$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/B3E5DF2A14ED11EAACAB5E5DC4F9AE02.roa File: B3E5DF2A14ED11EAACAB5E5DC4F9AE02.roa (raw, json) Hash identifier: cmHL+jcXVZxk1ExKQVL6FlfnXQXFN7c8jdKbgylZ/70= Subject key identifier: 1A:C5:20:C6:B2:85:10:DB:C7:80:E3:76:6C:AB:49:47:9F:59:BC:1E Certificate issuer: /CN=A91C5778/serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540 Certificate serial: 0BBF Authority key identifier: B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/B3E5DF2A14ED11EAACAB5E5DC4F9AE02.roa Signing time: Thu 06 Feb 2025 18:36:57 +0000 ROA not before: Thu 06 Feb 2025 18:36:57 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 55492 IP address blocks: 103.81.196.0/22 maxlen: 22 103.81.196.0/24 maxlen: 24 103.81.197.0/24 maxlen: 24 103.81.198.0/24 maxlen: 24 103.81.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3007 (0xbbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5778 Validity Not Before: Feb 6 18:36:57 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a50149-4f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:c1:9e:11:45:79:ec:64:5c:79:f7:10:3c: a3:d9:b0:52:8e:cb:1a:e5:af:81:87:bb:f5:bf:c3: bf:d7:7f:cb:07:9e:80:a5:5e:51:52:7e:eb:18:aa: d0:4c:e6:0b:0d:00:a9:be:c2:ea:ab:bf:ca:f4:ed: f8:e5:db:9b:1b:bf:ff:8b:7c:fa:86:50:a0:dc:54: e1:96:bd:ae:b0:fc:1f:a9:e4:b2:4f:30:90:13:1a: 69:0f:7f:d0:56:88:28:cc:54:71:d1:cb:02:25:04: ed:ce:18:1a:2e:a8:51:ee:3b:2f:28:c9:3d:35:05: 09:c3:c8:96:12:e1:26:97:54:52:44:18:b1:40:ba: ab:8c:94:22:e2:4b:b4:89:ce:f5:44:ac:94:36:a4: 38:d7:3f:f5:41:4f:f7:f0:69:73:4f:f5:d2:0f:16: fc:64:6d:3d:aa:12:3d:c6:df:26:c3:4f:e6:9e:28: 06:1f:44:a7:e0:b2:cb:73:53:7a:e7:d9:3b:1c:98: ff:42:4b:c7:f7:62:24:9c:44:25:f8:dd:96:69:fa: 27:7d:a6:0c:04:56:2c:f9:81:fe:90:46:b4:3e:9f: 7b:bb:6c:e7:95:bf:7d:45:d6:ac:b9:5a:07:df:a4: e1:50:6b:c6:eb:a7:c3:eb:b5:01:80:03:b8:8e:e4: c7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C5:20:C6:B2:85:10:DB:C7:80:E3:76:6C:AB:49:47:9F:59:BC:1E X509v3 Authority Key Identifier: keyid:B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/B3E5DF2A14ED11EAACAB5E5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.81.196.0/22 Signature Algorithm: sha256WithRSAEncryption a0:1c:75:32:3e:14:3f:9f:09:34:7d:68:8d:8e:56:8a:d8:c0: 6d:7b:7a:53:c8:99:61:be:51:18:eb:fc:90:06:02:6a:8b:12: 7e:60:56:9a:fc:12:53:a5:f0:22:b3:f7:f3:bd:bf:1d:ac:c9: ec:84:2c:bc:38:75:b5:96:a6:e4:6e:02:85:45:33:71:bd:0c: 7c:37:3e:a2:72:66:e1:a3:1b:ff:01:fb:20:38:d0:91:18:da: 02:72:18:a1:fe:58:fb:2b:a1:51:4d:92:21:2f:0e:ea:5a:ea: cc:34:09:43:a6:d9:c5:15:8c:d2:7e:d5:7d:7e:02:b2:55:26: 59:0c:eb:39:9c:cd:a4:4c:c9:ab:f2:8d:41:99:34:a2:74:84: fc:06:2f:36:df:b3:aa:dd:ea:44:7d:02:c2:1c:ca:38:d1:e2: 36:10:b4:1a:12:73:4a:0b:75:3b:28:6b:97:a5:a3:f5:0a:6c: 41:e1:cf:aa:a0:7e:5c:b2:84:dc:ac:d2:f3:ec:67:2c:e3:38: 75:03:1f:70:3c:c6:de:90:3c:98:e0:cd:d7:d1:bb:42:fd:f7: c6:38:13:29:b2:42:b1:87:b0:b3:e0:b6:cb:37:ff:ea:4e:0a: 2d:1e:b0:0d:d0:da:9f:3a:92:e3:80:8d:f6:d8:ff:56:df:ef: ef:90:cb:ed -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3NzgxMTAvBgNVBAUTKEI4QjU1QUY1QUI2NkE4RkZBNzY5MUNBNDNEQTJBNkI0 OUJBMjQ1NDAwHhcNMjUwMjA2MTgzNjU3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E1MDE0OS00ZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqjBnhFFeexkXHn3EDyj2bBSjssa5a+Bh7v1v8O/13/LB56ApV5RUn7rGKrQ TOYLDQCpvsLqq7/K9O345dubG7//i3z6hlCg3FThlr2usPwfqeSyTzCQExppD3/Q VogozFRx0csCJQTtzhgaLqhR7jsvKMk9NQUJw8iWEuEml1RSRBixQLqrjJQi4ku0 ic71RKyUNqQ41z/1QU/38GlzT/XSDxb8ZG09qhI9xt8mw0/mnigGH0Sn4LLLc1N6 59k7HJj/QkvH92IknEQl+N2WafonfaYMBFYs+YH+kEa0Pp97u2znlb99RdasuVoH 36ThUGvG66fD67UBgAO4juTHPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBrFIMay hRDbx4DjdmyrSUefWbweMB8GA1UdIwQYMBaAFLi1WvWrZqj/p2kcpD2iprSbokVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTc3OC8zRERDMUFDMDE0 RUMxMUVBQThCQUFFNUFDNEY5QUUwMi91TFZhOWF0bXFQLW5hUnlrUGFLbXRKdWlS VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VMVmE5YXRtcVAtbmFSeWtQYUttdEp1aVJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzU3NzgvM0REQzFBQzAxNEVDMTFFQUE4QkFBRTVBQzRGOUFFMDIvQjNFNURGMkEx NEVEMTFFQUFDQUI1RTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnUcQwDQYJKoZIhvcNAQELBQADggEBAKAcdTI+FD+fCTR9 aI2OVorYwG17elPImWG+URjr/JAGAmqLEn5gVpr8ElOl8CKz9/O9vx2syeyELLw4 dbWWpuRuAoVFM3G9DHw3PqJyZuGjG/8B+yA40JEY2gJyGKH+WPsroVFNkiEvDupa 6sw0CUOm2cUVjNJ+1X1+ArJVJlkM6zmczaRMyavyjUGZNKJ0hPwGLzbfs6rd6kR9 AsIcyjjR4jYQtBoSc0oLdTsoa5elo/UKbEHhz6qgflyyhNys0vPsZyzjOHUDH3A8 xt6QPJjgzdfRu0L998Y4EymyQrGHsLPgtss3/+pOCi0esA3Q2p86kuOAjfbY/1bf 7++Qy+0= -----END CERTIFICATE-----Generated at Sat Apr 5 01:15:19 2025 by rpki-client