$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/C66D2D8C467B11EA9717DF7CC4F9AE02.roa File: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (raw, json) Hash identifier: B1y/XJhc58ZxuiEanrd53aB6RU6j2Af7j8lspYzP41Y= Subject key identifier: 1A:BB:17:0E:18:49:47:BA:5E:82:5A:79:14:62:C0:11:70:7F:6A:96 Certificate issuer: /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Certificate serial: 0AD0 Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/C66D2D8C467B11EA9717DF7CC4F9AE02.roa Signing time: Mon 20 Jan 2025 19:18:44 +0000 ROA not before: Mon 20 Jan 2025 19:18:44 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 133938 IP address blocks: 103.48.119.0/24 maxlen: 24 103.108.140.0/24 maxlen: 24 103.132.96.0/24 maxlen: 24 2404:2f40::/32 maxlen: 32 2404:2f40::/36 maxlen: 36 2404:2f40:1000::/36 maxlen: 36 2404:2f40:2000::/36 maxlen: 36 2404:2f40:3000::/36 maxlen: 36 2404:2f40:4000::/36 maxlen: 36 2404:2f40:5000::/36 maxlen: 36 2404:2f40:6000::/36 maxlen: 36 2404:2f40:7000::/36 maxlen: 36 2404:2f40:8000::/36 maxlen: 36 2404:2f40:9000::/36 maxlen: 36 2404:2f40:a000::/36 maxlen: 36 2404:2f40:b000::/36 maxlen: 36 2404:2f40:c000::/36 maxlen: 36 2404:2f40:d000::/36 maxlen: 36 2404:2f40:e000::/36 maxlen: 36 2404:2f40:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 19:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2768 (0xad0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB384, serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Validity Not Before: Jan 20 19:18:44 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=678ea194-f62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:54:f7:9e:11:5a:4c:88:df:ad:a4:e0:f1: 98:3c:ab:43:bf:c9:7f:5c:d7:19:f9:a4:42:75:12: f3:4b:44:98:78:59:63:05:2f:5b:a6:36:28:a3:a6: d2:4b:14:bd:a2:ad:7c:4b:4b:ea:13:18:75:a0:c8: fd:d5:48:03:41:92:38:1f:02:41:91:cb:b3:bd:e4: 66:48:60:65:30:42:28:67:0e:62:2e:84:94:44:7c: a0:bd:df:80:4e:34:a6:58:7c:d3:dc:fd:6d:f9:bd: fa:80:3c:ba:bb:ec:3c:5a:94:5f:9d:be:fc:f2:29: aa:dd:f7:a3:90:13:7d:18:26:12:2d:7c:47:f3:f3: f0:13:bc:68:52:2f:bb:a3:34:d3:81:11:56:ea:5d: 62:f6:a2:70:78:28:03:64:90:81:3e:b4:99:94:c0: 61:3e:2e:63:4c:72:3e:c5:9f:12:43:a2:99:27:dc: 3d:4d:2d:93:1a:87:f7:8c:11:b2:84:69:0f:3b:d4: 52:0f:d4:47:08:66:de:5e:5f:71:3d:49:c8:a0:15: 2c:3d:28:8a:d1:f6:7c:71:72:2b:9b:fc:12:9b:07: f4:c6:c6:7f:d2:c9:87:3c:b8:43:c0:1c:62:15:3e: f2:56:4b:07:1e:02:f6:22:39:69:bb:f1:00:ec:ae: e3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BB:17:0E:18:49:47:BA:5E:82:5A:79:14:62:C0:11:70:7F:6A:96 