$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/ACEBFE04E7E511EFBC775C0EC4F9AE02.roa File: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (raw, json) Hash identifier: 0yGPdzFunQ5T02jKLxMdi+Rjr7DQq/Vj6dobHVz6yro= Subject key identifier: 2D:C8:47:2E:F1:7E:3A:63:16:17:EC:98:A4:83:6D:BF:C6:E8:4C:08 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0C76 Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/ACEBFE04E7E511EFBC775C0EC4F9AE02.roa Signing time: Mon 10 Feb 2025 19:31:51 +0000 ROA not before: Mon 10 Feb 2025 19:31:50 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 150696 IP address blocks: 103.115.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3190 (0xc76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Feb 10 19:31:50 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67aa5426-276b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f0:f1:a3:70:8b:fb:03:68:bb:4c:f4:50:b7: 6a:44:49:4e:52:35:88:e0:5b:a4:c4:43:1e:17:b4: 16:8f:54:01:e1:a0:04:09:94:75:a2:53:81:5f:ed: 31:33:0e:6c:2f:aa:f0:1f:e8:01:f9:a7:c7:02:4e: de:4f:f0:82:e8:c4:57:c3:69:91:40:44:fa:df:27: 86:ca:0b:59:98:16:ef:f1:b3:38:f8:f1:76:bf:ec: a3:fd:19:15:11:9d:3c:7f:6c:41:c0:55:42:6e:58: d9:a2:3f:49:92:27:5b:2b:e0:2d:45:fe:ad:40:dd: 37:2b:a9:1c:6b:7d:cf:6e:57:47:0b:ec:70:fe:25: e9:22:aa:c8:43:2a:64:9b:19:62:57:f5:c3:c6:b2: d0:8c:fa:ba:e1:9f:63:32:6b:5b:b6:71:41:b5:63: 01:fb:20:53:6e:20:3e:5a:5e:79:ff:98:b8:de:ef: 91:18:bb:64:61:e1:92:93:8b:e5:3e:5d:9e:27:39: e4:f0:b8:3e:d3:6f:f4:bb:6d:cb:f4:f5:c4:20:8b: 18:73:84:8c:fc:77:1f:08:b2:6a:bd:60:e8:97:fb: 39:2b:d7:37:02:2d:63:7c:4f:b3:9c:ab:75:1b:80: 62:4b:ff:a7:20:63:0f:a2:55:34:0c:74:ef:b8:01: fa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C8:47:2E:F1:7E:3A:63:16:17:EC:98:A4:83:6D:BF:C6:E8:4C:08 X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/ACEBFE04E7E511EFBC775C0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.159.0/24 Signature Algorithm: sha256WithRSAEncryption 87:74:b2:91:21:97:df:b5:b0:a4:5c:90:e3:9f:68:de:4e:8f: 94:de:7a:40:8a:56:8e:29:6e:93:8b:d7:71:54:e6:b1:46:2b: 6c:24:dc:49:0f:05:b0:7a:d2:f3:48:9f:38:90:e1:ec:9d:fc: 1e:ec:01:f0:28:f1:bf:8a:c7:87:94:4d:17:cd:37:06:00:aa: 9b:53:62:9a:8e:05:f6:b3:27:d7:1c:df:5b:aa:21:7e:3d:c0: 20:8c:24:63:82:7c:fd:74:cb:fd:66:b9:f2:02:70:93:ba:f8: 00:5e:dc:61:86:22:05:8c:df:8e:52:fe:84:8e:87:d2:d6:39: 5d:12:2c:fb:0a:30:02:96:c4:9b:d5:20:9d:76:50:14:4e:6a: 3a:17:41:e5:18:e6:ea:ea:e7:9d:57:c5:3d:90:f1:7f:d2:3b: 71:42:3f:1b:72:b9:06:22:5e:b6:b4:6f:4a:c8:2e:f0:17:1a: ec:6c:73:7b:6f:e4:e5:f9:46:b8:45:a2:99:66:0c:7c:d0:eb: 5a:4d:d6:19:ff:dd:de:7a:ce:8e:61:0f:1b:46:3d:ae:4a:f8: 43:4f:0f:0e:a6:e2:74:96:c9:0e:19:12:21:47:95:58:e1:65: b3:c4:cb:f4:78:b8:57:2d:00:a3:b4:7e:d1:35:bc:82:2e:ee: ac:41:27:38 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUwMjEwMTkzMTUwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FhNTQyNi0yNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvDxo3CL+wNou0z0ULdqRElOUjWI4FukxEMeF7QWj1QB4aAECZR1olOBX+0x Mw5sL6rwH+gB+afHAk7eT/CC6MRXw2mRQET63yeGygtZmBbv8bM4+PF2v+yj/RkV EZ08f2xBwFVCbljZoj9JkidbK+AtRf6tQN03K6kca33PbldHC+xw/iXpIqrIQypk mxliV/XDxrLQjPq64Z9jMmtbtnFBtWMB+yBTbiA+Wl55/5i43u+RGLtkYeGSk4vl Pl2eJznk8Lg+02/0u23L9PXEIIsYc4SM/HcfCLJqvWDol/s5K9c3Ai1jfE+znKt1 G4BiS/+nIGMPolU0DHTvuAH6FQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC3IRy7x fjpjFhfsmKSDbb/G6EwIMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQ2MTQvMUM5NDg5OUFGNEYwMTFFOUFDMjAyQjFEQzRGOUFFMDIvQUNFQkZFMDRF N0U1MTFFRkJDNzc1QzBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnc58wDQYJKoZIhvcNAQELBQADggEBAId0spEhl9+1sKRc kOOfaN5Oj5TeekCKVo4pbpOL13FU5rFGK2wk3EkPBbB60vNInziQ4eyd/B7sAfAo 8b+Kx4eUTRfNNwYAqptTYpqOBfazJ9cc31uqIX49wCCMJGOCfP10y/1mufICcJO6 +ABe3GGGIgWM345S/oSOh9LWOV0SLPsKMAKWxJvVIJ12UBROajoXQeUY5urq551X xT2Q8X/SO3FCPxtyuQYiXra0b0rILvAXGuxsc3tv5OX5RrhFoplmDHzQ61pN1hn/ 3d56zo5hDxtGPa5K+ENPDw6m4nSWyQ4ZEiFHlVjhZbPEy/R4uFctAKO0ftE1vIIu 7qxBJzg= -----END CERTIFICATE-----Generated at Sat Apr 26 15:16:12 2025 by rpki-client