$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/029310329B1911EFA0BD6470C4F9AE02.roa File: 029310329B1911EFA0BD6470C4F9AE02.roa (raw, json) Hash identifier: ipUtH6de1n3QDXNmS4idd62IMEQfE9S8Kl6BBzpD9nQ= Subject key identifier: 5E:03:6A:15:2B:6C:DB:6B:63:91:EB:09:13:5E:D3:1D:5D:EF:65:C2 Certificate issuer: /CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69 Certificate serial: 60 Authority key identifier: 88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/029310329B1911EFA0BD6470C4F9AE02.roa Signing time: Tue 01 Apr 2025 07:02:25 +0000 ROA not before: Tue 01 Apr 2025 07:02:25 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9303 IP address blocks: 103.209.224.0/22 maxlen: 22 203.18.59.0/24 maxlen: 24 203.25.187.0/24 maxlen: 24 203.189.24.0/24 maxlen: 24 203.190.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8047, serialNumber=8848AACDF2951303E7098F419D8CA00422890C69 Validity Not Before: Apr 1 07:02:25 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67eb8f81-55d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a3:92:b6:7f:47:0a:6a:ca:52:18:09:1b:8c: ee:9a:ea:4b:48:56:37:a2:3b:53:6c:86:b7:18:49: 82:55:35:ce:ca:f0:49:37:21:a7:d6:7b:62:8d:df: 09:a8:89:e3:8d:14:89:a4:0f:6a:3b:f4:9d:a4:13: 14:a2:98:91:f4:26:6f:0e:d2:f9:4a:af:16:69:f7: 22:b6:bf:fe:ba:2f:f3:f6:21:93:8f:9e:e8:b0:61: 34:92:f3:e8:52:3c:fa:6a:2a:54:58:b2:63:7a:85: 01:96:94:6e:17:49:e3:a1:e7:fd:28:f7:b4:3c:b3: ba:09:f9:b6:af:ad:e6:ae:5d:9a:3d:c7:2a:92:ed: d0:56:14:ae:cd:9f:d0:91:40:c4:5d:8a:3f:60:f2: a6:6a:08:d4:34:94:3a:c2:8b:77:c2:d0:7a:68:5b: 8f:e1:8c:39:39:37:c0:f5:9a:c2:9a:3c:a9:9d:3e: f3:91:9a:37:9c:70:4c:59:42:9e:69:de:e6:9c:e8: c2:4d:90:ed:5a:08:48:2a:a8:d5:ae:9f:e7:40:ec: 81:d2:0f:d8:40:f3:b3:30:40:f8:58:18:b8:03:2f: 0c:89:ee:cc:18:23:ad:39:c7:20:16:cc:9f:2b:3f: be:25:f7:9c:80:67:25:dd:b0:c6:06:e0:e0:0c:59: d0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:03:6A:15:2B:6C:DB:6B:63:91:EB:09:13:5E:D3:1D:5D:EF:65:C2 X509v3 Authority Key Identifier: keyid:88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/029310329B1911EFA0BD6470C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.224.0/22 203.18.59.0/24 203.25.187.0/24 203.189.24.0/24 203.190.217.