$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/BA8EFE48E5D411EFA67E0112C4F9AE02.roa File: BA8EFE48E5D411EFA67E0112C4F9AE02.roa (raw, json) Hash identifier: YM8s+3bT2BEwmeTkM6cVfT4A9yMiZXxziOwMzUAciWo= Subject key identifier: D9:BD:BA:E8:EC:ED:4F:F0:9C:E5:22:2D:BF:71:13:B7:29:9C:11:AA Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Certificate serial: 0580 Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/BA8EFE48E5D411EFA67E0112C4F9AE02.roa Signing time: Mon 07 Apr 2025 08:06:19 +0000 ROA not before: Mon 07 Apr 2025 08:06:19 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 932 IP address blocks: 103.214.172.0/24 maxlen: 24 103.214.174.0/23 maxlen: 24 182.255.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1408 (0x580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Validity Not Before: Apr 7 08:06:19 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67f3877b-66e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:91:80:73:39:5f:d9:22:d1:10:6f:fe:64:06: ca:52:d0:3f:66:d4:cf:e2:88:0b:96:01:9a:38:5f: 7f:9f:59:42:7f:9f:5b:ff:93:ec:b3:53:29:be:c5: 80:a3:1d:e3:95:bf:b0:d9:ee:fa:af:8a:64:b8:1c: 6d:cb:33:80:a3:fd:67:43:51:a4:12:7a:e0:1b:35: 43:23:1d:4c:c8:95:ab:1f:35:38:3a:3e:e3:7e:3a: 29:ff:e7:4e:e6:4c:af:d1:21:85:71:e5:b3:7a:03: 0a:ca:b7:4b:b9:f7:f5:d6:92:63:c6:11:9f:5f:c7: 40:19:b3:c6:3d:06:82:4c:07:20:c5:95:93:d2:c1: e8:60:01:de:4a:07:e9:a5:9e:25:d4:17:a0:22:16: 24:a4:3b:92:24:38:62:6a:e3:96:c6:a2:ef:cb:21: 1c:55:34:e9:07:b7:1e:11:4a:13:32:59:45:70:ed: 33:9f:25:c4:4b:fb:ff:7a:ee:cc:91:59:a6:cf:a7: 11:e8:29:fc:fb:10:d8:66:8e:cc:9f:ea:f5:09:f2: 56:35:3d:83:15:c3:0f:8c:30:07:70:a8:6c:f2:ae: d9:14:dd:b1:26:ae:38:ed:c3:45:f3:a3:d9:f0:b6: fe:27:dc:c1:3b:08:5d:ed:c1:85:d6:45:1b:83:2a: 7b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BD:BA:E8:EC:ED:4F:F0:9C:E5:22:2D:BF:71:13:B7:29:9C:11:AA X509v3 Authority Key Identifier: keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/BA8EFE48E5D411EFA67E0112C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.214.172.0/24 103.214.174.0/23 182.255.44.0/22 Signature Algorithm: sha256WithRSAEncryption 08:91:eb:0e:d8:23:ac:9a:1f:47:2b:d5:06:3f:98:2a:ac:0a: bd:26:4f:1d:ba:78:a5:7f:3d:51:39:e4:6b:25:35:60:3c:66: 85:19:a4:41:1f:87:f8:cb:2c:7c:55:13:12:60:ae:54:4b:35: d5:7c:af:6d:85:64:d8:85:f6:3f:81:55:95:75:04:5b:41:9b: 08:5f:0f:f5:ec:37:fa:e1:50:81:5d:35:b0:dc:99:52:26:98: ea:db:bd:a8:5f:18:a4:44:be:7b:1f:cf:cd:65:69:c9:4e:c6: b1:7f:1b:70:c5:f5:7d:d4:24:68:99:e0:69:4a:14:f9:c1:de: 6c:f2:0b:1c:b0:55:e6:4e:7d:cc:43:81:a3:4e:b3:e8:67:cf: 10:22:0a:b6:6b:39:37:8a:3a:5e:3f:a7:f0:50:0f:6b:10:e5: fd:7d:cd:79:d9:1a:b1:b3:b0:28:fa:1c:53:e3:b1:a8:d7:02: f5:59:6c:f4:b2:ed:ed:e8:ce:a0:8f:2d:49:97:ef:e3:fb:05: 7c:c4:98:e0:94:58:2a:65:31:8a:3b:11:3c:e0:d2:07:1f:22: c7:26:10:10:fd:e2:94:55:af:e0:04:68:a6:97:a6:e1:de:d4: 05:a7:5a:12:45:39:c6:10:df:fd:0d:df:2a:32:e0:e1:3f:2c: 21:59:89:9c -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC RkI4MENGNUUwHhcNMjUwNDA3MDgwNjE5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YzODc3Yi02NmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZGAczlf2SLREG/+ZAbKUtA/ZtTP4ogLlgGaOF9/n1lCf59b/5Pss1MpvsWA ox3jlb+w2e76r4pkuBxtyzOAo/1nQ1GkEnrgGzVDIx1MyJWrHzU4Oj7jfjop/+dO 5kyv0SGFceWzegMKyrdLuff11pJjxhGfX8dAGbPGPQaCTAcgxZWT0sHoYAHeSgfp pZ4l1BegIhYkpDuSJDhiauOWxqLvyyEcVTTpB7ceEUoTMllFcO0znyXES/v/eu7M kVmmz6cR6Cn8+xDYZo7Mn+r1CfJWNT2DFcMPjDAHcKhs8q7ZFN2xJq447cNF86PZ 8Lb+J9zBOwhd7cGF1kUbgyp7uQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNm9uujs 7U/wnOUiLb9xE7cpnBGqMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6 MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIzODMvOENDMkE5QUFERTc3MTFFQjg3MzlFQzExQzRGOUFFMDIvQkE4RUZFNDhF NUQ0MTFFRkE2N0UwMTEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABn1qwDBAFn1q4DBAK2/ywwDQYJKoZIhvcNAQELBQADggEB AAiR6w7YI6yaH0cr1QY/mCqsCr0mTx26eKV/PVE55GslNWA8ZoUZpEEfh/jLLHxV ExJgrlRLNdV8r22FZNiF9j+BVZV1BFtBmwhfD/XsN/rhUIFdNbDcmVImmOrbvahf GKREvnsfz81laclOxrF/G3DF9X3UJGiZ4GlKFPnB3mzyCxywVeZOfcxDgaNOs+hn zxAiCrZrOTeKOl4/p/BQD2sQ5f19zXnZGrGzsCj6HFPjsajXAvVZbPSy7e3ozqCP LUmX7+P7BXzEmOCUWCplMYo7ETzg0gcfIscmEBD94pRVr+AEaKaXpuHe1AWnWhJF OcYQ3/0N3yoy4OE/LCFZiZw= -----END CERTIFICATE-----Generated at Sat Apr 26 08:14:08 2025 by rpki-client