$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/761C9E22171811EF81DCE817C4F9AE02.roa File: 761C9E22171811EF81DCE817C4F9AE02.roa (raw, json) Hash identifier: oCqXqO2+2B2y23GtVqHDvlPPKEZ12v6qNM3L54KcM68= Subject key identifier: D1:6D:A1:D3:23:F2:6F:DC:0A:91:76:BE:43:4C:D0:9D:56:5C:19:EB Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 06AA Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/761C9E22171811EF81DCE817C4F9AE02.roa Signing time: Tue 18 Feb 2025 23:41:21 +0000 ROA not before: Tue 18 Feb 2025 23:41:21 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 36131 IP address blocks: 103.208.252.0/22 maxlen: 23 103.208.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1706 (0x6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B Validity Not Before: Feb 18 23:41:21 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67b51aa1-41a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a8:56:f1:14:00:72:59:0e:cf:4e:3e:6e:fa: f7:e4:b6:20:24:b6:18:55:cb:6e:80:c8:1b:c4:d6: c5:91:e3:f4:2d:85:e5:3d:51:e4:95:d9:3b:f7:da: db:42:bf:29:2b:1d:fa:8d:2a:ad:a3:c3:2e:66:83: 7c:c2:e2:5a:24:dc:ae:2a:c7:b7:91:3b:fa:18:45: 47:94:53:5b:d1:a4:24:57:54:0c:e4:12:55:9a:e3: c2:e2:69:db:36:9b:c1:f7:c2:c0:cf:8b:df:d2:04: ab:98:15:75:86:e5:ed:38:5f:3b:25:c4:b3:dd:fe: cd:55:04:94:85:52:31:cf:fc:d9:f0:9a:29:22:09: d1:c5:27:03:1f:ed:4e:c9:0b:d5:24:1f:77:ff:fb: 67:0f:56:cc:fe:7f:0d:69:9b:c9:78:49:1a:ea:6f: 84:b9:1a:70:8f:03:f4:21:da:16:ff:1c:af:47:6a: 9a:d8:58:7e:db:24:b5:a9:15:98:3d:98:08:b8:74: 3d:af:19:17:e0:cd:c1:ac:b3:a1:a6:76:68:c3:92: 44:c6:6d:c9:60:8c:1c:c5:27:2d:28:4a:26:ef:66: 09:37:c5:b3:bc:e6:c5:a8:b6:2e:49:ec:52:00:34: e3:61:a6:92:09:1d:29:dd:46:fe:8a:16:d2:bd:fb: bc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6D:A1:D3:23:F2:6F:DC:0A:91:76:BE:43:4C:D0:9D:56:5C:19:EB X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/761C9E22171811EF81DCE817C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.208.252.0/22 Signature Algorithm: sha256WithRSAEncryption da:b7:35:1e:20:8b:30:04:e5:4e:09:c2:e1:d4:9d:12:06:78: 1a:5b:96:3e:69:c3:8d:52:6b:6f:4f:c6:21:5d:cf:82:0a:2e: 4d:8a:cc:60:29:c2:83:88:c3:1a:21:1e:da:82:4c:27:d1:cb: 85:1f:f7:8b:72:f2:02:ff:b2:2c:72:dd:e9:ac:ad:ad:c9:ff: 99:a7:34:e8:76:90:c9:91:8f:5b:0a:34:9d:cf:29:4b:14:5c: e7:2a:ff:78:1b:d0:51:3a:9d:68:50:7d:fd:8a:b5:a1:63:ba: 74:e4:90:75:a6:3e:e7:9e:85:50:8d:a6:c5:9f:c0:fa:e1:ae: 64:33:b9:55:71:3f:ea:cd:22:88:52:46:9d:40:a7:5f:4f:f3: 0c:80:a8:3b:69:70:a3:bd:0d:e1:29:dd:03:16:cc:7b:22:9d: cc:ff:2b:7a:e5:29:c9:09:21:d3:cf:0f:7e:48:c4:49:ed:a6: 6a:55:49:23:05:dc:e7:07:86:a4:d5:2d:ac:26:00:05:e2:5c: 15:b6:cb:6b:ca:3b:57:10:10:7c:31:06:8e:12:b4:c6:ef:c0: 83:3e:9b:24:80:f0:a1:4e:15:7c:2c:4b:1c:e3:ec:e7:35:a7: 0c:4a:6e:7f:7f:3b:5f:8e:73:60:46:8e:f3:ac:62:10:51:b3: 54:5b:09:90 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjUwMjE4MjM0MTIxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I1MWFhMS00MWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqhW8RQAclkOz04+bvr35LYgJLYYVctugMgbxNbFkeP0LYXlPVHkldk799rb Qr8pKx36jSqto8MuZoN8wuJaJNyuKse3kTv6GEVHlFNb0aQkV1QM5BJVmuPC4mnb NpvB98LAz4vf0gSrmBV1huXtOF87JcSz3f7NVQSUhVIxz/zZ8JopIgnRxScDH+1O yQvVJB93//tnD1bM/n8NaZvJeEka6m+EuRpwjwP0IdoW/xyvR2qa2Fh+2yS1qRWY PZgIuHQ9rxkX4M3BrLOhpnZow5JExm3JYIwcxSctKEom72YJN8WzvObFqLYuSexS ADTjYaaSCR0p3Ub+ihbSvfu8oQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNFtodMj 8m/cCpF2vkNM0J1WXBnrMB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVFMUIvMjA2REZDMjg2NDM4MTFFQjk0NjgzQjRFQzRGOUFFMDIvNzYxQzlFMjIx NzE4MTFFRjgxRENFODE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn0PwwDQYJKoZIhvcNAQELBQADggEBANq3NR4gizAE5U4J wuHUnRIGeBpblj5pw41Sa29PxiFdz4IKLk2KzGApwoOIwxohHtqCTCfRy4Uf94ty 8gL/sixy3emsra3J/5mnNOh2kMmRj1sKNJ3PKUsUXOcq/3gb0FE6nWhQff2KtaFj unTkkHWmPueehVCNpsWfwPrhrmQzuVVxP+rNIohSRp1Ap19P8wyAqDtpcKO9DeEp 3QMWzHsincz/K3rlKckJIdPPD35IxEntpmpVSSMF3OcHhqTVLawmAAXiXBW2y2vK O1cQEHwxBo4StMbvwIM+mySA8KFOFXwsSxzj7Oc1pwxKbn9/O1+Oc2BGjvOsYhBR s1RbCZA= -----END CERTIFICATE-----Generated at Sat Apr 5 02:20:43 2025 by rpki-client