$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/7E16D3240B5011EE9A518C7BC4F9AE02.roa File: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (raw, json) Hash identifier: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA= Subject key identifier: 4C:D3:F9:9C:C6:06:E1:CF:FF:5D:70:4E:3A:C4:79:5B:E2:78:03:CA Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 039C Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/7E16D3240B5011EE9A518C7BC4F9AE02.roa Signing time: Mon 17 Mar 2025 00:46:19 +0000 ROA not before: Mon 17 Mar 2025 00:46:19 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 59371 IP address blocks: 103.84.44.0/24 maxlen: 24 103.84.45.0/24 maxlen: 24 103.84.46.0/24 maxlen: 24 103.84.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Mar 17 00:46:19 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67d770db-d601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:87:f1:d8:16:8f:af:30:d2:76:ae:03:a0:4e: 8d:9d:39:85:d3:4b:cb:70:c7:eb:bd:7e:cf:65:fc: a9:0c:92:35:14:78:81:ef:99:f5:9f:8b:32:2f:1c: 81:0d:01:3e:1c:3b:08:d0:da:26:47:e5:19:0c:03: 0b:fc:54:3a:c9:94:14:ce:a7:a8:b5:35:67:07:21: e8:2a:be:5a:17:c8:70:64:a8:af:cd:84:58:ff:05: 94:ba:e3:bf:01:32:f0:bc:4f:0b:10:d6:ff:a7:ad: 7d:0c:55:48:85:d6:a8:50:4f:36:22:30:04:aa:f5: a2:30:96:e6:9e:51:ff:e2:8c:0f:18:8f:48:36:b1: 97:99:7d:a9:dd:e4:40:0a:5c:21:f6:87:28:0b:43: 9b:91:d1:f4:28:2c:d8:b3:3b:29:eb:a7:b7:21:93: b6:ef:f3:ff:fd:65:dc:c8:6b:71:58:17:88:4a:e8: 4f:3e:cb:22:f7:d8:8a:5e:dc:6d:95:74:c0:d6:92: b7:7e:f9:40:cf:da:03:7d:12:02:84:54:93:0e:19: 34:28:24:14:51:e0:86:b0:ba:93:54:89:d1:d9:57: f3:2d:e3:4d:e4:be:09:c6:3d:f6:cc:11:a2:32:64: b4:c2:2e:71:4e:2c:b0:86:f2:5f:e8:17:80:04:94: 91:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D3:F9:9C:C6:06:E1:CF:FF:5D:70:4E:3A:C4:79:5B:E2:78:03:CA X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/7E16D3240B5011EE9A518C7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.44.0/22 Signature Algorithm: sha256WithRSAEncryption 50:c8:3f:a4:f9:71:be:8b:a7:ea:bc:a6:cf:4f:30:6e:ae:76: b0:f3:c0:35:24:5a:15:ea:16:90:16:85:e7:ad:19:a0:94:ba: 01:bb:04:8c:56:7b:5a:4d:c8:18:e0:81:f1:3b:a7:6f:7f:e1: d9:e5:bd:4f:9a:41:a4:0c:20:dc:83:13:70:c0:3b:78:f0:dd: 67:56:b0:3a:63:30:56:e4:11:16:83:de:e2:86:f3:67:ef:c7: 0f:8a:cc:f7:76:a6:11:19:6b:31:13:79:aa:5f:ff:4c:71:5b: 5f:88:10:14:43:2e:9a:89:f2:ba:14:38:67:b7:cb:4d:7a:f3: 48:53:50:3e:3a:b3:9d:0e:2a:9d:a7:0c:d7:7f:f4:88:f2:0e: 0e:93:5f:db:16:e5:b4:c5:7c:51:8f:69:3f:0d:c3:5b:f9:68: f0:8d:81:f7:2f:48:42:d6:fd:78:64:72:af:49:7f:e9:e4:b5: ce:1b:d8:20:38:80:12:07:5e:d6:87:ac:53:11:c4:db:b6:e7: c9:f8:74:ba:4e:8f:1e:f1:da:9a:bd:43:5e:6b:d0:fa:ea:ef: 38:21:b8:7c:b5:cd:ef:86:90:bf:e3:fb:eb:81:8e:21:d4:30: 79:4d:d7:b8:e8:ef:42:3c:88:47:0a:79:b6:18:8b:f8:37:aa: 3c:58:03:c7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjUwMzE3MDA0NjE5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q3NzBkYi1kNjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIfx2BaPrzDSdq4DoE6NnTmF00vLcMfrvX7PZfypDJI1FHiB75n1n4syLxyB DQE+HDsI0NomR+UZDAML/FQ6yZQUzqeotTVnByHoKr5aF8hwZKivzYRY/wWUuuO/ ATLwvE8LENb/p619DFVIhdaoUE82IjAEqvWiMJbmnlH/4owPGI9INrGXmX2p3eRA Clwh9ocoC0ObkdH0KCzYszsp66e3IZO27/P//WXcyGtxWBeISuhPPssi99iKXtxt lXTA1pK3fvlAz9oDfRIChFSTDhk0KCQUUeCGsLqTVInR2VfzLeNN5L4Jxj32zBGi MmS0wi5xTiywhvJf6BeABJSRHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEzT+ZzG BuHP/11wTjrEeVvieAPKMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzYzQTYvMEQzOUM0RTQ5QTlCMTFFQzgyQzcwQjIwQzRGOUFFMDIvN0UxNkQzMjQw QjUwMTFFRTlBNTE4QzdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnVCwwDQYJKoZIhvcNAQELBQADggEBAFDIP6T5cb6Lp+q8 ps9PMG6udrDzwDUkWhXqFpAWheetGaCUugG7BIxWe1pNyBjggfE7p29/4dnlvU+a QaQMINyDE3DAO3jw3WdWsDpjMFbkERaD3uKG82fvxw+KzPd2phEZazETeapf/0xx W1+IEBRDLpqJ8roUOGe3y01680hTUD46s50OKp2nDNd/9IjyDg6TX9sW5bTFfFGP aT8Nw1v5aPCNgfcvSELW/Xhkcq9Jf+nktc4b2CA4gBIHXtaHrFMRxNu258n4dLpO jx7x2pq9Q15r0Prq7zghuHy1ze+GkL/j++uBjiHUMHlN17jo70I8iEcKebYYi/g3 qjxYA8c= -----END CERTIFICATE-----Generated at Sun Apr 27 05:04:58 2025 by rpki-client