$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A766D10CF86B11EF86A73884C4F9AE02.roa File: A766D10CF86B11EF86A73884C4F9AE02.roa (raw, json) Hash identifier: Oni6AIFm2/Zy5DtH/auanOkB6FYH+HjvXMjJMyMEcuE= Subject key identifier: 9C:1B:93:72:A0:C6:12:36:FD:45:E0:50:C3:3A:79:55:9E:80:D3:6B Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0C07 Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A766D10CF86B11EF86A73884C4F9AE02.roa Signing time: Mon 03 Mar 2025 20:11:13 +0000 ROA not before: Mon 03 Mar 2025 20:11:13 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 150774 IP address blocks: 103.92.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3079 (0xc07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Validity Not Before: Mar 3 20:11:13 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67c60ce0-c4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:11:a2:d8:79:68:d0:e4:2a:a4:ff:f3:98:f4: e0:4d:d4:aa:6f:39:f5:5d:d2:a7:08:cd:a4:5e:fe: a9:64:6b:7c:74:1a:0f:d7:a3:47:a8:45:c8:7e:8d: 98:cc:c9:07:8a:a0:44:fb:ea:79:23:58:75:b7:57: f3:a9:e2:8b:56:fe:65:d7:2f:d5:9c:bd:aa:83:4a: 67:9c:2b:39:77:0f:94:9f:3b:70:0b:47:87:72:57: 41:82:21:18:97:3c:8f:f2:e9:2e:a5:63:ef:1d:bc: 0c:1c:69:1c:25:96:95:f9:c5:2f:30:76:fe:8f:a8: 15:51:19:85:7b:2a:e3:50:56:ca:d1:c4:03:7a:76: f4:4a:1f:4b:eb:39:19:cd:30:be:56:d1:3e:a9:a0: 7c:1b:b1:e5:4d:2d:b0:5f:63:d7:6a:dd:9e:42:a0: 49:9e:bf:8a:6d:cd:36:ec:fb:f3:f2:67:be:c0:43: 5c:44:c8:77:91:ec:c3:a1:2d:1e:c9:d6:45:d4:b0: 21:f9:22:a2:45:57:79:c3:e6:ff:12:51:8a:8c:cf: 00:d4:84:1b:ab:f5:64:13:ad:ca:c7:1d:96:e7:ae: ac:53:2f:7c:d7:f6:36:ba:37:17:f4:87:79:39:21: 32:e9:c2:62:75:ac:3d:0c:49:a6:04:77:2b:d6:58: a7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1B:93:72:A0:C6:12:36:FD:45:E0:50:C3:3A:79:55:9E:80:D3:6B X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A766D10CF86B11EF86A73884C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.92.153.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:10:93:70:be:b4:0b:af:29:d0:03:da:e6:ca:e1:23:27:1a: 37:ff:f7:61:28:a8:d8:13:2c:ff:73:00:8c:a8:a3:b7:84:87: 3f:73:d5:0b:03:b4:46:4b:09:a9:15:aa:db:87:50:96:fd:f5: 81:23:20:f7:99:b5:7c:ba:3d:ee:a4:9d:93:bf:79:cf:90:d8: b4:4b:b3:22:0c:f3:ce:10:d2:88:b5:dd:89:fb:9b:c2:c4:ea: f9:e2:6c:4d:02:1b:9a:b4:13:51:d8:75:50:a3:62:42:41:ec: d5:09:0a:6c:d1:55:f3:0b:9d:39:bb:34:d7:8c:ab:05:38:99: 7a:6f:9d:2e:41:fa:23:4a:54:ff:ba:14:d6:ff:98:38:85:8c: 63:b4:60:3b:3f:46:04:c8:5e:87:72:65:75:bd:64:bb:eb:cf: ff:0a:9e:04:b6:28:dc:bd:be:2e:4c:8b:7b:ad:91:64:5d:cd: 07:23:59:bc:e9:4e:5f:b4:b5:ab:d2:6e:ce:0a:83:2e:d8:53: 6e:35:dd:a8:67:e5:fe:a6:12:ba:1a:83:5a:5a:a7:b6:81:2c: 02:98:2e:e0:9d:77:39:53:55:eb:a3:a4:7d:b7:c0:37:c0:15: 14:28:24:a4:ad:85:21:44:47:14:33:97:d4:ba:15:a3:b3:10: 64:f9:ce:0a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjUwMzAzMjAxMTEzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M2MGNlMC1jNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkxGi2Hlo0OQqpP/zmPTgTdSqbzn1XdKnCM2kXv6pZGt8dBoP16NHqEXIfo2Y zMkHiqBE++p5I1h1t1fzqeKLVv5l1y/VnL2qg0pnnCs5dw+UnztwC0eHcldBgiEY lzyP8ukupWPvHbwMHGkcJZaV+cUvMHb+j6gVURmFeyrjUFbK0cQDenb0Sh9L6zkZ zTC+VtE+qaB8G7HlTS2wX2PXat2eQqBJnr+Kbc027Pvz8me+wENcRMh3kezDoS0e ydZF1LAh+SKiRVd5w+b/ElGKjM8A1IQbq/VkE63Kxx2W566sUy981/Y2ujcX9Id5 OSEy6cJidaw9DEmmBHcr1linCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJwbk3Kg xhI2/UXgUMM6eVWegNNrMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVDMTIvODU5MkU0ODgwRjY2MTFFQUFGNTFDNjQ2QzRGOUFFMDIvQTc2NkQxMENG ODZCMTFFRjg2QTczODg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnXJkwDQYJKoZIhvcNAQELBQADggEBAB4Qk3C+tAuvKdAD 2ubK4SMnGjf/92EoqNgTLP9zAIyoo7eEhz9z1QsDtEZLCakVqtuHUJb99YEjIPeZ tXy6Pe6knZO/ec+Q2LRLsyIM884Q0oi13Yn7m8LE6vnibE0CG5q0E1HYdVCjYkJB 7NUJCmzRVfMLnTm7NNeMqwU4mXpvnS5B+iNKVP+6FNb/mDiFjGO0YDs/RgTIXody ZXW9ZLvrz/8KngS2KNy9vi5Mi3utkWRdzQcjWbzpTl+0tavSbs4Kgy7YU2413ahn 5f6mEroag1pap7aBLAKYLuCddzlTVeujpH23wDfAFRQoJKSthSFERxQzl9S6FaOz EGT5zgo= -----END CERTIFICATE-----Generated at Sat Apr 26 14:16:12 2025 by rpki-client