$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/3003C4BA7C7711EEB9E0BE15C4F9AE02.roa File: 3003C4BA7C7711EEB9E0BE15C4F9AE02.roa (raw, json) Hash identifier: v6P92PiB+jeVRQvFzDPkmeCK4o2bOi69O9K8uU73bTE= Subject key identifier: 39:45:A8:FA:E5:67:26:67:11:43:C9:48:52:0A:4E:00:22:B6:A0:2B Certificate issuer: /CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701 Certificate serial: 059F Authority key identifier: C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/3003C4BA7C7711EEB9E0BE15C4F9AE02.roa Signing time: Thu 03 Apr 2025 09:22:45 +0000 ROA not before: Thu 03 Apr 2025 09:22:45 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 13150 IP address blocks: 103.203.220.0/24 maxlen: 24 103.203.221.0/24 maxlen: 24 103.203.222.0/24 maxlen: 24 103.203.223.0/24 maxlen: 24 123.253.152.0/24 maxlen: 24 123.253.153.0/24 maxlen: 24 123.253.154.0/24 maxlen: 24 123.253.155.0/24 maxlen: 24 150.195.208.0/24 maxlen: 24 150.195.209.0/24 maxlen: 24 150.195.210.0/24 maxlen: 24 150.195.211.0/24 maxlen: 24 150.195.212.0/24 maxlen: 24 150.195.214.0/24 maxlen: 24 150.195.217.0/24 maxlen: 24 150.195.218.0/24 maxlen: 24 150.195.219.0/24 maxlen: 24 150.195.220.0/24 maxlen: 24 150.195.221.0/24 maxlen: 24 150.195.222.0/24 maxlen: 24 150.195.223.0/24 maxlen: 24 202.75.242.0/24 maxlen: 24 202.75.243.0/24 maxlen: 24 202.75.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1439 (0x59f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4D3D Validity Not Before: Apr 3 09:22:45 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67ee5364-89bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:4b:35:74:e4:e4:03:de:ef:cf:e3:a3:6c: 0a:c7:82:de:38:b4:bc:4f:31:f1:f9:87:6d:84:af: b0:f8:ec:fd:d1:8f:e6:bb:af:c1:01:a4:af:24:c9: bb:a1:a7:04:32:35:38:eb:a0:9f:1c:db:1a:f4:68: dd:3d:27:8a:76:0c:40:a5:b7:ea:06:fe:b9:11:f4: 43:ae:6f:e4:bb:7f:8c:17:b9:11:63:fc:a0:75:22: 96:02:fb:9e:6a:05:a7:d0:7b:0a:70:0d:2c:30:da: 85:d8:95:c5:77:11:93:28:49:74:40:fb:d1:d4:8a: bc:54:e0:97:ce:a3:76:fa:77:86:6f:98:6d:05:26: cf:c9:94:7c:b8:56:0c:4d:ac:50:3b:3a:c0:fe:d0: b8:3b:34:49:cf:38:31:57:70:48:8e:81:18:0d:5b: da:14:78:1b:bb:b7:d7:a5:84:f6:8b:f8:58:46:aa: c7:d0:7b:b8:bd:a0:d3:f6:ec:34:d3:8e:d1:12:d4: c3:8d:ef:5c:73:5b:5b:f5:ab:1c:de:8b:09:f7:f5: a0:7e:04:2d:4e:35:37:34:41:30:db:40:38:88:de: 17:2d:b1:5a:41:ef:6a:be:43:b7:59:9e:dd:3b:df: ed:76:d1:07:df:62:15:8c:e2:5b:a1:20:57:32:1e: 12:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:45:A8:FA:E5:67:26:67:11:43:C9:48:52:0A:4E:00:22:B6:A0:2B X509v3 Authority Key Identifier: keyid:C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/3003C4BA7C7711EEB9E0BE15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.203.220.0/22 123.253.152.0/22 150.195.208.0-150.195.212.255 