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:9f:be:75:98:58:93:2d:6f:8a:44:14:4f:6a:18:9a:fd:ca: 98:4c:c7:a3:4b:f7:89:1f:cb:65:00:e8:73:64:a3:37:57:b8: d0:65:28:8e:fa:05:2c:b1:bb:e8:82:dc:50:29:5e:de:64:aa: 2b:6f:85:4e:83:d1:39:12:65:5f:a0:b5:36:83:11:db:2f:28: 7c:d8:b5:94:d0:ec:da:76:d3:95:fc:e3:c9:e9:8f:c6:51:30: fe:1e:b6:d2:7e:46:51:f9:38:9f:03:8c:61:60:bc:e0:02:e6: 62:00:ab:4b:2d:48:29:f3:56:c9:cb:72:a8:e2:9f:24:0a:82: 3a:26:c4:23:20:da:47:bc:59:2a:ce:5c:91:66:2f:ba:78:f1: 47:a4:4f:1a:af:34:e2:ac:af:e5:8e:21:e7:b0:94:88:dc:3d: 74:d6:a4:24:b9:0a:73:17:ad:f2:6c:8a:cf:38:59:f5:b4:a2: 10:ad:ac:ce:44:9f:01:d3:d7:9e:61:4b:02:a9:df:95:a7:35: 4c:62:97:b7:e7:31:1c:3a:f6:3f:18:39:c3:28:f3:67:af:f1: 8e:a3:de:76:1f:01:04:4d:2a:5f:79:1f:97:8f:1e:e8:39:28: 27:e5:a2:0b:91:5d:7f:29:7a:4d:34:48:ce:bb:04:d3:1c:c3: 43:1b:93:8d -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODA0NzExMC8GA1UEBRMoODg0OEFBQ0RGMjk1MTMwM0U3MDk4RjQxOUQ4Q0EwMDQy Mjg5MEM2OTAeFw0yNTA0MDEwNzAyMjVaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZWI4ZjgxLTU1ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdo5K2f0cKaspSGAkbjO6a6ktIVjeiO1NshrcYSYJVNc7K8Ek3IafWe2KN3wmo ieONFImkD2o79J2kExSimJH0Jm8O0vlKrxZp9yK2v/66L/P2IZOPnuiwYTSS8+hS PPpqKlRYsmN6hQGWlG4XSeOh5/0o97Q8s7oJ+bavreauXZo9xyqS7dBWFK7Nn9CR QMRdij9g8qZqCNQ0lDrCi3fC0HpoW4/hjDk5N8D1msKaPKmdPvORmjeccExZQp5p 3uac6MJNkO1aCEgqqNWun+dA7IHSD9hA87MwQPhYGLgDLwyJ7swYI605xyAWzJ8r P74l95yAZyXdsMYG4OAMWdBfAgMBAAGjggKtMIICqTAdBgNVHQ4EFgQUXgNqFSts 22tjkesJE17THV3vZcIwHwYDVR0jBBgwFoAUiEiqzfKVEwPnCY9BnYygBCKJDGkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4MDQ3LzM0NEEwMUEyOUIx NTExRUY4NkVCMzc0NkM0RjlBRTAyL2lFaXF6ZktWRXdQbkNZOUJuWXlnQkNLSkRH ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUVpcXpmS1ZFd1BuQ1k5Qm5ZeWdCQ0tKREdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODA0Ny8zNDRBMDFBMjlCMTUxMUVGODZFQjM3NDZDNEY5QUUwMi8wMjkzMTAzMjlC MTkxMUVGQTBCRDY0NzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA3BggrBgEFBQcBBwEB/wQo MCYwJAQCAAEwHgMEAmfR4AMEAMsSOwMEAMsZuwMEAMu9GAMEAMu+2TANBgkqhkiG 9w0BAQsFAAOCAQEAi5++dZhYky1vikQUT2oYmv3KmEzHo0v3iR/LZQDoc2SjN1e4 0GUojvoFLLG76ILcUCle3mSqK2+FToPRORJlX6C1NoMR2y8ofNi1lNDs2nbTlfzj yemPxlEw/h620n5GUfk4nwOMYWC84ALmYgCrSy1IKfNWyctyqOKfJAqCOibEIyDa R7xZKs5ckWYvunjxR6RPGq804qyv5Y4h57CUiNw9dNakJLkKcxet8myKzzhZ9bSi EK2szkSfAdPXnmFLAqnflac1TGKXt+cxHDr2Pxg5wyjzZ6/xjqPedh8BBE0qX3kf l48e6DkoJ+WiC5Fdfyl6TTRIzrsE0xzDQxuTjQ== -----END CERTIFICATE-----Generated at Sat Apr 26 08:13:12 2025 by rpki-client