$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/08BD74841A4F11EA8DFECB86C4F9AE02.roa File: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (raw, json) Hash identifier: 5pPzlX8jdTNFookFj/rSeOJPoKLM49nAfSCOByjLKkM= Subject key identifier: 40:78:4C:D9:02:0D:20:14:63:75:24:DF:C5:26:37:83:CE:31:D7:A9 Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Certificate serial: 112B Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/08BD74841A4F11EA8DFECB86C4F9AE02.roa Signing time: Mon 06 Jan 2025 17:45:30 +0000 ROA not before: Mon 06 Jan 2025 17:45:30 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 136897 IP address blocks: 103.127.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4395 (0x112b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Validity Not Before: Jan 6 17:45:30 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=677c16b9-bb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f9:ff:12:8d:b7:de:0a:fb:cb:d8:6b:81:d7: 70:7a:2f:b5:80:96:ea:c7:bc:05:3a:81:61:e4:c7: 13:dc:df:48:d3:1e:f1:c6:f3:8e:85:2e:d4:4b:41: 2e:ea:61:a0:f3:d5:81:b3:49:59:01:5e:6b:69:12: 18:47:67:22:bf:32:13:2e:93:f6:16:3b:2a:0b:82: 0e:56:34:39:24:c1:68:9e:9c:34:26:5e:f6:4c:0a: c1:ba:e3:94:bc:8b:e1:84:ee:a8:50:4f:d3:89:9d: 6b:51:f5:ce:c4:bf:e8:0f:af:56:b0:d3:ee:68:e3: cd:32:3e:dd:bb:3f:50:19:de:ce:97:94:71:97:7f: ff:78:83:59:3b:22:fa:d7:99:b6:a1:01:f5:88:fc: 7c:6c:a5:e5:c6:75:72:84:2d:c1:8e:1e:1c:dd:a8: 49:81:ed:ea:03:5a:05:3f:1c:6e:64:38:7f:6b:d1: 43:07:52:ac:11:4d:d2:75:70:9d:d2:fe:d9:2e:94: d7:2f:88:8e:c5:fb:08:c7:0e:d4:8e:c6:32:dd:a7: 5d:03:6e:5e:d5:0c:5c:b1:c1:04:e9:c9:5a:e0:83: 36:bc:54:20:2b:10:1f:9a:1b:6e:bb:12:26:c5:a7: ef:57:3c:9e:28:dc:7b:9f:37:e7:19:93:31:43:34: 88:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:78:4C:D9:02:0D:20:14:63:75:24:DF:C5:26:37:83:CE:31:D7:A9 X509v3 Authority Key Identifier: keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/08BD74841A4F11EA8DFECB86C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.249.0/24 Signature Algorithm: sha256WithRSAEncryption 72:df:b9:87:86:92:b2:da:fd:57:b0:05:8a:51:3f:38:6a:1e: d5:fc:74:15:6c:c0:d6:0f:16:18:c9:d2:c2:ed:cd:84:98:b1: be:fe:65:c6:fe:90:5a:be:55:0a:6e:1f:bf:e8:84:3b:d9:40: e1:ba:f8:2e:d5:06:f0:d8:c0:28:5e:3b:09:80:68:86:39:12: 8a:dd:a6:c3:78:ad:3c:d2:67:d5:86:7b:26:a4:2f:85:f4:af: 74:df:95:16:60:67:54:fe:e3:d3:6c:1e:e6:e4:1e:7c:88:28: 02:80:de:3c:6c:58:59:1e:45:6a:86:86:3f:b4:12:59:97:ca: da:65:f4:1b:8d:ed:8c:fb:3e:1a:88:e5:24:ce:34:73:cc:e9: bf:f1:c4:ef:5b:0b:cc:a0:bb:2d:96:9a:5c:cb:43:5b:26:c7: 68:d1:a7:c4:06:b8:10:35:44:21:4b:43:b7:81:69:33:b9:10: fe:aa:7c:8e:1e:dc:3e:c0:f2:25:03:7f:25:86:c6:a4:ac:38: b9:e8:ac:42:e9:5c:1f:4f:3a:6b:38:38:4d:af:8a:09:4f:9a: c8:eb:ff:ee:5f:81:99:0d:0e:ac:78:d5:2e:66:f8:d7:d7:11: 0c:53:78:5e:24:df:3c:59:20:14:7d:9a:69:80:8b:2e:1e:4d: 6b:05:37:42 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICESswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGQjUxMTAvBgNVBAUTKENBRkEyMEE5MDE4MDk1RDIyOUYwQUM0MzkyMERDRDQz QTY2QkVCNTIwHhcNMjUwMTA2MTc0NTMwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdjMTZiOS1iYjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPn/Eo233gr7y9hrgddwei+1gJbqx7wFOoFh5McT3N9I0x7xxvOOhS7US0Eu 6mGg89WBs0lZAV5raRIYR2civzITLpP2FjsqC4IOVjQ5JMFonpw0Jl72TArBuuOU vIvhhO6oUE/TiZ1rUfXOxL/oD69WsNPuaOPNMj7duz9QGd7Ol5Rxl3//eINZOyL6 15m2oQH1iPx8bKXlxnVyhC3Bjh4c3ahJge3qA1oFPxxuZDh/a9FDB1KsEU3SdXCd 0v7ZLpTXL4iOxfsIxw7UjsYy3addA25e1QxcscEE6cla4IM2vFQgKxAfmhtuuxIm xafvVzyeKNx7nzfnGZMxQzSIYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEB4TNkC DSAUY3Uk38UmN4POMdepMB8GA1UdIwQYMBaAFMr6IKkBgJXSKfCsQ5INzUOma+tS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEZCNS9FRjk4N0VFMjA5 RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxkSXA4S3hEa2czTlE2WnI2 MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2b2dxUUdBbGRJcDhLeERrZzNOUTZacjYxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzRGQjUvRUY5ODdFRTIwOUQxMTFFOTk1NjA3QjUyQzRGOUFFMDIvMDhCRDc0ODQx QTRGMTFFQThERkVDQjg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnf/kwDQYJKoZIhvcNAQELBQADggEBAHLfuYeGkrLa/Vew BYpRPzhqHtX8dBVswNYPFhjJ0sLtzYSYsb7+Zcb+kFq+VQpuH7/ohDvZQOG6+C7V BvDYwCheOwmAaIY5EordpsN4rTzSZ9WGeyakL4X0r3TflRZgZ1T+49NsHubkHnyI KAKA3jxsWFkeRWqGhj+0ElmXytpl9BuN7Yz7PhqI5STONHPM6b/xxO9bC8yguy2W mlzLQ1smx2jRp8QGuBA1RCFLQ7eBaTO5EP6qfI4e3D7A8iUDfyWGxqSsOLnorELp XB9POms4OE2viglPmsjr/+5fgZkNDqx41S5m+NfXEQxTeF4k3zxZIBR9mmmAiy4e TWsFN0I= -----END CERTIFICATE-----Generated at Sat Apr 26 08:09:27 2025 by rpki-client