$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/C76E25524B1711EE8CE6C778C4F9AE02.roa File: C76E25524B1711EE8CE6C778C4F9AE02.roa (raw, json) Hash identifier: HsErDDItwf5JjFC0N3vp/RvWt4W7KbQd/xCB8B2lvo4= Subject key identifier: 86:A2:2A:92:67:96:18:4A:D1:34:AE:1A:43:A3:04:93:08:93:C3:00 Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B Certificate serial: 03B2 Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/C76E25524B1711EE8CE6C778C4F9AE02.roa Signing time: Wed 05 Feb 2025 00:33:44 +0000 ROA not before: Wed 05 Feb 2025 00:33:44 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 142127 IP address blocks: 103.179.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 946 (0x3b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFCF8 Validity Not Before: Feb 5 00:33:44 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a2b1e8-a16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:da:b8:f8:d5:9e:b4:2b:42:a6:7f:14:f2:fa: d6:da:1c:ed:30:0f:4a:24:48:b1:56:36:27:b6:99: 33:e0:40:af:a0:1f:13:27:dd:66:29:76:f9:54:b9: 1e:14:33:8b:4d:e9:97:10:12:de:9b:f0:10:d8:0f: 5c:55:45:a6:4e:67:ed:19:b5:ef:27:ec:eb:e0:be: 65:d3:3e:0d:99:3d:0f:b6:29:3f:d7:e0:54:50:16: df:70:51:ab:be:f0:56:0b:9e:80:69:7b:4f:7c:ce: 63:e0:a8:e8:02:63:f2:b1:42:61:84:b0:3f:6d:c3: 14:2d:db:f5:8b:78:0b:d7:e0:d5:cd:b0:b5:50:c0: ec:6a:eb:a2:d5:86:cf:9c:04:c3:70:ca:0e:ba:0e: f7:26:13:3a:cd:00:5a:b1:8b:85:b7:e7:d2:82:bd: 73:5d:88:16:21:06:fe:44:19:a8:c4:b8:5e:16:19: 4a:bb:ab:a4:c5:ec:2b:bf:77:1b:3a:ad:ee:59:80: 24:5a:51:00:33:24:f7:0a:d2:43:7e:ef:f8:30:0d: b8:b4:15:9a:0b:b3:fc:33:53:4d:10:2a:56:b2:33: ad:1c:da:c0:3e:1e:39:65:a1:b8:70:f2:fb:9c:d4: 4b:26:b1:57:fb:d3:5a:f3:ea:ee:ff:0c:f8:69:55: cf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A2:2A:92:67:96:18:4A:D1:34:AE:1A:43:A3:04:93:08:93:C3:00 X509v3 Authority Key Identifier: keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/C76E25524B1711EE8CE6C778C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.240.0/23 Signature Algorithm: sha256WithRSAEncryption 28:35:e0:29:7e:82:49:9b:34:66:bf:d7:f0:24:29:06:e3:5b: ca:2a:eb:e9:9f:df:d2:46:ea:22:8c:ff:68:8a:98:92:02:31: 3d:1a:f3:b3:c5:74:03:bc:01:82:35:62:a2:6f:70:d1:40:78: 37:7f:c0:26:7e:ca:ec:de:62:57:5b:0c:f6:59:75:a6:66:a6: cf:ec:e6:a0:e8:71:c8:af:ce:c8:0b:9f:57:9e:c6:f3:12:67: 22:17:2d:15:fc:f3:16:d7:8a:83:2e:85:ce:08:1a:6a:f2:d8: de:1b:4f:16:7e:c8:b5:af:d8:57:a9:e5:00:f7:e5:ca:a5:ec: f7:b8:b7:07:43:23:3f:8b:04:84:d9:93:af:98:2c:bb:4f:50: 44:b4:f1:71:c8:52:29:3c:3c:8d:c1:8c:8d:30:1e:6d:64:4e: 4e:88:c2:14:98:51:42:30:16:1e:ac:2d:b2:63:4f:fe:44:cd: f6:16:fc:6d:31:5d:81:41:25:2f:e3:e4:28:4f:46:de:1c:25: e9:7a:6a:f6:7b:f4:40:b4:53:df:a9:84:5b:e4:52:a6:6d:8d: b9:c1:21:84:77:2f:0e:ef:5d:72:b1:11:30:58:be:99:2a:32: 80:b3:15:30:63:69:6d:d7:75:16:e7:c1:5b:c2:f0:60:d4:90: 0e:5e:3f:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDRjgxMTAvBgNVBAUTKDdDNUUwRERDNEY1ODY5NzQ3QjJBMzU4QzlCN0MwRjMx RThEOEREOEIwHhcNMjUwMjA1MDAzMzQ0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyYjFlOC1hMTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdq4+NWetCtCpn8U8vrW2hztMA9KJEixVjYntpkz4ECvoB8TJ91mKXb5VLke FDOLTemXEBLem/AQ2A9cVUWmTmftGbXvJ+zr4L5l0z4NmT0Ptik/1+BUUBbfcFGr vvBWC56AaXtPfM5j4KjoAmPysUJhhLA/bcMULdv1i3gL1+DVzbC1UMDsauui1YbP nATDcMoOug73JhM6zQBasYuFt+fSgr1zXYgWIQb+RBmoxLheFhlKu6ukxewrv3cb Oq3uWYAkWlEAMyT3CtJDfu/4MA24tBWaC7P8M1NNECpWsjOtHNrAPh45ZaG4cPL7 nNRLJrFX+9Na8+ru/wz4aVXP5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIaiKpJn lhhK0TSuGkOjBJMIk8MAMB8GA1UdIwQYMBaAFHxeDdxPWGl0eyo1jJt8DzHo2N2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNGOC8wNUU0QzJEMjhC MDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFYUjdLaldNbTN3UE1lalkz WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGNE4zRTlZYVhSN0tqV01tM3dQTWVqWTNZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZDRjgvMDVFNEMyRDI4QjAyMTFFQzg1RjJEMDc0QzRGOUFFMDIvQzc2RTI1NTI0 QjE3MTFFRThDRTZDNzc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFns/AwDQYJKoZIhvcNAQELBQADggEBACg14Cl+gkmbNGa/ 1/AkKQbjW8oq6+mf39JG6iKM/2iKmJICMT0a87PFdAO8AYI1YqJvcNFAeDd/wCZ+ yuzeYldbDPZZdaZmps/s5qDoccivzsgLn1eexvMSZyIXLRX88xbXioMuhc4IGmry 2N4bTxZ+yLWv2Fep5QD35cql7Pe4twdDIz+LBITZk6+YLLtPUES08XHIUik8PI3B jI0wHm1kTk6IwhSYUUIwFh6sLbJjT/5EzfYW/G0xXYFBJS/j5ChPRt4cJel6avZ7 9EC0U9+phFvkUqZtjbnBIYR3Lw7vXXKxETBYvpkqMoCzFTBjaW3XdRbnwVvC8GDU kA5eP1k= -----END CERTIFICATE-----Generated at Sat Apr 5 13:22:35 2025 by rpki-client