$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/11F911FAA8D811ED90192E3CC4F9AE02.roa File: 11F911FAA8D811ED90192E3CC4F9AE02.roa (raw, json) Hash identifier: 1slDbS6OMsVzRicTRklA2Gp5/wmmSnjZBoyP9DPcUVQ= Subject key identifier: A3:96:46:E1:DA:D0:7E:6E:7A:AC:4A:BD:38:15:A3:56:19:B0:1E:FE Certificate issuer: /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Certificate serial: 0167 Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/11F911FAA8D811ED90192E3CC4F9AE02.roa Signing time: Fri 03 Jan 2025 02:45:50 +0000 ROA not before: Fri 03 Jan 2025 02:45:50 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 9423 IP address blocks: 103.31.116.0/23 maxlen: 23 2001:df1:7f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 02:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Validity Not Before: Jan 3 02:45:50 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67774f5e-5c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:5c:f3:d1:cb:3c:9e:d4:25:c1:fd:34:17: 4d:06:c9:78:e3:fd:42:59:86:bc:13:eb:0f:e0:6e: 19:91:a1:81:fb:fd:28:27:54:5b:7b:44:38:02:45: 47:b6:8f:11:e3:d3:19:89:09:17:f5:0f:b4:88:94: 5c:78:47:47:cc:8d:53:76:4d:63:74:75:da:ac:be: 2b:89:f1:f9:d5:e9:ec:40:e7:e6:c6:6d:de:28:fd: 50:14:12:55:01:c1:f4:42:65:91:8e:02:43:c1:97: 34:6a:f7:30:5a:32:4a:e9:67:ea:2e:e6:ba:56:60: b3:04:09:9f:0c:a7:ba:39:51:86:4f:4d:e0:23:42: de:6e:c3:3b:c1:83:a2:9b:61:df:42:02:5e:a2:ff: 90:ab:82:d5:2e:3e:a8:68:4a:29:de:dc:3c:8a:c8: 72:e4:fc:5b:1b:0e:3a:60:b3:54:f7:4a:d5:eb:28: d5:e4:8c:f3:96:a3:88:34:f5:e3:f7:6d:26:02:4b: 3a:84:79:ae:5a:2a:f1:5e:b9:c8:bd:65:23:01:88: 4a:d8:ec:b5:e4:17:0e:b1:5d:f1:fe:c8:68:0c:85: 49:5b:2e:f8:a4:d1:5f:e2:3d:5e:55:98:8f:0d:69: fa:33:f8:c5:71:3f:87:54:4e:ae:be:1b:df:75:5e: a8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:96:46:E1:DA:D0:7E:6E:7A:AC:4A:BD:38:15:A3:56:19:B0:1E:FE X509v3 Authority Key Identifier: keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/11F911FAA8D811ED90192E3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.31.116.0/23 IPv6: 2001:df1:7f40::/48 Signature Algorithm: sha256WithRSAEncryption 20:47:50:46:b5:be:19:34:b8:a6:a0:95:ec:f8:40:d4:da:69: ac:87:b6:1b:bd:0a:a6:d5:9d:bc:a4:bd:4b:38:26:96:87:3b: 65:6f:2e:67:f5:d6:9b:ff:56:a9:33:89:c5:ab:ff:c3:37:c0: ae:c3:27:4a:a3:e4:b9:99:c3:11:ac:15:44:cb:7a:48:2e:0d: 8e:d6:fd:39:9f:4c:bc:13:3d:00:d5:ed:f2:6d:44:09:b5:ac: b3:dc:17:43:ee:51:83:53:2a:cc:bc:ec:eb:60:b8:da:0e:ee: 85:92:3f:d3:19:a3:4e:c3:aa:b9:06:e2:52:84:ca:06:ff:44: 03:ad:2a:7c:76:76:e7:06:7b:68:81:13:5a:79:21:db:33:4f: f2:78:1f:07:3a:ac:f7:00:7a:42:7a:bf:3b:53:45:44:eb:61: 2d:8c:be:1c:1d:06:99:13:fb:df:33:26:50:af:d9:36:97:7a: 2e:dd:67:0a:f0:f0:00:b6:2c:8c:8f:2a:8a:fa:e9:08:1c:f3: a2:85:15:44:cc:9e:a1:9d:4f:91:30:27:d6:31:c6:a1:fd:8a: c0:e5:17:48:eb:3e:cc:a1:46:ea:6b:f5:3d:21:18:46:8e:39: 04:1c:64:0b:61:22:3f:d9:06:dd:29:51:15:cc:94:41:5d:f3: 9a:c6:f9:70 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IyMUQxMTAvBgNVBAUTKDlCMUU4MTg4Q0U2NDM5N0U4QjQyNDFFNjc1OEQ0MjlE QTBGRjJFNzAwHhcNMjUwMTAzMDI0NTUwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc3NGY1ZS01YzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnxc89HLPJ7UJcH9NBdNBsl44/1CWYa8E+sP4G4ZkaGB+/0oJ1Rbe0Q4AkVH to8R49MZiQkX9Q+0iJRceEdHzI1Tdk1jdHXarL4rifH51ensQOfmxm3eKP1QFBJV AcH0QmWRjgJDwZc0avcwWjJK6WfqLua6VmCzBAmfDKe6OVGGT03gI0LebsM7wYOi m2HfQgJeov+Qq4LVLj6oaEop3tw8ishy5PxbGw46YLNU90rV6yjV5IzzlqOINPXj 920mAks6hHmuWirxXrnIvWUjAYhK2Oy15BcOsV3x/shoDIVJWy74pNFf4j1eVZiP DWn6M/jFcT+HVE6uvhvfdV6oFQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKOWRuHa 0H5ueqxKvTgVo1YZsB7+MB8GA1UdIwQYMBaAFJsegYjOZDl+i0JB5nWNQp2g/y5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjIxRC82MzJDRDNFNkE3 RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09YNkxRa0htZFkxQ25hRF9M bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214NkJpTTVrT1g2TFFrSG1kWTFDbmFEX0xuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0IyMUQvNjMyQ0QzRTZBN0Y2MTFFREI5RDYwQzQzQzRGOUFFMDIvMTFGOTExRkFB OEQ4MTFFRDkwMTkyRTNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnH3QwDwQCAAIwCQMHACABDfF/QDANBgkqhkiG9w0BAQsF AAOCAQEAIEdQRrW+GTS4pqCV7PhA1NpprIe2G70KptWdvKS9Szgmloc7ZW8uZ/XW m/9WqTOJxav/wzfArsMnSqPkuZnDEawVRMt6SC4Njtb9OZ9MvBM9ANXt8m1ECbWs s9wXQ+5Rg1MqzLzs62C42g7uhZI/0xmjTsOquQbiUoTKBv9EA60qfHZ25wZ7aIET Wnkh2zNP8ngfBzqs9wB6Qnq/O1NFROthLYy+HB0GmRP73zMmUK/ZNpd6Lt1nCvDw ALYsjI8qivrpCBzzooUVRMyeoZ1PkTAn1jHGof2KwOUXSOs+zKFG6mv1PSEYRo45 BBxkC2EiP9kG3SlRFcyUQV3zmsb5cA== -----END CERTIFICATE-----Generated at Sun Apr 20 22:23:22 2025 by rpki-client