$ rpki-client -vvf rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/C144C89ADCF311EC80AD955EC4F9AE02.roa File: C144C89ADCF311EC80AD955EC4F9AE02.roa (raw, json) Hash identifier: oHlo3Sofjys47IZ2Ei8IuoMAeL8C2VUTJUZO9aDUVcs= Subject key identifier: 2B:21:49:B3:C5:7B:51:86:44:CB:70:DC:10:2D:F6:9A:32:EE:D9:99 Certificate issuer: /CN=A91C309F/serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Certificate serial: 0696 Authority key identifier: EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/C144C89ADCF311EC80AD955EC4F9AE02.roa Signing time: Thu 24 Apr 2025 22:22:56 +0000 ROA not before: Thu 24 Apr 2025 22:22:56 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138909 IP address blocks: 103.137.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C309F, serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Validity Not Before: Apr 24 22:22:56 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680ab9c0-fc76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fd:2d:52:68:39:4c:82:cf:50:e6:c9:38:ab: 87:fd:61:f0:4e:68:d9:6a:c9:f9:fb:4e:b8:e4:b8: fc:55:8a:a1:85:a0:22:05:ea:ba:c0:57:45:34:fb: 68:d1:d1:d0:8f:8e:07:98:9d:81:8d:94:a4:c0:2a: 7e:50:22:1a:c3:7a:b0:03:64:0a:69:53:bb:e6:03: cf:d4:5a:7b:f8:b0:59:e1:f4:47:ea:f4:09:39:cc: 87:a9:38:d0:d1:dd:0b:66:2f:20:91:55:56:db:f6: 98:aa:57:7a:55:36:5e:cf:83:fb:f0:c9:cc:f2:7b: ae:9f:89:2d:2e:79:92:7e:d9:10:eb:41:9b:20:94: 09:26:99:79:76:ae:da:a6:28:e8:65:a4:f1:d2:ee: e1:1f:bd:67:f9:a9:9f:74:3a:5a:b8:da:af:b1:43: b8:3b:3b:1d:86:d5:97:68:7c:06:40:65:fe:36:13: 69:47:c0:db:8b:58:02:78:a8:d7:c9:f1:d8:a2:7b: e7:96:cc:eb:70:0c:1d:85:af:29:51:b7:6b:ee:51: 43:f9:43:3b:53:45:29:b2:1c:57:30:78:93:e9:0f: fc:5b:f0:12:a4:6f:32:0c:95:0b:58:ec:1b:63:56: 1a:ef:dc:ea:54:67:32:b6:dd:3d:ca:5a:48:8d:0e: 32:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:21:49:B3:C5:7B:51:86:44:CB:70:DC:10:2D:F6:9A:32:EE:D9:99 X509v3 Authority Key Identifier: keyid:EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/C144C89ADCF311EC80AD955EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.0.0/23 Signature Algorithm: sha256WithRSAEncryption bb:68:00:29:3c:e8:d0:cc:dd:55:8c:5f:7a:d5:b8:35:17:22: 80:bf:ad:91:f3:21:4a:83:a7:6f:1a:0c:b9:c7:a7:56:fb:d0: 16:ce:19:f1:4c:fb:71:ba:71:3e:9a:5b:9c:2b:ea:9b:d2:a6: 0f:4c:02:00:98:69:c6:36:2c:4a:fc:3b:cf:d4:d0:35:a7:4c: ba:e4:c1:4d:cb:aa:e7:22:fc:54:d5:dc:66:11:db:ed:40:02: 3f:33:6e:9f:15:a3:5c:8f:19:2d:46:62:f6:62:b6:91:d6:f6: 4b:0c:f5:28:64:77:51:e0:40:fd:c5:8f:1d:db:dd:c8:b5:51: aa:c3:7e:4b:79:56:1c:5e:79:71:e9:50:f3:85:d7:98:58:36: 5e:ad:dd:f0:4d:ee:71:75:6e:5f:b3:10:b8:08:7f:e4:81:39: e4:34:b9:4d:83:49:56:60:41:cc:54:74:81:7c:83:d6:4d:7e: 6b:7d:33:99:57:53:86:d5:25:c3:63:82:63:a3:a8:df:f5:f9: bc:a4:98:1f:77:2f:75:db:71:5a:6b:70:ed:17:d9:b3:1c:48: 48:c9:ab:bd:30:93:a8:84:09:6c:0a:a8:96:22:ae:83:4a:5f: 03:1a:5f:03:84:4c:4a:4a:2d:93:c4:8a:5a:5a:ea:40:3b:0e: 6a:a3:03:19 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMwOUYxMTAvBgNVBAUTKEVDNzlEMTdBNjBFRDU3MEVDNjdCNTExNjE2MkI2MDhC NjBCOUNENDEwHhcNMjUwNDI0MjIyMjU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhYjljMC1mYzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7v0tUmg5TILPUObJOKuH/WHwTmjZasn5+0645Lj8VYqhhaAiBeq6wFdFNPto 0dHQj44HmJ2BjZSkwCp+UCIaw3qwA2QKaVO75gPP1Fp7+LBZ4fRH6vQJOcyHqTjQ 0d0LZi8gkVVW2/aYqld6VTZez4P78MnM8nuun4ktLnmSftkQ60GbIJQJJpl5dq7a pijoZaTx0u7hH71n+amfdDpauNqvsUO4OzsdhtWXaHwGQGX+NhNpR8Dbi1gCeKjX yfHYonvnlszrcAwdha8pUbdr7lFD+UM7U0UpshxXMHiT6Q/8W/ASpG8yDJULWOwb Y1Ya79zqVGcytt09ylpIjQ4yKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCshSbPF e1GGRMtw3BAt9poy7tmZMB8GA1UdIwQYMBaAFOx50Xpg7VcOxntRFhYrYItguc1B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA5Ri8xREI0ODNBNDY5 REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3N0dlMUVXRml0Z2kyQzV6 VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIblJlbUR0Vnc3R2UxRVdGaXRnaTJDNXpVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzMwOUYvMURCNDgzQTQ2OURDMTFFQjlFMTYwOTFBQzRGOUFFMDIvQzE0NEM4OUFE Q0YzMTFFQzgwQUQ5NTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFniQAwDQYJKoZIhvcNAQELBQADggEBALtoACk86NDM3VWM X3rVuDUXIoC/rZHzIUqDp28aDLnHp1b70BbOGfFM+3G6cT6aW5wr6pvSpg9MAgCY acY2LEr8O8/U0DWnTLrkwU3Lquci/FTV3GYR2+1AAj8zbp8Vo1yPGS1GYvZitpHW 9ksM9Shkd1HgQP3Fjx3b3ci1UarDfkt5VhxeeXHpUPOF15hYNl6t3fBN7nF1bl+z ELgIf+SBOeQ0uU2DSVZgQcxUdIF8g9ZNfmt9M5lXU4bVJcNjgmOjqN/1+bykmB93 L3XbcVprcO0X2bMcSEjJq70wk6iECWwKqJYiroNKXwMaXwOETEpKLZPEilpa6kA7 DmqjAxk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:39 2025 by rpki-client