$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/C41D0390EA9611EEA68A3A1DC4F9AE02.roa File: C41D0390EA9611EEA68A3A1DC4F9AE02.roa (raw, json) Hash identifier: 3twihJRxf/bNpMtScuSs5yi/6xZ2K4Wt4M95Ev7NChA= Subject key identifier: B8:E9:6B:9D:AF:95:63:F4:18:1A:FB:69:EA:BC:3C:82:A8:A0:67:AB Certificate issuer: /CN=A91CBFCF/serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Certificate serial: 0B7B Authority key identifier: 86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/C41D0390EA9611EEA68A3A1DC4F9AE02.roa Signing time: Fri 31 Jan 2025 18:57:58 +0000 ROA not before: Fri 31 Jan 2025 18:57:58 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 139902 IP address blocks: 103.146.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2939 (0xb7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBFCF Validity Not Before: Jan 31 18:57:58 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=679d1d36-c352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3c:b2:f7:c7:f2:e2:c1:96:ad:7b:5a:6a:4e: 8d:d1:4d:88:a3:a0:cd:93:dd:f3:2e:c1:15:8c:1a: a9:69:21:14:4e:f8:95:f1:4d:23:5b:25:a9:cb:c5: a5:8d:14:38:b4:57:0c:ff:ad:e0:ab:30:29:af:1a: d9:eb:00:d4:2a:2f:4d:2b:15:87:f6:ee:4f:0a:08: ee:33:42:3d:79:35:9f:3d:8c:63:8f:57:15:1c:a5: b9:3b:84:56:37:52:49:93:80:17:c9:a5:3a:ea:68: f7:bb:ee:cc:2f:64:15:70:5a:ce:bd:b9:d7:96:ad: 32:79:e8:b8:15:27:0a:0d:0e:7b:fd:a1:85:81:e7: 39:de:c8:cb:5c:66:1e:83:73:f8:e3:0f:ca:12:39: 77:f2:fa:36:6d:f4:22:4d:72:43:9d:d2:01:e5:0c: fd:da:f5:b6:c8:ac:21:f7:fe:39:3a:ad:37:4c:1d: 07:20:fd:f2:a9:e2:b3:bb:c3:6d:96:41:b2:70:17: e1:bc:06:af:02:40:32:32:6c:1d:e3:fc:89:fc:b3: bf:a6:fe:59:bf:72:e8:9e:a8:d2:25:f2:56:25:84: 97:94:ec:25:3c:25:b7:ff:ac:a9:d6:d9:19:58:1b: 1b:2a:c9:00:2b:57:c8:24:9b:ca:19:d6:0e:5a:70: 76:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E9:6B:9D:AF:95:63:F4:18:1A:FB:69:EA:BC:3C:82:A8:A0:67:AB X509v3 Authority Key Identifier: keyid:86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/C41D0390EA9611EEA68A3A1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.148.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:cc:20:ef:de:e7:0a:eb:69:77:42:d3:cc:06:89:55:08:eb: d7:84:42:63:0b:04:57:4e:fe:f6:69:27:05:70:67:67:df:73: 32:54:13:0e:7e:bc:24:64:8a:f6:c6:44:29:15:f6:48:21:2c: 6c:0c:98:c3:9a:86:be:fa:27:9f:aa:8e:ec:51:fc:1d:52:e4: e6:55:5a:6c:71:11:18:0f:a1:08:68:8e:bd:f4:27:76:6c:bf: c3:1f:5c:32:c6:36:30:ee:f3:fa:ed:eb:92:f6:17:5a:bf:b5: b1:ed:54:f2:ff:ee:3c:5f:48:20:43:0b:c4:5d:ec:e7:27:a3: 47:54:5a:a7:c7:99:69:93:ee:af:9e:31:1a:59:5b:6d:eb:1c: 66:0f:52:44:35:79:b9:af:14:03:5b:16:4a:e8:fa:c7:8f:6b: 2a:8c:56:78:fd:56:3c:62:20:5d:c8:e8:ed:be:94:18:d8:95: bc:7c:c3:b7:2f:9b:75:8c:92:68:82:34:f6:b3:f1:70:7c:ed: c4:b2:1a:ca:17:00:45:50:55:ce:33:23:ed:cc:ee:7c:fe:f6: c0:91:16:36:ed:67:db:28:ac:01:6e:7f:16:3d:39:5c:9a:14: c0:fa:d4:e6:2a:99:46:cb:e5:77:57:e6:2e:4f:17:8d:e8:a1: 2d:ac:c1:4c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGQ0YxMTAvBgNVBAUTKDg2QjFGMTFEMTgxREE2Q0M5REIwMzIzREU0M0JDOTZD NTkwOTY1RTEwHhcNMjUwMTMxMTg1NzU4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzlkMWQzNi1jMzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Dyy98fy4sGWrXtaak6N0U2Io6DNk93zLsEVjBqpaSEUTviV8U0jWyWpy8Wl jRQ4tFcM/63gqzAprxrZ6wDUKi9NKxWH9u5PCgjuM0I9eTWfPYxjj1cVHKW5O4RW N1JJk4AXyaU66mj3u+7ML2QVcFrOvbnXlq0yeei4FScKDQ57/aGFgec53sjLXGYe g3P44w/KEjl38vo2bfQiTXJDndIB5Qz92vW2yKwh9/45Oq03TB0HIP3yqeKzu8Nt lkGycBfhvAavAkAyMmwd4/yJ/LO/pv5Zv3LonqjSJfJWJYSXlOwlPCW3/6yp1tkZ WBsbKskAK1fIJJvKGdYOWnB2JwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLjpa52v lWP0GBr7aeq8PIKooGerMB8GA1UdIwQYMBaAFIax8R0YHabMnbAyPeQ7yWxZCWXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkZDRi85NTYzOUJGMDI0 OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBzeWRzREk5NUR2SmJGa0pa ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hySHhIUmdkcHN5ZHNESTk1RHZKYkZrSlplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JGQ0YvOTU2MzlCRjAyNDhEMTFFQUFEQTIwNTRFQzRGOUFFMDIvQzQxRDAzOTBF QTk2MTFFRUE2OEEzQTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkpQwDQYJKoZIhvcNAQELBQADggEBAFzMIO/e5wrraXdC 08wGiVUI69eEQmMLBFdO/vZpJwVwZ2ffczJUEw5+vCRkivbGRCkV9kghLGwMmMOa hr76J5+qjuxR/B1S5OZVWmxxERgPoQhojr30J3Zsv8MfXDLGNjDu8/rt65L2F1q/ tbHtVPL/7jxfSCBDC8Rd7Ocno0dUWqfHmWmT7q+eMRpZW23rHGYPUkQ1ebmvFANb Fkro+sePayqMVnj9VjxiIF3I6O2+lBjYlbx8w7cvm3WMkmiCNPaz8XB87cSyGsoX AEVQVc4zI+3M7nz+9sCRFjbtZ9sorAFufxY9OVyaFMD61OYqmUbL5XdX5i5PF43o oS2swUw= -----END CERTIFICATE-----Generated at Sat Apr 5 02:00:33 2025 by rpki-client