$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/FFE0F998101511EDA7D8F271C4F9AE02.roa File: FFE0F998101511EDA7D8F271C4F9AE02.roa (raw, json) Hash identifier: RnL32mbH2nfGSeBF5CgeDIySAoSrBSDNFXrw7LKGyjA= Subject key identifier: B5:06:3D:E4:C5:DA:43:DE:5D:C3:BF:B0:6C:A2:06:48:AB:74:B8:A9 Certificate issuer: /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E Certificate serial: 18FF Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/FFE0F998101511EDA7D8F271C4F9AE02.roa Signing time: Sat 22 Feb 2025 16:54:08 +0000 ROA not before: Sat 22 Feb 2025 16:54:08 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 149781 IP address blocks: 103.101.175.0/24 maxlen: 24 2001:df0:d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6399 (0x18ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBA26, serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E Validity Not Before: Feb 22 16:54:08 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67ba0130-cb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3a:d9:c6:c6:8b:c6:0d:1d:78:be:92:f6:ca: 38:f7:54:2d:69:5a:d8:b3:d8:a0:f7:24:b2:b2:ef: a8:6e:6b:80:40:e1:b6:51:85:c3:74:8d:fc:32:1f: 4a:50:da:01:10:fa:d3:cb:69:8f:ee:1b:ca:a4:dd: d5:2e:0d:e2:2d:84:d0:a0:41:75:76:1a:cd:f2:45: 86:85:10:ce:92:f3:0f:95:a8:af:7a:5c:a0:60:2e: 65:a1:17:31:60:63:32:18:6a:79:b0:20:4f:a9:46: 10:4d:b2:eb:b0:92:8c:0b:61:11:89:cf:2b:e8:10: e0:cd:9e:3b:9d:16:5c:03:7f:a2:63:1e:b7:57:d3: 29:1d:b9:fb:25:9e:e2:71:27:de:7f:e1:cf:0a:b5: de:1b:54:17:49:14:76:8c:4b:8c:4c:e4:39:80:41: 2b:2b:96:2b:c6:4d:08:7c:c9:95:21:7f:04:cd:05: 96:2a:72:5a:2e:17:96:01:90:01:22:f6:77:cf:aa: 0e:30:71:52:92:8d:14:f9:ad:34:6f:18:1f:d2:2d: 4a:84:2e:76:fa:3f:2d:09:ee:51:56:df:aa:27:35: 8a:ff:0d:2b:1f:3a:02:94:ae:ef:27:cc:48:6c:80: 58:fd:35:11:9e:a8:ff:92:70:2c:10:35:6a:c0:88: b6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:06:3D:E4:C5:DA:43:DE:5D:C3:BF:B0:6C:A2:06:48:AB:74:B8:A9 X509v3 Authority Key Identifier: keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/FFE0F998101511EDA7D8F271C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.175.0/24 IPv6: 2001:df0:d00::/48 Signature Algorithm: sha256WithRSAEncryption 40:a2:19:6f:fe:26:82:2c:c7:d5:3e:18:bb:e8:e8:58:95:93: 1a:42:8f:d5:be:36:53:90:1e:2f:4e:ee:af:35:81:0e:37:42: 97:7f:49:04:d1:8d:ca:13:54:5a:61:f6:8f:38:f9:17:6b:eb: f8:99:42:9f:49:33:38:58:d0:0a:a2:9e:b9:f7:0d:e1:57:2a: b3:5b:85:2c:76:17:9e:10:b7:9a:14:9e:46:13:ba:9b:b3:31: 7d:2c:69:5b:a8:e0:8f:97:bd:dc:31:cf:56:6b:ec:ee:6e:31: 53:71:65:20:12:c4:d0:0d:b0:f4:e0:97:89:e5:cb:eb:a5:6a: ad:c0:59:38:5f:4d:c5:d8:a7:9d:a6:b5:25:21:1c:95:6c:f1: 8b:6a:58:a7:63:3f:22:92:5f:be:9d:a8:f5:8b:a6:ac:db:67: 7c:65:88:8c:76:7b:17:36:ac:36:e9:03:57:76:7c:47:ec:43: 97:f3:15:32:73:70:b6:18:30:29:0e:52:d8:2e:0c:84:55:43: d0:6a:6d:96:9f:15:c7:26:ab:c8:20:77:ce:4a:69:2d:c7:14: d5:39:d0:42:df:09:c0:96:42:40:2b:2b:ba:a2:71:b1:4f:b2: ad:0e:73:db:8d:65:f3:11:5f:2a:81:18:3b:60:b2:ec:82:75: ed:88:cb:cd -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICGP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JBMjYxMTAvBgNVBAUTKDFBRkQ0MjY1RTYzRDBDQkY3NTIzNkVEOTY4NkFFNEYw MDE1NUZGN0UwHhcNMjUwMjIyMTY1NDA4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JhMDEzMC1jYjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8TrZxsaLxg0deL6S9so491QtaVrYs9ig9ySysu+obmuAQOG2UYXDdI38Mh9K UNoBEPrTy2mP7hvKpN3VLg3iLYTQoEF1dhrN8kWGhRDOkvMPlaivelygYC5loRcx YGMyGGp5sCBPqUYQTbLrsJKMC2ERic8r6BDgzZ47nRZcA3+iYx63V9MpHbn7JZ7i cSfef+HPCrXeG1QXSRR2jEuMTOQ5gEErK5Yrxk0IfMmVIX8EzQWWKnJaLheWAZAB IvZ3z6oOMHFSko0U+a00bxgf0i1KhC52+j8tCe5RVt+qJzWK/w0rHzoClK7vJ8xI bIBY/TURnqj/knAsEDVqwIi2UQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLUGPeTF 2kPeXcO/sGyiBkirdLipMB8GA1UdIwQYMBaAFBr9QmXmPQy/dSNu2Whq5PABVf9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkEyNi9DQTY0Q0JGQTgy NUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURMOTFJMjdaYUdyazhBRlZf MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d2MUNaZVk5REw5MUkyN1phR3JrOEFGVl8zNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JBMjYvQ0E2NENCRkE4MjVEMTFFNzkxMzIwOTFEQzRGOUFFMDIvRkZFMEY5OTgx MDE1MTFFREE3RDhGMjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnZa8wDwQCAAIwCQMHACABDfANADANBgkqhkiG9w0BAQsF AAOCAQEAQKIZb/4mgizH1T4Yu+joWJWTGkKP1b42U5AeL07urzWBDjdCl39JBNGN yhNUWmH2jzj5F2vr+JlCn0kzOFjQCqKeufcN4Vcqs1uFLHYXnhC3mhSeRhO6m7Mx fSxpW6jgj5e93DHPVmvs7m4xU3FlIBLE0A2w9OCXieXL66VqrcBZOF9Nxdinnaa1 JSEclWzxi2pYp2M/IpJfvp2o9YumrNtnfGWIjHZ7FzasNukDV3Z8R+xDl/MVMnNw thgwKQ5S2C4MhFVD0Gptlp8VxyaryCB3zkppLccU1TnQQt8JwJZCQCsruqJxsU+y rQ5z241l8xFfKoEYO2Cy7IJ17YjLzQ== -----END CERTIFICATE-----Generated at Sat Apr 26 08:12:41 2025 by rpki-client