$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa File: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (raw, json) Hash identifier: hWe9YX01SNRY++LLyLpvdVJBXAjQTAsl1yrwC2O21mY= Subject key identifier: 08:A7:E7:E5:B6:49:9F:BC:6D:8F:A0:0D:24:56:43:1A:4A:8E:04:99 Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Certificate serial: 0331 Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa Signing time: Sun 12 Jan 2025 12:10:08 +0000 ROA not before: Sun 12 Jan 2025 12:10:08 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 147314 IP address blocks: 103.35.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 817 (0x331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D90B9 Validity Not Before: Jan 12 12:10:08 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6783b120-8e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:71:96:40:4d:8d:60:2b:39:b2:fb:fc:22:8e: f1:a6:9a:4a:25:5a:4b:b3:e8:84:f7:a6:b1:2a:89: 51:b8:0d:e9:8c:51:0d:dd:b6:6c:70:45:06:b6:b6: 56:85:0f:1e:82:13:2a:fe:cc:d2:cc:a2:e6:f9:53: 8e:fc:2e:1c:30:7b:70:f8:e1:a6:33:7f:ea:ba:f4: 3f:be:c5:6e:3d:75:5f:a8:f9:da:ef:98:47:89:89: 5d:77:47:ff:99:2c:6a:81:08:da:2c:b3:27:b0:44: 10:4f:26:4d:fe:f5:c6:ed:55:4c:c1:cb:b6:66:c7: 26:6f:e2:57:e1:f3:21:48:f0:a4:6b:02:3b:86:74: ff:77:10:5a:e0:99:42:14:32:ce:55:af:f5:d8:ad: 7e:8b:5b:77:45:cf:7b:90:60:b7:d8:ee:f7:d4:2d: 2f:6b:c8:b3:38:c5:7f:e2:ec:85:ff:37:66:40:b8: 73:06:6d:b9:bd:05:de:9b:30:e2:ce:cc:27:de:48: 84:26:e1:63:99:88:2a:09:23:64:9d:1b:4f:a9:25: 13:dd:59:56:6b:ac:3b:d9:93:79:b4:02:8f:26:ac: f6:7f:ea:5c:94:7f:60:39:cf:78:a9:19:12:41:eb: 60:66:1c:8b:c8:e1:49:d4:29:64:ee:d2:f6:f8:16: 8f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A7:E7:E5:B6:49:9F:BC:6D:8F:A0:0D:24:56:43:1A:4A:8E:04:99 X509v3 Authority Key Identifier: keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.35.156.0/24 Signature Algorithm: sha256WithRSAEncryption 36:73:99:56:81:33:c8:54:ed:33:46:0d:fb:c6:07:3b:9d:d0: 24:68:19:d6:a2:39:87:7c:88:8d:ea:89:30:fb:a8:d4:35:a7: 41:af:a0:9a:2c:91:9e:15:a1:0e:73:83:e9:ac:ef:19:d1:15: e3:2d:e0:d4:19:46:b4:b0:e6:6d:c7:0d:0b:98:a4:8f:3b:49: db:f2:0a:3e:d8:de:e2:4f:37:3a:62:00:64:8d:64:55:27:58: 84:da:50:62:90:ca:18:5b:5f:1c:7a:b8:b2:3c:b7:9e:95:83: 5d:6d:ea:e4:20:52:64:b7:ba:e9:14:3b:f8:32:7b:9b:77:a2: c1:19:4b:25:ac:ff:6c:44:eb:bb:eb:a5:68:1c:ca:3c:5e:76: 31:74:83:ff:f7:b0:17:56:84:dc:d7:6c:aa:60:fc:c8:74:2f: 82:ff:05:08:70:05:5f:df:54:46:3b:5a:4a:d5:68:97:e1:0c: af:40:96:2c:16:ba:b4:54:10:64:28:c0:46:d9:26:5a:83:26: b6:5f:6d:cb:c5:e5:c8:1d:ed:63:0d:9a:de:3b:be:a8:42:af: 0a:81:7f:26:cd:f5:61:08:a9:e5:5e:77:55:bc:fb:2d:ab:c9: 89:b9:5f:ee:47:c6:7e:de:52:59:04:af:dd:ca:7c:2d:09:56: b1:68:8d:ab -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwQjkxMTAvBgNVBAUTKDVBMTgzQjFFMEZGQ0E2REFERDc5NkY2QkI0QUFBRjkz NjkyRjBEQzkwHhcNMjUwMTEyMTIxMDA4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzgzYjEyMC04ZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnGWQE2NYCs5svv8Io7xpppKJVpLs+iE96axKolRuA3pjFEN3bZscEUGtrZW hQ8eghMq/szSzKLm+VOO/C4cMHtw+OGmM3/quvQ/vsVuPXVfqPna75hHiYldd0f/ mSxqgQjaLLMnsEQQTyZN/vXG7VVMwcu2Zscmb+JX4fMhSPCkawI7hnT/dxBa4JlC FDLOVa/12K1+i1t3Rc97kGC32O731C0va8izOMV/4uyF/zdmQLhzBm25vQXemzDi zswn3kiEJuFjmYgqCSNknRtPqSUT3VlWa6w72ZN5tAKPJqz2f+pclH9gOc94qRkS QetgZhyLyOFJ1Clk7tL2+BaPgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAin5+W2 SZ+8bY+gDSRWQxpKjgSZMB8GA1UdIwQYMBaAFFoYOx4P/Kba3Xlva7Sqr5NpLw3J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTBCOS9EMUVBOENGNEI1 ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0cmRlVzlydEtxdmsya3ZE Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doZzdIZ184cHRyZGVXOXJ0S3F2azJrdkRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDkwQjkvRDFFQThDRjRCNTg3MTFFQ0JFREI5MjI5QzRGOUFFMDIvMkEyNUJCNUVE MERFMTFFRkJDQzdGNzZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnI5wwDQYJKoZIhvcNAQELBQADggEBADZzmVaBM8hU7TNG DfvGBzud0CRoGdaiOYd8iI3qiTD7qNQ1p0GvoJoskZ4VoQ5zg+ms7xnRFeMt4NQZ RrSw5m3HDQuYpI87SdvyCj7Y3uJPNzpiAGSNZFUnWITaUGKQyhhbXxx6uLI8t56V g11t6uQgUmS3uukUO/gye5t3osEZSyWs/2xE67vrpWgcyjxedjF0g//3sBdWhNzX bKpg/Mh0L4L/BQhwBV/fVEY7WkrVaJfhDK9AliwWurRUEGQowEbZJlqDJrZfbcvF 5cgd7WMNmt47vqhCrwqBfybN9WEIqeVed1W8+y2ryYm5X+5Hxn7eUlkEr93KfC0J VrFojas= -----END CERTIFICATE-----Generated at Sun Apr 6 12:58:35 2025 by rpki-client