$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/15D68F5ED55011EFA0564D54C4F9AE02.roa File: 15D68F5ED55011EFA0564D54C4F9AE02.roa (raw, json) Hash identifier: bm0eX3arzl/Vd2cVSRTEVj0uPXCCRL3I0GcsJSw9xWg= Subject key identifier: E4:AF:29:0D:A2:09:56:4C:2A:04:93:3D:BD:5A:FF:D6:13:8A:EE:50 Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Certificate serial: 02F1 Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/15D68F5ED55011EFA0564D54C4F9AE02.roa Signing time: Sat 18 Jan 2025 03:55:41 +0000 ROA not before: Sat 18 Jan 2025 03:55:41 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153494 IP address blocks: 43.248.64.0/22 maxlen: 24 103.39.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 00:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD00C Validity Not Before: Jan 18 03:55:41 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=678b263d-9851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4c:79:a4:91:5d:2c:25:d0:c0:56:1a:8a:a3: 38:fd:8f:47:ea:32:61:61:ed:4b:47:9a:3d:3f:14: ea:45:38:0b:c9:26:e9:1c:c0:d7:68:93:59:bd:84: 74:50:23:cf:30:c4:af:49:ee:66:59:5b:08:11:32: 36:dd:1a:d4:53:68:b2:44:22:58:15:f6:cf:14:a2: 3b:6e:44:a1:70:bf:5a:41:30:6a:ba:56:f6:84:e9: 8b:12:26:49:4a:a2:12:fd:14:fa:e8:34:ef:61:80: 20:ee:7e:c2:4d:46:be:5b:04:ea:00:9d:63:d1:66: 2f:35:5e:60:3e:22:2b:d1:16:4d:91:36:86:53:bd: 82:ee:ca:10:af:51:42:0a:ff:28:67:47:9c:0f:b6: 7b:dc:dd:ee:87:3a:75:a4:4b:11:f1:c8:2e:a5:94: 27:95:7c:18:9b:91:90:7f:b8:77:d5:ca:c6:b5:b2: 3b:81:6a:4d:66:48:23:89:08:1d:20:f4:7f:ba:75: 7c:19:89:42:65:dc:4b:eb:a0:e7:c3:c9:da:b4:ad: 63:f0:f8:24:5d:ea:c2:90:c4:89:26:6f:a4:66:4a: 2d:00:14:08:4b:bb:b3:56:a6:55:d7:0e:80:04:22: b6:2f:34:05:56:04:43:57:9a:1f:bf:cc:52:67:36: 7a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AF:29:0D:A2:09:56:4C:2A:04:93:3D:BD:5A:FF:D6:13:8A:EE:50 X509v3 Authority Key Identifier: keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/15D68F5ED55011EFA0564D54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.64.0/22 103.39.152.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:30:ac:e8:94:ba:11:57:a2:77:4f:7c:01:7e:6d:3f:dc:54: 05:e2:83:35:13:c9:ff:36:4a:6d:31:ab:5a:cd:4f:4c:f3:84: 67:46:ba:60:ee:22:77:a2:ff:98:5f:02:70:a8:cb:c8:04:f7: 65:3c:6f:0f:ed:24:6c:04:40:ca:73:16:f6:df:41:97:b0:c8: a8:cd:44:6c:82:60:fa:b2:b4:14:86:49:7a:ea:7b:34:dd:d6: c6:a2:51:21:ac:0f:44:20:42:a3:26:6f:5f:35:a5:c1:a7:fb: 2b:3f:05:14:c3:8e:aa:02:5a:c8:25:6b:95:55:80:c9:67:e9: 6c:4a:b0:86:cf:e7:13:6e:0b:53:a6:2e:9d:65:11:53:6b:f6: c1:9d:cd:0c:4a:54:f8:36:18:fb:47:51:c6:a2:82:78:b3:86: 30:41:95:64:25:4d:7f:67:4a:79:ae:0e:7c:61:f1:2b:ad:e9: e4:42:e2:23:9a:09:32:13:2c:13:19:83:81:76:46:14:c5:65: 70:bd:d0:c4:75:1f:d6:f7:81:fa:45:2b:5a:bb:5e:61:5c:40: c3:74:15:72:06:31:0e:bf:08:7e:71:dc:b3:7c:35:9e:3f:f2: cc:e6:21:2d:3f:10:bf:cc:8e:52:fd:76:6c:bb:4c:d0:e6:b1: 8a:50:f6:67 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwMEMxMTAvBgNVBAUTKERCMkNDQ0E4M0Q4NTMyODhDNTAwQ0RGQzNBRTFFMkZF QTA0OUY1MTQwHhcNMjUwMTE4MDM1NTQxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhiMjYzZC05ODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40x5pJFdLCXQwFYaiqM4/Y9H6jJhYe1LR5o9PxTqRTgLySbpHMDXaJNZvYR0 UCPPMMSvSe5mWVsIETI23RrUU2iyRCJYFfbPFKI7bkShcL9aQTBqulb2hOmLEiZJ SqIS/RT66DTvYYAg7n7CTUa+WwTqAJ1j0WYvNV5gPiIr0RZNkTaGU72C7soQr1FC Cv8oZ0ecD7Z73N3uhzp1pEsR8cgupZQnlXwYm5GQf7h31crGtbI7gWpNZkgjiQgd IPR/unV8GYlCZdxL66Dnw8natK1j8PgkXerCkMSJJm+kZkotABQIS7uzVqZV1w6A BCK2LzQFVgRDV5ofv8xSZzZ67wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOSvKQ2i CVZMKgSTPb1a/9YTiu5QMB8GA1UdIwQYMBaAFNsszKg9hTKIxQDN/Drh4v6gSfUU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDAwQy9DQUE4ODYxRUM2 MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1vakZBTTM4T3VIaV9xQko5 UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5ek1xRDJGTW9qRkFNMzhPdUhpX3FCSjlSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QwMEMvQ0FBODg2MUVDNjAxMTFFQzk1RkYxRTExQzRGOUFFMDIvMTVENjhGNUVE NTUwMTFFRkEwNTY0RDU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+EADBAJnJ5gwDQYJKoZIhvcNAQELBQADggEBAA8wrOiU uhFXondPfAF+bT/cVAXigzUTyf82Sm0xq1rNT0zzhGdGumDuInei/5hfAnCoy8gE 92U8bw/tJGwEQMpzFvbfQZewyKjNRGyCYPqytBSGSXrqezTd1saiUSGsD0QgQqMm b181pcGn+ys/BRTDjqoCWsgla5VVgMln6WxKsIbP5xNuC1OmLp1lEVNr9sGdzQxK VPg2GPtHUcaignizhjBBlWQlTX9nSnmuDnxh8Sut6eRC4iOaCTITLBMZg4F2RhTF ZXC90MR1H9b3gfpFK1q7XmFcQMN0FXIGMQ6/CH5x3LN8NZ4/8szmIS0/EL/MjlL9 dmy7TNDmsYpQ9mc= -----END CERTIFICATE-----Generated at Fri Apr 11 07:39:00 2025 by rpki-client