$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/FB160E5C81D511EEAE1FCF11C4F9AE02.roa File: FB160E5C81D511EEAE1FCF11C4F9AE02.roa (raw, json) Hash identifier: Y1WmvqsPlnX94a53nz3O+0Y13t6x8H2WENWhbHMcMHM= Subject key identifier: D4:89:38:29:A5:C9:81:4F:B5:03:43:F2:2E:7C:03:B2:64:B2:1E:18 Certificate issuer: /CN=A91AACDB/serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C Certificate serial: EB Authority key identifier: B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/FB160E5C81D511EEAE1FCF11C4F9AE02.roa Signing time: Fri 27 Dec 2024 03:57:37 +0000 ROA not before: Fri 27 Dec 2024 03:57:37 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 150335 IP address blocks: 103.104.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AACDB, serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C Validity Not Before: Dec 27 03:57:37 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676e25b0-fbfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:76:4f:b3:8b:a6:05:32:aa:2f:3a:c3:cf:b5: 66:5f:a3:cb:7c:75:64:8d:93:d9:94:05:50:69:02: 22:56:55:7e:a5:97:f2:5f:88:88:fd:8f:d4:9b:71: 94:83:7c:5b:10:bd:73:14:61:18:3c:f0:10:66:72: cd:44:61:db:35:02:0f:6d:12:72:be:dc:b7:d3:1b: a8:d4:98:0f:a2:a4:40:ba:97:27:fd:6b:16:c8:1b: 85:01:4d:63:a4:57:ed:29:48:18:82:d7:53:b4:b3: 5a:91:c4:63:b0:67:25:8c:01:91:d6:dc:b2:71:9f: 14:51:3b:40:a9:02:d8:e6:8a:99:65:97:7d:86:b8: 3c:35:3a:03:b1:0b:ad:7b:10:24:d4:b8:e0:79:6a: de:c1:64:1e:34:49:92:51:18:96:49:a3:a5:e5:79: 5d:0c:8b:5a:49:ac:7c:c2:02:80:ab:d1:9f:3b:a0: 7c:5d:6c:33:12:1e:f6:3f:8d:a0:3b:cb:d7:35:1b: f2:02:70:b1:69:53:61:6c:50:3a:9e:e7:83:a5:2e: f4:6b:01:3e:f0:cc:e9:31:a1:55:1d:ea:59:cc:42: b4:4d:43:88:5a:6f:88:9d:2a:da:49:bf:1c:a8:ed: f0:3c:d1:96:dc:46:28:61:55:06:2c:93:c4:78:e6: 33:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:89:38:29:A5:C9:81:4F:B5:03:43:F2:2E:7C:03:B2:64:B2:1E:18 X509v3 Authority Key Identifier: keyid:B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/FB160E5C81D511EEAE1FCF11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.142.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:0d:4b:f8:41:75:85:6e:59:49:71:62:a1:92:b8:17:f1:8c: 7c:fb:11:a6:67:9c:f4:30:7a:1f:05:05:55:9e:51:ce:6a:81: f8:5b:46:68:51:68:3d:fd:e6:c4:e6:93:c9:f5:cb:0b:91:62: 98:83:17:08:7d:79:dd:bd:bc:bc:45:26:33:44:7f:75:d2:ec: 49:2a:7a:64:a2:9d:08:8b:01:9e:0b:3a:12:8f:5c:4e:3f:d4: fe:a3:10:f6:99:f6:de:92:6b:0c:8e:9b:d2:9b:f5:cd:1b:a8: aa:21:b8:44:0d:1f:9c:88:d6:bb:12:5e:26:ff:cf:b2:23:a8: 7d:fb:de:25:71:1a:b5:3e:b3:03:a4:82:31:2d:76:ee:eb:dd: 6f:3c:10:94:57:d8:4c:af:e6:08:96:6e:de:1c:1f:bc:e4:33: 5f:88:4a:93:48:ed:25:0c:65:22:75:ae:1a:52:a1:ed:42:6c: ab:b2:58:f5:09:5d:fc:fe:8e:d1:e8:83:7b:0e:19:a5:28:e4: a0:4c:78:08:a1:57:d9:ac:cf:c0:63:44:ad:a3:92:10:da:9d: c4:d9:41:e7:95:83:97:2a:c2:c5:df:49:cf:9d:30:5e:e2:db: 6d:7d:27:e3:54:a4:62:d6:2f:a5:9b:e5:d3:46:8e:08:30:c4: 3f:2a:d8:23 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDREIxMTAvBgNVBAUTKEI3MEZFQUMzMUVEOUQ1ODAxODU1RkVEMzgyNkY5NjM3 OUQ2RDEyMEMwHhcNMjQxMjI3MDM1NzM3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZlMjViMC1mYmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXZPs4umBTKqLzrDz7VmX6PLfHVkjZPZlAVQaQIiVlV+pZfyX4iI/Y/Um3GU g3xbEL1zFGEYPPAQZnLNRGHbNQIPbRJyvty30xuo1JgPoqRAupcn/WsWyBuFAU1j pFftKUgYgtdTtLNakcRjsGcljAGR1tyycZ8UUTtAqQLY5oqZZZd9hrg8NToDsQut exAk1LjgeWrewWQeNEmSURiWSaOl5XldDItaSax8wgKAq9GfO6B8XWwzEh72P42g O8vXNRvyAnCxaVNhbFA6nueDpS70awE+8MzpMaFVHepZzEK0TUOIWm+InSraSb8c qO3wPNGW3EYoYVUGLJPEeOYzJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNSJOCml yYFPtQND8i58A7Jksh4YMB8GA1UdIwQYMBaAFLcP6sMe2dWAGFX+04JvljedbRIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUNEQi80M0VGM0IzRTY3 OTcxMUVFODk1MjdCNjBDNEY5QUUwMi90d19xd3g3WjFZQVlWZjdUZ20tV041MXRF Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R3X3F3eDdaMVlBWVZmN1RnbS1XTjUxdEVndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFDREIvNDNFRjNCM0U2Nzk3MTFFRTg5NTI3QjYwQzRGOUFFMDIvRkIxNjBFNUM4 MUQ1MTFFRUFFMUZDRjExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnaI4wDQYJKoZIhvcNAQELBQADggEBAH4NS/hBdYVuWUlx YqGSuBfxjHz7EaZnnPQweh8FBVWeUc5qgfhbRmhRaD395sTmk8n1ywuRYpiDFwh9 ed29vLxFJjNEf3XS7EkqemSinQiLAZ4LOhKPXE4/1P6jEPaZ9t6SawyOm9Kb9c0b qKohuEQNH5yI1rsSXib/z7IjqH373iVxGrU+swOkgjEtdu7r3W88EJRX2Eyv5giW bt4cH7zkM1+ISpNI7SUMZSJ1rhpSoe1CbKuyWPUJXfz+jtHog3sOGaUo5KBMeAih V9msz8BjRK2jkhDancTZQeeVg5cqwsXfSc+dMF7i2219J+NUpGLWL6Wb5dNGjggw xD8q2CM= -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:22 2025 by rpki-client