$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/84706C70D12411EBAD06CD48C4F9AE02.roa File: 84706C70D12411EBAD06CD48C4F9AE02.roa (raw, json) Hash identifier: +VQvv+uWVXkQstiOmhvQpZ3+r0zEs8UArQ0Y/mZ6P60= Subject key identifier: D6:F3:AA:74:23:8D:D1:E7:FE:30:BD:76:76:4F:BA:AF:7F:1D:CB:11 Certificate issuer: /CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4 Certificate serial: 0565 Authority key identifier: 60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/84706C70D12411EBAD06CD48C4F9AE02.roa Signing time: Thu 30 Jan 2025 23:42:50 +0000 ROA not before: Thu 30 Jan 2025 23:42:50 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 134479 IP address blocks: 103.160.252.0/23 maxlen: 23 103.160.252.0/24 maxlen: 24 103.160.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1381 (0x565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF55D, serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4 Validity Not Before: Jan 30 23:42:50 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=679c0e79-1e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:20:f9:22:09:27:53:08:f7:e4:e0:32:80:68: d4:60:0a:a3:14:1c:04:eb:9d:1c:a4:e9:c9:6c:6f: b1:cd:f2:2c:21:c8:93:36:cb:37:a6:e6:25:fb:f7: a6:38:91:6f:ed:fa:30:82:a8:49:81:df:b0:1e:3c: 21:a3:f1:0b:8e:13:05:5b:72:55:b9:25:06:01:db: c6:a6:5d:d6:b6:ae:9e:40:37:f8:db:a3:05:11:e4: 8d:d0:92:84:3d:fa:9c:ef:3e:98:c6:23:4e:40:ee: e5:ef:b5:44:1d:e9:2c:3e:50:b8:b4:08:84:a4:1c: fd:32:13:84:25:69:4f:cd:61:50:06:f8:aa:b4:03: 03:b0:5c:9e:e1:64:ee:38:af:93:ab:02:9e:0d:09: b5:37:79:8d:f0:87:a3:5c:60:3c:7d:a1:e9:1b:4d: 76:2d:d5:64:76:55:9d:0e:17:04:f9:66:e0:9f:58: cf:c1:90:78:05:11:b8:a4:57:4b:70:b3:f2:a2:ca: 04:0b:2c:80:98:69:32:7c:70:f7:27:b7:34:02:5d: 93:da:43:65:9d:cb:58:e2:0f:fe:ff:6d:83:15:31: 29:6e:c5:46:9f:82:02:0c:d0:37:56:06:8b:03:b1: 97:17:30:7c:05:68:d8:c1:41:84:8b:f2:6b:20:e2: c0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F3:AA:74:23:8D:D1:E7:FE:30:BD:76:76:4F:BA:AF:7F:1D:CB:11 X509v3 Authority Key Identifier: keyid:60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/84706C70D12411EBAD06CD48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.160.252.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:1a:a9:d8:57:3a:b6:21:eb:22:60:97:73:4f:74:50:5b:1d: db:03:fa:4f:ea:6c:4b:17:0c:b7:c8:88:98:82:f5:d6:4e:47: 43:6f:0b:14:cf:13:76:7a:b2:6b:20:74:6a:15:96:a0:08:b4: c8:75:2d:0e:bd:7c:3d:e2:95:33:be:73:a0:04:e0:9a:a1:49: b2:e6:f9:38:fa:79:42:67:62:d2:c4:23:00:4a:e9:10:92:c6: 71:7c:71:89:e0:62:7d:99:6b:db:04:d8:60:6a:a5:07:56:f5: 8a:60:e3:09:e3:cd:f2:48:bb:d8:fc:d6:d2:77:79:c7:a1:31: 76:57:64:c7:26:bd:31:d0:a2:c0:cb:d0:95:7d:1f:84:71:7f: ca:44:04:7d:c7:83:65:2d:90:fb:44:c8:c6:e7:c7:cd:dd:ca: bb:dc:9f:d1:22:b2:a1:64:80:c2:4a:2b:9e:af:06:e4:fa:1a: 2b:b5:d7:f4:d1:c4:ae:2d:47:0b:55:30:ea:cd:eb:9e:6e:f0: d6:0d:d5:ca:e3:ff:32:f7:12:5c:0f:6c:9a:49:66:85:1e:bf: e6:c0:bf:a2:2b:b6:f3:a3:10:1b:d0:f6:ca:16:aa:eb:53:35: d2:eb:99:c4:9f:ad:27:0d:96:0d:1f:41:dc:03:7c:b1:66:63: d0:ed:cb:cd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY1NUQxMTAvBgNVBAUTKDYwREMzNzVEQUFDQzk3ODFCQjcwMkUwMzg4MkEzMjVG RUJCRkU5QjQwHhcNMjUwMTMwMjM0MjUwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzljMGU3OS0xZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSD5IgknUwj35OAygGjUYAqjFBwE650cpOnJbG+xzfIsIciTNss3puYl+/em OJFv7fowgqhJgd+wHjwho/ELjhMFW3JVuSUGAdvGpl3Wtq6eQDf426MFEeSN0JKE Pfqc7z6YxiNOQO7l77VEHeksPlC4tAiEpBz9MhOEJWlPzWFQBviqtAMDsFye4WTu OK+TqwKeDQm1N3mN8IejXGA8faHpG012LdVkdlWdDhcE+Wbgn1jPwZB4BRG4pFdL cLPyosoECyyAmGkyfHD3J7c0Al2T2kNlnctY4g/+/22DFTEpbsVGn4ICDNA3VgaL A7GXFzB8BWjYwUGEi/JrIOLAiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNbzqnQj jdHn/jC9dnZPuq9/HcsRMB8GA1UdIwQYMBaAFGDcN12qzJeBu3AuA4gqMl/rv+m0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjU1RC9FN0E3N0JFRUQx MUYxMUVCOUU1QjFBODJDNEY5QUUwMi9ZTnczWGFyTWw0RzdjQzREaUNveVgtdV82 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lOdzNYYXJNbDRHN2NDNERpQ295WC11XzZiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY1NUQvRTdBNzdCRUVEMTFGMTFFQjlFNUIxQTgyQzRGOUFFMDIvODQ3MDZDNzBE MTI0MTFFQkFEMDZDRDQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnoPwwDQYJKoZIhvcNAQELBQADggEBAC0aqdhXOrYh6yJg l3NPdFBbHdsD+k/qbEsXDLfIiJiC9dZOR0NvCxTPE3Z6smsgdGoVlqAItMh1LQ69 fD3ilTO+c6AE4JqhSbLm+Tj6eUJnYtLEIwBK6RCSxnF8cYngYn2Za9sE2GBqpQdW 9Ypg4wnjzfJIu9j81tJ3ecehMXZXZMcmvTHQosDL0JV9H4Rxf8pEBH3Hg2UtkPtE yMbnx83dyrvcn9EisqFkgMJKK56vBuT6Giu11/TRxK4tRwtVMOrN655u8NYN1crj /zL3ElwPbJpJZoUev+bAv6IrtvOjEBvQ9soWqutTNdLrmcSfrScNlg0fQdwDfLFm Y9Dty80= -----END CERTIFICATE-----Generated at Sun Apr 13 01:53:23 2025 by rpki-client