$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F4C73FCACD8411EF88CD1464C4F9AE02.roa File: F4C73FCACD8411EF88CD1464C4F9AE02.roa (raw, json) Hash identifier: PxDO4VTqkJE0qh5LgB+HtLTymtGod5Csv1yR3jaUe74= Subject key identifier: BB:BB:9C:59:6C:89:A5:B4:2A:0D:56:87:90:C2:45:69:A2:7B:46:D6 Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Certificate serial: 05A9 Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F4C73FCACD8411EF88CD1464C4F9AE02.roa Signing time: Wed 08 Jan 2025 05:54:00 +0000 ROA not before: Wed 08 Jan 2025 05:54:00 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 197537 IP address blocks: 103.97.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1449 (0x5a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7761 Validity Not Before: Jan 8 05:54:00 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=677e12f8-2b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3f:e2:21:24:66:53:78:e5:08:3d:17:a8:a3: 74:5c:4d:7d:08:62:8b:0f:25:15:94:8b:7b:ad:6a: b9:6a:ba:1e:ff:68:d6:63:f3:e0:b6:c2:af:26:b7: 97:07:40:ac:b8:65:a6:08:69:d0:ef:df:8b:62:b0: 69:4c:5f:74:44:79:b3:37:09:05:cb:91:f6:9a:b3: 20:0e:3d:c7:43:d9:58:92:52:1e:00:b2:fa:cc:ce: 1d:95:c1:9b:97:39:04:d7:14:4d:f8:c9:2a:ba:a5: 15:b8:52:d9:bd:98:91:ca:bd:05:fe:4f:fe:cd:f5: ba:fc:55:84:0d:39:ce:03:10:21:58:f1:b6:23:7e: 59:0c:4d:63:a3:85:e6:7c:e7:bf:57:2f:53:7a:3d: ac:7e:41:d7:36:39:2e:34:1e:f7:ba:f7:20:19:a7: 6f:4e:1b:9c:21:35:ad:64:c1:d5:f9:02:6c:e6:6b: 04:a3:c3:d0:74:18:8f:4a:42:40:15:97:7a:7c:27: eb:4c:db:fc:1a:58:7b:4a:16:b9:8b:12:5b:5f:5d: 6d:93:d0:0b:23:f2:12:bd:f4:6b:11:d9:ca:96:f3: 4b:52:9b:70:7b:58:d7:8f:7f:e7:c7:65:91:7f:9b: de:c4:47:6d:67:0b:70:02:e5:c1:3e:67:54:d2:00: 8a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BB:9C:59:6C:89:A5:B4:2A:0D:56:87:90:C2:45:69:A2:7B:46:D6 X509v3 Authority Key Identifier: keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F4C73FCACD8411EF88CD1464C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.97.175.0/24 Signature Algorithm: sha256WithRSAEncryption 11:ba:72:62:8b:7a:b7:96:d0:c8:c8:66:fb:bc:c8:0b:25:ad: 44:f4:29:05:26:2c:d6:f9:e2:e6:c5:10:88:0a:38:9a:cc:04: 51:51:e5:27:3d:82:8c:53:28:63:96:bb:3e:b8:06:05:f4:f7: a8:2e:8d:59:93:34:2d:51:b4:87:d8:75:1c:16:70:a7:ef:49: 8b:2a:ee:84:19:fd:29:63:a7:4f:b1:ee:20:24:45:22:54:b8: 7a:99:be:da:fe:b3:67:54:43:de:01:7b:83:ef:86:79:c7:7c: 62:7c:69:14:b4:61:be:0e:27:7e:d9:08:3f:34:f5:11:bb:51: e5:7f:13:ea:5b:7f:ec:69:f5:d8:01:7b:92:6c:0a:a8:a7:62: 18:da:b8:41:32:87:27:ea:31:5c:bd:a4:85:a3:b3:b5:1d:52: 75:13:78:bd:56:34:15:85:c2:ef:29:13:ce:ef:fa:ee:ff:ce: 32:2e:33:29:66:7f:f2:10:e4:d7:8c:86:ab:cb:72:4e:42:53: 44:d2:d8:d0:2a:b7:60:77:7a:33:25:9f:88:02:73:15:67:d3: 93:b0:4f:fd:3e:8b:0c:44:f7:0f:4b:88:ee:08:59:1d:eb:bd: ea:d9:e6:71:70:c1:a5:c4:61:fb:61:94:75:6c:c4:a4:58:9b: a3:51:88:72 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG MDVCQUYyMTEwHhcNMjUwMTA4MDU1NDAwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdlMTJmOC0yYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvz/iISRmU3jlCD0XqKN0XE19CGKLDyUVlIt7rWq5aroe/2jWY/PgtsKvJreX B0CsuGWmCGnQ79+LYrBpTF90RHmzNwkFy5H2mrMgDj3HQ9lYklIeALL6zM4dlcGb lzkE1xRN+MkquqUVuFLZvZiRyr0F/k/+zfW6/FWEDTnOAxAhWPG2I35ZDE1jo4Xm fOe/Vy9Tej2sfkHXNjkuNB73uvcgGadvThucITWtZMHV+QJs5msEo8PQdBiPSkJA FZd6fCfrTNv8Glh7Sha5ixJbX11tk9ALI/ISvfRrEdnKlvNLUptwe1jXj3/nx2WR f5vexEdtZwtwAuXBPmdU0gCKkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLu7nFls iaW0Kg1Wh5DCRWmie0bWMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTc3NjEvMEU0QjkxNjhCRDM0MTFFQjkwRTU1NDI4QzRGOUFFMDIvRjRDNzNGQ0FD RDg0MTFFRjg4Q0QxNDY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnYa8wDQYJKoZIhvcNAQELBQADggEBABG6cmKLereW0MjI Zvu8yAslrUT0KQUmLNb54ubFEIgKOJrMBFFR5Sc9goxTKGOWuz64BgX096gujVmT NC1RtIfYdRwWcKfvSYsq7oQZ/Sljp0+x7iAkRSJUuHqZvtr+s2dUQ94Be4PvhnnH fGJ8aRS0Yb4OJ37ZCD809RG7UeV/E+pbf+xp9dgBe5JsCqinYhjauEEyhyfqMVy9 pIWjs7UdUnUTeL1WNBWFwu8pE87v+u7/zjIuMylmf/IQ5NeMhqvLck5CU0TS2NAq t2B3ejMln4gCcxVn05OwT/0+iwxE9w9LiO4IWR3rverZ5nFwwaXEYfthlHVsxKRY m6NRiHI= -----END CERTIFICATE-----Generated at Sat Apr 5 06:06:55 2025 by rpki-client