$ rpki-client -vvf rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/C8AE3C40B93811EBAC80A46DC4F9AE02.roa File: C8AE3C40B93811EBAC80A46DC4F9AE02.roa (raw, json) Hash identifier: Ck3Q3b0m7wZfc35rCMLbisQ7sVgiMLOPm+0PDdt1xrg= Subject key identifier: DD:44:CF:E1:E1:0D:C8:05:D0:B0:06:41:7B:51:40:F1:1C:37:DD:91 Certificate issuer: /CN=A91C15F2/serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C Certificate serial: 05CB Authority key identifier: 63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/C8AE3C40B93811EBAC80A46DC4F9AE02.roa Signing time: Mon 31 Mar 2025 23:24:09 +0000 ROA not before: Mon 31 Mar 2025 23:24:09 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 63923 IP address blocks: 103.44.76.0/22 maxlen: 22 103.44.76.0/24 maxlen: 24 103.44.77.0/24 maxlen: 24 103.44.78.0/24 maxlen: 24 103.44.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1483 (0x5cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C15F2, serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C Validity Not Before: Mar 31 23:24:09 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67eb2419-ff65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c8:8f:14:a5:3b:59:e4:d8:75:6d:1b:05:3f: 84:84:69:5d:ae:cb:30:f5:fa:a8:62:9e:a2:b2:3d: 03:72:4c:e6:95:d5:e1:a2:7a:68:cf:b3:3c:c4:b3: 25:a6:0a:02:dc:38:16:93:64:f1:bc:f5:89:8a:df: c4:fd:72:30:fd:7d:62:0e:0a:8b:97:bf:66:1a:9d: 1c:a1:55:62:fa:96:b8:2d:bc:5f:56:02:cd:fd:f3: 74:49:0b:24:df:bc:7e:e8:5a:1b:6c:43:b8:dd:ce: fc:e3:a2:5c:fb:db:78:36:9c:68:33:d4:8d:e8:3f: 3b:28:1f:98:93:56:c1:13:e5:aa:29:da:a8:c2:c2: 4d:24:8a:84:80:9d:89:c3:7c:0a:5c:4a:07:e2:ee: e0:55:1d:f5:12:4e:c0:d4:e2:bf:2b:1d:a2:cc:44: 8b:4d:2a:73:49:aa:79:94:05:cf:21:87:ac:f4:0e: 09:9f:90:ef:54:c9:78:93:90:7e:5d:94:16:aa:dc: 7d:41:72:03:9b:c2:1e:12:3b:01:0f:5f:50:38:fc: f8:f8:00:c9:11:03:b0:dd:3b:f3:51:7a:c8:c2:db: b9:a7:7d:35:30:f0:1f:22:37:d8:a9:b0:0f:cb:0d: db:77:95:15:13:bd:93:a2:13:27:b7:57:40:cc:2c: b1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:44:CF:E1:E1:0D:C8:05:D0:B0:06:41:7B:51:40:F1:1C:37:DD:91 X509v3 Authority Key Identifier: keyid:63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/C8AE3C40B93811EBAC80A46DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.44.76.0/22 Signature Algorithm: sha256WithRSAEncryption 44:4a:fc:e7:9b:23:8d:ba:12:2c:1a:a1:be:d6:9e:18:29:58: fd:ba:c9:d6:2e:91:b5:4c:6e:dc:1e:a8:49:b2:43:32:a2:14: b0:d5:a1:6e:aa:c5:2c:93:4d:56:e8:58:58:67:f9:c0:79:f0: da:32:9a:eb:b1:d7:e8:31:92:0d:66:9f:37:2c:4a:6f:99:53: b6:13:ec:b3:d8:75:4a:22:2d:d2:03:6c:a7:61:3e:a5:fd:43: 7a:f8:1b:d7:10:f1:e8:dc:51:4b:2f:9e:4c:e9:23:f9:fb:07: de:d1:34:56:a9:9d:b9:72:0b:f5:09:4f:f8:97:25:8b:28:b7: 05:fd:ee:45:12:2a:80:4d:ba:3a:de:39:a3:76:53:fa:3e:10: c4:13:8a:70:1e:d7:69:89:3a:41:48:18:da:82:0d:00:b6:e7: 86:1f:6e:a8:1e:4b:85:72:a0:63:91:cf:65:67:f1:71:57:4c: a8:a4:7a:32:ab:db:1f:be:eb:d9:79:7e:f4:d7:2e:86:01:5e: 07:46:7a:8b:0f:84:82:78:fe:07:c6:7f:06:2e:4f:3b:d1:a5: cc:1b:55:ec:ce:e6:70:c5:6d:0f:8f:34:33:c9:a9:94:28:59: 6c:c0:2d:e3:e2:c3:5f:9b:42:7e:42:f8:b7:3e:b2:e3:b3:c0: 2a:3c:6f:da -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE1RjIxMTAvBgNVBAUTKDYzODJCNTEzMzQ4MzE1RDVBRjNGMTMwRUM1NEMxREE4 NjcyODhDMkMwHhcNMjUwMzMxMjMyNDA5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ViMjQxOS1mZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsiPFKU7WeTYdW0bBT+EhGldrssw9fqoYp6isj0DckzmldXhonpoz7M8xLMl pgoC3DgWk2TxvPWJit/E/XIw/X1iDgqLl79mGp0coVVi+pa4LbxfVgLN/fN0SQsk 37x+6FobbEO43c7846Jc+9t4NpxoM9SN6D87KB+Yk1bBE+WqKdqowsJNJIqEgJ2J w3wKXEoH4u7gVR31Ek7A1OK/Kx2izESLTSpzSap5lAXPIYes9A4Jn5DvVMl4k5B+ XZQWqtx9QXIDm8IeEjsBD19QOPz4+ADJEQOw3TvzUXrIwtu5p301MPAfIjfYqbAP yw3bd5UVE72TohMnt1dAzCyxcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN1Ez+Hh DcgF0LAGQXtRQPEcN92RMB8GA1UdIwQYMBaAFGOCtRM0gxXVrz8TDsVMHahnKIws MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTVGMi81NjMyMkQ5OEI4 OTgxMUVCQUQ2QzFENDhDNEY5QUUwMi9ZNEsxRXpTREZkV3ZQeE1PeFV3ZHFHY29q Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0SzFFelNERmRXdlB4TU94VXdkcUdjb2pDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzE1RjIvNTYzMjJEOThCODk4MTFFQkFENkMxRDQ4QzRGOUFFMDIvQzhBRTNDNDBC OTM4MTFFQkFDODBBNDZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnLEwwDQYJKoZIhvcNAQELBQADggEBAERK/OebI426Eiwa ob7WnhgpWP26ydYukbVMbtweqEmyQzKiFLDVoW6qxSyTTVboWFhn+cB58Noymuux 1+gxkg1mnzcsSm+ZU7YT7LPYdUoiLdIDbKdhPqX9Q3r4G9cQ8ejcUUsvnkzpI/n7 B97RNFapnblyC/UJT/iXJYsotwX97kUSKoBNujreOaN2U/o+EMQTinAe12mJOkFI GNqCDQC254YfbqgeS4VyoGORz2Vn8XFXTKikejKr2x++69l5fvTXLoYBXgdGeosP hIJ4/gfGfwYuTzvRpcwbVezO5nDFbQ+PNDPJqZQoWWzALePiw1+bQn5C+Lc+suOz wCo8b9o= -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:41 2025 by rpki-client