025 10:08:33 +0000 ROA not before: Thu 17 Apr 2025 10:08:33 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 133929 IP address blocks: 103.91.156.0/22 maxlen: 24 123.253.44.0/22 maxlen: 22 123.253.44.0/23 maxlen: 23 123.253.44.0/24 maxlen: 24 123.253.45.0/24 maxlen: 24 123.253.46.0/23 maxlen: 23 123.253.46.0/24 maxlen: 24 123.253.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923A9, serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4 Validity Not Before: Apr 17 10:08:33 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6800d321-0e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b9:1e:42:7f:0b:28:5d:54:fa:c5:d7:fd:0d: 95:c0:18:f2:e3:58:e0:28:56:d6:e7:0e:c4:3e:8a: e9:d6:24:61:38:f7:f5:27:ae:72:9a:52:6c:d3:48: ba:7f:57:12:28:f8:04:9d:dd:56:8c:ee:24:1b:66: 62:1d:ed:03:8d:ca:33:b3:16:02:c1:d6:86:68:af: 67:f6:e2:86:ee:06:b3:aa:e2:b3:cf:19:a0:67:f4: 77:98:a6:ad:90:a4:99:0f:ee:27:25:21:f3:1e:72: c7:37:e9:cc:32:2f:36:5e:e4:30:a6:cc:d4:6b:1e: b0:ad:7b:1a:b7:4a:f7:da:c9:ae:99:6c:f3:a0:79: 3f:17:01:36:c6:29:be:a5:fd:be:3c:a2:ee:51:de: 21:54:dc:da:1c:eb:fd:29:2a:b6:6f:06:cb:f6:49: b4:bd:0e:48:37:35:e4:59:af:5d:b7:2a:97:2c:4b: ac:9b:f1:b3:bb:ce:86:6e:c5:2b:f2:39:04:dd:32: b2:92:c0:f7:4f:d3:86:e3:c1:8c:c2:cc:31:c5:00: fc:5e:d2:38:ca:4b:6b:a8:e0:0f:f7:ef:5f:07:98: 14:8d:be:af:bb:03:f2:9d:cf:9e:49:30:43:84:ba: 21:15:ef:b0:14:c0:6f:f2:55:db:a2:ed:74:2d:03: 27:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CD:FC:1A:BA:55:87:31:FE:28:60:6E:F1:43:8C:71:A2:B8:4E:95 X509v3 Authority Key Identifier: keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/80F75824FAAD11EDB0C98683C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.156.0/22 123.253.44.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:14:d1:71:e6:fd:48:bd:cb:85:f7:a7:60:39:08:32:92:8e: 46:3e:ef:4e:7c:a9:61:00:69:6b:b2:36:38:74:0b:61:b1:cd: 8a:3c:00:87:75:7d:31:9c:49:d2:19:2d:2b:9a:ad:e1:af:a6: 23:82:94:ba:51:e1:59:4e:2e:82:29:58:e1:e7:e6:92:e7:57: 39:91:93:ed:69:3b:a8:fa:2e:fa:33:ab:85:03:19:4d:c6:ac: 39:b0:dc:83:00:6e:49:e8:fc:a0:98:bb:77:7d:20:6d:b4:02: d7:47:99:c8:7a:d1:db:5b:5c:a4:77:b5:b7:c8:83:a7:c3:97: 22:29:29:63:f7:82:92:2f:b7:48:ae:8e:65:51:48:64:7f:d8: f8:5a:af:a3:b0:8d:9a:fb:fd:68:30:80:82:91:7b:87:1c:66: 41:cb:9e:f0:b5:fd:2e:b3:6a:59:8e:dd:b2:81:e0:19:5b:5d: 9a:f9:1e:22:fd:3f:10:c7:a7:1a:85:cc:3b:2b:72:53:15:12: c3:f5:73:52:d7:c8:86:78:9f:d2:83:71:be:87:6b:99:56:5d: 58:00:37:ba:b3:a1:35:00:a1:79:97:7a:a9:00:98:41:2d:64: 3e:50:7b:66:8f:39:dd:b7:e3:cf:be:2f:af:f0:95:79:c6:e9: 3e:44:8b:ab -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzQTkxMTAvBgNVBAUTKDVDMTdBRjJFMEFBRjQ5MENFQUE4NEUyQUFBNzE0ODNE MDM5NUYxRTQwHhcNMjUwNDE3MTAwODMzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAwZDMyMS0wZTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7keQn8LKF1U+sXX/Q2VwBjy41jgKFbW5w7EPorp1iRhOPf1J65ymlJs00i6 f1cSKPgEnd1WjO4kG2ZiHe0DjcozsxYCwdaGaK9n9uKG7gazquKzzxmgZ/R3mKat kKSZD+4nJSHzHnLHN+nMMi82XuQwpszUax6wrXsat0r32smumWzzoHk/FwE2xim+ pf2+PKLuUd4hVNzaHOv9KSq2bwbL9km0vQ5INzXkWa9dtyqXLEusm/Gzu86GbsUr 8jkE3TKyksD3T9OG48GMwswxxQD8XtI4yktrqOAP9+9fB5gUjb6vuwPync+eSTBD hLohFe+wFMBv8lXbou10LQMnOQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGvN/Bq6 VYcx/ihgbvFDjHGiuE6VMB8GA1UdIwQYMBaAFFwXry4Kr0kM6qhOKqpxSD0DlfHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNBOS9BNjM4NzY4NEZB QTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNRenFxRTRxcW5GSVBRT1Y4 ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCZXZMZ3F2U1F6cXFFNHFxbkZJUFFPVjhlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTIzQTkvQTYzODc2ODRGQUE1MTFFREIyQjI5NTdGQzRGOUFFMDIvODBGNzU4MjRG QUFEMTFFREIwQzk4NjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnW5wDBAJ7/SwwDQYJKoZIhvcNAQELBQADggEBAB4U0XHm /Ui9y4X3p2A5CDKSjkY+7058qWEAaWuyNjh0C2GxzYo8AId1fTGcSdIZLSuareGv piOClLpR4VlOLoIpWOHn5pLnVzmRk+1pO6j6Lvozq4UDGU3GrDmw3IMAbkno/KCY u3d9IG20AtdHmch60dtbXKR3tbfIg6fDlyIpKWP3gpIvt0iujmVRSGR/2Phar6Ow jZr7/WgwgIKRe4ccZkHLnvC1/S6zalmO3bKB4BlbXZr5HiL9PxDHpxqFzDsrclMV EsP1c1LXyIZ4n9KDcb6Ha5lWXVgAN7qzoTUAoXmXeqkAmEEtZD5Qe2aPOd2348++ L6/wlXnG6T5Ei6s= -----END CERTIFICATE-----Generated at Sat Apr 26 08:17:54 2025 by rpki-client