$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa File: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (raw, json) Hash identifier: BIPMm9ibDgvfx7NU935+UV2sEA5f17RgI+qcbtg58kw= Subject key identifier: 3C:FD:61:81:6D:1D:2D:DD:80:B0:66:5C:0F:3A:03:43:09:33:61:FB Certificate issuer: /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082 Certificate serial: 0418 Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa Signing time: Thu 09 Jan 2025 00:14:32 +0000 ROA not before: Thu 09 Jan 2025 00:14:32 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 55501 IP address blocks: 103.178.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1048 (0x418) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082 Validity Not Before: Jan 9 00:14:32 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=677f14e8-cf78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d2:7f:d9:18:80:bb:74:4e:1c:f9:09:f2:42: 2a:61:3d:ae:d2:69:e8:44:fb:fe:d6:33:53:5b:97: da:ba:ab:78:02:5c:c1:69:7c:94:de:32:83:e5:52: d2:d7:c9:87:4d:fe:8d:02:41:a3:84:dd:5e:36:7a: 73:29:72:2b:34:6c:a3:e9:46:f6:ee:eb:a0:8a:c8: ef:e5:80:68:96:3a:2b:58:6b:6f:32:62:f3:8a:5f: 7d:66:ba:18:f9:0f:de:16:ca:5a:da:85:09:5e:31: 96:e6:b0:3a:16:a0:b8:81:c0:43:21:4a:f2:1c:c9: eb:15:f0:5f:91:ae:87:7c:46:3e:3f:53:b3:f0:94: 87:de:c3:29:4e:a2:9a:78:12:d8:4b:f2:5c:2f:da: a4:8f:d0:e5:a2:05:84:c2:87:0c:14:6b:53:b0:4a: 0c:5a:c0:cb:87:98:aa:8f:76:60:a5:07:7c:ba:6b: 68:75:6f:9d:3c:10:03:4e:75:1c:fc:49:5c:1a:15: c1:16:f9:81:49:79:f1:f1:d4:79:36:d1:bf:9a:59: 8f:bc:c9:03:81:4d:13:6b:bd:19:2e:64:c8:05:04: ff:c2:d5:47:60:26:1e:81:be:7b:69:6e:d4:79:34: 67:05:e0:36:5c:39:2a:db:6d:9f:58:82:e4:68:7f: 42:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FD:61:81:6D:1D:2D:DD:80:B0:66:5C:0F:3A:03:43:09:33:61:FB X509v3 Authority Key Identifier: keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.178.26.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:7d:cc:7f:c8:64:93:9e:ae:0f:c7:c6:4c:5d:f3:07:22:8e: 11:b5:ac:6d:08:e6:b9:d0:cb:bf:43:42:81:10:60:01:b2:02: d5:d1:90:84:09:0c:c2:c5:29:71:5f:be:db:2d:9d:d7:de:25: b6:e7:db:f8:73:fe:d3:b1:12:d0:7a:85:68:e8:cc:61:8a:ac: b3:e7:f5:0d:c1:e0:3d:17:9d:93:15:c9:9a:0e:f2:4b:2e:8a: 71:39:0a:44:8a:5c:48:90:3b:1d:fe:9d:ab:e0:51:00:a6:25: 0d:ad:b0:18:34:02:7b:7c:77:92:5a:88:4e:86:16:c7:51:7b: 3f:47:5b:a6:81:ee:0e:05:4b:61:7f:f9:42:0d:b8:46:2c:f9: 9c:20:70:79:fe:da:05:16:b0:f7:c1:54:d2:43:40:a8:b6:f6: 6f:87:ca:2d:92:69:94:02:60:22:e7:19:f9:ee:f9:25:09:f1: 71:15:f7:fd:9e:fb:f6:ea:78:a7:36:23:c1:8c:28:36:cd:79: 20:b8:f5:d4:c0:e0:9f:56:ed:39:07:93:b0:07:7e:e4:55:62: 9d:bc:fb:25:87:7b:cc:b6:f6:af:37:32:fa:8e:f3:20:0a:be: 3e:12:f0:7e:56:b9:b1:8e:fc:e3:3d:dc:00:86:2e:0e:be:16: 87:f2:6f:47 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY0MjgxMTAvBgNVBAUTKEJFODUyQThCM0I3RUE1QzVBQzVBNTJBQUNCODUyQTAx QTRDREQwODIwHhcNMjUwMTA5MDAxNDMyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdmMTRlOC1jZjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9J/2RiAu3ROHPkJ8kIqYT2u0mnoRPv+1jNTW5fauqt4AlzBaXyU3jKD5VLS 18mHTf6NAkGjhN1eNnpzKXIrNGyj6Ub27uugisjv5YBoljorWGtvMmLzil99ZroY +Q/eFspa2oUJXjGW5rA6FqC4gcBDIUryHMnrFfBfka6HfEY+P1Oz8JSH3sMpTqKa eBLYS/JcL9qkj9DlogWEwocMFGtTsEoMWsDLh5iqj3ZgpQd8umtodW+dPBADTnUc /ElcGhXBFvmBSXnx8dR5NtG/mlmPvMkDgU0Ta70ZLmTIBQT/wtVHYCYegb57aW7U eTRnBeA2XDkq222fWILkaH9CFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDz9YYFt HS3dgLBmXA86A0MJM2H7MB8GA1UdIwQYMBaAFL6FKos7fqXFrFpSqsuFKgGkzdCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjQyOC8zNUVCMTM0ODVE RDgxMUVDQjlCNEQ2MzBDNEY5QUUwMi92b1VxaXp0LXBjV3NXbEtxeTRVcUFhVE4w SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZvVXFpenQtcGNXc1dsS3F5NFVxQWFUTjBJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkY0MjgvMzVFQjEzNDg1REQ4MTFFQ0I5QjRENjMwQzRGOUFFMDIvMTRGNTVERUFC N0U2MTFFRjlCOUQ5RjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnshowDQYJKoZIhvcNAQELBQADggEBAD59zH/IZJOerg/H xkxd8wcijhG1rG0I5rnQy79DQoEQYAGyAtXRkIQJDMLFKXFfvtstndfeJbbn2/hz /tOxEtB6hWjozGGKrLPn9Q3B4D0XnZMVyZoO8ksuinE5CkSKXEiQOx3+navgUQCm JQ2tsBg0Ant8d5JaiE6GFsdRez9HW6aB7g4FS2F/+UINuEYs+ZwgcHn+2gUWsPfB VNJDQKi29m+Hyi2SaZQCYCLnGfnu+SUJ8XEV9/2e+/bqeKc2I8GMKDbNeSC49dTA 4J9W7TkHk7AHfuRVYp28+yWHe8y29q83MvqO8yAKvj4S8H5WubGO/OM93ACGLg6+ Fofyb0c= -----END CERTIFICATE-----Generated at Sat Apr 26 12:30:23 2025 by rpki-client