$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/BFE023663DD911EA89EB0782C4F9AE02.roa File: BFE023663DD911EA89EB0782C4F9AE02.roa (raw, json) Hash identifier: thbx7wB2Yko7c9vVEn1C7De9utHqQJCytkIE+aVUcMQ= Subject key identifier: 22:5F:BA:77:FE:74:B4:96:E6:17:C7:FF:EA:3C:0E:95:EF:44:C0:93 Certificate issuer: /CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Certificate serial: 0B12 Authority key identifier: 5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/BFE023663DD911EA89EB0782C4F9AE02.roa Signing time: Sun 20 Apr 2025 19:18:55 +0000 ROA not before: Sun 20 Apr 2025 19:18:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138924 IP address blocks: 103.137.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2834 (0xb12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6990, serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Validity Not Before: Apr 20 19:18:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6805489e-01fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7d:1d:87:77:db:73:ba:4e:26:72:75:d4:4c: 45:e2:2b:a2:1e:07:3c:68:c9:50:41:cb:18:7d:b5: 9f:24:01:b7:e5:a8:69:00:e2:5b:09:af:9c:3f:e0: 4f:0d:11:31:1a:59:fc:c7:1e:cd:7b:12:52:8f:8c: 32:c3:af:de:72:ed:46:8a:40:1a:07:61:1e:9a:8b: c6:47:a2:5e:35:a9:a3:ea:4d:3b:bd:25:33:11:65: fe:a3:c4:97:6b:2f:5b:49:af:60:d9:7b:fc:0b:47: 7e:fe:24:f3:6e:7d:73:3b:82:a8:22:0a:48:a5:47: 9a:ac:8d:37:69:93:77:8e:8a:7a:0f:35:a4:61:36: 7e:8c:c8:64:a6:e1:b2:88:cc:f7:4f:87:4c:bf:dd: d9:c3:f7:9a:fa:4a:81:4e:8c:c8:2b:49:c6:f8:6d: d5:52:53:ae:f7:f4:17:3a:ec:75:67:76:06:d1:ae: 8d:74:8a:7e:59:f2:d9:17:31:5d:f8:9c:32:80:e5: 73:f2:a3:a6:63:4a:bf:f3:11:67:f0:c4:04:17:e8: 2c:7d:27:88:95:ab:d7:f6:ef:dd:c2:79:a1:db:49: 10:af:8a:a0:ae:58:33:10:eb:23:84:74:1f:0d:4e: d7:82:04:e4:6f:e6:a5:29:2a:65:80:23:e1:8e:66: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5F:BA:77:FE:74:B4:96:E6:17:C7:FF:EA:3C:0E:95:EF:44:C0:93 X509v3 Authority Key Identifier: keyid:5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/BFE023663DD911EA89EB0782C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.54.0/24 Signature Algorithm: sha256WithRSAEncryption 39:fe:8a:ab:30:e3:fd:b2:a2:f5:db:4b:5a:25:df:cb:18:ce: 5d:ed:5f:3e:4f:e1:a8:f6:35:ba:79:04:fe:78:0e:40:2b:1f: b0:ec:d5:da:28:9a:f5:77:1b:cf:1c:af:4c:bb:56:a5:8e:51: fa:f6:bc:2f:1e:bf:94:63:f8:e2:4d:03:a0:ee:f0:df:08:b4: 1c:dd:55:c0:fc:33:3f:c7:cb:34:6e:b9:5b:e8:e6:f9:42:e7: 65:08:d1:2d:56:73:b0:85:e2:76:bd:49:7c:67:7d:cb:ca:0b: 36:09:2c:b3:18:19:03:58:ef:52:53:f7:bc:80:c0:33:27:5e: 9e:52:3d:a0:12:e5:19:f3:f7:9c:d4:eb:6f:15:94:d0:c2:ec: cf:b3:3a:0b:da:23:9a:ee:9b:14:f7:47:5b:6a:24:7d:df:b2: c3:27:9e:de:d4:70:e1:45:ab:07:19:6f:ac:35:50:65:97:4e: 12:f7:71:77:0e:96:96:ad:3a:44:78:ad:2e:eb:87:0f:43:5f: 21:5b:8f:28:17:8f:f2:de:09:10:67:95:69:aa:45:67:3f:c7: 10:22:26:44:3d:75:74:58:44:df:6d:d7:11:6c:3e:f2:b1:4e: e9:bd:89:d6:05:65:c4:14:04:64:90:cb:0c:37:14:bc:70:03: 06:76:f0:f9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5OTAxMTAvBgNVBAUTKDVBRTM2MUVCNjA2QjVEMzE2RjBFOTU5N0RENjhDRERC OUM2RjYwMDUwHhcNMjUwNDIwMTkxODU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA1NDg5ZS0wMWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsn0dh3fbc7pOJnJ11ExF4iuiHgc8aMlQQcsYfbWfJAG35ahpAOJbCa+cP+BP DRExGln8xx7NexJSj4wyw6/ecu1GikAaB2EemovGR6JeNamj6k07vSUzEWX+o8SX ay9bSa9g2Xv8C0d+/iTzbn1zO4KoIgpIpUearI03aZN3jop6DzWkYTZ+jMhkpuGy iMz3T4dMv93Zw/ea+kqBTozIK0nG+G3VUlOu9/QXOux1Z3YG0a6NdIp+WfLZFzFd +JwygOVz8qOmY0q/8xFn8MQEF+gsfSeIlavX9u/dwnmh20kQr4qgrlgzEOsjhHQf DU7XggTkb+alKSplgCPhjmZFRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCJfunf+ dLSW5hfH/+o8DpXvRMCTMB8GA1UdIwQYMBaAFFrjYetga10xbw6Vl91ozducb2AF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk5MC80MjE0NUY5ODNE RDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhURnZEcFdYM1dqTjI1eHZZ QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1Tmg2MkJyWFRGdkRwV1gzV2pOMjV4dllBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTY5OTAvNDIxNDVGOTgzREQ4MTFFQTlGMTY5NTdDQzRGOUFFMDIvQkZFMDIzNjYz REQ5MTFFQTg5RUIwNzgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABniTYwDQYJKoZIhvcNAQELBQADggEBADn+iqsw4/2yovXb S1ol38sYzl3tXz5P4aj2Nbp5BP54DkArH7Ds1doomvV3G88cr0y7VqWOUfr2vC8e v5Rj+OJNA6Du8N8ItBzdVcD8Mz/HyzRuuVvo5vlC52UI0S1Wc7CF4na9SXxnfcvK CzYJLLMYGQNY71JT97yAwDMnXp5SPaAS5Rnz95zU628VlNDC7M+zOgvaI5rumxT3 R1tqJH3fssMnnt7UcOFFqwcZb6w1UGWXThL3cXcOlpatOkR4rS7rhw9DXyFbjygX j/LeCRBnlWmqRWc/xxAiJkQ9dXRYRN9t1xFsPvKxTum9idYFZcQUBGSQyww3FLxw AwZ28Pk= -----END CERTIFICATE-----Generated at Sat Apr 26 07:42:45 2025 by rpki-client