$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/99961F74315E11EC953A8215C4F9AE02.roa File: 99961F74315E11EC953A8215C4F9AE02.roa (raw, json) Hash identifier: OEZzXzknZfZ5+s266LCfZPiCa3g7F7GJ2hmeU6hbgO0= Subject key identifier: C9:C0:CB:23:26:E3:15:8D:D9:28:B5:E2:18:71:49:1E:2F:B4:CF:D9 Certificate issuer: /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Certificate serial: 0490 Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/99961F74315E11EC953A8215C4F9AE02.roa Signing time: Mon 03 Mar 2025 01:24:40 +0000 ROA not before: Mon 03 Mar 2025 01:24:40 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 141709 IP address blocks: 103.162.127.0/24 maxlen: 24 103.180.50.0/24 maxlen: 24 2400:aea0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1168 (0x490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3099, serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Validity Not Before: Mar 3 01:24:40 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c504d8-df69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:09:ae:98:13:77:60:83:78:6d:0b:43:b9:88: 6f:b9:d8:58:ec:e4:5d:b3:cc:43:65:73:84:cc:5d: 57:25:80:af:13:20:49:97:f9:5b:ef:92:fb:ce:4d: 0a:74:45:9e:d9:e8:ef:f6:b0:c5:ac:1f:01:ae:57: 26:3a:b7:d3:4c:4d:ed:47:82:55:22:b1:a8:da:b3: 78:43:fd:a5:8e:8a:16:14:07:af:b8:7b:37:00:6b: 63:3a:f1:99:20:e9:17:d6:3d:26:0d:a3:14:0b:12: be:61:02:06:3d:72:4d:17:7d:60:d7:ee:1e:ef:aa: 30:cf:70:1f:72:06:e4:6b:31:7c:bb:e9:36:e7:83: 82:5b:ba:17:bc:13:96:ea:e2:df:1a:1a:d8:1d:b4: 53:1a:6d:c3:a9:67:ed:65:78:3f:77:92:5b:f8:db: c9:1a:13:ce:10:7a:a4:7b:77:82:17:f2:b0:61:1e: 12:e4:2e:6b:11:47:dc:73:27:8f:bc:4e:9c:d7:ce: c6:5e:75:72:8c:a0:e1:1e:7e:4d:be:b2:1e:fe:3e: da:39:19:05:de:95:ea:33:4c:ca:d5:be:f4:2f:f4: ee:94:38:5f:40:b6:ec:3d:78:0b:c7:d4:ae:5a:df: 4a:54:9e:68:6b:07:19:df:55:a3:a0:d7:0e:4d:06: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C0:CB:23:26:E3:15:8D:D9:28:B5:E2:18:71:49:1E:2F:B4:CF:D9 X509v3 Authority Key Identifier: keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/99961F74315E11EC953A8215C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.127.0/24 103.180.50.0/24 IPv6: 2400:aea0::/32 Signature Algorithm: sha256WithRSAEncryption 80:fa:5e:67:4d:45:95:9b:03:c2:e2:e1:ba:53:35:f1:d3:c3: e7:78:1e:27:f5:5e:a8:a5:d3:8e:53:0a:71:b1:0a:47:d6:6e: 1e:76:e5:27:62:ad:96:49:d5:eb:58:eb:2b:73:45:a1:62:d1: 32:28:92:f4:3f:36:f3:38:da:7f:65:41:0f:57:47:f1:f9:ca: 3c:c7:07:68:48:5a:d4:54:87:e3:77:6c:c7:4a:52:ee:4d:cc: 82:67:54:9e:1b:cc:60:69:f1:9e:02:29:8f:21:28:f8:83:e2: 56:5e:50:4e:e7:56:81:a5:06:ac:c2:3c:e6:0a:af:d0:d2:cd: 91:98:d3:64:50:ff:03:3a:52:33:79:ce:a9:2b:37:86:6f:40: f8:73:83:04:44:09:50:7e:a4:34:9e:b6:cf:c1:17:5b:af:6a: 96:0d:4c:b7:ea:c5:51:ff:c8:40:5b:c6:45:58:89:81:30:ea: 90:39:10:10:46:f9:32:21:f4:61:e1:2c:1c:66:6b:6f:a7:dd: 85:9b:0c:e8:4d:ef:60:fb:e5:05:e8:c0:a5:86:58:f2:90:97: e9:53:33:14:ef:b6:f2:0f:7c:5f:cd:62:23:30:ca:1b:38:d6: 84:b4:86:88:17:2b:6c:17:46:fe:eb:59:76:f9:f9:31:fa:8c: 6b:7a:ab:c3 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwOTkxMTAvBgNVBAUTKEIwRjQ3QTY5NkFDRDc3Qzc0QTM0NzNDNENEMTcxREEz NzIxQ0VDRDAwHhcNMjUwMzAzMDEyNDQwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2M1MDRkOC1kZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AmumBN3YIN4bQtDuYhvudhY7ORds8xDZXOEzF1XJYCvEyBJl/lb75L7zk0K dEWe2ejv9rDFrB8BrlcmOrfTTE3tR4JVIrGo2rN4Q/2ljooWFAevuHs3AGtjOvGZ IOkX1j0mDaMUCxK+YQIGPXJNF31g1+4e76owz3AfcgbkazF8u+k254OCW7oXvBOW 6uLfGhrYHbRTGm3DqWftZXg/d5Jb+NvJGhPOEHqke3eCF/KwYR4S5C5rEUfccyeP vE6c187GXnVyjKDhHn5NvrIe/j7aORkF3pXqM0zK1b70L/TulDhfQLbsPXgLx9Su Wt9KVJ5oawcZ31WjoNcOTQZR3wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMnAyyMm 4xWN2Si14hhxSR4vtM/ZMB8GA1UdIwQYMBaAFLD0emlqzXfHSjRzxM0XHaNyHOzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA5OS9FQjRFRkJDNjMx NUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4ZEtOSFBFelJjZG8zSWM3 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NQUjZhV3JOZDhkS05IUEV6UmNkbzNJYzdOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjMwOTkvRUI0RUZCQzYzMTVDMTFFQ0E5QjczRDE1QzRGOUFFMDIvOTk5NjFGNzQz MTVFMTFFQzk1M0E4MjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnon8DBABntDIwDQQCAAIwBwMFACQArqAwDQYJKoZIhvcN AQELBQADggEBAID6XmdNRZWbA8Li4bpTNfHTw+d4Hif1Xqil045TCnGxCkfWbh52 5SdirZZJ1etY6ytzRaFi0TIokvQ/NvM42n9lQQ9XR/H5yjzHB2hIWtRUh+N3bMdK Uu5NzIJnVJ4bzGBp8Z4CKY8hKPiD4lZeUE7nVoGlBqzCPOYKr9DSzZGY02RQ/wM6 UjN5zqkrN4ZvQPhzgwRECVB+pDSets/BF1uvapYNTLfqxVH/yEBbxkVYiYEw6pA5 EBBG+TIh9GHhLBxma2+n3YWbDOhN72D75QXowKWGWPKQl+lTMxTvtvIPfF/NYiMw yhs41oS0hogXK2wXRv7rWXb5+TH6jGt6q8M= -----END CERTIFICATE-----Generated at Sat Apr 26 07:51:58 2025 by rpki-client