$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/66D00EB2449C11EE86105C41C4F9AE02.roa File: 66D00EB2449C11EE86105C41C4F9AE02.roa (raw, json) Hash identifier: sFUlSAs686BHpBPHFZ6jJXEM4AvroBrl/QL/VRc6YMo= Subject key identifier: 4D:10:51:93:DF:95:9F:81:07:FF:81:36:C0:8F:7D:38:10:6C:F8:FD Certificate issuer: /CN=A91FD64D/serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B Certificate serial: 0187 Authority key identifier: B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/66D00EB2449C11EE86105C41C4F9AE02.roa Signing time: Mon 03 Feb 2025 02:56:11 +0000 ROA not before: Mon 03 Feb 2025 02:56:11 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 150114 IP address blocks: 103.66.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD64D, serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B Validity Not Before: Feb 3 02:56:11 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a0304a-5956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:47:e8:90:2d:d4:cd:1a:35:9f:74:18:70:aa: 1a:d2:d9:7f:ae:27:fa:b0:fb:cd:6f:7b:c0:2d:49: fc:2b:1c:bb:49:ac:97:b1:6d:61:fc:87:de:61:80: 10:36:b4:04:b0:2d:cb:3b:dd:96:25:88:b2:b3:a5: 5a:ed:6e:5e:dc:18:bd:c2:b6:41:98:e1:d6:28:90: 1e:55:12:64:14:52:f1:66:2f:73:8b:54:36:cf:cb: a5:b8:92:2a:fe:d5:ab:de:bb:2f:7b:ad:af:92:04: 0e:2d:5f:53:f9:fd:18:b7:98:c5:6f:20:0e:8b:38: d7:a4:a8:a9:09:ec:ba:63:ed:93:62:a1:bd:17:97: ce:ec:b2:91:c2:bd:43:e3:81:a1:3c:46:4c:1b:53: 63:41:80:a7:07:52:7b:fc:1a:0d:01:d8:17:b5:76: a2:b8:96:4c:46:45:82:c4:c1:aa:eb:43:ab:09:d6: 33:50:22:c9:bc:a6:d1:a2:99:b8:35:f8:34:b2:59: c4:15:06:c5:cc:35:8b:37:5d:d8:9f:ee:07:be:07: cd:89:6e:60:c5:2a:de:88:2c:50:a5:88:23:b6:fc: 7e:52:1a:39:b6:87:51:27:98:9f:49:6f:ce:22:0c: c3:78:3b:b9:f3:90:02:3a:78:4f:d8:12:54:17:3a: 71:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:10:51:93:DF:95:9F:81:07:FF:81:36:C0:8F:7D:38:10:6C:F8:FD X509v3 Authority Key Identifier: keyid:B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/66D00EB2449C11EE86105C41C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.228.0/24 Signature Algorithm: sha256WithRSAEncryption c2:88:7a:7c:d4:3b:be:a8:f2:fd:ca:96:96:34:f6:09:72:01: 22:e0:00:14:2b:51:05:4b:97:e6:c5:cb:48:da:90:57:f7:83: 56:55:83:5f:f8:fc:b2:07:9e:71:b6:50:4f:20:4f:3d:cd:eb: e7:ac:9b:fd:6e:1e:f9:ab:67:bb:64:f2:d3:aa:4c:e9:b7:cc: 05:6e:b4:a2:ad:57:c7:1f:96:03:22:01:1f:66:26:50:c2:52: 4a:d7:51:ad:72:76:d0:06:dd:f5:31:2a:90:4b:a7:07:e7:d6: 6f:2c:a6:e3:63:3c:72:f2:be:19:43:7f:5d:48:85:21:07:0b: bc:05:c3:83:75:b4:8a:a1:44:69:34:57:0a:22:2b:df:cb:6b: 90:21:de:50:b0:74:ba:e2:ec:eb:4b:64:29:6f:41:94:c2:91: 6d:79:44:70:de:7b:90:0b:8e:fe:68:b0:c7:f4:85:16:48:ea: 44:82:2e:9b:39:10:da:7d:28:10:e6:cd:3c:0a:ab:d8:ef:4b: da:8e:1c:bd:be:12:de:7e:6b:a1:0e:52:e1:dd:48:1f:40:da: 43:96:ee:31:53:a4:3b:2a:cb:21:67:8d:aa:7b:4d:50:f7:ef: d4:83:85:20:d5:6f:68:04:81:e5:fb:8d:2c:df:7a:77:e6:e9: 39:c7:1d:3e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2NEQxMTAvBgNVBAUTKEI0QjE4QTI1M0ZCNjI5MzQzNzExNjYzNUREREQxOTk0 MjhCNjhENUIwHhcNMjUwMjAzMDI1NjExWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EwMzA0YS01OTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEfokC3UzRo1n3QYcKoa0tl/rif6sPvNb3vALUn8Kxy7SayXsW1h/IfeYYAQ NrQEsC3LO92WJYiys6Va7W5e3Bi9wrZBmOHWKJAeVRJkFFLxZi9zi1Q2z8uluJIq /tWr3rsve62vkgQOLV9T+f0Yt5jFbyAOizjXpKipCey6Y+2TYqG9F5fO7LKRwr1D 44GhPEZMG1NjQYCnB1J7/BoNAdgXtXaiuJZMRkWCxMGq60OrCdYzUCLJvKbRopm4 Nfg0slnEFQbFzDWLN13Yn+4HvgfNiW5gxSreiCxQpYgjtvx+Uho5todRJ5ifSW/O IgzDeDu585ACOnhP2BJUFzpxVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFE0QUZPf lZ+BB/+BNsCPfTgQbPj9MB8GA1UdIwQYMBaAFLSxiiU/tik0NxFmNd3dGZQoto1b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDY0RC8zNzA3ODZDODk5 OTQxMUVEODU2NzMxMUZDNEY5QUUwMi90TEdLSlQtMktUUTNFV1kxM2QwWmxDaTJq VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMR0tKVC0yS1RRM0VXWTEzZDBabENpMmpWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkQ2NEQvMzcwNzg2Qzg5OTk0MTFFRDg1NjczMTFGQzRGOUFFMDIvNjZEMDBFQjI0 NDlDMTFFRTg2MTA1QzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnQuQwDQYJKoZIhvcNAQELBQADggEBAMKIenzUO76o8v3K lpY09glyASLgABQrUQVLl+bFy0jakFf3g1ZVg1/4/LIHnnG2UE8gTz3N6+esm/1u HvmrZ7tk8tOqTOm3zAVutKKtV8cflgMiAR9mJlDCUkrXUa1ydtAG3fUxKpBLpwfn 1m8spuNjPHLyvhlDf11IhSEHC7wFw4N1tIqhRGk0VwoiK9/La5Ah3lCwdLri7OtL ZClvQZTCkW15RHDee5ALjv5osMf0hRZI6kSCLps5ENp9KBDmzTwKq9jvS9qOHL2+ Et5+a6EOUuHdSB9A2kOW7jFTpDsqyyFnjap7TVD379SDhSDVb2gEgeX7jSzfenfm 6TnHHT4= -----END CERTIFICATE-----Generated at Sat Apr 26 07:01:52 2025 by rpki-client