$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/0D99319006F011EFA8C8D445C4F9AE02.roa File: 0D99319006F011EFA8C8D445C4F9AE02.roa (raw, json) Hash identifier: A4DVK+hVAcm077tOI0UtMRITW1ft4Rq073mjOE1b4lQ= Subject key identifier: 8A:F0:FD:0D:02:AD:D3:D6:7A:69:E0:FF:D2:FA:91:4E:0F:60:0E:84 Certificate issuer: /CN=A91F77AD/serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A Certificate serial: 0132 Authority key identifier: 7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/0D99319006F011EFA8C8D445C4F9AE02.roa Signing time: Wed 29 Jan 2025 03:07:17 +0000 ROA not before: Wed 29 Jan 2025 03:07:17 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 800 IP address blocks: 103.68.188.0/22 maxlen: 24 103.147.48.0/23 maxlen: 23 203.27.19.0/24 maxlen: 24 2405:a9c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77AD, serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A Validity Not Before: Jan 29 03:07:17 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67999b65-5c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:9a:90:da:ea:ec:fc:69:84:16:c9:99:6d: da:a9:54:2d:a7:a1:95:43:10:bb:53:c9:41:e6:53: dc:39:60:af:7a:25:c2:e0:84:9f:14:b4:73:1c:f2: f3:51:49:85:3d:9b:b2:2c:f8:c7:7d:f8:ec:64:38: 0d:56:24:11:8f:d3:68:a7:b3:0c:f5:cf:9d:21:a7: ef:89:d8:5b:e7:c2:a4:db:dd:e8:19:b9:2f:98:4c: b2:80:3b:8a:cf:ca:b1:04:c3:58:8b:d5:57:a3:7d: 22:87:d2:93:fd:c6:05:46:56:7b:46:ca:48:ec:b4: c3:6e:ff:0c:40:04:7f:24:79:21:c2:20:bd:56:bd: 85:e8:5e:5d:09:ac:13:11:39:4e:11:37:5e:63:b9: 4b:56:82:f7:13:50:ca:02:53:c3:17:f1:25:73:34: 2d:af:8d:b3:b3:b2:0e:20:eb:d0:22:a3:8f:22:da: 30:74:f3:fc:1e:b6:81:34:04:15:97:fc:20:c8:af: 95:cd:66:91:97:6d:bf:90:5b:f8:e9:06:5b:76:5d: a0:91:91:69:24:d2:43:71:3e:bf:dd:78:0e:d6:8b: fb:ff:59:bb:fb:0f:23:00:35:72:ce:07:4a:a6:23: 1b:72:02:2c:17:49:6e:12:98:61:74:2f:b2:1b:ed: bd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F0:FD:0D:02:AD:D3:D6:7A:69:E0:FF:D2:FA:91:4E:0F:60:0E:84 X509v3 Authority Key Identifier: keyid:7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/0D99319006F011EFA8C8D445C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.188.0/22 103.147.48.0/23 203.27.19.0/24 IPv6: 2405:a9c0::/32 Signature Algorithm: sha256WithRSAEncryption 78:e3:a2:26:82:cb:bd:f0:95:2f:55:ed:47:8d:60:55:75:4b: fb:03:4c:6a:47:7c:40:b5:3d:30:b3:ed:f7:20:ff:43:9a:26: ba:b0:9c:5d:a3:b0:b4:0d:b2:09:8e:79:bc:e9:07:f8:4b:9b: 87:d9:5d:b4:8f:49:b6:df:b4:8b:43:c4:36:fe:15:0d:44:78: 77:87:1e:5b:4f:4b:b1:b4:ab:d7:8e:14:63:c8:68:0a:7c:95: 5d:3e:6d:66:4a:25:a1:58:05:6f:f3:78:b5:d8:bb:5c:c6:9f: d9:3b:9e:d0:e2:f6:09:49:13:8e:49:9c:fa:eb:89:ca:06:65: 9a:d0:78:b3:57:8c:5d:cd:b5:ae:2c:fc:82:4d:26:cf:ee:29: ba:d8:4d:fb:04:f9:df:33:0a:9f:c0:a3:1e:c7:67:5a:03:6c: 38:59:05:5e:00:63:77:66:68:57:f2:76:5a:15:cf:55:e5:03: b8:90:b0:70:89:21:a3:80:04:23:5f:6d:56:08:46:db:58:4d: 28:e7:5a:69:4f:59:0d:91:86:70:01:16:b9:ed:01:2a:4d:e6: 25:df:e5:c3:e4:70:fe:80:af:05:36:13:51:0d:8a:37:d3:0a: f2:c3:cc:0d:38:ba:98:27:c5:f0:75:34:59:67:9f:2e:83:9b: 63:24:ff:78 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3QUQxMTAvBgNVBAUTKDdDOUY3MjIyOUVEMTEyNTk0Qzc3MjJEM0MyMUI1MTA1 RTI5RkM0OEEwHhcNMjUwMTI5MDMwNzE3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk5OWI2NS01YzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQqakNrq7PxphBbJmW3aqVQtp6GVQxC7U8lB5lPcOWCveiXC4ISfFLRzHPLz UUmFPZuyLPjHffjsZDgNViQRj9Nop7MM9c+dIafvidhb58Kk293oGbkvmEyygDuK z8qxBMNYi9VXo30ih9KT/cYFRlZ7RspI7LTDbv8MQAR/JHkhwiC9Vr2F6F5dCawT ETlOETdeY7lLVoL3E1DKAlPDF/ElczQtr42zs7IOIOvQIqOPItowdPP8HraBNAQV l/wgyK+VzWaRl22/kFv46QZbdl2gkZFpJNJDcT6/3XgO1ov7/1m7+w8jADVyzgdK piMbcgIsF0luEphhdC+yG+29AQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIrw/Q0C rdPWemng/9L6kU4PYA6EMB8GA1UdIwQYMBaAFHyfciKe0RJZTHci08IbUQXin8SK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdBRC9DRTZDMjM3QTIw QTgxMUVFOTg2MzdGMjNDNEY5QUUwMi9mSjl5SXA3UkVsbE1keUxUd2h0UkJlS2Z4 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZKOXlJcDdSRWxsTWR5TFR3aHRSQmVLZnhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjc3QUQvQ0U2QzIzN0EyMEE4MTFFRTk4NjM3RjIzQzRGOUFFMDIvMEQ5OTMxOTAw NkYwMTFFRkE4QzhENDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnRLwDBAFnkzADBADLGxMwDQQCAAIwBwMFACQFqcAwDQYJ KoZIhvcNAQELBQADggEBAHjjoiaCy73wlS9V7UeNYFV1S/sDTGpHfEC1PTCz7fcg /0OaJrqwnF2jsLQNsgmOebzpB/hLm4fZXbSPSbbftItDxDb+FQ1EeHeHHltPS7G0 q9eOFGPIaAp8lV0+bWZKJaFYBW/zeLXYu1zGn9k7ntDi9glJE45JnPrricoGZZrQ eLNXjF3Nta4s/IJNJs/uKbrYTfsE+d8zCp/Aox7HZ1oDbDhZBV4AY3dmaFfydloV z1XlA7iQsHCJIaOABCNfbVYIRttYTSjnWmlPWQ2RhnABFrntASpN5iXf5cPkcP6A rwU2E1ENijfTCvLDzA04upgnxfB1NFlnny6Dm2Mk/3g= -----END CERTIFICATE-----Generated at Sat Apr 26 05:39:40 2025 by rpki-client