$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CB6DF6D6F8E611EFA560FD72C4F9AE02.roa File: CB6DF6D6F8E611EFA560FD72C4F9AE02.roa (raw, json) Hash identifier: O8XunB9xq8CZpCQMtIrtL03/H+Du096QOmwZgdY/sTI= Subject key identifier: 82:EA:89:D8:BB:D7:58:3C:F6:11:DA:A9:54:62:01:8C:76:67:EA:C8 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 49F3 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CB6DF6D6F8E611EFA560FD72C4F9AE02.roa Signing time: Tue 04 Mar 2025 10:52:41 +0000 ROA not before: Tue 04 Mar 2025 10:52:41 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 63743 IP address blocks: 103.220.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18931 (0x49f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Mar 4 10:52:41 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67c6db79-3707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:5b:3a:41:61:76:74:5b:bd:41:0f:5f:fe: ac:d3:ed:69:e2:4e:15:17:e4:d9:4a:dc:5c:36:5e: b6:23:6b:67:d1:04:0d:1e:9e:aa:11:f9:38:2d:e5: 85:78:f7:c1:fc:36:15:6e:7d:22:7a:f9:f3:47:d9: 29:01:24:9b:06:f1:90:40:95:52:89:92:4d:ef:5b: 6c:8b:4c:5a:72:93:ea:a8:61:64:86:d4:e6:49:6d: f7:4d:7e:90:70:2c:c8:66:85:2d:63:c2:57:46:5f: 0b:aa:7c:54:82:87:2d:c2:f5:aa:a8:fc:7d:de:3d: 6c:74:34:4d:3a:0f:d7:51:5c:98:4e:e0:e6:4e:c4: 4c:b8:51:a1:60:a0:6c:d4:01:c5:fb:cb:32:96:8e: f9:5a:97:68:e6:99:fc:fe:a4:db:09:dc:7b:cc:71: ae:a4:09:13:c7:3e:2c:5b:f3:f9:f3:36:fd:1f:a6: 97:5d:69:6d:9c:f9:7b:c2:65:e1:84:5e:b3:3b:02: 04:69:8e:4e:34:1a:c3:ba:77:b6:25:22:51:88:3f: 14:32:83:12:8e:02:db:66:aa:a7:df:cc:27:bf:e2: ab:e2:24:83:31:b1:43:f3:97:14:42:5b:76:34:99: 5b:70:50:71:4c:1b:19:de:91:03:ad:48:46:ed:1b: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EA:89:D8:BB:D7:58:3C:F6:11:DA:A9:54:62:01:8C:76:67:EA:C8 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CB6DF6D6F8E611EFA560FD72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.220.84.0/22 Signature Algorithm: sha256WithRSAEncryption 71:0e:a0:b1:4b:4d:cd:1d:85:cd:41:89:f9:9a:02:17:3b:29: fb:41:f2:8d:4a:61:1f:d2:87:b8:2b:c1:d9:5b:51:5a:18:f0: 92:4d:28:3f:e9:f4:88:8f:b9:ef:9b:32:91:5e:48:4d:46:4f: 18:76:de:68:4e:89:36:fb:99:c7:8c:b1:49:c2:4e:2d:e2:83: fa:21:5e:da:0f:fd:ad:b2:59:ad:65:74:93:13:9f:15:d3:c8: a5:ec:7e:19:e5:c9:16:bc:12:b8:78:75:92:09:fe:a3:94:59: d9:eb:cf:4e:63:c8:cf:89:03:b0:77:c0:91:7c:f7:0f:f6:70: a0:b9:04:7c:94:f6:10:9b:0e:64:eb:a1:24:79:4c:0e:57:0c: 73:d0:35:44:79:49:5e:fd:99:cc:da:c1:16:91:8a:1a:16:dd: 32:78:9e:67:6c:07:13:f6:22:fd:5c:04:db:ad:dc:fa:35:21: ec:04:26:8a:71:76:a3:c0:ad:b7:d5:df:87:34:0e:1a:a2:65: ca:ca:28:c7:64:68:4f:42:32:fd:24:8a:0e:ca:b6:0e:64:ce: e9:3a:a9:df:de:1c:de:13:9c:b1:53:bf:0a:c4:d8:a2:66:de: 8e:d6:f1:fc:b6:48:a4:3a:e4:d7:38:09:96:bc:b8:65:7a:6f: dd:a1:f3:30 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICSfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwMzA0MTA1MjQxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M2ZGI3OS0zNzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRZbOkFhdnRbvUEPX/6s0+1p4k4VF+TZStxcNl62I2tn0QQNHp6qEfk4LeWF ePfB/DYVbn0ievnzR9kpASSbBvGQQJVSiZJN71tsi0xacpPqqGFkhtTmSW33TX6Q cCzIZoUtY8JXRl8LqnxUgoctwvWqqPx93j1sdDRNOg/XUVyYTuDmTsRMuFGhYKBs 1AHF+8sylo75Wpdo5pn8/qTbCdx7zHGupAkTxz4sW/P58zb9H6aXXWltnPl7wmXh hF6zOwIEaY5ONBrDune2JSJRiD8UMoMSjgLbZqqn38wnv+Kr4iSDMbFD85cUQlt2 NJlbcFBxTBsZ3pEDrUhG7RsDOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFILqidi7 11g89hHaqVRiAYx2Z+rIMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQ0I2REY2RDZG OEU2MTFFRkE1NjBGRDcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn3FQwDQYJKoZIhvcNAQELBQADggEBAHEOoLFLTc0dhc1B ifmaAhc7KftB8o1KYR/Sh7grwdlbUVoY8JJNKD/p9IiPue+bMpFeSE1GTxh23mhO iTb7mceMsUnCTi3ig/ohXtoP/a2yWa1ldJMTnxXTyKXsfhnlyRa8Erh4dZIJ/qOU Wdnrz05jyM+JA7B3wJF89w/2cKC5BHyU9hCbDmTroSR5TA5XDHPQNUR5SV79mcza wRaRihoW3TJ4nmdsBxP2Iv1cBNut3Po1IewEJopxdqPArbfV34c0DhqiZcrKKMdk aE9CMv0kig7Ktg5kzuk6qd/eHN4TnLFTvwrE2KJm3o7W8fy2SKQ65Nc4CZa8uGV6 b92h8zA= -----END CERTIFICATE-----Generated at Sat Apr 5 14:38:13 2025 by rpki-client