$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/03F338DEEECB11EFBC2CA37CC4F9AE02.roa File: 03F338DEEECB11EFBC2CA37CC4F9AE02.roa (raw, json) Hash identifier: XGVlyFo9U9p/49OFD2ZCsixgzdIQ9xcMMDSg4fTQ2IM= Subject key identifier: A9:C0:BA:35:14:F7:DD:46:C1:61:A0:93:D2:B1:54:1F:F3:C0:41:2E Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 49A7 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/03F338DEEECB11EFBC2CA37CC4F9AE02.roa Signing time: Wed 19 Feb 2025 14:08:38 +0000 ROA not before: Wed 19 Feb 2025 14:08:38 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 63765 IP address blocks: 103.53.158.0/23 maxlen: 24 103.104.116.0/22 maxlen: 24 103.157.20.0/23 maxlen: 24 103.216.112.0/22 maxlen: 24 2001:df2:27c0::/48 maxlen: 48 2001:df3:2d00::/48 maxlen: 48 2400:e2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18855 (0x49a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Feb 19 14:08:38 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67b5e5e6-074f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:e9:cb:fc:fd:c5:0c:86:85:7a:f7:21:92: 2b:47:c2:9d:30:ee:62:b9:61:b8:43:a2:b1:3f:1a: c0:d1:2f:f6:c0:0e:aa:89:57:6a:d1:9e:2f:f4:cf: 1e:c7:ae:10:dd:fb:ba:45:14:78:57:88:87:4a:76: d6:2a:2d:af:57:e7:21:5d:08:39:7b:13:5d:ef:00: 9f:b5:f5:9d:b8:87:cc:ba:3e:55:24:22:a0:b7:11: 61:b9:60:19:25:0e:26:43:5c:97:fe:85:17:15:26: 35:30:4e:6a:e5:59:e0:c0:ec:97:ce:e8:1b:0c:66: 2d:d9:46:6a:6f:d2:9b:0e:38:71:47:78:7c:3d:48: 90:c0:3e:fc:0a:ef:99:2e:a8:62:4c:99:87:c8:b2: 57:70:a9:22:b7:f0:55:bb:5c:08:8c:12:44:24:a9: 2d:68:29:02:57:58:bf:84:d5:80:ce:0e:d9:16:5f: 59:fa:df:21:26:c2:72:7d:71:67:7e:f4:70:91:89: 30:ca:0e:ac:c7:0e:ac:7e:b7:36:b3:d8:f4:fe:ec: d5:91:49:91:76:cd:43:d0:aa:de:74:b2:55:bd:8b: 46:6e:56:d2:5d:a5:3f:f8:5e:1c:e2:42:1d:f6:10: a6:19:d8:ba:1f:4f:d4:b1:48:7e:6b:23:2b:20:90: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C0:BA:35:14:F7:DD:46:C1:61:A0:93:D2:B1:54:1F:F3:C0:41:2E X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/03F338DEEECB11EFBC2CA37CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.53.158.0/23 103.104.116.0/22 103.157.20.0/23 103.216.112.0/22 IPv6: 2001:df2:27c0::/48 2001:df3:2d00::/48 2400:e2c0::/48 Signature Algorithm: sha256WithRSAEncryption 1e:fb:c5:17:53:99:7f:ff:73:73:06:d4:3c:1b:b1:bd:91:88: 5e:b6:1e:74:56:7f:e0:71:1a:d7:41:e7:3e:27:58:e5:61:04: 53:72:32:8f:20:62:cc:c9:08:80:9d:4e:7f:02:fe:30:5a:b9: a8:7a:5a:29:42:6b:f5:06:8b:6c:40:08:1c:69:67:e7:91:9a: b3:bc:d2:17:27:4e:d7:9d:4d:1b:c0:bf:7c:cb:f8:9f:7f:5f: 5c:df:8e:31:5c:1c:11:c8:a4:5a:30:ca:a6:b8:e0:4f:9c:12: c0:33:f1:ba:de:23:68:58:3a:9e:ee:a7:d7:43:ff:f1:db:46: 37:6a:c9:fb:f7:5d:0e:07:df:38:36:d7:be:21:9d:2f:f3:1a: bc:9c:05:c5:1a:20:40:f1:1b:61:40:e3:6a:b0:b5:8c:df:79: c7:8e:f2:e4:03:f2:31:cf:98:a4:f9:f8:87:cc:51:b7:b6:19: cd:c0:bf:d9:7d:8e:96:0e:5a:ba:ac:ec:07:0d:d2:50:12:59: 23:2b:d5:c0:0f:36:e7:91:ae:57:73:18:9e:b0:99:84:7f:58: b8:a8:f2:71:8c:c1:d6:de:ea:d0:8f:75:34:11:00:7e:42:fa: d4:2f:0f:ca:1c:10:c8:c1:85:e1:c8:25:df:05:58:e5:e5:ad: f7:c9:69:3c -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgICSacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwMjE5MTQwODM4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I1ZTVlNi0wNzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ALpy/z9xQyGhXr3IZIrR8KdMO5iuWG4Q6KxPxrA0S/2wA6qiVdq0Z4v9M8e x64Q3fu6RRR4V4iHSnbWKi2vV+chXQg5exNd7wCftfWduIfMuj5VJCKgtxFhuWAZ JQ4mQ1yX/oUXFSY1ME5q5VngwOyXzugbDGYt2UZqb9KbDjhxR3h8PUiQwD78Cu+Z LqhiTJmHyLJXcKkit/BVu1wIjBJEJKktaCkCV1i/hNWAzg7ZFl9Z+t8hJsJyfXFn fvRwkYkwyg6sxw6sfrc2s9j0/uzVkUmRds1D0KredLJVvYtGblbSXaU/+F4c4kId 9hCmGdi6H0/UsUh+ayMrIJAl9QIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFKnAujUU 991GwWGgk9KxVB/zwEEuMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMDNGMzM4REVF RUNCMTFFRkJDMkNBMzdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVAYIKwYBBQUHAQcBAf8E RTBDMB4EAgABMBgDBAFnNZ4DBAJnaHQDBAFnnRQDBAJn2HAwIQQCAAIwGwMHACAB DfInwAMHACABDfMtAAMHACQA4sAAADANBgkqhkiG9w0BAQsFAAOCAQEAHvvFF1OZ f/9zcwbUPBuxvZGIXrYedFZ/4HEa10HnPidY5WEEU3IyjyBizMkIgJ1OfwL+MFq5 qHpaKUJr9QaLbEAIHGln55Gas7zSFydO151NG8C/fMv4n39fXN+OMVwcEcikWjDK prjgT5wSwDPxut4jaFg6nu6n10P/8dtGN2rJ+/ddDgffODbXviGdL/MavJwFxRog QPEbYUDjarC1jN95x47y5APyMc+YpPn4h8xRt7YZzcC/2X2Olg5auqzsBw3SUBJZ IyvVwA8255GuV3MYnrCZhH9YuKjycYzB1t7q0I91NBEAfkL61C8PyhwQyMGF4cgl 3wVY5eWt98lpPA== -----END CERTIFICATE-----Generated at Sat Apr 5 14:22:03 2025 by rpki-client