$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/BC66C474FB5C11EFB5FF765EC4F9AE02.roa File: BC66C474FB5C11EFB5FF765EC4F9AE02.roa (raw, json) Hash identifier: AvVg/+A0MLB4qd4KAVoe6uLCEieXvb2jz5ivdG0pWoo= Subject key identifier: 0B:12:9B:DB:CE:E0:0D:1C:42:B7:3E:3C:BF:39:86:CE:18:26:76:1F Certificate issuer: /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Certificate serial: 02 Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/BC66C474FB5C11EFB5FF765EC4F9AE02.roa Signing time: Fri 07 Mar 2025 14:01:59 +0000 ROA not before: Fri 07 Mar 2025 14:01:59 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 135357 IP address blocks: 103.41.16.0/22 maxlen: 22 103.41.16.0/24 maxlen: 24 103.41.17.0/24 maxlen: 24 103.41.18.0/24 maxlen: 24 103.41.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3EDE Validity Not Before: Mar 7 14:01:59 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67cafc57-1273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:57:a1:e1:00:01:e8:05:57:27:42:37:82: 7d:96:2f:f7:7e:ff:e5:0a:43:92:a5:9a:c3:0f:fd: 67:d8:5d:08:75:b2:31:73:59:1c:e5:f7:97:a9:5b: 2f:f9:34:de:fc:8c:39:6e:25:9f:49:28:ac:c9:7b: a3:04:73:aa:1b:64:eb:96:90:25:2b:98:28:1e:50: 14:23:4d:54:6b:26:61:93:8b:30:c4:8c:6c:fd:17: fd:48:23:59:07:bd:9f:38:f9:68:c4:31:aa:0f:b2: c3:17:a9:79:13:94:a4:9e:7f:37:94:24:b1:38:0f: 9e:41:c1:20:70:23:34:b8:27:e9:8b:4e:4b:3e:24: a6:ac:71:8c:cd:13:87:df:63:ee:52:4e:63:cc:96: da:8d:84:e4:35:29:e8:87:b8:0c:dc:64:b3:b5:0a: f9:83:fe:31:14:df:0c:a4:3e:77:aa:17:73:74:1b: 4b:d8:42:47:fd:80:f5:0b:69:83:d4:e6:78:98:4a: ca:c1:55:09:fb:e2:eb:91:df:ce:82:bb:af:fa:f6: 24:07:b0:2b:97:7b:fc:99:3c:09:e3:5e:b5:32:31: 69:21:73:c3:eb:64:4b:25:c4:13:88:1a:69:a7:4a: 80:7f:d1:80:82:f1:49:2e:05:d7:af:43:dc:e3:79: 1c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:12:9B:DB:CE:E0:0D:1C:42:B7:3E:3C:BF:39:86:CE:18:26:76:1F X509v3 Authority Key Identifier: keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/BC66C474FB5C11EFB5FF765EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.41.16.0/22 Signature Algorithm: sha256WithRSAEncryption 11:86:9c:04:e3:ad:cf:8e:da:4b:73:e8:98:b1:df:9b:da:7f: 8b:10:de:fe:6c:dc:5c:21:f6:af:21:cb:6e:83:7d:b9:8b:90: a8:6f:4b:0a:9d:e0:b8:d0:5d:ff:d4:7f:78:3b:a9:5d:8b:62: 63:67:70:e5:f2:73:fb:59:35:8f:e2:26:c6:76:26:2d:a0:a2: ba:55:a8:67:b5:02:bf:d5:fb:3d:83:9b:61:c2:05:70:25:79: f9:83:13:a9:f7:53:34:00:97:b9:04:e2:2b:4e:55:4b:b6:7f: b0:27:ed:fd:5b:90:c0:7f:51:5c:74:9e:85:59:75:08:fa:6b: 49:a5:7b:ae:69:94:53:f6:d4:88:ab:01:d2:c5:dc:d1:45:3e: e5:be:10:77:2a:97:b3:3d:83:70:11:ba:91:ab:cd:49:5c:82: 28:e9:1a:ad:86:fe:e6:4c:46:1b:79:20:1d:03:38:8c:e4:28: d5:5a:e5:6e:c0:c6:12:2a:05:73:87:d1:d2:89:51:b7:2b:ef: 81:c9:cb:3e:24:4d:cd:52:d7:0b:74:2e:ec:68:3a:6b:e1:19: 68:7e:8c:54:61:31:3d:35:56:06:cc:70:b7:8c:ab:60:d8:01: f1:13:f8:f5:d3:6c:6c:36:92:68:1c:a0:ed:f3:9c:3d:77:ca: 4d:6c:d9:57 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0VERTExMC8GA1UEBRMoODBGQjUyNjM2QTlFNTBDMDg4NjhFNjI3NTIwQTFBMEQ4 QTg3RjA0NjAeFw0yNTAzMDcxNDAxNTlaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3Y2FmYzU3LTEyNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuWFeh4QAB6AVXJ0I3gn2WL/d+/+UKQ5KlmsMP/WfYXQh1sjFzWRzl95epWy/5 NN78jDluJZ9JKKzJe6MEc6obZOuWkCUrmCgeUBQjTVRrJmGTizDEjGz9F/1II1kH vZ84+WjEMaoPssMXqXkTlKSefzeUJLE4D55BwSBwIzS4J+mLTks+JKascYzNE4ff Y+5STmPMltqNhOQ1KeiHuAzcZLO1CvmD/jEU3wykPneqF3N0G0vYQkf9gPULaYPU 5niYSsrBVQn74uuR386Cu6/69iQHsCuXe/yZPAnjXrUyMWkhc8PrZEslxBOIGmmn SoB/0YCC8UkuBdevQ9zjeRzTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUCxKb287g DRxCtz48vzmGzhgmdh8wHwYDVR0jBBgwFoAUgPtSY2qeUMCIaOYnUgoaDYqH8EYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRURFLzU5MDREOTcwRkI1 QzExRUY4RUFGMzExQ0M0RjlBRTAyL2dQdFNZMnFlVU1DSWFPWW5VZ29hRFlxSDhF WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1B0U1kycWVVTUNJYU9ZblVnb2FEWXFIOEVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0VERS81OTA0RDk3MEZCNUMxMUVGOEVBRjMxMUNDNEY5QUUwMi9CQzY2QzQ3NEZC NUMxMUVGQjVGRjc2NUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmcpEDANBgkqhkiG9w0BAQsFAAOCAQEAEYacBOOtz47aS3Po mLHfm9p/ixDe/mzcXCH2ryHLboN9uYuQqG9LCp3guNBd/9R/eDupXYtiY2dw5fJz +1k1j+ImxnYmLaCiulWoZ7UCv9X7PYObYcIFcCV5+YMTqfdTNACXuQTiK05VS7Z/ sCft/VuQwH9RXHSehVl1CPprSaV7rmmUU/bUiKsB0sXc0UU+5b4QdyqXsz2DcBG6 kavNSVyCKOkarYb+5kxGG3kgHQM4jOQo1VrlbsDGEioFc4fR0olRtyvvgcnLPiRN zVLXC3Qu7Gg6a+EZaH6MVGExPTVWBsxwt4yrYNgB8RP49dNsbDaSaByg7fOcPXfK TWzZVw== -----END CERTIFICATE-----Generated at Sat Apr 5 02:13:26 2025 by rpki-client