$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/9584CC888FD611ECB5BAF00AC4F9AE02.roa File: 9584CC888FD611ECB5BAF00AC4F9AE02.roa (raw, json) Hash identifier: zOSU8HWzTX62npxk0Z0KI/TANc0CI5bXMVq+SzVjDCo= Subject key identifier: A2:D1:C2:A0:92:E9:3E:B7:4C:2C:FF:C7:9A:F4:E3:B6:9C:FA:27:3D Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0B5D Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/9584CC888FD611ECB5BAF00AC4F9AE02.roa Signing time: Sun 02 Mar 2025 20:08:06 +0000 ROA not before: Sun 02 Mar 2025 20:08:06 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 2519 IP address blocks: 43.249.240.0/22 maxlen: 22 43.250.88.0/22 maxlen: 22 103.26.164.0/22 maxlen: 22 103.197.208.0/22 maxlen: 22 103.240.20.0/22 maxlen: 22 160.20.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2909 (0xb5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402 Validity Not Before: Mar 2 20:08:06 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c4baa5-67a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:78:00:f5:14:85:57:47:41:4b:d8:99:08: 91:08:3d:ed:00:44:00:3a:a6:16:1b:91:1e:8a:2b: c2:5f:ae:2b:38:5f:08:7e:88:03:46:21:84:78:4d: ba:04:09:c5:e0:68:42:95:22:30:9f:e4:76:87:43: 8e:11:a9:04:bf:1b:85:ee:eb:20:bf:72:95:b9:37: 07:b8:44:04:51:b8:dd:57:1b:2b:18:db:42:05:cf: 27:f3:81:2b:3b:e5:e4:82:e0:4e:77:50:51:74:4a: 40:94:a2:a2:56:2a:2b:99:1a:e7:20:34:18:04:90: c4:d1:c0:50:0f:f9:73:af:f7:fc:5e:cf:32:c1:bc: 11:d0:ec:66:28:89:77:4b:4c:c4:af:00:08:81:05: 3e:74:31:2b:b0:7e:29:a6:56:b3:7a:44:07:10:60: c9:f1:51:b5:96:b4:44:cb:14:44:9f:73:18:5a:51: f2:3c:7c:db:2e:e3:66:45:61:0d:2f:91:a9:5d:9c: f1:74:7b:66:12:1b:fa:3e:c5:72:df:68:9d:0b:fe: 95:a4:8b:1f:e6:7c:c3:68:42:d5:12:a6:ae:89:fa: d7:a7:f9:71:c7:52:4e:43:da:75:86:e9:d6:fa:d1: 1c:7e:e1:ff:07:04:3e:eb:9a:7c:48:97:fc:2b:79: 04:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D1:C2:A0:92:E9:3E:B7:4C:2C:FF:C7:9A:F4:E3:B6:9C:FA:27:3D X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/9584CC888FD611ECB5BAF00AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.240.0/22 43.250.88.0/22 103.26.164.0/22 103.197.208.0/22 103.240.20.0/22 160.20.44.0/22 Signature Algorithm: sha256WithRSAEncryption b0:3d:01:21:45:c0:c7:fd:a3:74:0d:bb:62:f9:a6:82:3f:8e: f2:03:70:8f:a4:f5:0f:7c:6b:46:a9:dd:83:19:d6:73:2f:19: 16:14:86:9d:14:d2:ca:08:a0:cc:aa:08:59:d2:4c:77:c0:3a: 77:9e:03:a4:46:37:96:00:a2:70:ab:c4:20:1e:a3:d5:b8:81: f6:c1:f8:d7:8a:e4:d4:bf:1c:0e:27:5d:a9:17:18:f3:5c:2d: fe:e3:91:ec:ee:df:9a:70:f0:be:04:17:55:cc:15:81:56:a0: 2e:d4:5a:5c:d2:a0:2c:0a:5e:b2:c3:9d:ee:11:f8:e5:7a:b8: fc:a6:fe:d9:34:56:12:84:6b:b5:06:8c:5f:94:e9:07:8f:70: 55:b1:a4:3e:78:b4:94:36:1e:9d:cc:b8:96:28:41:59:09:16: e3:80:f0:b0:8c:68:d3:89:30:fa:06:35:7a:29:7c:d8:1c:13: d1:f4:25:19:6b:da:10:05:b9:1b:df:30:34:c5:b1:bc:4b:18: db:13:cb:be:3a:db:ea:a2:ff:66:37:79:9d:45:a8:d8:8a:f4: 04:91:f5:94:e2:ec:a9:c4:eb:da:e8:fd:b0:bc:f8:9b:b0:07: d5:61:c3:8d:94:73:b9:9e:e0:86:d2:2f:d5:88:bc:e1:69:b6: 66:8f:d2:a1 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICC10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwMzAyMjAwODA2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2M0YmFhNS02N2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkx4APUUhVdHQUvYmQiRCD3tAEQAOqYWG5EeiivCX64rOF8IfogDRiGEeE26 BAnF4GhClSIwn+R2h0OOEakEvxuF7usgv3KVuTcHuEQEUbjdVxsrGNtCBc8n84Er O+XkguBOd1BRdEpAlKKiViormRrnIDQYBJDE0cBQD/lzr/f8Xs8ywbwR0OxmKIl3 S0zErwAIgQU+dDErsH4pplazekQHEGDJ8VG1lrREyxREn3MYWlHyPHzbLuNmRWEN L5GpXZzxdHtmEhv6PsVy32idC/6VpIsf5nzDaELVEqauifrXp/lxx1JOQ9p1hunW +tEcfuH/BwQ+65p8SJf8K3kE6QIDAQABo4ICszCCAq8wHQYDVR0OBBYEFKLRwqCS 6T63TCz/x5r047ac+ic9MB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvOTU4NENDODg4 RkQ2MTFFQ0I1QkFGMDBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAIr+fADBAIr+lgDBAJnGqQDBAJnxdADBAJn8BQDBAKgFCww DQYJKoZIhvcNAQELBQADggEBALA9ASFFwMf9o3QNu2L5poI/jvIDcI+k9Q98a0ap 3YMZ1nMvGRYUhp0U0soIoMyqCFnSTHfAOneeA6RGN5YAonCrxCAeo9W4gfbB+NeK 5NS/HA4nXakXGPNcLf7jkezu35pw8L4EF1XMFYFWoC7UWlzSoCwKXrLDne4R+OV6 uPym/tk0VhKEa7UGjF+U6QePcFWxpD54tJQ2Hp3MuJYoQVkJFuOA8LCMaNOJMPoG NXopfNgcE9H0JRlr2hAFuRvfMDTFsbxLGNsTy7462+qi/2Y3eZ1FqNiK9ASR9ZTi 7KnE69ro/bC8+JuwB9Vhw42Uc7me4IbSL9WIvOFptmaP0qE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:20:17 2025 by rpki-client