$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/A5621F3480EA11EC9B13735BC4F9AE02.roa File: A5621F3480EA11EC9B13735BC4F9AE02.roa (raw, json) Hash identifier: 8vDL+87ujwmt0cTUprGHDVqUcQ7iOWe78XinpUQSTr4= Subject key identifier: FF:E0:5B:8F:36:CE:2F:69:1C:21:60:D6:33:20:11:DD:79:D4:20:10 Certificate issuer: /CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Certificate serial: 03CA Authority key identifier: 92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/A5621F3480EA11EC9B13735BC4F9AE02.roa Signing time: Sun 23 Mar 2025 11:53:12 +0000 ROA not before: Sun 23 Mar 2025 11:53:12 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 149480 IP address blocks: 103.180.206.0/24 maxlen: 24 103.180.207.0/24 maxlen: 24 2001:df0:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCFE, serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Validity Not Before: Mar 23 11:53:12 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67dff628-e6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:d3:c0:79:dd:e9:9b:1b:6e:fe:b9:12:9c: d5:ef:57:71:3a:68:5e:d0:c4:d8:6c:4b:00:5d:3c: 40:ad:d6:a7:69:56:d8:99:ee:ae:40:35:21:55:74: 9a:1f:56:29:10:f2:67:e6:da:37:63:c4:d1:d8:53: 20:1d:e6:aa:37:52:11:1c:2e:a2:51:a6:f2:62:4d: 9d:d4:73:cf:5c:03:ac:6a:be:8a:d9:33:4c:24:21: a9:40:3f:8a:6c:98:9e:c8:15:bf:c8:b2:ee:3a:22: b7:35:90:3b:54:09:9b:6f:2d:ee:04:92:ad:fc:07: 41:51:9b:74:41:83:1e:dd:8e:ee:91:51:4f:75:70: 47:2f:45:be:cb:74:e9:68:65:95:96:a0:f4:bf:61: b2:ea:cd:a5:71:7d:c3:67:a3:97:8e:a1:de:c3:8d: 68:37:55:bf:ce:39:62:89:14:e6:ea:ef:c9:56:d3: 89:63:ad:a3:e9:1d:d2:d9:78:97:e3:02:49:3e:76: c7:7d:45:45:5b:be:ec:60:2e:e9:80:7a:06:aa:48: 13:51:f8:8d:f1:34:3b:5c:28:6f:71:1c:ac:27:e3: 62:3b:b8:c1:ba:dd:ae:85:53:0c:57:83:3b:23:ff: 07:c9:e4:7b:20:08:41:af:eb:a6:0a:cf:9f:cf:83: 55:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E0:5B:8F:36:CE:2F:69:1C:21:60:D6:33:20:11:DD:79:D4:20:10 X509v3 Authority Key Identifier: keyid:92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/A5621F3480EA11EC9B13735BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.180.206.0/23 IPv6: 2001:df0:6040::/48 Signature Algorithm: sha256WithRSAEncryption a4:d6:74:24:e3:58:3f:04:2d:49:62:10:31:19:6c:05:9b:e5: a2:b3:35:0a:f1:61:f1:b7:b8:ae:52:57:a8:03:23:c2:3e:73: c4:51:9d:db:ad:64:2d:e9:61:01:2b:63:39:ad:e2:e8:e6:03: 99:7c:7d:22:c7:9b:14:0b:83:96:8f:de:2a:95:1a:21:3b:2f: d9:f2:90:23:10:90:49:53:a2:47:d5:95:b1:fb:e1:92:70:c7: 72:df:72:1b:1b:c4:d1:70:ae:2c:2a:20:81:a2:94:ee:7e:ce: 56:3f:9f:fe:b6:18:fd:76:be:ec:c1:5b:28:86:a8:34:19:62: 3f:04:3e:30:e1:2e:fd:08:5c:1d:05:40:bb:9b:b3:0c:e7:b1: 55:fb:e1:38:2d:62:2a:22:8d:90:9d:d8:95:e2:9f:54:04:80: 79:b7:6e:e0:4f:8a:a7:12:88:91:b3:8e:bb:5b:36:a6:3e:9c: c4:da:4b:48:d5:1b:32:a0:30:89:9b:22:8e:75:77:58:d5:57: ef:da:c0:f7:c1:65:4a:fc:f5:61:d0:c5:3a:d2:5d:ea:fb:92: 9d:4b:c5:d5:f1:35:26:03:f8:8b:ff:b7:84:bf:a7:e3:63:74: 4a:6c:c7:0f:7e:4f:58:f3:81:e5:13:99:67:8d:5a:7a:86:a5: d6:f4:0d:02 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRkUxMTAvBgNVBAUTKDkyQUM0RkJFMTcwRUE5REY4OUYwQzgzMThDM0NENDVG OTNBNTIzMzQwHhcNMjUwMzIzMTE1MzEyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RmZjYyOC1lNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsF7TwHnd6Zsbbv65EpzV71dxOmhe0MTYbEsAXTxArdanaVbYme6uQDUhVXSa H1YpEPJn5to3Y8TR2FMgHeaqN1IRHC6iUabyYk2d1HPPXAOsar6K2TNMJCGpQD+K bJieyBW/yLLuOiK3NZA7VAmbby3uBJKt/AdBUZt0QYMe3Y7ukVFPdXBHL0W+y3Tp aGWVlqD0v2Gy6s2lcX3DZ6OXjqHew41oN1W/zjliiRTm6u/JVtOJY62j6R3S2XiX 4wJJPnbHfUVFW77sYC7pgHoGqkgTUfiN8TQ7XChvcRysJ+NiO7jBut2uhVMMV4M7 I/8HyeR7IAhBr+umCs+fz4NV+QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFP/gW482 zi9pHCFg1jMgEd151CAQMB8GA1UdIwQYMBaAFJKsT74XDqnfifDIMYw81F+TpSM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGRS85NjUwNUIyNDgw RTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3FkLUo4TWd4akR6VVg1T2xJ elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2txeFB2aGNPcWQtSjhNZ3hqRHpVWDVPbEl6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRDRkUvOTY1MDVCMjQ4MEU0MTFFQ0I5MkRDQjREQzRGOUFFMDIvQTU2MjFGMzQ4 MEVBMTFFQzlCMTM3MzVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFntM4wDwQCAAIwCQMHACABDfBgQDANBgkqhkiG9w0BAQsF AAOCAQEApNZ0JONYPwQtSWIQMRlsBZvlorM1CvFh8be4rlJXqAMjwj5zxFGd261k LelhAStjOa3i6OYDmXx9IsebFAuDlo/eKpUaITsv2fKQIxCQSVOiR9WVsfvhknDH ct9yGxvE0XCuLCoggaKU7n7OVj+f/rYY/Xa+7MFbKIaoNBliPwQ+MOEu/QhcHQVA u5uzDOexVfvhOC1iKiKNkJ3YleKfVASAebdu4E+KpxKIkbOOu1s2pj6cxNpLSNUb MqAwiZsijnV3WNVX79rA98FlSvz1YdDFOtJd6vuSnUvF1fE1JgP4i/+3hL+n42N0 SmzHD35PWPOB5ROZZ41aeoal1vQNAg== -----END CERTIFICATE-----Generated at Sat Apr 26 07:45:21 2025 by rpki-client