150.195.214.0/24 150.195.217.0-150.195.223.255 202.75.242.0/23 202.75.247.0/24 Signature Algorithm: sha256WithRSAEncryption 48:06:f4:51:2d:63:0b:12:f6:a8:9c:3b:97:35:11:ce:6b:a2: 3c:e0:1a:25:3f:80:96:18:e1:e8:ff:9a:24:b0:8d:10:5a:d8: 1c:6c:d9:61:34:68:00:0f:a4:20:4b:65:75:7d:be:dd:ee:1e: 9f:03:ac:60:07:f2:77:4a:19:50:05:29:66:6f:63:47:20:3f: e8:75:0e:44:30:66:fa:09:b1:64:20:0b:60:14:63:0a:a3:67: f9:8a:86:5f:95:de:4c:d3:ea:29:30:ed:ae:ac:2d:92:bb:d4: 44:ad:e3:ee:fd:dd:da:10:2a:11:ae:24:0e:37:16:05:1f:39: 30:d4:d5:72:3e:e4:51:1a:b9:15:7e:b6:28:44:f9:38:d8:be: bb:03:26:7d:cb:ad:17:76:4e:e5:8c:75:bb:f4:61:a8:ea:18: 5f:3c:f0:9e:d1:c2:db:bf:83:df:f0:99:42:58:65:02:27:7b: f7:34:e1:03:0e:5c:69:03:2d:0c:a2:25:65:f9:8f:18:8b:a0: bd:0a:b5:ef:86:dd:03:a1:80:67:99:50:a2:2e:b9:ac:c7:91: e5:d0:44:8c:ae:82:1d:69:a0:fb:80:05:87:ca:42:de:dc:cf: 09:b2:cb:23:0e:97:58:ca:fc:62:d6:d8:73:71:6a:f1:3f:25: 14:b1:1f:3f -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgICBZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTREM0QxMTAvBgNVBAUTKEM4MDcwRkQwNjFBODUxRkY4QUVERTBERTBDMzYwN0VF Qjk4RkY3MDEwHhcNMjUwNDAzMDkyMjQ1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VlNTM2NC04OWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQ5LNXTk5APe78/jo2wKx4LeOLS8TzHx+YdthK+w+Oz90Y/mu6/BAaSvJMm7 oacEMjU466CfHNsa9GjdPSeKdgxApbfqBv65EfRDrm/ku3+MF7kRY/ygdSKWAvue agWn0HsKcA0sMNqF2JXFdxGTKEl0QPvR1Iq8VOCXzqN2+neGb5htBSbPyZR8uFYM TaxQOzrA/tC4OzRJzzgxV3BIjoEYDVvaFHgbu7fXpYT2i/hYRqrH0Hu4vaDT9uw0 047REtTDje9cc1tb9asc3osJ9/WgfgQtTjU3NEEw20A4iN4XLbFaQe9qvkO3WZ7d O9/tdtEH32IVjOJboSBXMh4SpwIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFDlFqPrl ZyZnEUPJSFIKTgAitqArMB8GA1UdIwQYMBaAFMgHD9BhqFH/iu3g3gw2B+65j/cB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEQzRC9CMDIwMkQzMkQ4 QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi95QWNQMEdHb1VmLUs3ZURlRERZSDdybVA5 d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lBY1AwR0dvVWYtSzdlRGVERFlIN3JtUDl3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTREM0QvQjAyMDJEMzJEOEI5MTFFQkFCQzFGNDg1QzRGOUFFMDIvMzAwM0M0QkE3 Qzc3MTFFRUI5RTBCRTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUwYIKwYBBQUHAQcBAf8E RDBCMEAEAgABMDoDBAJny9wDBAJ7/ZgwDAMEBJbD0AMEAJbD1AMEAJbD1jAMAwQA lsPZAwQFlsPAAwQBykvyAwQAykv3MA0GCSqGSIb3DQEBCwUAA4IBAQBIBvRRLWML EvaonDuXNRHOa6I84BolP4CWGOHo/5oksI0QWtgcbNlhNGgAD6QgS2V1fb7d7h6f A6xgB/J3ShlQBSlmb2NHID/odQ5EMGb6CbFkIAtgFGMKo2f5ioZfld5M0+opMO2u rC2Su9RErePu/d3aECoRriQONxYFHzkw1NVyPuRRGrkVfrYoRPk42L67AyZ9y60X dk7ljHW79GGo6hhfPPCe0cLbv4Pf8JlCWGUCJ3v3NOEDDlxpAy0MoiVl+Y8Yi6C9 CrXvht0DoYBnmVCiLrmsx5Hl0ESMroIdaaD7gAWHykLe3M8JsssjDpdYyvxi1thz cWrxPyUUsR8/ -----END CERTIFICATE-----Generated at Sat Apr 5 07:12:38 2025 by rpki-client