$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/4CC9C2C67A4011EF8ECE0718C4F9AE02.roa File: 4CC9C2C67A4011EF8ECE0718C4F9AE02.roa (raw, json) Hash identifier: vsz5GpfTpwM0qPsLsXoeZFfndxJJwVRgYiVxQ9IAKCs= Subject key identifier: 69:AF:7B:62:26:A1:95:B9:F4:68:C6:EC:88:07:51:2E:36:15:23:7D Certificate issuer: /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Certificate serial: 0667 Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/4CC9C2C67A4011EF8ECE0718C4F9AE02.roa Signing time: Tue 31 Dec 2024 18:47:21 +0000 ROA not before: Tue 31 Dec 2024 18:47:21 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 135637 IP address blocks: 103.77.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1639 (0x667) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Validity Not Before: Dec 31 18:47:21 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=67743c39-cffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:ea:44:23:bb:61:c9:8a:2d:50:25:1f:3b: 75:5a:e7:93:80:40:f1:45:40:d5:fa:e8:93:f9:a5: 22:fc:1c:88:1a:cf:69:67:96:38:3a:cd:e6:5e:da: 43:5f:78:7c:e9:5f:03:80:f9:f0:d3:00:15:94:61: 61:65:37:c1:5e:7d:06:b3:cf:b5:e5:15:16:a5:a3: 2e:dc:45:f0:da:84:6f:79:0e:eb:5f:13:9b:ba:d7: 92:fc:63:c5:14:b5:0c:04:3f:fa:b3:cd:bd:69:59: 62:3a:34:be:1c:85:df:99:e9:f6:fd:a0:92:c0:83: ca:a9:62:57:8a:21:1a:e5:5b:d9:93:f0:00:c1:c1: 90:ba:f6:2f:96:76:8a:4d:1b:26:f3:63:69:c4:26: bb:6f:bc:51:cf:c4:39:24:a3:64:6b:07:f3:81:73: 46:ae:c7:ec:fd:5b:15:22:70:45:f9:8a:e4:d2:38: 88:b9:0c:18:c7:d5:67:ba:9e:10:07:ca:f0:dd:60: 09:23:d7:1c:23:a8:a3:b5:bd:43:06:2f:94:13:cb: 69:22:ff:0a:0c:06:54:12:05:22:33:bd:a2:29:d0: ff:fa:f6:42:7c:fc:dc:e4:58:90:de:72:47:2d:41: c8:6a:93:e9:31:d7:1f:be:2c:5a:46:d3:fe:13:7d: 7a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AF:7B:62:26:A1:95:B9:F4:68:C6:EC:88:07:51:2E:36:15:23:7D X509v3 Authority Key Identifier: keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/4CC9C2C67A4011EF8ECE0718C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.77.100.0/23 Signature Algorithm: sha256WithRSAEncryption 95:dd:30:6e:cb:85:73:0b:9f:ba:9a:10:02:d1:8d:e2:ae:b6: e1:37:e3:1c:19:ec:b8:15:f0:f9:6b:bc:88:9e:8c:a9:85:9e: ab:7d:f3:5e:8d:00:9c:1b:ee:6c:52:a5:d1:cc:a0:23:44:53: 0e:9f:4a:9f:e5:73:f3:f4:ca:71:bb:15:8a:28:c4:14:5e:d0: 6f:ec:7f:67:81:78:37:5f:e6:6b:b4:75:e9:36:68:92:1c:0d: aa:f3:25:66:cc:34:d9:91:0e:c0:68:9f:65:1b:46:f3:3d:5a: 2e:a5:ba:b6:78:0b:66:be:29:e6:c6:ae:e9:cb:4e:5b:b0:3d: 0d:96:6b:86:8f:54:df:c2:5f:a0:57:16:fd:88:1c:be:fb:35: 45:cd:9a:85:60:92:08:ca:21:87:fb:c7:35:ec:78:95:e4:50: 81:94:63:b3:57:6a:88:9d:9e:49:e0:b4:f4:e6:2c:68:23:53: f2:c6:a3:bd:14:38:d3:cc:e7:11:f9:67:07:9f:8a:cf:3a:43: 36:40:3d:c9:ab:d0:11:dc:05:9c:f8:81:5b:4f:bd:ff:31:7c: 5e:f9:01:15:49:e6:f5:fa:47:74:27:e7:ae:ad:c5:78:cb:a6: 3c:34:98:6e:9a:61:c2:c1:37:eb:e1:56:e3:01:04:97:96:c5: 53:fd:29:40 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKEM3QUVDMEMxMUI2REYxMjk4QjEyNTA5ODMxQTRDQzAy NDREQURDRjIwHhcNMjQxMjMxMTg0NzIxWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0M2MzOS1jZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IbqRCO7YcmKLVAlHzt1WueTgEDxRUDV+uiT+aUi/ByIGs9pZ5Y4Os3mXtpD X3h86V8DgPnw0wAVlGFhZTfBXn0Gs8+15RUWpaMu3EXw2oRveQ7rXxObuteS/GPF FLUMBD/6s829aVliOjS+HIXfmen2/aCSwIPKqWJXiiEa5VvZk/AAwcGQuvYvlnaK TRsm82NpxCa7b7xRz8Q5JKNkawfzgXNGrsfs/VsVInBF+Yrk0jiIuQwYx9Vnup4Q B8rw3WAJI9ccI6ijtb1DBi+UE8tpIv8KDAZUEgUiM72iKdD/+vZCfPzc5FiQ3nJH LUHIapPpMdcfvixaRtP+E316RwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGmve2Im oZW59GjG7IgHUS42FSN9MB8GA1UdIwQYMBaAFMeuwMEbbfEpixJQmDGkzAJE2tzy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhTbUxFbENZTWFUTUFrVGEz UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2N0F3UnR0OFNtTEVsQ1lNYVRNQWtUYTNQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzYxMkUvNjVCQzE3RDIwQjYxMTFFQUFGMDQyRjY4QzRGOUFFMDIvNENDOUMyQzY3 QTQwMTFFRjhFQ0UwNzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnTWQwDQYJKoZIhvcNAQELBQADggEBAJXdMG7LhXMLn7qa EALRjeKutuE34xwZ7LgV8PlrvIiejKmFnqt9816NAJwb7mxSpdHMoCNEUw6fSp/l c/P0ynG7FYooxBRe0G/sf2eBeDdf5mu0dek2aJIcDarzJWbMNNmRDsBon2UbRvM9 Wi6lurZ4C2a+KebGrunLTluwPQ2Wa4aPVN/CX6BXFv2IHL77NUXNmoVgkgjKIYf7 xzXseJXkUIGUY7NXaoidnkngtPTmLGgjU/LGo70UONPM5xH5Zwefis86QzZAPcmr 0BHcBZz4gVtPvf8xfF75ARVJ5vX6R3Qn566txXjLpjw0mG6aYcLBN+vhVuMBBJeW xVP9KUA= -----END CERTIFICATE-----Generated at Sat Apr 26 07:45:26 2025 by rpki-client