$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/FC72D9F4DAD711EF92A87E5DC4F9AE02.roa File: FC72D9F4DAD711EF92A87E5DC4F9AE02.roa (raw, json) Hash identifier: yGKY9bGf3KO/fBsHJXYZtjw1LcLqxRqFqjzenpN601A= Subject key identifier: D8:62:56:D8:B5:34:96:E3:D0:00:EC:0B:F4:66:53:7E:A9:C8:30:02 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: C1 Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/FC72D9F4DAD711EF92A87E5DC4F9AE02.roa Signing time: Fri 31 Jan 2025 04:19:52 +0000 ROA not before: Fri 31 Jan 2025 04:19:52 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 150696 IP address blocks: 103.230.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED Validity Not Before: Jan 31 04:19:52 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=679c4f68-960d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:17:cd:66:16:68:ed:2e:ec:ff:9a:c0:ca:56: 89:0f:bf:cf:8d:fb:b3:a7:43:87:4d:28:67:b4:b9: 10:de:fb:de:81:15:c4:4f:60:34:82:4e:11:73:e6: 89:6f:9a:4c:60:38:f8:bc:73:2c:a6:0a:41:9e:06: f3:fa:f1:1a:6f:5a:1e:3a:28:7c:0c:65:ea:72:dd: bd:cd:ed:19:0a:ac:95:d2:3b:55:86:57:ac:53:fc: 3e:76:b1:a4:05:9c:d3:b9:1d:00:df:0a:9b:83:47: da:0b:74:3e:67:db:60:4e:40:dd:9f:c8:76:d5:80: f8:f5:78:3d:98:bd:32:4b:ee:f0:7e:69:6f:d5:56: e1:8f:e7:cf:9d:23:2c:78:5d:cc:2b:87:37:e8:17: 3d:b1:be:64:32:81:68:59:89:96:9b:bd:57:2f:8c: cf:15:e7:8a:ae:8c:01:52:b8:3f:e6:b4:58:71:54: 7b:59:32:ca:67:d4:af:65:9a:71:7b:24:5e:a3:21: 9a:e3:8c:68:05:1c:89:71:44:4c:b4:3c:8c:35:69: 14:8a:9c:af:36:21:33:99:12:1b:d9:81:91:f0:a7: 08:91:94:ca:49:d8:78:32:75:ca:83:e2:20:33:66: cc:25:91:1a:cd:fa:62:67:a6:66:60:1d:c4:fa:3b: 19:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:62:56:D8:B5:34:96:E3:D0:00:EC:0B:F4:66:53:7E:A9:C8:30:02 X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/FC72D9F4DAD711EF92A87E5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.230.245.0/24 Signature Algorithm: sha256WithRSAEncryption 40:ee:e6:ee:cc:3e:d8:80:d8:c4:aa:2a:fe:6f:fe:25:50:3f: 61:08:22:89:6d:66:1e:9f:65:a3:e5:8b:10:07:76:04:92:e4: c0:a4:04:e8:06:da:fe:d4:b5:47:28:88:05:91:f3:76:eb:68: 1e:cc:43:66:5e:db:2a:2e:5c:ff:1f:03:c2:96:7a:bf:77:d5: a0:0a:40:14:bc:2c:20:44:15:30:28:bf:a0:a7:fb:e7:b5:60: 80:b5:06:52:0e:50:3a:a3:50:b9:80:27:44:89:c7:c0:e6:bc: f7:52:27:b0:75:3a:62:ac:48:85:4d:11:f3:b5:a7:8e:92:24: 27:67:e7:ce:f9:a9:1a:5c:f5:a1:92:bb:45:dd:df:b0:0a:06: cc:4c:50:f9:be:5a:91:50:a8:3a:e2:09:25:cc:79:2f:97:c8: 04:49:c5:a1:8b:aa:17:96:b0:b7:9e:d4:e5:9f:9e:16:4c:79: 67:78:93:c9:c8:dc:4d:56:cb:71:9d:c4:d1:2e:22:ad:22:4c: 25:5b:2e:8c:8d:b7:b5:7a:01:29:05:05:e8:00:8a:c8:f1:7d: 2c:61:a9:46:c3:bf:e6:40:bc:f2:58:22:0f:ed:61:15:09:7d: ba:4a:82:db:b3:7d:44:16:94:46:69:7c:ce:10:54:50:6a:00: df:cf:ed:46 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjUwMTMxMDQxOTUyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzljNGY2OC05NjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BfNZhZo7S7s/5rAylaJD7/Pjfuzp0OHTShntLkQ3vvegRXET2A0gk4Rc+aJ b5pMYDj4vHMspgpBngbz+vEab1oeOih8DGXqct29ze0ZCqyV0jtVhlesU/w+drGk BZzTuR0A3wqbg0faC3Q+Z9tgTkDdn8h21YD49Xg9mL0yS+7wfmlv1Vbhj+fPnSMs eF3MK4c36Bc9sb5kMoFoWYmWm71XL4zPFeeKrowBUrg/5rRYcVR7WTLKZ9SvZZpx eyReoyGa44xoBRyJcURMtDyMNWkUipyvNiEzmRIb2YGR8KcIkZTKSdh4MnXKg+Ig M2bMJZEazfpiZ6ZmYB3E+jsZLQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNhiVti1 NJbj0ADsC/RmU36pyDACMB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYzRUQvQjc2RTA2NjAxRDdBMTFFRUFEOUY4RTBDQzRGOUFFMDIvRkM3MkQ5RjRE QUQ3MTFFRjkyQTg3RTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn5vUwDQYJKoZIhvcNAQELBQADggEBAEDu5u7MPtiA2MSq Kv5v/iVQP2EIIoltZh6fZaPlixAHdgSS5MCkBOgG2v7UtUcoiAWR83braB7MQ2Ze 2youXP8fA8KWer931aAKQBS8LCBEFTAov6Cn++e1YIC1BlIOUDqjULmAJ0SJx8Dm vPdSJ7B1OmKsSIVNEfO1p46SJCdn5875qRpc9aGSu0Xd37AKBsxMUPm+WpFQqDri CSXMeS+XyARJxaGLqheWsLee1OWfnhZMeWd4k8nI3E1Wy3GdxNEuIq0iTCVbLoyN t7V6ASkFBegAisjxfSxhqUbDv+ZAvPJYIg/tYRUJfbpKgtuzfUQWlEZpfM4QVFBq AN/P7UY= -----END CERTIFICATE-----Generated at Sun Apr 6 22:00:54 2025 by rpki-client