$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/D93244BAF2EF11ED91F08A4FC4F9AE02.roa File: D93244BAF2EF11ED91F08A4FC4F9AE02.roa (raw, json) Hash identifier: hUqHFifGF2RTMr5P0bZj3vJ6RCASWQ9bPokCmECeKBM= Subject key identifier: 0B:96:6B:AA:57:D8:CA:C4:F8:99:37:A9:B5:F8:06:95:26:68:84:15 Certificate issuer: /CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07 Certificate serial: 069F Authority key identifier: 7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/D93244BAF2EF11ED91F08A4FC4F9AE02.roa Signing time: Tue 18 Feb 2025 23:41:06 +0000 ROA not before: Tue 18 Feb 2025 23:41:06 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 132770 IP address blocks: 103.127.164.0/24 maxlen: 24 103.127.165.0/24 maxlen: 24 103.127.166.0/24 maxlen: 24 103.127.167.0/24 maxlen: 24 2404:24c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1695 (0x69f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC232, serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07 Validity Not Before: Feb 18 23:41:06 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67b51a92-90ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:27:11:84:a7:45:39:9b:90:d7:e6:83:43: 25:08:18:77:85:fb:a6:ce:f3:26:a6:4d:99:42:4b: e0:d5:a2:77:a9:75:fc:57:ca:3e:4b:8e:1c:7d:c2: 96:79:d2:a4:f2:38:f4:a7:35:a8:27:3a:6b:24:88: 75:e2:30:df:62:23:2e:81:14:39:32:85:02:70:44: a2:57:55:79:8b:fd:a6:43:8f:f8:4e:c0:a1:17:d3: 79:6b:b9:cc:e3:b8:00:81:7a:17:97:f6:41:85:72: a7:83:2d:ec:62:ad:c6:b6:c9:a6:a5:bb:07:d6:94: 2b:0e:c2:5d:0f:75:27:22:4f:45:7e:42:cb:ad:a8: 42:2e:1b:b4:6d:9e:46:5c:55:f1:17:b9:c0:2b:9b: 15:6e:d7:80:5f:ee:5d:42:05:2b:35:9c:29:da:01: 05:e0:e0:24:f1:86:05:e6:47:44:23:6f:61:09:f7: 14:2b:be:c7:68:90:6b:8c:71:e2:b9:2f:d3:98:dc: 40:85:e3:9d:a6:3b:f5:52:94:8f:d9:01:85:1e:0f: 4f:f7:00:9c:51:f3:49:67:f4:8f:5f:4b:f1:c4:09: 23:4d:5c:ee:15:02:c8:da:32:04:ac:31:db:07:49: 93:82:21:31:14:a9:04:45:ec:bc:ec:61:da:50:97: b6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:96:6B:AA:57:D8:CA:C4:F8:99:37:A9:B5:F8:06:95:26:68:84:15 X509v3 Authority Key Identifier: keyid:7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/D93244BAF2EF11ED91F08A4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.164.0/22 IPv6: 2404:24c0::/32 Signature Algorithm: sha256WithRSAEncryption 03:ce:23:85:7a:e4:57:98:a5:22:d1:5b:5c:3b:d6:81:77:12: 6f:ca:81:d8:50:63:65:7d:48:09:08:ab:c5:e5:81:9b:1e:08: 4c:fe:75:b9:e2:49:bb:14:44:32:e6:5d:cd:12:cf:22:2e:ce: 86:d5:26:ec:22:6e:40:a9:b5:31:21:a9:b2:cc:31:c3:6a:d0: bb:f6:d0:0b:9b:0f:59:a8:9d:e1:5a:b8:e4:0c:21:2e:ab:7f: e6:72:5a:64:63:35:87:95:c1:a4:d3:e1:81:3d:e2:f7:44:43: 2a:1f:d3:d8:69:3f:d4:39:98:b8:12:6d:41:91:be:0f:29:0e: 13:29:09:ac:bf:e6:1d:ef:31:64:47:a3:79:7e:bb:ec:f5:69: 19:eb:cb:b2:66:0e:48:7f:73:b2:dc:d5:18:a2:46:64:f2:ac: bc:a3:e6:e6:59:43:14:c2:38:c5:d2:52:36:26:f2:db:c7:bd: a8:e2:63:41:29:8a:59:7f:56:41:c7:97:e6:2a:0a:1e:a4:00: ec:22:e2:0a:0f:9d:2f:29:f5:ce:f0:13:b3:25:f8:18:12:0b: e4:d4:ad:67:67:b4:c2:f6:9a:5f:bf:3d:aa:73:b7:80:85:f3: ba:fc:32:b7:86:d9:d8:68:1e:c0:f9:f9:ad:32:a8:46:12:5d: 2e:53:5d:cb -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUMyMzIxMTAvBgNVBAUTKDdEM0EyMkRFRDFBQkYwQ0QzOTA5MjgwQjg5QjIzNzZD NTQ1RjZGMDcwHhcNMjUwMjE4MjM0MTA2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I1MWE5Mi05MGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsB0nEYSnRTmbkNfmg0MlCBh3hfumzvMmpk2ZQkvg1aJ3qXX8V8o+S44cfcKW edKk8jj0pzWoJzprJIh14jDfYiMugRQ5MoUCcESiV1V5i/2mQ4/4TsChF9N5a7nM 47gAgXoXl/ZBhXKngy3sYq3GtsmmpbsH1pQrDsJdD3UnIk9FfkLLrahCLhu0bZ5G XFXxF7nAK5sVbteAX+5dQgUrNZwp2gEF4OAk8YYF5kdEI29hCfcUK77HaJBrjHHi uS/TmNxAheOdpjv1UpSP2QGFHg9P9wCcUfNJZ/SPX0vxxAkjTVzuFQLI2jIErDHb B0mTgiExFKkERey87GHaUJe2GQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAuWa6pX 2MrE+Jk3qbX4BpUmaIQVMB8GA1UdIwQYMBaAFH06It7Rq/DNOQkoC4myN2xUX28H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzIzMi80MTczMDA4NjU5 OEQxMUVCQUVDQzgzMjFDNEY5QUUwMi9mVG9pM3RHcjhNMDVDU2dMaWJJM2JGUmZi d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZUb2kzdEdyOE0wNUNTZ0xpYkkzYkZSZmJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUMyMzIvNDE3MzAwODY1OThEMTFFQkFFQ0M4MzIxQzRGOUFFMDIvRDkzMjQ0QkFG MkVGMTFFRDkxRjA4QTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnf6QwDQQCAAIwBwMFACQEJMAwDQYJKoZIhvcNAQELBQAD ggEBAAPOI4V65FeYpSLRW1w71oF3Em/KgdhQY2V9SAkIq8XlgZseCEz+dbniSbsU RDLmXc0SzyIuzobVJuwibkCptTEhqbLMMcNq0Lv20AubD1moneFauOQMIS6rf+Zy WmRjNYeVwaTT4YE94vdEQyof09hpP9Q5mLgSbUGRvg8pDhMpCay/5h3vMWRHo3l+ u+z1aRnry7JmDkh/c7Lc1RiiRmTyrLyj5uZZQxTCOMXSUjYm8tvHvajiY0Epill/ VkHHl+YqCh6kAOwi4goPnS8p9c7wE7Ml+BgSC+TUrWdntML2ml+/Papzt4CF87r8 MreG2dhoHsD5+a0yqEYSXS5TXcs= -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:04 2025 by rpki-client