$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/F96174ECC27D11EDB8226F2DC4F9AE02.roa File: F96174ECC27D11EDB8226F2DC4F9AE02.roa (raw, json) Hash identifier: kXeNIsHETQcXUic6LYufG6XvgVMVgH9sGtHQdmkZT90= Subject key identifier: 0D:4D:78:5F:3E:FE:B7:D8:C0:87:EC:C6:9E:94:DE:4E:99:1C:10:4F Certificate issuer: /CN=A91BB6E3/serialNumber=919FA819B2FFF145521AF664035278E7E7914A49 Certificate serial: 0183 Authority key identifier: 91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/F96174ECC27D11EDB8226F2DC4F9AE02.roa Signing time: Wed 15 Jan 2025 19:16:00 +0000 ROA not before: Wed 15 Jan 2025 19:16:00 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 150705 IP address blocks: 103.62.148.0/24 maxlen: 24 103.62.149.0/24 maxlen: 24 2401:dee0::/32 maxlen: 32 2401:dee0::/48 maxlen: 48 2401:dee0:1::/48 maxlen: 48 2401:dee0:2::/48 maxlen: 48 2401:dee0:3::/48 maxlen: 48 2401:dee0:4::/48 maxlen: 48 2401:dee0:5::/48 maxlen: 48 2401:dee0:6::/48 maxlen: 48 2401:dee0:7::/48 maxlen: 48 2401:dee0:8::/48 maxlen: 48 2401:dee0:9::/48 maxlen: 48 2401:dee0:a::/48 maxlen: 48 2401:dee0:b::/48 maxlen: 48 2401:dee0:c::/48 maxlen: 48 2401:dee0:e::/48 maxlen: 48 2401:dee0:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 02:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB6E3, serialNumber=919FA819B2FFF145521AF664035278E7E7914A49 Validity Not Before: Jan 15 19:16:00 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6788096f-a6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:62:cd:f2:19:53:83:d9:5b:71:c1:37:d7: 62:93:78:9c:ba:f9:24:0e:1e:d5:16:f8:1e:41:f5: 54:2a:d6:5e:72:e0:33:bf:2e:c4:06:b5:5c:14:9d: 63:05:b7:2a:b1:4e:d8:ea:38:83:1e:bd:64:15:4b: 23:22:40:e3:a9:00:df:34:2b:ac:f2:2e:a5:1b:20: b7:27:60:b7:20:60:fa:ae:e8:ab:74:d5:e5:20:b0: 19:ba:42:ff:ae:1e:f3:3c:1d:0f:fa:0e:83:72:c5: 78:2f:e1:1d:f7:8b:47:26:9c:32:bd:89:80:04:66: 30:ee:c7:90:68:0e:ef:5d:61:c0:45:f4:93:84:95: f0:6c:86:90:b6:5b:fd:77:88:a1:6c:67:83:61:34: e1:46:9c:b4:26:93:32:0c:f5:8c:9e:c0:ff:27:ba: eb:b6:f4:bc:b4:8c:a7:64:60:ba:e1:8a:64:83:ec: 23:e5:f0:7c:dc:6c:cc:e9:31:4f:41:56:c9:c8:c2: b4:e3:b0:58:f1:7f:28:99:d3:1b:05:13:e1:e0:7d: ce:51:f7:99:b9:f1:26:8b:0b:02:80:91:91:26:ec: c2:55:e8:54:5a:be:ce:4d:02:fa:a3:f0:07:0f:cc: 37:72:f3:cc:37:36:68:57:c0:91:24:49:89:f0:5f: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4D:78:5F:3E:FE:B7:D8:C0:87:EC:C6:9E:94:DE:4E:99:1C:10:4F X509v3 Authority Key Identifier: keyid:91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/F96174ECC27D11EDB8226F2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.62.148.0/23 