$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/E4E7B8DA4CF911EE8C66D25EC4F9AE02.roa File: E4E7B8DA4CF911EE8C66D25EC4F9AE02.roa (raw, json) Hash identifier: 2xtpmScXXaLyUbphY2NiLQaHgKtiSj0MTkzGmtZ4L+s= Subject key identifier: 15:B9:77:F1:D2:E2:88:36:62:87:D0:94:55:F7:88:8E:09:EC:7D:69 Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B Certificate serial: 06F7 Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/E4E7B8DA4CF911EE8C66D25EC4F9AE02.roa Signing time: Sat 08 Mar 2025 22:13:14 +0000 ROA not before: Sat 08 Mar 2025 22:13:14 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 55933 IP address blocks: 103.242.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1783 (0x6f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9665, serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B Validity Not Before: Mar 8 22:13:14 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ccc0fa-6eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7b:0e:3c:81:a2:cd:62:69:d1:e9:2a:7e:89: 73:79:97:fc:ee:89:d9:22:3c:3d:04:8b:25:1e:47: f1:4f:e4:fd:8d:48:98:ec:a7:5f:e4:49:b5:97:90: 74:66:74:3f:b7:62:74:de:2f:4a:27:e7:6a:b3:f3: cb:ee:95:e9:9e:9e:bf:8f:1b:32:55:be:57:12:42: a4:67:b0:ec:e5:39:70:50:b8:03:dd:21:59:4d:11: 53:bc:4d:73:6e:96:d2:3f:06:b6:24:5e:4e:43:53: 5a:7e:77:61:b9:a9:05:9c:5f:a7:58:73:c3:02:2b: 9c:2e:95:23:68:45:c9:af:69:b6:0e:53:50:8c:9c: 82:70:20:3b:c6:00:d1:43:4a:2a:5e:08:4e:fd:2e: d3:e7:36:b4:d0:32:8e:b5:91:30:bf:97:f9:b1:b7: 7b:5b:03:07:71:31:0c:91:f2:e8:46:19:7c:3d:c3: f4:31:f0:da:18:9d:87:d9:89:02:90:11:96:14:0a: 1c:df:8f:db:12:60:96:64:33:75:2a:5b:a9:25:c6: 92:d0:a9:fe:1b:81:fc:7e:38:62:c4:36:57:38:3e: ad:c3:91:fb:23:86:dd:10:0b:3f:7e:1f:9b:cc:c3: 36:46:91:b4:05:b0:c9:bc:e0:0e:79:23:04:92:1b: 70:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B9:77:F1:D2:E2:88:36:62:87:D0:94:55:F7:88:8E:09:EC:7D:69 X509v3 Authority Key Identifier: keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/E4E7B8DA4CF911EE8C66D25EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.242.0.0/22 Signature Algorithm: sha256WithRSAEncryption 04:62:33:c1:3c:12:ec:bb:df:7a:85:6f:a5:8a:82:69:ff:e0: 97:ca:2e:8c:4d:55:4f:04:23:ea:d9:be:07:b0:4f:56:af:15: 40:a0:d4:00:5a:3c:24:52:3d:83:e9:10:f1:bc:49:b1:9f:f9: 03:17:90:b2:a1:f1:39:7a:38:b5:ee:4a:c0:bd:69:e1:10:6a: ed:d7:68:3d:46:f3:9c:54:be:21:04:e7:6b:6f:c1:9e:59:9e: 44:1c:d5:56:b8:33:57:11:36:1c:c0:5f:26:bf:d6:1a:b1:2e: 38:98:50:15:b1:f2:7a:0a:3f:0f:2b:31:8a:de:0b:93:e3:4f: 1c:06:bc:9d:08:37:b7:a2:76:58:5e:3b:77:e3:f7:af:0a:c2: 3f:92:c0:ad:54:c6:46:5d:d8:60:58:14:d6:3f:b2:32:c1:88: 5d:d6:c2:af:93:06:3e:a2:2c:58:c9:7d:ff:bc:f0:41:bd:70: 38:99:0d:83:73:8f:26:3c:f8:41:e9:bc:53:a7:88:a8:c6:f2: 0b:2c:60:e1:d5:e3:3b:81:5e:5c:92:e8:c8:6b:62:9f:56:5f: 2b:37:24:c7:7a:da:38:da:a7:80:56:da:2a:e4:bf:3c:aa:a7: e0:00:5f:dc:13:c5:7a:52:9e:5f:c4:0c:64:84:ef:c5:be:d7: 53:98:a8:23 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2NjUxMTAvBgNVBAUTKDMwNThBNDY5QjY3RDAzMDcyQzJEOEEzODVFOUYyQUFC QkExMzRFMkIwHhcNMjUwMzA4MjIxMzE0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2NjYzBmYS02ZWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3sOPIGizWJp0ekqfolzeZf87onZIjw9BIslHkfxT+T9jUiY7Kdf5Em1l5B0 ZnQ/t2J03i9KJ+dqs/PL7pXpnp6/jxsyVb5XEkKkZ7Ds5TlwULgD3SFZTRFTvE1z bpbSPwa2JF5OQ1NafndhuakFnF+nWHPDAiucLpUjaEXJr2m2DlNQjJyCcCA7xgDR Q0oqXghO/S7T5za00DKOtZEwv5f5sbd7WwMHcTEMkfLoRhl8PcP0MfDaGJ2H2YkC kBGWFAoc34/bEmCWZDN1KlupJcaS0Kn+G4H8fjhixDZXOD6tw5H7I4bdEAs/fh+b zMM2RpG0BbDJvOAOeSMEkhtwaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBW5d/HS 4og2YofQlFX3iI4J7H1pMB8GA1UdIwQYMBaAFDBYpGm2fQMHLC2KOF6fKqu6E04r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTY2NS82RDBEMTJCODRC RjUxMUVCQkQ4M0I4N0JDNEY5QUUwMi9NRmlrYWJaOUF3Y3NMWW80WHA4cXE3b1RU aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01GaWthYlo5QXdjc0xZbzRYcDhxcTdvVFRpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjk2NjUvNkQwRDEyQjg0QkY1MTFFQkJEODNCODdCQzRGOUFFMDIvRTRFN0I4REE0 Q0Y5MTFFRThDNjZEMjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn8gAwDQYJKoZIhvcNAQELBQADggEBAARiM8E8Euy733qF b6WKgmn/4JfKLoxNVU8EI+rZvgewT1avFUCg1ABaPCRSPYPpEPG8SbGf+QMXkLKh 8Tl6OLXuSsC9aeEQau3XaD1G85xUviEE52tvwZ5ZnkQc1Va4M1cRNhzAXya/1hqx LjiYUBWx8noKPw8rMYreC5PjTxwGvJ0IN7eidlheO3fj968Kwj+SwK1UxkZd2GBY FNY/sjLBiF3Wwq+TBj6iLFjJff+88EG9cDiZDYNzjyY8+EHpvFOniKjG8gssYOHV 4zuBXlyS6MhrYp9WXys3JMd62jjap4BW2irkvzyqp+AAX9wTxXpSnl/EDGSE78W+ 11OYqCM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:48:00 2025 by rpki-client