$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/B9F821D4462D11EC93DFE63CC4F9AE02.roa File: B9F821D4462D11EC93DFE63CC4F9AE02.roa (raw, json) Hash identifier: I8lWHibGq7xqWHXndBv/JsEhBfdVBWJiR9FoofIbTMA= Subject key identifier: DC:ED:A5:10:E4:EC:5C:4B:3D:5B:4B:54:45:2B:40:4D:12:5F:F7:53 Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Certificate serial: 112E Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/B9F821D4462D11EC93DFE63CC4F9AE02.roa Signing time: Mon 06 Jan 2025 17:45:32 +0000 ROA not before: Mon 06 Jan 2025 17:45:32 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 63889 IP address blocks: 103.127.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4398 (0x112e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Validity Not Before: Jan 6 17:45:32 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=677c16bc-3c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:6b:62:4e:f2:46:ef:2d:db:72:75:5d:a4: ed:2c:54:f4:2e:24:36:a3:da:95:4f:5a:46:e9:04: 2b:a7:e7:22:04:10:fe:d1:e7:67:dd:10:ca:a0:57: 0f:82:3e:bf:40:7a:5d:d4:54:63:d5:35:71:7d:c0: 85:04:64:f6:12:ac:1c:e7:82:15:d3:d5:e7:9c:b0: 3e:69:e8:8f:47:f3:d6:46:5e:1a:8f:43:11:54:15: 12:9c:05:bc:c6:08:c7:96:62:48:ed:fe:88:35:21: d6:38:5f:2e:d1:09:10:c1:e9:b9:91:cb:34:ad:9d: f3:ca:64:48:11:8a:7c:9a:c4:89:83:e9:c2:be:0d: 3d:c6:96:82:3f:21:9f:84:29:05:27:7d:f6:f6:f8: 09:c6:79:34:fe:eb:35:85:e2:37:bf:bf:0e:29:d3: af:d5:ce:c4:9a:26:d2:bf:19:ef:76:06:b9:27:4e: de:e0:56:3c:21:bd:7a:cc:83:fe:8e:51:b2:b7:76: 66:b1:aa:b9:99:13:fd:55:7a:88:6c:23:83:37:33: fb:25:83:7d:94:a3:c2:cb:74:74:60:02:a6:51:58: 24:2a:9b:33:9e:49:84:19:de:13:68:c1:d7:27:eb: 18:70:4d:f1:77:1b:e4:40:85:f0:ea:02:54:ac:a0: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:ED:A5:10:E4:EC:5C:4B:3D:5B:4B:54:45:2B:40:4D:12:5F:F7:53 X509v3 Authority Key Identifier: keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/B9F821D4462D11EC93DFE63CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.248.0/22 Signature Algorithm: sha256WithRSAEncryption 37:81:8e:06:36:53:e0:2b:bb:c1:64:64:c2:aa:fe:0f:2f:70: ba:9f:0e:f4:77:a2:16:86:43:b3:71:86:6b:99:d8:44:0d:6f: 16:4c:bd:80:20:48:fc:a1:3b:77:80:b1:06:47:36:47:fa:ea: e0:91:01:10:3c:ac:1b:b9:bf:b1:4c:74:80:2d:a9:e4:94:5f: 88:8f:ed:d5:66:aa:b9:85:40:7d:a3:e9:0c:95:9b:a6:36:4e: c4:62:8b:46:0f:ed:be:78:c4:a6:ea:ac:18:7d:09:f8:a2:eb: 7b:12:44:7c:27:7f:71:8e:26:49:7a:b4:83:7e:a1:6a:b8:a2: d9:6a:1c:5b:ee:d5:c8:4d:37:8a:fa:52:59:d1:a1:48:f9:ec: 3d:3e:56:b8:71:7e:3c:2a:44:e4:56:fe:3f:cb:0f:1d:f5:bd: 72:e5:d3:32:fe:f4:4f:27:53:6f:79:98:fc:26:2b:73:35:16: e5:ae:ce:51:af:21:f8:b4:e2:6f:94:d5:e5:b0:3c:2b:e5:33: 37:90:90:c3:d2:b2:26:8c:7d:31:72:1b:b3:df:7d:c9:70:f8: 6a:e8:77:a1:e4:6c:c7:26:4c:d4:e7:f3:12:0a:e4:c5:c6:31: 32:d8:47:8a:42:4b:da:7d:a7:a8:48:ce:f7:6c:91:11:5b:d4: 77:bf:5a:9f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICES4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGQjUxMTAvBgNVBAUTKENBRkEyMEE5MDE4MDk1RDIyOUYwQUM0MzkyMERDRDQz QTY2QkVCNTIwHhcNMjUwMTA2MTc0NTMyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdjMTZiYy0zYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5xrYk7yRu8t23J1XaTtLFT0LiQ2o9qVT1pG6QQrp+ciBBD+0edn3RDKoFcP gj6/QHpd1FRj1TVxfcCFBGT2Eqwc54IV09XnnLA+aeiPR/PWRl4aj0MRVBUSnAW8 xgjHlmJI7f6INSHWOF8u0QkQwem5kcs0rZ3zymRIEYp8msSJg+nCvg09xpaCPyGf hCkFJ3329vgJxnk0/us1heI3v78OKdOv1c7EmibSvxnvdga5J07e4FY8Ib16zIP+ jlGyt3Zmsaq5mRP9VXqIbCODNzP7JYN9lKPCy3R0YAKmUVgkKpsznkmEGd4TaMHX J+sYcE3xdxvkQIXw6gJUrKCfbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNztpRDk 7FxLPVtLVEUrQE0SX/dTMB8GA1UdIwQYMBaAFMr6IKkBgJXSKfCsQ5INzUOma+tS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEZCNS9FRjk4N0VFMjA5 RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxkSXA4S3hEa2czTlE2WnI2 MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2b2dxUUdBbGRJcDhLeERrZzNOUTZacjYxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzRGQjUvRUY5ODdFRTIwOUQxMTFFOTk1NjA3QjUyQzRGOUFFMDIvQjlGODIxRDQ0 NjJEMTFFQzkzREZFNjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnf/gwDQYJKoZIhvcNAQELBQADggEBADeBjgY2U+Aru8Fk ZMKq/g8vcLqfDvR3ohaGQ7NxhmuZ2EQNbxZMvYAgSPyhO3eAsQZHNkf66uCRARA8 rBu5v7FMdIAtqeSUX4iP7dVmqrmFQH2j6QyVm6Y2TsRii0YP7b54xKbqrBh9Cfii 63sSRHwnf3GOJkl6tIN+oWq4otlqHFvu1chNN4r6UlnRoUj57D0+VrhxfjwqRORW /j/LDx31vXLl0zL+9E8nU295mPwmK3M1FuWuzlGvIfi04m+U1eWwPCvlMzeQkMPS siaMfTFyG7Pffclw+Grod6HkbMcmTNTn8xIK5MXGMTLYR4pCS9p9p6hIzvdskRFb 1He/Wp8= -----END CERTIFICATE-----Generated at Sat Apr 26 08:03:10 2025 by rpki-client