$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/33B3C60425FD11EDA4097785C4F9AE02.roa File: 33B3C60425FD11EDA4097785C4F9AE02.roa (raw, json) Hash identifier: YmHPckT0dIFNHqb1yogDfQ9UG6heaZWXlhIbS1BD/e8= Subject key identifier: FD:A6:68:6F:41:D0:86:1A:FB:58:FB:C5:2D:E6:0B:89:EA:59:58:DA Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 05DC Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/33B3C60425FD11EDA4097785C4F9AE02.roa Signing time: Tue 22 Apr 2025 12:53:06 +0000 ROA not before: Tue 22 Apr 2025 12:53:06 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38254 IP address blocks: 103.167.250.0/24 maxlen: 24 103.167.251.0/24 maxlen: 24 2001:df6:c480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1500 (0x5dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Apr 22 12:53:06 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68079132-f0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ef:b5:5b:fe:71:c4:31:f7:f6:4d:c7:89:f9: 2a:d8:1f:34:17:7b:7e:e0:c4:b6:4e:8e:9c:cb:cd: f5:8c:7b:f8:d2:e0:9c:02:c8:54:9e:75:fe:c4:4d: d8:40:c1:89:d2:a1:b3:d4:7e:f0:fe:e6:02:b7:6b: a6:b0:cd:1e:71:71:35:29:6c:64:a9:ad:70:c6:a7: 94:61:4c:50:db:27:60:ca:aa:b4:aa:d4:9c:55:a8: 38:89:c7:50:39:54:eb:f2:41:52:63:13:d0:25:49: cc:6d:c3:66:90:58:10:6f:d2:c4:31:50:cf:56:79: ec:3a:08:d9:6d:b1:67:17:8d:e1:73:7d:f7:37:5f: a7:0a:46:4c:46:0b:7b:15:9a:19:42:49:38:da:5a: 69:ef:a6:c1:24:ad:24:12:a9:e3:c3:43:d0:8e:6a: 70:4a:a5:bc:a6:9f:fb:6c:17:35:55:85:9c:03:21: 21:09:dd:39:20:e5:da:32:10:88:00:19:6b:e7:84: ba:30:5c:86:45:12:2d:21:bf:d3:2b:f2:c3:01:03: 2c:e7:ae:7c:78:3a:0c:c8:ac:1d:0f:7c:ec:ef:b7: 45:df:fa:df:86:b6:6b:e3:57:c9:12:a2:33:6c:7d: 8e:f6:95:26:60:9a:02:09:fb:37:fc:ad:d6:3e:33: 99:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A6:68:6F:41:D0:86:1A:FB:58:FB:C5:2D:E6:0B:89:EA:59:58:DA X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/33B3C60425FD11EDA4097785C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.250.0/23 IPv6: 2001:df6:c480::/48 Signature Algorithm: sha256WithRSAEncryption 1c:72:3c:97:91:a2:9d:1a:72:7c:db:77:17:17:58:64:cb:33: 4c:c4:62:ae:e0:eb:50:67:bb:0f:27:03:85:1f:23:84:f0:e7: 6b:10:02:d9:0f:8d:2a:8b:bb:0b:d0:89:07:1c:06:cb:71:d6: d0:e7:4e:b8:21:1b:4d:3c:2e:2c:92:8c:cb:a9:d6:d1:22:6e: 4b:d2:a4:56:26:9f:95:22:ae:4f:42:84:53:84:3b:e8:55:6b: 14:38:9c:31:bb:6d:87:34:c3:d0:51:27:b1:dc:71:bb:a4:d7: 08:bc:26:81:ea:c3:cf:3f:cd:f6:26:ba:f4:9d:18:31:e4:63: 46:a4:ee:b2:8c:f9:a0:9c:9f:4c:64:4d:52:96:b6:93:70:90: b5:f0:71:6b:63:7d:6f:d4:f1:a2:3f:1d:06:45:15:21:27:b2: ff:60:b2:ff:d2:e8:8d:c7:71:54:57:30:49:4d:c0:c2:fb:ed: 6f:13:9e:65:90:5c:1c:4f:94:f9:82:e9:d7:09:e3:4f:fc:47: 29:51:f6:42:ba:a0:21:ad:20:3e:c7:df:9b:27:1d:d0:0d:df: 87:71:50:0e:87:84:38:82:48:2b:f2:d8:ac:d1:ad:02:86:95: cd:9a:8b:2a:0b:14:c2:56:c2:19:41:c7:3a:40:4f:90:0e:07: cf:73:4b:0c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjUwNDIyMTI1MzA2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA3OTEzMi1mMGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy++1W/5xxDH39k3Hifkq2B80F3t+4MS2To6cy831jHv40uCcAshUnnX+xE3Y QMGJ0qGz1H7w/uYCt2umsM0ecXE1KWxkqa1wxqeUYUxQ2ydgyqq0qtScVag4icdQ OVTr8kFSYxPQJUnMbcNmkFgQb9LEMVDPVnnsOgjZbbFnF43hc333N1+nCkZMRgt7 FZoZQkk42lpp76bBJK0kEqnjw0PQjmpwSqW8pp/7bBc1VYWcAyEhCd05IOXaMhCI ABlr54S6MFyGRRItIb/TK/LDAQMs5658eDoMyKwdD3zs77dF3/rfhrZr41fJEqIz bH2O9pUmYJoCCfs3/K3WPjOZuQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFP2maG9B 0IYa+1j7xS3mC4nqWVjaMB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjBEMzkvN0YyNEZGRDBDODU4MTFFQkJFMEVGODM0QzRGOUFFMDIvMzNCM0M2MDQy NUZEMTFFREE0MDk3Nzg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnp/owDwQCAAIwCQMHACABDfbEgDANBgkqhkiG9w0BAQsF AAOCAQEAHHI8l5GinRpyfNt3FxdYZMszTMRiruDrUGe7DycDhR8jhPDnaxAC2Q+N Kou7C9CJBxwGy3HW0OdOuCEbTTwuLJKMy6nW0SJuS9KkViaflSKuT0KEU4Q76FVr FDicMbtthzTD0FEnsdxxu6TXCLwmgerDzz/N9ia69J0YMeRjRqTusoz5oJyfTGRN Upa2k3CQtfBxa2N9b9Txoj8dBkUVISey/2Cy/9LojcdxVFcwSU3AwvvtbxOeZZBc HE+U+YLp1wnjT/xHKVH2QrqgIa0gPsffmycd0A3fh3FQDoeEOIJIK/LYrNGtAoaV zZqLKgsUwlbCGUHHOkBPkA4Hz3NLDA== -----END CERTIFICATE-----Generated at Sat Apr 26 08:28:10 2025 by rpki-client