$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/0BF33B7C3A1B11EDAE662B14C4F9AE02.roa File: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (raw, json) Hash identifier: U57sQE5yclVx7OH+nAtAbjTBaki6Yvzg4fauYYq6XuI= Subject key identifier: 74:9D:55:C6:CF:08:48:01:E4:62:72:1A:20:C7:2E:FA:1A:15:7E:3E Certificate issuer: /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Certificate serial: 01F5 Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/0BF33B7C3A1B11EDAE662B14C4F9AE02.roa Signing time: Tue 01 Apr 2025 02:28:48 +0000 ROA not before: Tue 01 Apr 2025 02:28:48 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 24347 IP address blocks: 103.29.244.0/23 maxlen: 23 202.126.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Validity Not Before: Apr 1 02:28:48 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67eb4f60-b7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:ea:27:41:3c:9a:0e:56:5b:ce:69:b6:8f: e5:43:36:a0:dd:29:98:2b:bf:92:ba:8e:db:5b:1a: f9:69:29:b3:d2:de:36:1f:90:67:08:49:77:93:68: fe:89:cf:33:d4:47:31:1f:e8:59:72:26:14:0f:6f: 2b:04:e7:2a:e3:3f:ee:69:70:81:68:59:10:0a:24: 94:e5:56:da:9c:db:7e:5c:c1:de:55:2d:1a:2b:17: 5a:97:3c:83:47:72:9d:23:05:01:2e:8d:13:ea:6d: b3:84:da:bb:e3:fa:ba:50:fc:a9:99:f1:c2:16:da: 22:32:58:52:4a:67:ee:c7:14:b4:6a:c5:dd:7e:b0: 3a:55:72:b8:e3:6c:07:71:89:84:18:65:24:ce:00: 7a:73:89:e4:f1:04:a6:4b:0f:ee:8a:43:48:04:4e: 54:a3:6b:d8:3b:80:5f:42:79:07:84:cc:00:8a:8e: f4:4c:e0:a1:d2:af:ec:4b:78:1d:71:5c:26:30:c5: c2:28:ff:a7:da:d6:87:35:04:c2:c9:c1:fe:43:e4: c8:ec:51:51:dd:b3:47:f9:32:84:3b:c3:28:ad:86: df:81:fe:39:38:f6:c6:fb:fa:75:39:d4:b2:8e:d6: ac:c2:e0:65:d4:88:fa:57:f6:17:f0:e2:4e:c4:c8: 2d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9D:55:C6:CF:08:48:01:E4:62:72:1A:20:C7:2E:FA:1A:15:7E:3E X509v3 Authority Key Identifier: keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/0BF33B7C3A1B11EDAE662B14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.29.244.0/23 202.126.80.0/22 Signature Algorithm: sha256WithRSAEncryption 15:ca:e2:70:dc:7f:5f:d2:ea:54:1b:29:e0:60:19:6a:37:65: 3c:0c:07:af:a5:f1:10:36:4f:84:03:d8:ab:37:45:9e:60:4d: f2:59:63:a6:f3:3f:41:5b:44:62:87:ce:54:bd:7b:56:b3:91: e6:fa:13:dc:74:15:a2:89:69:dc:ab:41:56:cd:73:a5:9f:a0: e5:38:7e:bd:37:e3:fe:17:21:bd:a9:39:18:19:78:f1:ec:a1: 5f:4d:2e:28:86:c9:af:9d:18:65:5c:57:c1:ab:cc:dc:d9:3f: d4:ad:2a:01:0f:bb:85:ff:1b:a8:34:2d:27:94:7c:77:4c:21: 02:ff:df:94:f9:e6:89:d4:3e:d4:1b:7d:36:9e:f7:55:ff:6f: f5:25:c9:b7:13:2c:b2:e5:f1:74:47:ff:be:a4:2d:e7:a4:a2: f5:bb:ef:a2:1d:6b:7c:96:8e:96:e0:88:68:1b:85:8c:5f:73: 35:36:24:4a:6e:85:cf:55:de:43:8b:63:98:91:da:e8:27:8e: 19:ff:c6:55:16:35:ac:d9:eb:95:7b:f0:8c:26:22:4b:f1:22: 18:8e:6d:d6:db:0f:75:d4:65:eb:12:cf:72:5f:0d:51:10:60: 1c:00:8d:46:0a:97:64:a7:b5:22:78:5b:27:5c:3f:17:7a:16: 47:22:ae:68 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwM0ExMTAvBgNVBAUTKDhCNDZGQTExRUE2RUUyMzUwOTlFNDg0MzNDODI0OTdB MTk3QjlEN0MwHhcNMjUwNDAxMDIyODQ4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ViNGY2MC1iN2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMLqJ0E8mg5WW85pto/lQzag3SmYK7+Suo7bWxr5aSmz0t42H5BnCEl3k2j+ ic8z1EcxH+hZciYUD28rBOcq4z/uaXCBaFkQCiSU5VbanNt+XMHeVS0aKxdalzyD R3KdIwUBLo0T6m2zhNq74/q6UPypmfHCFtoiMlhSSmfuxxS0asXdfrA6VXK442wH cYmEGGUkzgB6c4nk8QSmSw/uikNIBE5Uo2vYO4BfQnkHhMwAio70TOCh0q/sS3gd cVwmMMXCKP+n2taHNQTCycH+Q+TI7FFR3bNH+TKEO8MorYbfgf45OPbG+/p1OdSy jtaswuBl1Ij6V/YX8OJOxMgttQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHSdVcbP CEgB5GJyGiDHLvoaFX4+MB8GA1UdIwQYMBaAFItG+hHqbuI1CZ5IQzyCSXoZe518 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjAzQS9ERkM2OEQ2NDNB MTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRqVUpua2hEUElKSmVobDdu WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kwYjZFZXB1NGpVSm5raERQSUpKZWhsN25Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkIwM0EvREZDNjhENjQzQTE2MTFFRDkxNTJCRjBFQzRGOUFFMDIvMEJGMzNCN0Mz QTFCMTFFREFFNjYyQjE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnHfQDBALKflAwDQYJKoZIhvcNAQELBQADggEBABXK4nDc f1/S6lQbKeBgGWo3ZTwMB6+l8RA2T4QD2Ks3RZ5gTfJZY6bzP0FbRGKHzlS9e1az keb6E9x0FaKJadyrQVbNc6WfoOU4fr034/4XIb2pORgZePHsoV9NLiiGya+dGGVc V8GrzNzZP9StKgEPu4X/G6g0LSeUfHdMIQL/35T55onUPtQbfTae91X/b/UlybcT LLLl8XRH/76kLeekovW776Ida3yWjpbgiGgbhYxfczU2JEpuhc9V3kOLY5iR2ugn jhn/xlUWNazZ65V78IwmIkvxIhiObdbbD3XUZesSz3JfDVEQYBwAjUYKl2SntSJ4 WydcPxd6Fkcirmg= -----END CERTIFICATE-----Generated at Sat Apr 26 15:17:48 2025 by rpki-client