$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/5DB5AFEE635C11ECB7C65C23C4F9AE02.roa File: 5DB5AFEE635C11ECB7C65C23C4F9AE02.roa (raw, json) Hash identifier: ZASmtlmvUHGE1HGhcQSQsz+Y4m88fTiUKIlWzdcPUk4= Subject key identifier: 10:74:EC:32:CA:DA:5C:FB:26:BE:1F:5C:15:FD:0F:CD:DC:F4:2E:33 Certificate issuer: /CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Certificate serial: 03E3 Authority key identifier: FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/5DB5AFEE635C11ECB7C65C23C4F9AE02.roa Signing time: Fri 03 Jan 2025 00:24:02 +0000 ROA not before: Fri 03 Jan 2025 00:24:02 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 149303 IP address blocks: 103.178.70.0/23 maxlen: 23 103.178.70.0/24 maxlen: 24 103.178.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 995 (0x3e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30C0, serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Validity Not Before: Jan 3 00:24:02 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67772e21-d1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:55:2e:e5:7f:28:46:4d:f5:af:b4:e7:0d:b5: 3f:3f:c5:f3:e5:dd:b9:88:7f:e3:a2:eb:31:d3:6e: b0:3b:da:65:3b:13:ca:3c:f0:d2:be:2d:e1:d1:6a: 57:05:fe:0e:93:e1:4a:59:ce:d1:5d:6e:93:4b:d0: 9e:2a:c2:97:4d:c2:d7:03:3e:07:43:a8:db:9a:a7: b8:cc:89:80:e2:99:90:e8:01:ff:5b:4e:6c:a5:1b: 7b:3f:27:c7:d0:2e:7e:5f:74:02:37:52:cd:7e:25: 86:fe:b8:f3:61:38:81:26:4f:57:8b:ec:9d:2b:5e: 3d:80:f7:d4:58:91:f4:ac:7f:4e:5b:25:27:ff:e1: 45:12:ec:b1:81:84:dd:19:37:66:41:1f:77:44:64: 71:9f:6d:48:07:02:0e:44:89:4d:12:b8:76:d6:0b: 78:c8:55:cf:ce:d1:07:27:11:8d:15:89:3d:a4:ec: ec:db:64:5c:dd:0e:75:90:60:b6:b4:41:e9:7c:84: 87:5c:25:f6:1d:ba:e3:9b:57:5c:92:29:28:09:73: 02:a6:4d:5b:7b:62:c8:80:9f:03:7f:ea:5f:2e:22: 44:ba:84:e2:64:40:ff:39:26:12:40:76:bc:2f:2b: 07:26:4a:8f:92:43:13:12:8f:40:39:9b:b9:7b:ea: aa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:74:EC:32:CA:DA:5C:FB:26:BE:1F:5C:15:FD:0F:CD:DC:F4:2E:33 X509v3 Authority Key Identifier: keyid:FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/5DB5AFEE635C11ECB7C65C23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.178.70.0/23 Signature Algorithm: sha256WithRSAEncryption 58:5c:b8:9c:64:17:84:aa:c9:da:a5:b1:6f:ec:d4:47:e4:21: 4b:47:3d:ba:af:8e:5d:ec:17:4a:3d:e8:bb:58:49:e8:21:58: 2b:db:cc:bf:93:11:41:f7:7d:8e:4f:38:c2:d8:4e:04:65:4c: b6:f9:27:2d:80:95:71:d6:c1:dd:4a:12:48:1c:ad:b7:fd:ad: cf:f0:63:f0:5e:bf:d4:5c:21:71:c6:0e:44:62:49:7f:ae:99: 30:f4:fe:2e:ba:74:b8:74:88:27:fd:2e:4b:de:ff:90:79:4d: 54:11:99:c0:0a:76:a9:51:0d:3c:91:a0:c9:79:a7:59:4c:5c: 4b:61:52:11:63:2c:35:42:a6:2e:9e:b1:18:f6:b1:7e:7b:d5: 80:f1:88:94:38:a8:42:54:10:9d:9f:f4:52:df:7e:06:a6:c6: 77:88:3c:fc:0f:26:39:1d:37:b9:05:67:b0:b2:4c:89:01:91: 3b:f2:b0:7b:f6:8e:bc:10:d3:d0:d8:d0:bb:05:36:09:a2:b1: 48:eb:39:ff:36:1c:b9:d4:dd:ae:06:d5:28:64:0f:7e:e4:20: cb:c8:b7:51:3d:cf:19:2c:7f:6c:09:60:f7:09:67:a7:1b:42: 51:f6:32:51:d5:b7:0b:44:69:bf:42:0f:f1:23:15:05:be:f2: af:52:14:42 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQzAxMTAvBgNVBAUTKEZFMTlFMjQ2RDdCRjBFMzZGMjFFMkE1NkI3QzlBRkI0 OUQ1OUQ2RDQwHhcNMjUwMTAzMDAyNDAyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc3MmUyMS1kMWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6FUu5X8oRk31r7TnDbU/P8Xz5d25iH/jousx026wO9plOxPKPPDSvi3h0WpX Bf4Ok+FKWc7RXW6TS9CeKsKXTcLXAz4HQ6jbmqe4zImA4pmQ6AH/W05spRt7PyfH 0C5+X3QCN1LNfiWG/rjzYTiBJk9Xi+ydK149gPfUWJH0rH9OWyUn/+FFEuyxgYTd GTdmQR93RGRxn21IBwIORIlNErh21gt4yFXPztEHJxGNFYk9pOzs22Rc3Q51kGC2 tEHpfISHXCX2Hbrjm1dckikoCXMCpk1be2LIgJ8Df+pfLiJEuoTiZED/OSYSQHa8 LysHJkqPkkMTEo9AOZu5e+qq3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBB07DLK 2lz7Jr4fXBX9D83c9C4zMB8GA1UdIwQYMBaAFP4Z4kbXvw428h4qVrfJr7SdWdbU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBDMC8zODdFODYzQzYz NTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0RqYnlIaXBXdDhtdnRKMVox dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obmlSdGVfRGpieUhpcFd0OG12dEoxWjF0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjMwQzAvMzg3RTg2M0M2MzU4MTFFQ0I4MkUzQjRDQzRGOUFFMDIvNURCNUFGRUU2 MzVDMTFFQ0I3QzY1QzIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnskYwDQYJKoZIhvcNAQELBQADggEBAFhcuJxkF4Sqydql sW/s1EfkIUtHPbqvjl3sF0o96LtYSeghWCvbzL+TEUH3fY5POMLYTgRlTLb5Jy2A lXHWwd1KEkgcrbf9rc/wY/Bev9RcIXHGDkRiSX+umTD0/i66dLh0iCf9Lkve/5B5 TVQRmcAKdqlRDTyRoMl5p1lMXEthUhFjLDVCpi6esRj2sX571YDxiJQ4qEJUEJ2f 9FLffgamxneIPPwPJjkdN7kFZ7CyTIkBkTvysHv2jrwQ09DY0LsFNgmisUjrOf82 HLnU3a4G1ShkD37kIMvIt1E9zxksf2wJYPcJZ6cbQlH2MlHVtwtEab9CD/EjFQW+ 8q9SFEI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:00:20 2025 by rpki-client