$ rpki-client -vvf rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/3F4ECBD2744D11EDB5D08682C4F9AE02.roa File: 3F4ECBD2744D11EDB5D08682C4F9AE02.roa (raw, json) Hash identifier: g6OgdDZKbwzC3zinj7MpaUKQ1NJe0hr5+U2aIYgw2E0= Subject key identifier: 87:DF:7D:04:90:F0:D1:73:7D:98:0F:D0:57:00:5D:DE:B2:0A:22:42 Certificate issuer: /CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496 Certificate serial: 0646 Authority key identifier: 46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/3F4ECBD2744D11EDB5D08682C4F9AE02.roa Signing time: Wed 02 Apr 2025 22:54:34 +0000 ROA not before: Wed 02 Apr 2025 22:54:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 38215 IP address blocks: 103.164.236.0/23 maxlen: 24 103.164.236.0/30 maxlen: 30 2001:df6:5180::/48 maxlen: 48 2400:bf60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1606 (0x646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E268B, serialNumber=462B16D327972EA771226A01588B5205EFEA4496 Validity Not Before: Apr 2 22:54:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67edc02a-75c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:f6:81:7f:1e:29:c5:c5:0b:10:31:b4:ce: 9c:a8:96:a3:30:7f:60:8d:13:1e:4b:30:0a:44:7a: 9e:86:c6:08:9c:ce:d9:26:30:0d:ff:79:76:c6:1e: 8f:ed:fd:7d:2f:b6:f7:1d:2e:53:de:24:60:4f:59: 47:dd:c5:d2:ce:24:55:40:6d:14:d7:ea:e0:ee:ab: d6:b7:6b:00:47:e5:a2:2a:38:14:81:81:0f:e2:aa: a2:96:a2:77:92:7b:93:26:94:79:c0:87:86:1d:5a: a8:e0:70:1c:82:00:10:d1:b7:aa:45:d8:f2:7b:24: 46:94:87:86:e4:f5:cb:7a:e4:3d:71:aa:5a:a8:c3: ce:04:41:27:73:9d:d4:f0:88:c7:c1:24:60:d2:6e: a9:81:f9:85:49:d2:50:a9:13:9c:b3:a4:9b:fd:bb: 93:88:fb:29:9b:00:d9:85:39:b7:0b:47:4b:73:92: 46:17:1b:7c:0d:b6:ca:30:08:8e:9b:76:f6:21:bc: 19:00:74:f5:bc:a3:3b:8b:f3:97:fc:c6:8a:de:76: 51:6b:ec:30:fe:9b:8b:d4:97:e3:89:5e:b4:79:ff: b7:9f:65:8d:5c:7b:27:b9:d1:5d:15:a6:6c:c6:c7: 80:fe:02:3a:6b:b0:7b:e1:b9:36:be:6e:95:02:53: af:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DF:7D:04:90:F0:D1:73:7D:98:0F:D0:57:00:5D:DE:B2:0A:22:42 X509v3 Authority Key Identifier: keyid:46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/3F4ECBD2744D11EDB5D08682C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.236.0/23 IPv6: 2001:df6:5180::/48 2400:bf60::/32 Signature Algorithm: sha256WithRSAEncryption 3a:79:99:42:db:00:3d:f9:cf:67:63:93:aa:97:61:c7:e1:92: c8:eb:29:9a:54:15:1a:0a:29:cc:07:81:d1:46:f2:63:ab:e3: 5d:51:ef:0f:65:6c:a7:aa:65:b3:40:c7:f4:77:99:53:85:9d: f5:9a:75:a8:e6:9d:df:05:4c:30:1a:1c:55:1b:95:d4:94:f3: 71:f8:f9:6f:05:cd:df:84:de:4b:d6:02:bf:1a:46:ed:e4:a3: e7:79:25:91:4e:90:f9:4a:cf:26:4c:5c:40:4d:7d:64:83:b0: c7:da:48:70:c8:a2:ed:65:8b:8d:cf:8a:96:ea:9c:58:be:78: 03:ef:49:1b:9f:46:1d:6e:19:da:f5:9b:ec:28:d5:cf:84:b9: 68:80:d6:9f:aa:7c:d4:1a:78:f5:24:38:1e:27:19:6b:6d:83: 8f:9e:4b:07:14:05:21:4e:f2:77:cf:47:ae:6d:07:1b:43:e4: 4f:d3:3f:67:a4:4f:62:dd:05:02:5c:a3:5a:e0:ff:6c:84:fc: 93:b2:b2:b5:af:24:5f:d2:36:55:b0:b9:46:ce:d5:6e:4c:e5: 4e:74:e5:f5:7f:a5:c8:a9:64:33:22:f1:e2:2c:12:1e:a5:2e: 41:38:99:1d:73:74:74:29:b1:60:d5:d1:62:ab:26:6f:17:70: 37:e5:5b:9b -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OEIxMTAvBgNVBAUTKDQ2MkIxNkQzMjc5NzJFQTc3MTIyNkEwMTU4OEI1MjA1 RUZFQTQ0OTYwHhcNMjUwNDAyMjI1NDM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkYzAyYS03NWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAP2gX8eKcXFCxAxtM6cqJajMH9gjRMeSzAKRHqehsYInM7ZJjAN/3l2xh6P 7f19L7b3HS5T3iRgT1lH3cXSziRVQG0U1+rg7qvWt2sAR+WiKjgUgYEP4qqilqJ3 knuTJpR5wIeGHVqo4HAcggAQ0beqRdjyeyRGlIeG5PXLeuQ9capaqMPOBEEnc53U 8IjHwSRg0m6pgfmFSdJQqROcs6Sb/buTiPspmwDZhTm3C0dLc5JGFxt8DbbKMAiO m3b2IbwZAHT1vKM7i/OX/MaK3nZRa+ww/puL1JfjiV60ef+3n2WNXHsnudFdFaZs xseA/gI6a7B74bk2vm6VAlOvKQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFIfffQSQ 8NFzfZgP0FcAXd6yCiJCMB8GA1UdIwQYMBaAFEYrFtMnly6ncSJqAViLUgXv6kSW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY4Qi80MjZGNTdDMDhE MzkxMUVCQjlGNENCMTdDNEY5QUUwMi9SaXNXMHllWExxZHhJbW9CV0l0U0JlX3FS SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jpc1cweWVYTHFkeEltb0JXSXRTQmVfcVJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI2OEIvNDI2RjU3QzA4RDM5MTFFQkI5RjRDQjE3QzRGOUFFMDIvM0Y0RUNCRDI3 NDREMTFFREI1RDA4NjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMAwEAgABMAYDBAFnpOwwFgQCAAIwEAMHACABDfZRgAMFACQAv2AwDQYJKoZI hvcNAQELBQADggEBADp5mULbAD35z2djk6qXYcfhksjrKZpUFRoKKcwHgdFG8mOr 411R7w9lbKeqZbNAx/R3mVOFnfWadajmnd8FTDAaHFUbldSU83H4+W8Fzd+E3kvW Ar8aRu3ko+d5JZFOkPlKzyZMXEBNfWSDsMfaSHDIou1li43PipbqnFi+eAPvSRuf Rh1uGdr1m+wo1c+EuWiA1p+qfNQaePUkOB4nGWttg4+eSwcUBSFO8nfPR65tBxtD 5E/TP2ekT2LdBQJco1rg/2yE/JOysrWvJF/SNlWwuUbO1W5M5U505fV/pcipZDMi 8eIsEh6lLkE4mR1zdHQpsWDV0WKrJm8XcDflW5s= -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:54 2025 by rpki-client