$ rpki-client -vvf rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/BACECAC03A9611F097DC813FC4F9AE02.roa File: BACECAC03A9611F097DC813FC4F9AE02.roa (raw, json) Hash identifier: FLltvCQ24s1EKlp3QHQczB0ZDkydxbdpVdU7KHxoAcA= Subject key identifier: B4:3F:66:A1:19:81:77:EF:13:C8:D6:65:46:85:9A:6A:E7:CD:DF:41 Certificate issuer: /CN=A91C911D/serialNumber=475B62A5F233ED05AC72D8781234E109BF3A908C Certificate serial: 06F2 Authority key identifier: 47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/BACECAC03A9611F097DC813FC4F9AE02.roa Signing time: Mon 02 Jun 2025 22:30:49 +0000 ROA not before: Mon 02 Jun 2025 22:30:49 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 55581 IP address blocks: 103.55.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.crl rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1778 (0x6f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C911D, serialNumber=475B62A5F233ED05AC72D8781234E109BF3A908C Validity Not Before: Jun 2 22:30:49 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=683e2619-130f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0a:dd:7d:67:44:23:dc:c7:f2:ff:e5:e5:7d: b8:57:b1:2e:d4:be:ae:72:ef:be:be:5c:27:bc:26: 82:21:77:25:fe:c9:98:08:53:18:2f:e8:51:09:49: 02:3e:b0:69:f5:f2:a4:f5:80:b1:1b:be:0a:1d:05: aa:e3:67:9a:e7:66:91:07:c4:14:92:5a:78:0a:21: 78:c8:a4:a0:bf:f6:fc:bf:53:13:a7:81:a3:b4:4b: 1a:9c:52:6c:2f:66:e4:88:06:50:1c:ca:3c:9d:5d: 24:8f:07:62:3f:e2:f9:e4:c8:9a:67:21:cc:a7:c6: 74:3c:a8:6a:d9:1c:42:24:5c:fb:43:89:78:6b:93: 54:21:17:19:d1:da:6e:ab:81:a9:0f:ee:01:c3:60: 58:00:4a:e3:af:2b:6e:fe:96:e2:ab:be:00:7f:59: 60:28:8f:5c:f2:50:fb:04:07:ea:cc:2e:38:66:85: bc:aa:57:1e:4d:b8:f5:24:9a:c1:32:a1:0e:ef:e9: 1a:10:5e:ce:54:db:30:0b:4d:9f:c5:0d:30:c9:7b: 76:b5:28:24:f9:42:f6:6d:dc:19:2c:ca:e2:f5:0e: 97:a1:08:d6:3e:02:ba:9c:f2:4c:2b:08:b5:81:46: b2:61:d5:ec:59:59:b4:ca:93:66:31:6d:32:d8:49: e2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3F:66:A1:19:81:77:EF:13:C8:D6:65:46:85:9A:6A:E7:CD:DF:41 X509v3 Authority Key Identifier: keyid:47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/BACECAC03A9611F097DC813FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.55.132.0/24 Signature Algorithm: sha256WithRSAEncryption 42:c0:86:10:3b:da:64:82:79:89:0b:16:31:a5:91:ea:2b:cc: 7d:48:91:d4:9e:0f:9a:66:13:39:7a:5c:71:5a:f9:31:8b:52: 6d:a8:e2:f3:46:d4:92:6a:57:86:8c:45:e5:5c:9a:de:4c:9e: e7:6f:64:4c:f2:dd:55:d8:d9:6c:ac:44:b5:cf:69:ca:d8:99: 03:5c:d5:2e:a2:a6:12:8f:db:a4:3d:fe:15:b6:77:a9:30:af: e9:ec:22:49:9c:3e:13:03:e8:e5:8b:1a:61:21:c9:03:91:91: 4f:f1:86:21:c4:08:d7:fd:94:f8:82:c0:2c:f5:00:d4:17:28: cd:2d:18:f3:d2:00:f6:9a:72:4b:d3:56:5f:0d:b6:0b:0f:77: 6d:24:fa:18:f6:41:26:ea:d0:db:50:16:f3:1a:35:22:45:2e: a4:29:34:01:3d:50:8e:aa:c9:82:27:8f:bb:7b:06:97:29:5f: 1b:e3:20:05:f7:d5:1e:98:04:8b:30:cb:72:24:fd:42:10:64: 6c:e4:63:e2:b2:61:6f:ff:a2:25:d8:3b:ae:59:4d:b5:ba:9b: 66:91:91:cd:6a:66:d0:0b:e8:ab:57:23:74:23:f8:82:12:bf: 8a:d6:f3:a2:50:70:e8:54:46:1b:2c:0b:16:4f:7b:3e:cf:11: 76:e1:61:c1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxMUQxMTAvBgNVBAUTKDQ3NUI2MkE1RjIzM0VEMDVBQzcyRDg3ODEyMzRFMTA5 QkYzQTkwOEMwHhcNMjUwNjAyMjIzMDQ5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlMjYxOS0xMzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxArdfWdEI9zH8v/l5X24V7Eu1L6ucu++vlwnvCaCIXcl/smYCFMYL+hRCUkC PrBp9fKk9YCxG74KHQWq42ea52aRB8QUklp4CiF4yKSgv/b8v1MTp4GjtEsanFJs L2bkiAZQHMo8nV0kjwdiP+L55MiaZyHMp8Z0PKhq2RxCJFz7Q4l4a5NUIRcZ0dpu q4GpD+4Bw2BYAErjrytu/pbiq74Af1lgKI9c8lD7BAfqzC44ZoW8qlceTbj1JJrB MqEO7+kaEF7OVNswC02fxQ0wyXt2tSgk+UL2bdwZLMri9Q6XoQjWPgK6nPJMKwi1 gUayYdXsWVm0ypNmMW0y2EniqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLQ/ZqEZ gXfvE8jWZUaFmmrnzd9BMB8GA1UdIwQYMBaAFEdbYqXyM+0FrHLYeBI04Qm/OpCM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTExRC83QjEzQjM4NDZD MDMxMUVCODg0NDc4NEJDNEY5QUUwMi9SMXRpcGZJejdRV3NjdGg0RWpUaENiODZr SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxdGlwZkl6N1FXc2N0aDRFalRoQ2I4NmtJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkxMUQvN0IxM0IzODQ2QzAzMTFFQjg4NDQ3ODRCQzRGOUFFMDIvQkFDRUNBQzAz QTk2MTFGMDk3REM4MTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnN4QwDQYJKoZIhvcNAQELBQADggEBAELAhhA72mSCeYkL FjGlkeorzH1IkdSeD5pmEzl6XHFa+TGLUm2o4vNG1JJqV4aMReVcmt5MnudvZEzy 3VXY2WysRLXPacrYmQNc1S6iphKP26Q9/hW2d6kwr+nsIkmcPhMD6OWLGmEhyQOR kU/xhiHECNf9lPiCwCz1ANQXKM0tGPPSAPaackvTVl8NtgsPd20k+hj2QSbq0NtQ FvMaNSJFLqQpNAE9UI6qyYInj7t7BpcpXxvjIAX31R6YBIswy3Ik/UIQZGzkY+Ky YW//oiXYO65ZTbW6m2aRkc1qZtAL6KtXI3Qj+IISv4rW86JQcOhURhssCxZPez7P EXbhYcE= -----END CERTIFICATE-----Generated at Wed Jun 18 01:10:19 2025 by rpki-client