$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/A5F75EF6E44F11EB8F902E86C4F9AE02.roa File: A5F75EF6E44F11EB8F902E86C4F9AE02.roa (raw, json) Hash identifier: YPj6nSUJyVOM+G20GuBeDESuyg6nIZO73yJWHRIRq/8= Subject key identifier: 79:72:01:FE:9B:2B:F2:D4:6A:54:B3:C7:37:79:98:62:8A:3A:3E:25 Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Certificate serial: 0522 Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/A5F75EF6E44F11EB8F902E86C4F9AE02.roa Signing time: Sat 28 Dec 2024 23:12:24 +0000 ROA not before: Sat 28 Dec 2024 23:12:24 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 139836 IP address blocks: 103.146.8.0/23 maxlen: 23 103.146.8.0/24 maxlen: 24 103.146.9.0/24 maxlen: 24 2001:df2:3880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87AB Validity Not Before: Dec 28 23:12:24 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=677085d7-c79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ce:27:ef:f1:d4:96:a5:6d:8c:8c:e8:7d:9e: 56:82:80:5f:0e:7f:24:f8:03:c7:dc:63:c2:42:82: 62:27:62:d1:e1:74:b3:37:8d:8f:a9:89:83:72:c6: 33:df:28:0f:7d:ce:7e:5c:6f:a6:64:a9:db:38:6b: 55:b2:49:82:7b:d8:87:d4:78:8c:e5:e0:dc:11:71: 3e:0c:8b:33:28:6e:cf:bd:59:5f:24:ef:76:fc:d3: 22:81:fa:02:cd:6c:5d:39:c4:b6:79:f8:b6:68:ed: 0e:7e:a7:a8:08:83:2c:8d:c6:23:ba:73:c4:77:35: b4:ea:88:72:53:13:b2:44:28:ef:e1:b4:6b:25:5f: 51:82:2e:7c:13:a7:0a:b1:65:15:e6:18:3e:a5:f6: ec:c7:f8:a5:7c:28:4d:6e:a4:73:35:7b:eb:1e:b2: f0:26:cc:33:78:eb:e4:33:b2:01:43:d0:07:31:03: 04:53:21:aa:3d:27:e9:ee:bf:d6:e7:0e:ab:f0:75: 56:88:3f:43:f6:17:9c:08:46:90:0e:0f:6b:90:6d: 53:74:30:44:7a:9a:36:63:bf:96:17:6d:ff:62:d3: 3c:7e:82:12:4e:70:c1:72:c5:29:c8:76:b0:7d:69: 90:d6:89:ff:53:3c:23:c9:2c:45:a2:7e:ad:cf:44: 76:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:72:01:FE:9B:2B:F2:D4:6A:54:B3:C7:37:79:98:62:8A:3A:3E:25 X509v3 Authority Key Identifier: keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/A5F75EF6E44F11EB8F902E86C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.8.0/23 IPv6: 2001:df2:3880::/48 Signature Algorithm: sha256WithRSAEncryption ac:58:bf:19:f9:ec:ee:cf:b3:59:d6:ac:a2:79:4c:0f:0f:d2: e8:5c:0f:1b:83:4f:10:23:dd:fc:74:6b:bc:77:42:39:92:cf: f1:40:37:a5:a8:00:61:fa:b5:0b:bd:32:1e:06:1c:9b:bd:e9: 59:3b:e0:86:66:6d:f1:74:01:af:15:30:ab:dd:a9:34:61:e0: ca:fb:27:90:fc:cd:98:78:a7:65:78:b1:fc:a1:22:03:67:52: f0:82:c0:91:10:5a:dc:40:a4:50:41:de:ef:60:2a:55:98:b0: 5b:b1:64:aa:ba:7f:00:48:60:4f:25:f9:cf:4e:b2:dd:b3:1e: b3:92:b9:42:cf:ea:16:79:97:4f:3f:8d:7d:2c:63:3c:38:cf: bb:56:4b:aa:7b:d5:62:17:60:ae:92:14:04:4d:ca:9c:d8:62: 12:40:18:26:88:2c:17:f4:30:64:18:c0:35:4d:ea:85:69:34: a7:f2:e2:b5:49:b6:c2:9b:e8:5b:a8:95:64:e7:dc:79:19:fa: 2b:3f:e2:9b:ec:7d:a6:44:14:9f:42:db:06:bc:c4:af:27:a3: b2:a5:14:8c:0b:26:0d:31:a6:21:13:16:d4:e8:06:3d:77:3c: ce:76:36:7e:6c:99:59:6e:d2:a5:5a:ef:b5:5d:c3:39:f4:4d: 46:60:ef:74 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg3QUIxMTAvBgNVBAUTKEMxQTJDNzFGRDhBRDU4MjU4OUYwNDkwMkREQUY4Mzk4 ODVERkQzMzcwHhcNMjQxMjI4MjMxMjI0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzcwODVkNy1jNzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAos4n7/HUlqVtjIzofZ5WgoBfDn8k+APH3GPCQoJiJ2LR4XSzN42PqYmDcsYz 3ygPfc5+XG+mZKnbOGtVskmCe9iH1HiM5eDcEXE+DIszKG7PvVlfJO92/NMigfoC zWxdOcS2efi2aO0OfqeoCIMsjcYjunPEdzW06ohyUxOyRCjv4bRrJV9Rgi58E6cK sWUV5hg+pfbsx/ilfChNbqRzNXvrHrLwJswzeOvkM7IBQ9AHMQMEUyGqPSfp7r/W 5w6r8HVWiD9D9hecCEaQDg9rkG1TdDBEepo2Y7+WF23/YtM8foISTnDBcsUpyHaw fWmQ1on/UzwjySxFon6tz0R26wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHlyAf6b K/LUalSzxzd5mGKKOj4lMB8GA1UdIwQYMBaAFMGixx/YrVglifBJAt2vg5iF39M3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdBQi9GMDk2RENDNEU0 NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdDV0o4RWtDM2EtRG1JWGYw emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhTEhIOWl0V0NXSjhFa0MzYS1EbUlYZjB6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTg3QUIvRjA5NkRDQzRFNDRCMTFFQkIyQzgxRTgwQzRGOUFFMDIvQTVGNzVFRjZF NDRGMTFFQjhGOTAyRTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnkggwDwQCAAIwCQMHACABDfI4gDANBgkqhkiG9w0BAQsF AAOCAQEArFi/Gfns7s+zWdasonlMDw/S6FwPG4NPECPd/HRrvHdCOZLP8UA3pagA Yfq1C70yHgYcm73pWTvghmZt8XQBrxUwq92pNGHgyvsnkPzNmHinZXix/KEiA2dS 8ILAkRBa3ECkUEHe72AqVZiwW7Fkqrp/AEhgTyX5z06y3bMes5K5Qs/qFnmXTz+N fSxjPDjPu1ZLqnvVYhdgrpIUBE3KnNhiEkAYJogsF/QwZBjANU3qhWk0p/LitUm2 wpvoW6iVZOfceRn6Kz/im+x9pkQUn0LbBrzEryejsqUUjAsmDTGmIRMW1OgGPXc8 znY2fmyZWW7SpVrvtV3DOfRNRmDvdA== -----END CERTIFICATE-----Generated at Sun Apr 6 21:12:41 2025 by rpki-client