$ rpki-client -vvf rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/7564FD08603311EFA997483AC4F9AE02.roa File: 7564FD08603311EFA997483AC4F9AE02.roa (raw, json) Hash identifier: HFz/JkiJ7FywTlxdWS5kUZ1e9chUuimXs5JC+tbt340= Subject key identifier: 74:25:6F:19:28:13:A6:ED:BF:86:99:8D:D1:FF:52:63:06:D5:F2:BC Certificate issuer: /CN=A91A657F/serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Certificate serial: 76 Authority key identifier: 47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/7564FD08603311EFA997483AC4F9AE02.roa Signing time: Fri 28 Mar 2025 00:59:47 +0000 ROA not before: Fri 28 Mar 2025 00:59:47 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 138174 IP address blocks: 103.121.248.0/24 maxlen: 25 103.121.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A657F Validity Not Before: Mar 28 00:59:47 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67e5f483-b8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4f:da:ac:a5:26:08:e4:10:54:02:dd:6e:5e: d0:bd:b6:5f:ab:e4:29:dc:e1:5f:ed:a4:07:e6:97: 8f:6a:e3:f9:77:0a:8f:24:3f:eb:25:7d:55:a7:6e: e4:34:da:5e:43:60:af:b8:22:62:38:cf:5a:e2:1b: 51:b0:f1:77:5f:d9:c1:3b:ea:30:58:d1:a5:3c:f1: 19:f0:65:d2:86:e3:ed:f5:09:ff:56:6c:44:5d:bb: c7:29:c1:bf:3c:59:81:22:44:74:56:9a:6c:87:9c: 0e:b4:e2:8a:a2:a3:32:b1:66:f5:06:1d:f3:22:46: 88:fd:74:ea:c5:18:87:fb:09:fc:1a:fb:97:bb:4b: 79:e3:87:73:42:5e:66:f4:46:32:39:3c:e3:97:00: 96:1f:da:14:03:52:da:9e:36:ad:f6:89:2c:c9:c0: 7d:6b:c4:96:d1:b3:a4:0a:b2:8b:5e:f4:de:2f:95: 9d:35:0a:34:c6:fd:06:69:00:3f:13:a0:41:fb:38: 7a:08:a4:82:53:56:0b:6c:26:13:16:f8:2f:15:7b: 95:24:c6:fc:c3:9d:ac:2e:9c:76:64:be:f4:24:ff: 91:86:07:f0:88:0e:3c:48:79:2e:d1:f0:88:e2:b2: 0f:4f:1a:1e:67:8a:0e:5b:f9:b8:f5:97:71:b1:40: df:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:25:6F:19:28:13:A6:ED:BF:86:99:8D:D1:FF:52:63:06:D5:F2:BC X509v3 Authority Key Identifier: keyid:47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/7564FD08603311EFA997483AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.248.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:4c:59:d2:94:73:45:a2:36:af:a4:9a:88:fa:07:28:77:3c: e7:40:dd:7b:87:da:00:5c:15:8e:f7:18:d8:b6:6c:14:90:8b: 72:87:da:52:11:85:95:c7:b4:42:d6:b0:40:5a:89:a1:e0:8a: a8:01:8e:15:64:47:58:e5:29:02:c2:58:72:21:ed:b3:5d:aa: 9f:94:a1:7f:fd:8a:6d:26:da:8b:fb:48:64:8b:33:cb:83:79: 75:ba:67:36:df:59:aa:f8:f0:38:e0:96:b2:29:0a:58:20:9c: 32:c7:c0:0a:a7:92:65:cd:78:f3:fb:e3:1a:af:29:e7:4c:ea: 3d:1a:77:e1:80:0a:24:08:1a:fc:f6:79:4a:7b:96:7a:23:dc: 80:03:47:dc:8c:b6:6f:07:2c:e6:c8:30:07:8b:db:45:2d:19: ff:28:69:45:a2:58:b2:7d:b5:3f:c0:ef:96:35:38:9e:c3:e0: bd:d3:5b:78:d6:5a:5a:6b:ad:83:a0:b4:d4:5f:71:60:fb:d1: f2:27:9f:3c:7b:f1:24:b9:1a:f7:ea:f5:37:a5:09:41:c9:0c: 1a:a6:08:70:47:cf:39:7b:f0:15:79:ef:30:3c:b9:24:ff:d6: 8b:36:72:a7:fa:e6:ad:6d:fc:ad:a7:35:84:db:9a:8b:0e:0f: 9a:05:9d:e2 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NjU3RjExMC8GA1UEBRMoNDdGQUU2MzIyQzUxQjFERDAyMjQ5NzZGN0ExRDJCOTIy NkQwOTBFQTAeFw0yNTAzMjgwMDU5NDdaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZTVmNDgzLWI4ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBT9qspSYI5BBUAt1uXtC9tl+r5Cnc4V/tpAfml49q4/l3Co8kP+slfVWnbuQ0 2l5DYK+4ImI4z1riG1Gw8Xdf2cE76jBY0aU88RnwZdKG4+31Cf9WbERdu8cpwb88 WYEiRHRWmmyHnA604oqiozKxZvUGHfMiRoj9dOrFGIf7Cfwa+5e7S3njh3NCXmb0 RjI5POOXAJYf2hQDUtqeNq32iSzJwH1rxJbRs6QKsote9N4vlZ01CjTG/QZpAD8T oEH7OHoIpIJTVgtsJhMW+C8Ve5UkxvzDnawunHZkvvQk/5GGB/CIDjxIeS7R8Iji sg9PGh5nig5b+bj1l3GxQN+hAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUdCVvGSgT pu2/hpmN0f9SYwbV8rwwHwYDVR0jBBgwFoAUR/rmMixRsd0CJJdveh0rkibQkOow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2NTdGL0U5NEJDQzQ4NjAz MjExRUZBNUY4RUU3RUM0RjlBRTAyL1Jfcm1NaXhSc2QwQ0pKZHZlaDBya2liUWtP by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUl9ybU1peFJzZDBDSkpkdmVoMHJraWJRa09vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU3Ri9FOTRCQ0M0ODYwMzIxMUVGQTVGOEVFN0VDNEY5QUUwMi83NTY0RkQwODYw MzMxMUVGQTk5NzQ4M0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWd5+DANBgkqhkiG9w0BAQsFAAOCAQEAH0xZ0pRzRaI2r6Sa iPoHKHc850Dde4faAFwVjvcY2LZsFJCLcofaUhGFlce0QtawQFqJoeCKqAGOFWRH WOUpAsJYciHts12qn5Shf/2KbSbai/tIZIszy4N5dbpnNt9ZqvjwOOCWsikKWCCc MsfACqeSZc148/vjGq8p50zqPRp34YAKJAga/PZ5SnuWeiPcgANH3Iy2bwcs5sgw B4vbRS0Z/yhpRaJYsn21P8DvljU4nsPgvdNbeNZaWmutg6C01F9xYPvR8iefPHvx JLka9+r1N6UJQckMGqYIcEfPOXvwFXnvMDy5JP/WizZyp/rmrW38rac1hNuaiw4P mgWd4g== -----END CERTIFICATE-----Generated at Sat Apr 5 11:45:45 2025 by rpki-client