X509v3 Authority Key Identifier: keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/C66D2D8C467B11EA9717DF7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.119.0/24 103.108.140.0/24 103.132.96.0/24 IPv6: 2404:2f40::/32 Signature Algorithm: sha256WithRSAEncryption 94:2e:fc:1f:6c:99:b5:ef:ad:02:12:06:7f:6e:15:cd:64:d1: 87:e5:1b:15:19:83:11:c6:5d:dc:82:4f:57:c5:4b:28:2b:6a: a6:f2:f0:6c:4b:81:09:76:c8:61:11:7f:6d:39:21:40:6c:53: e0:a9:9e:9d:3b:b1:20:13:39:db:05:ce:e0:29:40:cf:4f:2c: cb:46:ac:50:2f:c8:e4:45:0b:22:47:4a:fb:c0:06:88:03:95: 11:ca:5a:a2:62:a7:19:82:eb:a0:8e:14:2e:f1:5a:15:e8:ae: 3e:af:60:0c:78:8d:c9:7b:59:48:45:4a:72:63:1e:7e:eb:67: 80:79:f2:c1:8d:3a:dc:7b:67:d5:05:3b:93:f6:64:cc:d5:51: bb:55:c2:2e:13:41:2a:1a:25:54:61:48:f7:df:a2:cc:4e:9a: 22:cf:64:d2:27:96:8e:7a:eb:8a:98:70:1f:3d:c3:af:b8:91: 3e:9a:e8:b6:27:c0:e9:0a:c5:c6:1a:cd:78:dc:66:e4:c8:64: 51:27:8a:f7:6c:25:05:0c:53:43:11:d1:c7:9c:c5:53:55:be: 91:d1:ac:e3:db:58:4e:96:62:70:32:fd:1d:b3:53:5e:eb:e9: a3:d1:aa:98:14:13:0e:b5:cf:6e:3e:9f:c9:bd:94:a8:84:fb: 9f:c4:4a:2e -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICCtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF RTAwNjI1NEIwHhcNMjUwMTIwMTkxODQ0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhlYTE5NC1mNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudtU954RWkyI362k4PGYPKtDv8l/XNcZ+aRCdRLzS0SYeFljBS9bpjYoo6bS SxS9oq18S0vqExh1oMj91UgDQZI4HwJBkcuzveRmSGBlMEIoZw5iLoSURHygvd+A TjSmWHzT3P1t+b36gDy6u+w8WpRfnb788imq3fejkBN9GCYSLXxH8/PwE7xoUi+7 ozTTgRFW6l1i9qJweCgDZJCBPrSZlMBhPi5jTHI+xZ8SQ6KZJ9w9TS2TGof3jBGy hGkPO9RSD9RHCGbeXl9xPUnIoBUsPSiK0fZ8cXIrm/wSmwf0xsZ/0smHPLhDwBxi FT7yVksHHgL2Ijlpu/EA7K7jxQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFBq7Fw4Y SUe6XoJaeRRiwBFwf2qWMB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0 ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIzODQvQkY0QkQ0NTg0NDgzMTFFQThFQkM2RDI1QzRGOUFFMDIvQzY2RDJEOEM0 NjdCMTFFQTk3MTdERjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBABnMHcDBABnbIwDBABnhGAwDQQCAAIwBwMFACQEL0AwDQYJ KoZIhvcNAQELBQADggEBAJQu/B9smbXvrQISBn9uFc1k0YflGxUZgxHGXdyCT1fF Sygraqby8GxLgQl2yGERf205IUBsU+Cpnp07sSATOdsFzuApQM9PLMtGrFAvyORF CyJHSvvABogDlRHKWqJipxmC66COFC7xWhXorj6vYAx4jcl7WUhFSnJjHn7rZ4B5 8sGNOtx7Z9UFO5P2ZMzVUbtVwi4TQSoaJVRhSPffosxOmiLPZNInlo5664qYcB89 w6+4kT6a6LYnwOkKxcYazXjcZuTIZFEnivdsJQUMU0MR0cecxVNVvpHRrOPbWE6W YnAy/R2zU17r6aPRqpgUEw61z24+n8m9lKiE+5/ESi4= -----END CERTIFICATE-----Generated at Fri May 2 13:12:09 2025 by rpki-client