$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/1A0FD01411BC11EBA0759F52C4F9AE02.roa File: 1A0FD01411BC11EBA0759F52C4F9AE02.roa (raw, json) Hash identifier: UOZRKzCJH5HWiY2RxPCw9LX5ZD4SHgioNH/U/hkmK9U= Subject key identifier: FA:6B:E5:D4:B0:DC:33:0E:36:9A:0F:E5:9E:CD:8A:FF:98:56:61:0B Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Certificate serial: 076D Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/1A0FD01411BC11EBA0759F52C4F9AE02.roa Signing time: Mon 31 Mar 2025 21:52:13 +0000 ROA not before: Mon 31 Mar 2025 21:52:13 +0000 ROA not after: Fri 01 Aug 2025 00:00:00 +0000 asID: 138545 IP address blocks: 103.147.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1901 (0x76d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A Validity Not Before: Mar 31 21:52:13 2025 GMT Not After : Aug 1 00:00:00 2025 GMT Subject: CN=67eb0e8d-26af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fb:dd:f5:16:6f:a4:99:6b:63:4c:7a:aa:53: be:3c:45:48:f3:4f:66:39:af:f4:0e:53:14:08:ea: a8:50:2b:2c:14:25:b4:dd:85:b6:14:7a:97:24:50: 59:74:ca:8c:bf:c2:ca:d0:de:67:8c:e0:22:6b:1d: a1:a5:e7:63:38:35:07:34:86:86:a9:8b:12:24:da: e8:fc:05:42:f4:0b:3c:46:54:fb:0f:b6:e8:ac:ab: 32:04:cd:e6:bb:f4:7a:cd:16:30:12:67:d8:cd:ce: d4:da:bd:9c:86:7c:c0:77:0e:f9:e6:93:cc:e7:27: 82:16:d8:20:18:cb:b3:23:e7:7d:4c:97:23:78:6a: e2:7c:fe:97:95:4a:79:28:4b:f5:b9:d2:62:f3:88: fe:5b:37:a8:30:12:ac:50:68:f1:85:08:54:d9:81: 78:45:b0:aa:77:03:32:c9:89:30:22:f2:5c:66:96: 68:bc:93:76:07:a0:a2:84:ad:72:ff:d6:07:e0:a2: d9:7c:1c:0c:5e:da:1e:d9:be:10:3c:dd:e7:6c:86: 7c:7a:b2:d9:f4:d1:1f:0e:f5:85:9e:0e:c8:16:b9: 0f:fe:60:c7:34:19:c0:d2:cf:f3:fb:21:ce:d5:97: 04:4e:9c:e5:09:92:89:2f:5f:4e:de:f6:4f:ed:63: 4a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6B:E5:D4:B0:DC:33:0E:36:9A:0F:E5:9E:CD:8A:FF:98:56:61:0B X509v3 Authority Key Identifier: keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/1A0FD01411BC11EBA0759F52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.198.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:88:8f:d2:1c:cb:59:25:3a:46:bd:0d:bf:23:49:e2:6d:cb: b2:15:fe:a2:79:44:a0:06:21:99:2c:ff:0c:f5:ba:af:8d:8b: 03:ee:90:62:85:90:d8:57:62:e4:bd:a0:f1:8d:7d:d0:0b:4b: f3:e0:47:b3:5d:2d:fa:43:2e:42:70:10:0d:a8:5b:ef:8d:6c: 1e:26:2a:6b:25:4b:b5:57:f7:36:8e:af:8b:42:b8:99:40:28: 16:cc:6b:aa:1a:9a:c1:ed:d4:a0:a7:1f:88:2d:d2:a0:e2:73: 0c:73:b5:58:da:84:a6:69:8d:2e:0c:d5:1f:c6:66:90:7b:ce: d7:78:2b:5f:24:c6:48:29:c8:26:a2:4f:e3:a6:88:e4:44:cf: 59:47:95:ee:8b:6f:f8:5d:ec:6f:e8:7c:46:14:1b:ee:24:c2: 55:4a:84:d9:e4:ce:28:f8:3c:b5:6f:90:7a:78:9f:c4:e7:7a: c6:24:a8:90:eb:41:0d:64:9e:d6:87:33:de:ea:9e:b2:c3:1b: 2a:9b:ec:c9:eb:9a:a1:b0:c2:27:1c:4a:f5:d4:bc:fa:db:64: 0d:e4:37:a7:ff:52:18:83:84:ac:72:e2:20:0e:5b:96:9d:c6: 3b:3e:c2:70:f9:96:64:cc:fe:44:3e:9e:af:a9:6e:b1:c4:a8: 97:48:a6:8b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKEVCQkI0NzNEMTcwQjZCODMwNkQxRTE2QzhCOTUyMzM0 QURENDBGMTAwHhcNMjUwMzMxMjE1MjEzWhcNMjUwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ViMGU4ZC0yNmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Pvd9RZvpJlrY0x6qlO+PEVI809mOa/0DlMUCOqoUCssFCW03YW2FHqXJFBZ dMqMv8LK0N5njOAiax2hpedjODUHNIaGqYsSJNro/AVC9As8RlT7D7borKsyBM3m u/R6zRYwEmfYzc7U2r2chnzAdw755pPM5yeCFtggGMuzI+d9TJcjeGrifP6XlUp5 KEv1udJi84j+WzeoMBKsUGjxhQhU2YF4RbCqdwMyyYkwIvJcZpZovJN2B6CihK1y /9YH4KLZfBwMXtoe2b4QPN3nbIZ8erLZ9NEfDvWFng7IFrkP/mDHNBnA0s/z+yHO 1ZcETpzlCZKJL19O3vZP7WNK7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFPpr5dSw 3DMONpoP5Z7Niv+YVmELMB8GA1UdIwQYMBaAFOu7Rz0XC2uDBtHhbIuVIzSt1A8Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0TUcwZUZzaTVVak5LM1VE eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dEhQUmNMYTRNRzBlRnNpNVVqTkszVUR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlGNUEvMDg5OEIyM0ExMUJBMTFFQkJDMUE1ODRDQzRGOUFFMDIvMUEwRkQwMTQx MUJDMTFFQkEwNzU5RjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnk8YwDQYJKoZIhvcNAQELBQADggEBAI+Ij9Icy1klOka9 Db8jSeJty7IV/qJ5RKAGIZks/wz1uq+NiwPukGKFkNhXYuS9oPGNfdALS/PgR7Nd LfpDLkJwEA2oW++NbB4mKmslS7VX9zaOr4tCuJlAKBbMa6oamsHt1KCnH4gt0qDi cwxztVjahKZpjS4M1R/GZpB7ztd4K18kxkgpyCaiT+OmiOREz1lHle6Lb/hd7G/o fEYUG+4kwlVKhNnkzij4PLVvkHp4n8TnesYkqJDrQQ1kntaHM97qnrLDGyqb7Mnr mqGwwiccSvXUvPrbZA3kN6f/UhiDhKxy4iAOW5adxjs+wnD5lmTM/kQ+nq+pbrHE qJdIpos= -----END CERTIFICATE-----Generated at Sat Apr 5 04:54:43 2025 by rpki-client