$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/B966D678C0C611EE8F5F0458C4F9AE02.roa File: B966D678C0C611EE8F5F0458C4F9AE02.roa (raw, json) Hash identifier: J2faMLBlgt9GzAmsM2dSN7aVP9JzekH0nQNt2xO6dtk= Subject key identifier: E9:26:08:03:02:27:01:ED:B4:10:F4:8A:1A:6B:29:8D:F9:3B:B7:79 Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Certificate serial: 018B Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/B966D678C0C611EE8F5F0458C4F9AE02.roa Signing time: Fri 31 Jan 2025 03:19:37 +0000 ROA not before: Fri 31 Jan 2025 03:19:37 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 150715 IP address blocks: 103.66.230.0/23 maxlen: 23 103.66.230.0/24 maxlen: 24 103.66.231.0/24 maxlen: 24 2001:df1:ce40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 02:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91230B8, serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Validity Not Before: Jan 31 03:19:37 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=679c4149-6f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ee:86:07:d3:85:2a:92:58:f0:b7:13:44:66: 3a:f0:b9:2b:34:bd:92:ab:a8:6a:46:6c:50:64:5d: 42:cd:62:7c:b6:d0:0f:68:34:95:c1:3e:8d:7f:b3: 1b:bd:3c:98:d2:40:28:43:36:c7:df:5b:0d:b5:16: 61:2b:6d:c6:02:1f:fa:ce:65:1d:ae:34:23:9a:d3: 0e:94:e2:dc:7a:eb:4d:ab:16:98:b8:73:20:d0:70: ad:d8:0e:45:4a:f8:b0:cc:38:fc:e8:4c:d4:19:d2: 68:55:49:f0:82:7c:ec:a4:82:2d:85:66:ad:5b:72: a7:9b:ac:02:6d:74:59:83:cf:83:d7:1c:7a:83:5b: df:b9:49:9f:fe:cc:ad:2b:f1:9e:10:62:50:5c:fb: 7d:47:9e:b9:b1:13:ac:5a:62:b0:97:16:78:5f:5f: fa:f8:b2:19:01:85:22:a7:42:84:7b:a7:d3:6a:7b: 7d:40:2d:e5:f4:c3:92:2a:05:b8:cd:a3:c9:8b:6f: 47:37:26:90:a1:33:bf:2c:bd:5b:32:40:79:af:84: b6:b8:f3:48:20:f9:17:95:e5:b4:b4:13:c1:59:57: 0b:74:2c:c2:63:96:37:94:92:3b:c2:ad:8a:06:51: eb:ed:97:b2:ce:0b:b0:a7:61:66:3c:0a:86:95:0f: b4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:26:08:03:02:27:01:ED:B4:10:F4:8A:1A:6B:29:8D:F9:3B:B7:79 X509v3 Authority Key Identifier: keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/B966D678C0C611EE8F5F0458C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.230.0/23 IPv6: 2001:df1:ce40::/48 Signature Algorithm: sha256WithRSAEncryption 2f:45:e0:cc:ff:a6:63:13:fb:0b:5c:c6:b4:ab:4a:9d:30:af: 60:29:de:53:d8:56:bf:60:f7:40:ce:5c:24:c6:db:d5:df:e8: b5:ed:4f:65:d5:00:88:50:17:be:39:e7:c9:00:c3:d6:38:f2: b7:17:a1:3d:12:d8:d0:41:61:4a:c1:6e:c5:28:b2:e9:a1:df: 52:23:9b:1e:50:25:fe:51:df:f0:38:2d:6f:3d:29:82:1a:19: 36:a3:26:ce:b3:04:c9:8a:15:ae:4b:80:4d:bc:9a:d7:74:8e: f9:5a:b3:c8:62:68:2f:0b:1b:88:07:ad:28:8f:02:ac:48:ff: f9:5b:32:26:8f:af:00:8b:3b:d3:0f:80:b1:9b:c3:a8:32:bc: 64:96:af:5b:95:8a:a2:6f:c6:c8:3a:0c:3c:75:f2:d5:d1:b2: 3d:c2:55:1c:ee:66:97:07:21:55:50:ff:32:89:81:ef:7c:2b: a3:87:36:0a:80:99:0f:aa:9d:4c:06:be:8c:60:12:57:c9:b9: 0c:4a:3d:89:46:7e:5c:db:32:e8:1d:0b:fa:f5:37:55:4e:2d: cb:4f:9e:0f:52:78:4a:b0:44:4d:5e:10:ce:5f:09:f3:1d:0f: 3c:98:ee:8b:60:ed:1e:e5:3b:fc:5c:5b:35:88:29:61:5d:95: a7:51:22:60 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwQjgxMTAvBgNVBAUTKEZCQkFCNjkwQURGRTEwRUY0MzRCNzE4OTU0RjE3Mzg3 RDYzODQ2NjgwHhcNMjUwMTMxMDMxOTM3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzljNDE0OS02ZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlO6GB9OFKpJY8LcTRGY68LkrNL2Sq6hqRmxQZF1CzWJ8ttAPaDSVwT6Nf7Mb vTyY0kAoQzbH31sNtRZhK23GAh/6zmUdrjQjmtMOlOLceutNqxaYuHMg0HCt2A5F SviwzDj86EzUGdJoVUnwgnzspIIthWatW3Knm6wCbXRZg8+D1xx6g1vfuUmf/syt K/GeEGJQXPt9R565sROsWmKwlxZ4X1/6+LIZAYUip0KEe6fTant9QC3l9MOSKgW4 zaPJi29HNyaQoTO/LL1bMkB5r4S2uPNIIPkXleW0tBPBWVcLdCzCY5Y3lJI7wq2K BlHr7Zeyzguwp2FmPAqGlQ+0jwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOkmCAMC JwHttBD0ihprKY35O7d5MB8GA1UdIwQYMBaAFPu6tpCt/hDvQ0txiVTxc4fWOEZo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzBCOC9GMUY4OTBGMDk2 NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVPOURTM0dKVlBGemg5WTRS bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cTJrSzMtRU85RFMzR0pWUEZ6aDlZNFJtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjMwQjgvRjFGODkwRjA5NjU5MTFFRDhDQzc4QTYwQzRGOUFFMDIvQjk2NkQ2NzhD MEM2MTFFRThGNUYwNDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnQuYwDwQCAAIwCQMHACABDfHOQDANBgkqhkiG9w0BAQsF AAOCAQEAL0XgzP+mYxP7C1zGtKtKnTCvYCneU9hWv2D3QM5cJMbb1d/ote1PZdUA iFAXvjnnyQDD1jjytxehPRLY0EFhSsFuxSiy6aHfUiObHlAl/lHf8Dgtbz0pghoZ NqMmzrMEyYoVrkuATbya13SO+VqzyGJoLwsbiAetKI8CrEj/+VsyJo+vAIs70w+A sZvDqDK8ZJavW5WKom/GyDoMPHXy1dGyPcJVHO5mlwchVVD/MomB73wro4c2CoCZ D6qdTAa+jGASV8m5DEo9iUZ+XNsy6B0L+vU3VU4ty0+eD1J4SrBETV4Qzl8J8x0P PJjui2DtHuU7/FxbNYgpYV2Vp1EiYA== -----END CERTIFICATE-----Generated at Sun Apr 13 02:07:27 2025 by rpki-client