$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/844FB44036A211EEAE901A49C4F9AE02.roa File: 844FB44036A211EEAE901A49C4F9AE02.roa (raw, json) Hash identifier: GNVfwfyUifybt9+TxmCqpnk4LFqX/6GaqA3Bsi9KVRs= Subject key identifier: 93:D1:63:04:3A:0C:21:84:B9:B6:90:46:B1:50:1E:2D:74:1C:C2:B3 Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B Certificate serial: 03B3 Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/844FB44036A211EEAE901A49C4F9AE02.roa Signing time: Wed 05 Feb 2025 00:33:45 +0000 ROA not before: Wed 05 Feb 2025 00:33:45 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 150750 IP address blocks: 103.179.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFCF8 Validity Not Before: Feb 5 00:33:45 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a2b1e8-df25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:3d:3d:7b:57:b6:b1:4c:63:be:ec:db:b0: 68:08:3e:5b:b1:c7:bf:87:06:97:4b:2e:b8:c5:d5: 55:83:d9:c6:b0:7e:cd:df:8a:1d:7b:ac:9f:b7:e3: ee:48:58:f9:a2:a1:a0:1d:be:89:21:13:0d:e5:e0: be:21:31:9c:5a:7c:58:ee:dd:bd:52:dd:0e:f4:cf: 81:3b:80:7f:4c:ee:0b:92:90:bf:43:33:ad:da:c6: 5f:a2:c3:5b:01:d0:c4:17:08:78:b3:d7:fd:9e:bf: 0a:31:89:8b:1c:ad:19:bf:4e:c1:34:2d:a5:2d:6e: f8:8f:3b:28:60:c5:4c:d9:84:e4:11:e1:79:95:2b: 09:97:e4:70:dc:60:13:99:23:38:96:c5:18:2f:6b: 83:18:9d:cc:96:de:02:eb:d6:f2:10:60:bc:56:e8: d2:a7:02:06:18:74:82:1e:19:22:3a:d5:b3:93:af: 02:01:f5:8b:f2:7c:2d:88:89:2e:55:f5:6a:4a:13: b2:f3:06:c2:37:19:7f:14:cd:e0:bb:46:a5:10:d5: 67:c3:46:a3:65:9d:dc:ab:e9:e8:85:e2:20:fa:56: 56:71:67:4d:dc:a5:9c:e6:f1:8b:78:04:7a:cd:96: b0:46:f9:ec:6f:11:78:ac:0d:8e:10:fb:96:4a:ff: 0c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D1:63:04:3A:0C:21:84:B9:B6:90:46:B1:50:1E:2D:74:1C:C2:B3 X509v3 Authority Key Identifier: keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/844FB44036A211EEAE901A49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.240.0/23 Signature Algorithm: sha256WithRSAEncryption 88:be:79:1e:08:4f:67:41:e7:63:54:28:df:d5:b1:b0:a5:ed: 3b:b7:8b:26:42:fd:1d:59:a2:d8:5c:de:ea:0d:d2:0e:45:cc: 5e:81:ca:a3:10:c6:b2:08:b5:80:81:7a:f3:27:25:eb:e8:10: a2:5e:77:d6:f7:86:33:e2:be:e2:c3:3c:97:57:de:f2:27:1f: f5:47:88:4e:30:c6:74:a5:eb:16:8c:c1:1b:38:46:4e:eb:61: 35:0d:6c:53:1e:f9:e6:ec:0d:3f:cb:fb:95:75:08:a3:41:ab: d9:9c:bf:74:df:e7:d0:bf:b9:b2:2d:d0:74:63:4a:76:cf:c2: 70:66:f3:d9:cd:9a:3b:7b:43:e9:0a:ac:07:a4:74:3a:c8:c8: 88:99:ec:df:7f:52:de:8e:0c:9a:49:02:8f:e0:3c:c0:22:12: b0:03:b6:96:4f:73:e4:54:b6:29:9b:d4:3f:a2:48:8a:ff:aa: 3f:0d:65:f9:e4:0e:c7:87:1c:af:ad:aa:59:06:57:52:c8:db: 49:51:22:43:26:47:15:63:65:36:6f:33:84:bb:6e:c2:e1:4a: 1a:bd:7a:ab:5a:b6:a0:14:6d:34:23:40:94:32:3b:71:fb:79: 59:d9:f4:2a:47:fb:53:58:4d:8d:29:7f:a9:61:1e:8d:a2:af: 98:1f:37:b0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDRjgxMTAvBgNVBAUTKDdDNUUwRERDNEY1ODY5NzQ3QjJBMzU4QzlCN0MwRjMx RThEOEREOEIwHhcNMjUwMjA1MDAzMzQ1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyYjFlOC1kZjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZw9PXtXtrFMY77s27BoCD5bsce/hwaXSy64xdVVg9nGsH7N34ode6yft+Pu SFj5oqGgHb6JIRMN5eC+ITGcWnxY7t29Ut0O9M+BO4B/TO4LkpC/QzOt2sZfosNb AdDEFwh4s9f9nr8KMYmLHK0Zv07BNC2lLW74jzsoYMVM2YTkEeF5lSsJl+Rw3GAT mSM4lsUYL2uDGJ3Mlt4C69byEGC8VujSpwIGGHSCHhkiOtWzk68CAfWL8nwtiIku VfVqShOy8wbCNxl/FM3gu0alENVnw0ajZZ3cq+noheIg+lZWcWdN3KWc5vGLeAR6 zZawRvnsbxF4rA2OEPuWSv8MRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJPRYwQ6 DCGEubaQRrFQHi10HMKzMB8GA1UdIwQYMBaAFHxeDdxPWGl0eyo1jJt8DzHo2N2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNGOC8wNUU0QzJEMjhC MDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFYUjdLaldNbTN3UE1lalkz WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGNE4zRTlZYVhSN0tqV01tM3dQTWVqWTNZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZDRjgvMDVFNEMyRDI4QjAyMTFFQzg1RjJEMDc0QzRGOUFFMDIvODQ0RkI0NDAz NkEyMTFFRUFFOTAxQTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFns/AwDQYJKoZIhvcNAQELBQADggEBAIi+eR4IT2dB52NU KN/VsbCl7Tu3iyZC/R1Zothc3uoN0g5FzF6ByqMQxrIItYCBevMnJevoEKJed9b3 hjPivuLDPJdX3vInH/VHiE4wxnSl6xaMwRs4Rk7rYTUNbFMe+ebsDT/L+5V1CKNB q9mcv3Tf59C/ubIt0HRjSnbPwnBm89nNmjt7Q+kKrAekdDrIyIiZ7N9/Ut6ODJpJ Ao/gPMAiErADtpZPc+RUtimb1D+iSIr/qj8NZfnkDseHHK+tqlkGV1LI20lRIkMm RxVjZTZvM4S7bsLhShq9eqtatqAUbTQjQJQyO3H7eVnZ9CpH+1NYTY0pf6lhHo2i r5gfN7A= -----END CERTIFICATE-----Generated at Sat Apr 5 19:26:17 2025 by rpki-client