$ rpki-client -vvf rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/203FA37E750611ED95126872C4F9AE02.roa File: 203FA37E750611ED95126872C4F9AE02.roa (raw, json) Hash identifier: dipdNfnJaJs6s5CVnvO1Wlubse6AOUfgpacGaixKSoQ= Subject key identifier: C9:CD:90:40:E2:21:3E:42:9B:A4:62:A3:83:91:B7:4C:F2:05:36:15 Certificate issuer: /CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Certificate serial: 0185 Authority key identifier: 90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/203FA37E750611ED95126872C4F9AE02.roa Signing time: Mon 23 Dec 2024 02:18:08 +0000 ROA not before: Mon 23 Dec 2024 02:18:08 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 150438 IP address blocks: 103.99.187.0/24 maxlen: 24 2001:df1:91c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 02:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A014A, serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Validity Not Before: Dec 23 02:18:08 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6768c860-3fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:78:07:77:be:b7:a9:19:bf:b1:54:3a:25:49: ea:91:f2:71:c7:53:e5:24:28:63:fa:d2:eb:e7:22: 6b:39:1d:92:25:75:bd:80:4b:28:20:2f:c5:00:f5: e5:4c:7f:5f:32:3d:75:10:f8:f5:b3:89:4a:ee:23: 00:19:1d:51:4c:bc:98:1a:f9:81:a9:b2:3f:ae:e7: 86:0e:ac:b1:a3:ad:1c:56:3c:bd:1c:a1:23:6d:27: 64:a3:e3:c2:28:6d:4c:34:65:6e:54:e5:db:47:62: 44:15:0a:9d:87:d0:9d:10:39:5b:d8:09:cf:5c:26: 3d:aa:ce:63:31:30:b3:3e:a8:67:74:c0:94:77:3a: a0:7b:61:c8:00:e2:fd:a1:47:3d:7b:87:d3:13:0c: b1:fe:84:95:c9:2a:d5:b9:e5:f9:6d:d7:a6:5c:81: aa:3d:a5:20:7e:95:15:8a:b2:75:d9:e7:74:5b:f6: 16:bb:52:10:73:f7:f3:10:03:37:4f:83:a9:1b:ab: 52:65:ad:7a:bf:00:94:8c:2b:bc:f8:aa:78:88:61: ef:97:aa:24:f9:00:4f:52:68:da:c5:09:7c:27:b7: 08:d4:07:02:75:78:ee:56:17:5d:d5:6f:34:3b:27: f9:f2:ab:9b:88:9d:25:8f:9b:1b:23:34:a9:0e:e3: e6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CD:90:40:E2:21:3E:42:9B:A4:62:A3:83:91:B7:4C:F2:05:36:15 X509v3 Authority Key Identifier: keyid:90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/203FA37E750611ED95126872C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.187.0/24 IPv6: 2001:df1:91c0::/48 Signature Algorithm: sha256WithRSAEncryption 87:8e:8d:00:d5:4c:d4:43:b8:9c:12:ed:46:2f:4f:26:64:b2: 10:81:9c:cd:fc:11:7f:87:91:78:2c:78:92:88:d1:dd:a7:1b: 7f:97:03:e9:1b:38:14:98:c4:14:79:ff:ef:3e:25:64:e1:68: 7d:0e:c2:1d:53:f7:f9:9d:b1:98:b1:a6:81:5c:c6:16:47:5c: 44:3f:d5:b0:32:b2:e6:80:42:b3:ee:5b:f5:b2:f7:f7:fd:f3: ae:70:43:e2:5f:e0:4f:96:e1:90:1b:f8:f2:e8:52:72:ed:6b: 0d:48:06:b3:a7:15:e1:3d:f2:77:ab:c8:9f:e1:ec:5a:38:54: be:47:38:65:66:06:62:5b:57:6c:a0:7f:e8:82:9a:fd:06:c6: ae:19:4b:e4:a2:42:7a:0a:d7:48:da:ea:04:8c:b3:c0:9f:fe: 54:9a:46:24:47:b1:39:f6:a6:5a:a1:73:db:e4:d7:ad:92:a4: ef:9e:bf:63:7c:ab:ff:47:03:3b:87:6c:76:72:a4:7c:b0:bc: 9e:10:f6:37:f0:ca:7e:66:38:27:b7:f1:73:2b:bc:9e:da:d7: b2:86:16:76:c7:08:ae:58:48:22:6c:8b:80:43:b2:f6:16:9a: ba:94:9e:33:73:e8:c7:71:99:b8:de:95:d5:55:d1:83:f4:de: 44:34:27:72 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAxNEExMTAvBgNVBAUTKDkwQkQxREYxM0E5OTFDMzFGMTE4NEQ1MTFBRjMwMzE2 RkMwMDIxMDIwHhcNMjQxMjIzMDIxODA4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY4Yzg2MC0zZmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33gHd763qRm/sVQ6JUnqkfJxx1PlJChj+tLr5yJrOR2SJXW9gEsoIC/FAPXl TH9fMj11EPj1s4lK7iMAGR1RTLyYGvmBqbI/rueGDqyxo60cVjy9HKEjbSdko+PC KG1MNGVuVOXbR2JEFQqdh9CdEDlb2AnPXCY9qs5jMTCzPqhndMCUdzqge2HIAOL9 oUc9e4fTEwyx/oSVySrVueX5bdemXIGqPaUgfpUVirJ12ed0W/YWu1IQc/fzEAM3 T4OpG6tSZa16vwCUjCu8+Kp4iGHvl6ok+QBPUmjaxQl8J7cI1AcCdXjuVhdd1W80 Oyf58qubiJ0lj5sbIzSpDuPmFwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMnNkEDi IT5Cm6Rio4ORt0zyBTYVMB8GA1UdIwQYMBaAFJC9HfE6mRwx8RhNURrzAxb8ACEC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDE0QS9DQzA3REFCNjc0 RkYxMUVEQUI5QzkwNzVDNEY5QUUwMi9rTDBkOFRxWkhESHhHRTFSR3ZNREZ2d0FJ UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMMGQ4VHFaSERIeEdFMVJHdk1ERnZ3QUlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTAxNEEvQ0MwN0RBQjY3NEZGMTFFREFCOUM5MDc1QzRGOUFFMDIvMjAzRkEzN0U3 NTA2MTFFRDk1MTI2ODcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnY7swDwQCAAIwCQMHACABDfGRwDANBgkqhkiG9w0BAQsF AAOCAQEAh46NANVM1EO4nBLtRi9PJmSyEIGczfwRf4eReCx4kojR3acbf5cD6Rs4 FJjEFHn/7z4lZOFofQ7CHVP3+Z2xmLGmgVzGFkdcRD/VsDKy5oBCs+5b9bL39/3z rnBD4l/gT5bhkBv48uhScu1rDUgGs6cV4T3yd6vIn+HsWjhUvkc4ZWYGYltXbKB/ 6IKa/QbGrhlL5KJCegrXSNrqBIyzwJ/+VJpGJEexOfamWqFz2+TXrZKk756/Y3yr /0cDO4dsdnKkfLC8nhD2N/DKfmY4J7fxcyu8ntrXsoYWdscIrlhIImyLgEOy9haa upSeM3Pox3GZuN6V1VXRg/TeRDQncg== -----END CERTIFICATE-----Generated at Tue Apr 22 00:13:34 2025 by rpki-client