$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/F4D295243FDA11EFAF5E676AC4F9AE02.roa File: F4D295243FDA11EFAF5E676AC4F9AE02.roa (raw, json) Hash identifier: 1RhS2h2tWn1m1rNY8jrx9gtNAHNEkDyNHgYU79X2jK0= Subject key identifier: 24:BE:3F:5D:2D:2C:E4:C9:CC:F9:B7:D0:BA:5A:DA:B5:63:67:AC:D9 Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 041B Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/F4D295243FDA11EFAF5E676AC4F9AE02.roa Signing time: Thu 17 Apr 2025 00:35:40 +0000 ROA not before: Thu 17 Apr 2025 00:35:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133894 IP address blocks: 103.88.192.0/24 maxlen: 24 103.88.193.0/24 maxlen: 24 103.88.194.0/24 maxlen: 24 103.88.195.0/24 maxlen: 24 116.204.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: Apr 17 00:35:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68004cdc-d5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:90:a2:7f:f3:58:45:2e:6f:f8:ed:cc:07:de: fd:d8:5c:91:a8:b2:b5:14:fc:c6:14:ed:68:ae:d3: a3:dc:1e:c9:0f:01:e7:5e:10:66:87:43:6a:15:3b: 8c:03:a9:3b:04:f9:fa:4d:38:c4:a5:55:1b:5f:a6: 89:11:91:b9:0b:9d:9b:5c:c8:55:f5:ac:e6:4a:77: 80:fe:ef:2c:14:31:39:3f:1b:99:ad:1e:cc:d7:ac: 35:5b:b8:7d:ec:5a:22:7b:71:bd:57:df:ea:81:7d: 0a:2e:50:00:4e:69:a7:ed:ee:ae:c7:e9:fa:2a:c4: 5f:ed:dd:e0:90:7a:fd:64:9b:5e:e6:2d:cc:bf:8c: e4:97:9d:d1:71:ee:8d:fd:30:c3:04:c4:50:1f:9b: 24:61:b5:37:9e:49:f9:68:f2:23:2b:3e:25:80:49: 14:c2:15:13:d2:c9:a7:93:65:92:09:52:ef:e9:13: 5e:81:70:2d:6c:9c:9a:29:d4:ac:7b:77:37:c3:b5: cb:7c:15:be:f9:f5:d2:94:f6:99:8c:1d:de:ce:1d: 35:d5:3c:a2:f2:96:84:ec:03:1a:4f:47:0e:2f:d7: ab:2c:fe:d0:70:20:a5:dd:5e:e7:a4:36:93:c6:70: 54:46:fe:88:3f:89:36:04:2a:23:12:d4:42:c6:a8: 12:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BE:3F:5D:2D:2C:E4:C9:CC:F9:B7:D0:BA:5A:DA:B5:63:67:AC:D9 X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/F4D295243FDA11EFAF5E676AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.88.192.0/22 116.204.240.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:bf:ee:5a:3c:e1:3e:44:1b:10:ab:aa:24:15:9b:4b:83:4f: d0:ec:e3:b5:c5:b6:4f:b5:fd:21:fb:da:d4:f5:08:58:5b:3b: 34:eb:32:13:e8:9b:fd:d8:7f:93:7c:e2:8b:fd:55:33:ca:7d: ac:5b:16:ae:a5:72:c9:54:20:d2:91:3e:26:47:b6:3d:27:ab: 84:03:1d:3b:41:f2:9a:83:60:18:34:d2:00:00:69:6f:4d:3a: 26:be:99:3d:66:76:c4:30:6e:00:b8:a6:50:63:bd:2b:33:8c: 2d:4f:63:25:79:e1:50:ff:fd:51:8c:13:e5:48:83:af:d9:70: f5:0d:7e:0d:bc:12:d1:f1:bd:04:30:3d:70:11:5d:e2:b3:a1: e5:9e:08:27:6c:2e:81:9b:54:26:d2:d6:26:3e:ea:58:c3:a9: 73:ad:31:45:18:73:cf:16:bf:fb:76:1b:b1:bb:ef:50:bb:ff: 7f:20:3d:12:bb:23:f6:61:a7:94:64:86:0c:79:c0:b3:d6:53: bc:b6:23:62:6d:d5:9c:3b:ef:6d:4e:c7:26:5f:87:8a:de:00: 10:b7:80:d2:7c:10:79:d5:e4:ea:77:f2:6e:0e:18:c4:8f:c2: 29:d7:9c:18:5d:6a:70:53:e5:86:c0:ca:bf:9c:ac:a5:20:75: 9b:e8:37:be -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjUwNDE3MDAzNTQwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAwNGNkYy1kNWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5Cif/NYRS5v+O3MB9792FyRqLK1FPzGFO1ortOj3B7JDwHnXhBmh0NqFTuM A6k7BPn6TTjEpVUbX6aJEZG5C52bXMhV9azmSneA/u8sFDE5PxuZrR7M16w1W7h9 7Foie3G9V9/qgX0KLlAATmmn7e6ux+n6KsRf7d3gkHr9ZJte5i3Mv4zkl53Rce6N /TDDBMRQH5skYbU3nkn5aPIjKz4lgEkUwhUT0smnk2WSCVLv6RNegXAtbJyaKdSs e3c3w7XLfBW++fXSlPaZjB3ezh011Tyi8paE7AMaT0cOL9erLP7QcCCl3V7npDaT xnBURv6IP4k2BCojEtRCxqgSjwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCS+P10t LOTJzPm30Lpa2rVjZ6zZMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDBDOEUvMDMyRTU3Qjg3NDM5MTFFQ0I1NTcyMzZGQzRGOUFFMDIvRjREMjk1MjQz RkRBMTFFRkFGNUU2NzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnWMADBAB0zPAwDQYJKoZIhvcNAQELBQADggEBADy/7lo8 4T5EGxCrqiQVm0uDT9Ds47XFtk+1/SH72tT1CFhbOzTrMhPom/3Yf5N84ov9VTPK faxbFq6lcslUINKRPiZHtj0nq4QDHTtB8pqDYBg00gAAaW9NOia+mT1mdsQwbgC4 plBjvSszjC1PYyV54VD//VGME+VIg6/ZcPUNfg28EtHxvQQwPXARXeKzoeWeCCds LoGbVCbS1iY+6ljDqXOtMUUYc88Wv/t2G7G771C7/38gPRK7I/Zhp5Rkhgx5wLPW U7y2I2Jt1Zw7721OxyZfh4reABC3gNJ8EHnV5Op38m4OGMSPwinXnBhdanBT5YbA yr+crKUgdZvoN74= -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:24 2025 by rpki-client