IPv6: 2401:dee0::/32 Signature Algorithm: sha256WithRSAEncryption a3:3a:d7:75:a5:88:91:45:d7:88:fc:70:04:12:52:86:6e:a3: 32:27:0d:78:3d:90:0f:33:b9:c1:d7:cf:a9:11:bf:f8:1b:e0: 31:d4:f5:2c:d6:bd:df:bc:38:d3:99:fc:0e:b1:5d:7b:73:a2: a1:f2:f6:ca:71:e2:5b:f7:80:c4:6e:a1:cb:fb:aa:27:e8:cf: f3:bb:6f:84:fd:6a:c3:a8:bc:42:b3:45:0e:de:39:cb:f9:18: 89:0d:43:7b:df:08:74:1c:f3:e7:2a:cd:ad:2a:f2:1e:66:3d: 82:a6:87:4a:da:af:fa:2c:96:a8:1b:af:2c:3a:55:03:c8:54: 83:6b:d6:c5:21:ec:fe:e6:c4:8e:26:f1:b3:39:bb:ac:4a:75: 63:fc:4d:36:e1:05:0c:da:5a:d8:d6:2f:6d:ab:68:32:22:50: 8c:d2:ac:da:b3:35:a7:48:05:8d:29:d8:87:b5:bb:49:d8:c5: 08:17:2d:f0:ff:66:8f:13:3f:c1:6a:5c:ec:42:d8:56:84:2e: ab:5c:ff:27:30:fd:ee:03:fe:e5:5d:2b:3a:38:fe:fc:a3:ba: e6:e6:73:13:57:8c:ca:69:0e:eb:8b:4a:a1:79:c6:1a:1c:b2: 5f:31:ba:2b:e4:b9:8b:83:6c:4b:19:07:3e:30:77:63:5f:eb: 1e:6c:38:9b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2RTMxMTAvBgNVBAUTKDkxOUZBODE5QjJGRkYxNDU1MjFBRjY2NDAzNTI3OEU3 RTc5MTRBNDkwHhcNMjUwMTE1MTkxNjAwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg4MDk2Zi1hNmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl7hizfIZU4PZW3HBN9dik3icuvkkDh7VFvgeQfVUKtZecuAzvy7EBrVcFJ1j BbcqsU7Y6jiDHr1kFUsjIkDjqQDfNCus8i6lGyC3J2C3IGD6ruirdNXlILAZukL/ rh7zPB0P+g6DcsV4L+Ed94tHJpwyvYmABGYw7seQaA7vXWHARfSThJXwbIaQtlv9 d4ihbGeDYTThRpy0JpMyDPWMnsD/J7rrtvS8tIynZGC64Ypkg+wj5fB83GzM6TFP QVbJyMK047BY8X8omdMbBRPh4H3OUfeZufEmiwsCgJGRJuzCVehUWr7OTQL6o/AH D8w3cvPMNzZoV8CRJEmJ8F9cSwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFA1NeF8+ /rfYwIfsxp6U3k6ZHBBPMB8GA1UdIwQYMBaAFJGfqBmy//FFUhr2ZANSeOfnkUpJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjZFMy9BMjJDODE0Q0My NzUxMUVEQjNCNEQ3MjhDNEY5QUUwMi9rWi1vR2JMXzhVVlNHdlprQTFKNDUtZVJT a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2taLW9HYkxfOFVWU0d2WmtBMUo0NS1lUlNray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI2RTMvQTIyQzgxNENDMjc1MTFFREIzQjRENzI4QzRGOUFFMDIvRjk2MTc0RUND MjdEMTFFREI4MjI2RjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnPpQwDQQCAAIwBwMFACQB3uAwDQYJKoZIhvcNAQELBQAD ggEBAKM613WliJFF14j8cAQSUoZuozInDXg9kA8zucHXz6kRv/gb4DHU9SzWvd+8 ONOZ/A6xXXtzoqHy9spx4lv3gMRuocv7qifoz/O7b4T9asOovEKzRQ7eOcv5GIkN Q3vfCHQc8+cqza0q8h5mPYKmh0rar/oslqgbryw6VQPIVINr1sUh7P7mxI4m8bM5 u6xKdWP8TTbhBQzaWtjWL22raDIiUIzSrNqzNadIBY0p2Ie1u0nYxQgXLfD/Zo8T P8FqXOxC2FaELqtc/ycw/e4D/uVdKzo4/vyjuubmcxNXjMppDuuLSqF5xhocsl8x uivkuYuDbEsZBz4wd2Nf6x5sOJs= -----END CERTIFICATE-----Generated at Sun Apr 13 02:14:29 2025 by rpki-client