$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/FB9DB0B8778011EFA197A558C4F9AE02.roa File: FB9DB0B8778011EFA197A558C4F9AE02.roa (raw, json) Hash identifier: bOpqrbhh4Bh4AWp/OZ52rop88bWyVMsrGceDfsrfghM= Subject key identifier: AE:16:64:FB:26:31:AE:52:9B:16:C0:E9:5B:4E:0D:EB:65:8E:B0:0D Certificate issuer: /CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D Certificate serial: 0208 Authority key identifier: 86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/FB9DB0B8778011EFA197A558C4F9AE02.roa Signing time: Tue 11 Mar 2025 07:53:36 +0000 ROA not before: Tue 11 Mar 2025 07:53:36 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 150385 IP address blocks: 103.24.88.0/23 maxlen: 23 103.24.88.0/24 maxlen: 24 103.24.89.0/24 maxlen: 24 2400:baa0::/32 maxlen: 32 2400:baa0:1::/48 maxlen: 48 2400:baa0:2::/48 maxlen: 48 2400:baa0:3::/48 maxlen: 48 2400:baa0:1000::/48 maxlen: 48 2400:baa0:1111::/48 maxlen: 48 2400:baa0:2000::/48 maxlen: 48 2400:baa0:2222::/48 maxlen: 48 2400:baa0:3000::/48 maxlen: 48 2400:baa0:3333::/48 maxlen: 48 2400:baa0:4000::/48 maxlen: 48 2400:baa0:4444::/48 maxlen: 48 2400:baa0:5000::/48 maxlen: 48 2400:baa0:5555::/48 maxlen: 48 2400:baa0:6000::/48 maxlen: 48 2400:baa0:6666::/48 maxlen: 48 2400:baa0:7000::/48 maxlen: 48 2400:baa0:7777::/48 maxlen: 48 2400:baa0:8000::/48 maxlen: 48 2400:baa0:8888::/48 maxlen: 48 2400:baa0:9000::/48 maxlen: 48 2400:baa0:9999::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF28F Validity Not Before: Mar 11 07:53:36 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67cfec00-5a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ed:e4:b5:9a:fa:cb:b3:1b:9e:68:64:f6:78: f2:9e:da:28:fe:b4:d4:e8:4c:89:19:4f:85:cc:ba: 10:51:18:58:66:2e:56:c6:5e:45:d3:d7:84:34:ae: 7a:95:49:bb:4e:6f:38:b7:5e:22:cf:e0:39:54:a0: f2:c6:41:ba:55:9e:b7:89:46:c5:9b:42:96:c7:32: 63:7d:29:f1:75:8c:9e:d4:03:a0:34:20:38:70:a0: 1f:eb:cd:c2:27:55:06:71:69:c8:ec:df:1b:86:fc: c3:d8:ad:9c:ee:a5:d0:c2:3a:d8:55:29:63:03:ed: 72:3f:57:df:e2:ee:e2:e8:e9:61:7f:7f:1f:18:ce: 99:34:84:8f:b8:32:da:92:cb:be:05:79:16:d3:78: 3e:20:e9:66:6d:14:f4:05:f4:99:e8:fd:51:5b:2c: 85:b5:55:28:04:53:37:88:9e:15:74:bc:82:f0:fd: 9c:82:5d:6b:3e:f2:52:3b:a3:ac:06:2a:10:f9:4e: 0a:f7:fb:a0:ec:a2:3f:dd:8b:46:4f:fa:f0:ce:4e: ab:bd:f2:48:ec:35:90:54:e5:b4:29:bd:62:da:99: 6e:3d:61:43:9b:0c:7f:77:44:db:15:d8:ee:87:1b: 85:74:6f:f7:e5:eb:bd:43:11:cf:48:97:e0:c7:93: d3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:16:64:FB:26:31:AE:52:9B:16:C0:E9:5B:4E:0D:EB:65:8E:B0:0D X509v3 Authority Key Identifier: keyid:86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/FB9DB0B8778011EFA197A558C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.88.0/23 IPv6: 2400:baa0::/32 Signature Algorithm: sha256WithRSAEncryption 3b:4b:c5:e4:23:d4:e4:e6:db:3b:61:b1:4e:d7:37:78:0b:72: 54:20:c5:88:06:10:e7:81:35:ef:33:a9:cc:96:40:0b:8f:bd: a1:12:70:c6:45:62:78:64:57:51:d3:4c:ab:1f:d2:41:a2:6d: ef:cd:7e:67:be:96:65:c8:fa:3f:10:18:e6:12:93:00:c0:f7: 04:74:22:c6:02:3a:e5:63:e0:ce:75:be:73:c2:c0:78:0b:90: a6:f6:9b:b2:d8:89:de:97:f8:bf:9d:0c:35:61:5e:90:41:91: a3:c4:85:a3:32:ca:c5:01:49:13:4e:77:49:d2:34:f6:69:34: 36:72:01:6b:2e:11:54:b4:ec:80:a4:c1:0e:d1:b2:79:f7:53: 83:68:20:c2:91:8c:f0:92:f1:8e:df:bd:cf:b5:5f:b1:11:8f: b1:66:1c:bd:6a:59:92:dc:a2:16:51:d2:ba:55:7c:bf:23:cc: 99:4e:1a:65:df:30:99:bb:00:d9:80:46:b5:ce:5b:fb:51:cf: 0f:1f:d8:5f:0d:30:e3:90:42:57:0b:ee:9e:a0:58:4f:d0:62: ed:fa:76:0d:be:a3:7f:1f:4a:79:72:c0:89:de:90:82:08:42: ad:63:f9:40:79:50:8e:fd:cf:74:cf:fa:8e:d6:a4:a0:c3:8f: 8b:97:bd:47 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyOEYxMTAvBgNVBAUTKDg2Q0Q4QjQyMThBOUI5QTFCQ0UyRkFDNUVFNkRDNzg1 QjAwQTkzMUQwHhcNMjUwMzExMDc1MzM2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NmZWMwMC01YTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+3ktZr6y7Mbnmhk9njyntoo/rTU6EyJGU+FzLoQURhYZi5Wxl5F09eENK56 lUm7Tm84t14iz+A5VKDyxkG6VZ63iUbFm0KWxzJjfSnxdYye1AOgNCA4cKAf683C J1UGcWnI7N8bhvzD2K2c7qXQwjrYVSljA+1yP1ff4u7i6Olhf38fGM6ZNISPuDLa ksu+BXkW03g+IOlmbRT0BfSZ6P1RWyyFtVUoBFM3iJ4VdLyC8P2cgl1rPvJSO6Os BioQ+U4K9/ug7KI/3YtGT/rwzk6rvfJI7DWQVOW0Kb1i2pluPWFDmwx/d0TbFdju hxuFdG/35eu9QxHPSJfgx5PT7wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFK4WZPsm Ma5SmxbA6VtODetljrANMB8GA1UdIwQYMBaAFIbNi0IYqbmhvOL6xe5tx4WwCpMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ri83RERDNUEyRTU1 NDcxMUVEQjQ3QjMzMkJDNEY5QUUwMi9oczJMUWhpcHVhRzg0dnJGN20zSGhiQUtr eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzMkxRaGlwdWFHODR2ckY3bTNIaGJBS2t4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkYyOEYvN0REQzVBMkU1NTQ3MTFFREI0N0IzMzJCQzRGOUFFMDIvRkI5REIwQjg3 NzgwMTFFRkExOTdBNTU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnGFgwDQQCAAIwBwMFACQAuqAwDQYJKoZIhvcNAQELBQAD ggEBADtLxeQj1OTm2zthsU7XN3gLclQgxYgGEOeBNe8zqcyWQAuPvaEScMZFYnhk V1HTTKsf0kGibe/Nfme+lmXI+j8QGOYSkwDA9wR0IsYCOuVj4M51vnPCwHgLkKb2 m7LYid6X+L+dDDVhXpBBkaPEhaMyysUBSRNOd0nSNPZpNDZyAWsuEVS07ICkwQ7R snn3U4NoIMKRjPCS8Y7fvc+1X7ERj7FmHL1qWZLcohZR0rpVfL8jzJlOGmXfMJm7 ANmARrXOW/tRzw8f2F8NMOOQQlcL7p6gWE/QYu36dg2+o38fSnlywInekIIIQq1j +UB5UI79z3TP+o7WpKDDj4uXvUc= -----END CERTIFICATE-----Generated at Sat Apr 5 02:13:18 2025 by rpki-client