$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/AFB0F1260F5E11F0ABB59D3DC4F9AE02.roa File: AFB0F1260F5E11F0ABB59D3DC4F9AE02.roa (raw, json) Hash identifier: ueeASWxqMUHu0S3wy2+g0pOZi+SJaKSmN/goLQWG/nM= Subject key identifier: 36:C2:7D:C3:58:5B:9C:6A:FC:36:8A:39:14:3C:08:0D:24:EA:A5:78 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0B9F Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/AFB0F1260F5E11F0ABB59D3DC4F9AE02.roa Signing time: Wed 02 Apr 2025 01:06:20 +0000 ROA not before: Wed 02 Apr 2025 01:06:20 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 395793 IP address blocks: 103.12.52.0/24 maxlen: 24 103.248.148.0/24 maxlen: 24 103.248.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2975 (0xb9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402 Validity Not Before: Apr 2 01:06:20 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ec8d8b-59a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:80:45:3c:29:f3:e5:f2:d5:07:88:15:23:b0: a8:03:ec:74:ac:c3:ac:7d:77:f4:18:b9:af:fd:8b: eb:7a:da:bc:54:91:ab:b4:35:a3:8f:97:50:3c:86: 13:1c:e2:d2:29:af:df:c7:df:9d:5f:cd:ae:5f:54: e8:80:7a:c8:79:5d:d9:e8:00:87:0c:2e:8d:b6:a8: b8:74:34:39:05:a3:84:13:93:5a:ef:1a:9b:98:c8: ce:c2:5c:db:c1:b0:49:25:37:35:2a:a9:c2:77:a3: 3a:db:00:cf:c3:9f:bf:98:be:b6:01:d7:e1:3e:d0: f6:a8:52:4b:b3:e4:21:5d:04:53:24:b4:08:63:f7: 1c:37:d1:79:e5:3d:a5:f2:81:f8:0e:d9:43:ef:78: 30:8e:db:4f:cb:7e:34:87:ba:78:13:49:fd:77:02: 82:b3:29:2f:f4:27:c2:ee:43:29:ab:f1:6b:09:28: 8b:a1:de:b5:61:3a:33:4b:18:97:2a:ea:10:1d:e2: c7:83:eb:95:a3:5f:0a:0d:41:ff:02:48:24:67:9d: 20:ca:50:57:5a:87:cc:fb:a4:fe:53:65:28:28:93: ba:01:f4:98:45:ab:33:1f:f4:49:db:a5:33:33:7b: 50:2a:58:1f:61:b3:8e:f6:a1:ff:cf:85:02:d9:1a: 7a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C2:7D:C3:58:5B:9C:6A:FC:36:8A:39:14:3C:08:0D:24:EA:A5:78 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/AFB0F1260F5E11F0ABB59D3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.12.52.0/24 103.248.148.0/23 Signature Algorithm: sha256WithRSAEncryption 57:48:f4:b6:33:8c:60:5f:bb:74:ce:1c:4f:1b:f1:c7:90:8c: d1:09:f1:3d:2a:fb:4b:d9:51:21:03:0c:09:db:f5:a8:9b:33: 91:8b:f9:7d:3f:26:45:08:f9:93:99:f8:2f:ab:51:2a:3b:44: 31:56:57:f6:bb:4a:3b:d7:50:c0:5d:3e:90:f0:d3:d3:ec:c1: 0b:63:06:42:f1:9e:85:c6:73:30:a7:44:0b:eb:76:0f:fd:6a: 7c:8c:76:b9:78:f0:9d:7c:95:0c:f7:4e:91:85:b4:c2:5b:1e: 4b:65:87:47:41:43:2f:6a:fc:9b:47:7b:1b:fe:02:b9:74:80: ad:80:12:11:28:e0:f9:3c:86:22:8d:82:67:18:79:68:a0:8a: 4c:0e:7a:dd:c9:28:12:c0:71:d6:86:aa:1b:fc:32:d5:d0:c1: df:48:ab:26:06:33:4e:cd:45:97:3b:8a:73:d4:da:a5:56:3e: 47:82:b4:d2:a7:dc:11:c7:ea:ca:33:88:e4:7a:e7:25:b0:b1: d5:4c:1f:1d:34:b9:37:ee:0a:bf:b5:aa:96:19:9f:02:4a:d5: 9a:cf:0b:6a:c9:a4:df:64:71:e2:52:63:1a:e5:08:f4:53:7c: ac:23:bf:84:7f:9a:ac:0e:54:24:ef:32:70:4a:3f:fa:ff:86: 0f:41:a5:63 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICC58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwNDAyMDEwNjIwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2VjOGQ4Yi01OWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIBFPCnz5fLVB4gVI7CoA+x0rMOsfXf0GLmv/Yvretq8VJGrtDWjj5dQPIYT HOLSKa/fx9+dX82uX1TogHrIeV3Z6ACHDC6Ntqi4dDQ5BaOEE5Na7xqbmMjOwlzb wbBJJTc1KqnCd6M62wDPw5+/mL62AdfhPtD2qFJLs+QhXQRTJLQIY/ccN9F55T2l 8oH4DtlD73gwjttPy340h7p4E0n9dwKCsykv9CfC7kMpq/FrCSiLod61YTozSxiX KuoQHeLHg+uVo18KDUH/AkgkZ50gylBXWofM+6T+U2UoKJO6AfSYRaszH/RJ26Uz M3tQKlgfYbOO9qH/z4UC2Rp6sQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDbCfcNY W5xq/DaKORQ8CA0k6qV4MB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvQUZCMEYxMjYw RjVFMTFGMEFCQjU5RDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnDDQDBAFn+JQwDQYJKoZIhvcNAQELBQADggEBAFdI9LYz jGBfu3TOHE8b8ceQjNEJ8T0q+0vZUSEDDAnb9aibM5GL+X0/JkUI+ZOZ+C+rUSo7 RDFWV/a7SjvXUMBdPpDw09PswQtjBkLxnoXGczCnRAvrdg/9anyMdrl48J18lQz3 TpGFtMJbHktlh0dBQy9q/JtHexv+Arl0gK2AEhEo4Pk8hiKNgmcYeWigikwOet3J KBLAcdaGqhv8MtXQwd9IqyYGM07NRZc7inPU2qVWPkeCtNKn3BHH6soziOR65yWw sdVMHx00uTfuCr+1qpYZnwJK1ZrPC2rJpN9kceJSYxrlCPRTfKwjv4R/mqwOVCTv MnBKP/r/hg9BpWM= -----END CERTIFICATE-----Generated at Sat Apr 5 01:32:19 2025 by rpki-client