$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/33B566F2E80811EEB4888B0FC4F9AE02.roa File: 33B566F2E80811EEB4888B0FC4F9AE02.roa (raw, json) Hash identifier: ZSDoXQLk70kw9Tv9vuIwvYTULilf6nNLQq+LER2jQIQ= Subject key identifier: 53:59:FA:2B:FA:F9:6F:02:89:F3:94:76:69:EB:A9:86:6B:10:C5:EF Certificate issuer: /CN=A91BAD2D/serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Certificate serial: BA Authority key identifier: 94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/33B566F2E80811EEB4888B0FC4F9AE02.roa Signing time: Sat 08 Mar 2025 14:32:05 +0000 ROA not before: Sat 08 Mar 2025 14:32:05 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 133894 IP address blocks: 43.230.209.0/24 maxlen: 24 103.46.208.0/22 maxlen: 24 103.96.233.0/24 maxlen: 24 103.146.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAD2D Validity Not Before: Mar 8 14:32:05 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67cc54e5-5f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:88:1e:c5:b8:bb:b1:a4:18:d2:99:fe:38:63: 6a:da:40:c1:31:d6:88:4c:1d:5c:c1:9f:d3:3b:35: ca:bb:89:da:2b:13:b0:d7:53:21:80:0d:e0:a9:06: 6f:c0:19:38:1e:66:20:75:b5:ff:a5:17:48:c0:7f: 32:9a:b8:28:80:38:bd:a7:80:9a:03:95:71:2c:6c: 33:21:e5:7a:39:5d:0f:1b:ad:e0:1c:6f:ee:2c:48: c7:9e:38:a7:36:4b:b5:11:b0:5e:db:59:08:02:0b: 8f:de:b8:8d:a7:ba:9a:f7:56:2e:ce:0f:a2:cb:6c: b4:fc:79:c2:51:02:e3:a7:5b:75:42:8b:a7:d5:5b: 6b:39:98:49:92:20:d4:98:80:07:6e:70:c8:28:72: 68:9c:30:17:dc:9c:68:10:e5:f5:db:2f:22:f7:bb: bd:e4:45:bb:96:11:08:7a:c9:74:86:58:7c:58:7b: ab:ba:1d:49:15:8e:ef:c0:79:cf:30:fa:b6:9a:06: e8:1c:28:1d:45:d2:25:9c:d3:02:ae:7e:c1:1f:06: 06:b7:7b:5c:43:91:4f:30:7b:ef:81:fa:f7:dd:9b: 2c:3d:b0:54:ae:24:10:1c:b4:43:1c:07:2c:f0:10: 35:b5:69:61:a9:e1:bc:9a:b7:28:60:1d:98:42:32: e8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:59:FA:2B:FA:F9:6F:02:89:F3:94:76:69:EB:A9:86:6B:10:C5:EF X509v3 Authority Key Identifier: keyid:94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/33B566F2E80811EEB4888B0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.209.0/24 103.46.208.0/22 103.96.233.0/24 103.146.104.0/24 Signature Algorithm: sha256WithRSAEncryption 03:ee:9d:f9:22:71:07:b7:f0:47:d1:6f:32:0f:3f:9e:da:1b: 03:26:e1:21:e5:69:fb:34:1b:6e:48:73:5e:2a:42:99:47:85: d1:14:9a:e1:2a:78:35:5d:3a:f8:cf:f4:8c:4a:bc:fa:26:6c: e7:67:f4:68:03:9f:a7:68:9a:70:d7:e3:8d:7a:57:6c:6f:18: 46:ac:f6:62:cd:83:64:95:a3:e9:2a:7c:23:40:da:c3:a8:3c: bb:2d:45:00:a2:ce:44:a6:72:ca:d7:ec:4a:58:7d:21:ee:b1: 84:12:24:ea:7a:a4:37:3b:1f:37:15:62:35:e7:e7:a7:a8:fb: 6c:6b:81:d8:f8:04:51:f3:39:96:9c:14:6c:63:fa:b8:b4:46: 5e:22:32:ae:2f:35:bb:72:37:ee:96:4f:57:7f:22:8a:13:2e: 31:84:30:26:a5:8a:9a:21:77:04:12:e8:94:ac:c4:c7:81:fd: 2e:f0:ec:5a:da:fe:26:94:b1:21:9a:7d:f0:79:97:32:e6:9f: 1d:55:44:a5:c3:9f:ff:8b:02:33:fa:69:97:f9:6a:a6:62:23: f0:ee:cf:bf:97:cf:5b:6e:dc:1e:ee:a5:f1:62:c7:87:17:c4: 5e:16:45:2e:b8:20:f0:3c:e8:51:74:56:3b:36:a8:fd:bf:cc: af:1e:06:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEMkQxMTAvBgNVBAUTKDk0QTk1MEIzMDNCNDY5MDBERDVBMzA2MTAzMEM4OUE0 ODk2ODAzQUYwHhcNMjUwMzA4MTQzMjA1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NjNTRlNS01ZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYgexbi7saQY0pn+OGNq2kDBMdaITB1cwZ/TOzXKu4naKxOw11MhgA3gqQZv wBk4HmYgdbX/pRdIwH8ymrgogDi9p4CaA5VxLGwzIeV6OV0PG63gHG/uLEjHnjin Nku1EbBe21kIAguP3riNp7qa91Yuzg+iy2y0/HnCUQLjp1t1Qoun1VtrOZhJkiDU mIAHbnDIKHJonDAX3JxoEOX12y8i97u95EW7lhEIesl0hlh8WHuruh1JFY7vwHnP MPq2mgboHCgdRdIlnNMCrn7BHwYGt3tcQ5FPMHvvgfr33ZssPbBUriQQHLRDHAcs 8BA1tWlhqeG8mrcoYB2YQjLoQwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFFNZ+iv6 +W8CifOUdmnrqYZrEMXvMB8GA1UdIwQYMBaAFJSpULMDtGkA3VowYQMMiaSJaAOv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQyRC85MDg4RUU1QUU4 MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dPMGFRRGRXakJoQXd5SnBJbG9B NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xLbFFzd08wYVFEZFdqQmhBd3lKcElsb0E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFEMkQvOTA4OEVFNUFFODAxMTFFRUFENkM1MDMwQzRGOUFFMDIvMzNCNTY2RjJF ODA4MTFFRUI0ODg4QjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAAr5tEDBAJnLtADBABnYOkDBABnkmgwDQYJKoZIhvcNAQEL BQADggEBAAPunfkicQe38EfRbzIPP57aGwMm4SHlafs0G25Ic14qQplHhdEUmuEq eDVdOvjP9IxKvPombOdn9GgDn6domnDX4416V2xvGEas9mLNg2SVo+kqfCNA2sOo PLstRQCizkSmcsrX7EpYfSHusYQSJOp6pDc7HzcVYjXn56eo+2xrgdj4BFHzOZac FGxj+ri0Rl4iMq4vNbtyN+6WT1d/IooTLjGEMCalipohdwQS6JSsxMeB/S7w7Fra /iaUsSGaffB5lzLmnx1VRKXDn/+LAjP6aZf5aqZiI/Duz7+Xz1tu3B7upfFix4cX xF4WRS64IPA86FF0Vjs2qP2/zK8eBl4= -----END CERTIFICATE-----Generated at Sun Apr 6 12:47:41 2025 by rpki-client