$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/9FA8BF04E29311EFBB04FB48C4F9AE02.roa File: 9FA8BF04E29311EFBB04FB48C4F9AE02.roa (raw, json) Hash identifier: SqFDkcPJLuKtwmjDpMqZz6gXiK/j9MHeCZUMDCC5s+w= Subject key identifier: 57:9F:77:E7:F4:91:C8:E1:EA:7C:44:BC:5B:9F:E4:6D:E3:7C:4C:CF Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Certificate serial: 2869 Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/9FA8BF04E29311EFBB04FB48C4F9AE02.roa Signing time: Tue 04 Feb 2025 01:01:54 +0000 ROA not before: Tue 04 Feb 2025 01:01:54 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 215619 IP address blocks: 103.254.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10345 (0x2869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F13B9 Validity Not Before: Feb 4 01:01:54 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67a16702-4dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:99:50:54:cb:b7:c3:84:84:82:f4:8b:13: 4c:a3:93:af:cd:93:9c:46:32:bc:13:0a:23:b0:b4: 74:1c:fc:18:ac:ef:15:7a:b1:0a:ac:4b:bb:2e:27: 9c:da:37:9c:7c:fa:9d:44:28:fa:51:46:2c:e6:f5: e3:24:bf:43:93:3a:d3:64:ac:88:4f:40:e2:e7:eb: 66:07:75:52:08:75:6b:29:21:32:00:8d:a2:0a:ba: 71:ea:62:f5:b4:16:8b:41:a3:41:df:7e:18:a4:eb: 92:f5:ac:22:1d:50:b1:42:08:1e:be:04:1a:9e:95: 83:33:b4:01:f1:9e:4b:1f:8e:c6:df:69:69:73:c9: 9b:63:6e:5c:55:70:cb:27:d6:76:92:40:91:2b:37: 10:65:bb:67:91:52:67:35:5d:15:99:aa:2e:aa:28: 99:02:a0:e2:46:6f:2e:af:ea:9a:14:2d:ea:18:aa: 2d:0a:d2:46:44:96:a1:60:e1:a1:8b:ca:74:f3:2b: aa:cb:a4:9f:28:cf:f4:6d:99:bc:b7:d8:91:03:f9: 50:d6:67:fc:97:05:d5:56:06:60:2a:b3:33:05:28: 8f:83:44:0f:1f:df:06:74:59:4f:8c:98:6c:49:1a: 4a:dd:56:4c:54:99:77:a5:2a:43:54:e0:cb:0a:27: 09:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9F:77:E7:F4:91:C8:E1:EA:7C:44:BC:5B:9F:E4:6D:E3:7C:4C:CF X509v3 Authority Key Identifier: keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/9FA8BF04E29311EFBB04FB48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.254.123.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:25:ed:c6:52:5e:57:42:85:58:c8:e8:a9:1b:d3:c2:bf:39: bd:21:59:d7:30:aa:7f:b6:b5:2b:1f:28:87:20:b8:67:47:76: 9e:40:0d:a7:4b:e1:5e:d5:10:69:dc:67:67:c8:35:9b:f4:ed: a6:b9:fc:51:de:29:19:ea:1d:c6:47:4b:1a:da:0f:54:8a:a0: 03:8e:e9:5e:ae:ae:78:d2:c0:ab:20:42:f0:21:34:c7:d9:53: 0d:d2:93:e3:13:70:74:43:10:2d:97:1f:22:7e:8e:ba:86:2f: da:8b:64:5c:44:3b:37:23:94:b5:6d:15:d9:90:88:df:c5:36: 37:07:b4:9e:d6:ae:be:ee:99:ff:3d:1f:77:22:7e:86:82:42: 92:d6:eb:fe:27:23:99:c6:14:cd:b5:14:0f:58:2d:82:1a:d1: 7c:0e:f5:b6:89:9c:35:d4:97:d7:f6:1d:ec:6f:a1:98:47:b6: f2:86:29:13:f5:bc:d1:e6:06:f7:bb:ab:2e:6b:46:78:a6:1b: f1:f8:83:16:bb:aa:39:6c:42:8c:c8:e3:8c:a3:c1:b2:a1:f6: 48:d3:fc:14:83:a7:58:33:72:0c:f3:67:bf:fb:ac:21:7f:08: 6e:c1:ad:20:da:ed:f7:3b:a8:58:72:ab:b5:17:a3:fa:02:33: a2:25:f2:87 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4 RTkzM0ZEQ0EwHhcNMjUwMjA0MDEwMTU0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ExNjcwMi00ZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOWZUFTLt8OEhIL0ixNMo5OvzZOcRjK8EwojsLR0HPwYrO8VerEKrEu7Liec 2jecfPqdRCj6UUYs5vXjJL9DkzrTZKyIT0Di5+tmB3VSCHVrKSEyAI2iCrpx6mL1 tBaLQaNB334YpOuS9awiHVCxQggevgQanpWDM7QB8Z5LH47G32lpc8mbY25cVXDL J9Z2kkCRKzcQZbtnkVJnNV0VmaouqiiZAqDiRm8ur+qaFC3qGKotCtJGRJahYOGh i8p08yuqy6SfKM/0bZm8t9iRA/lQ1mf8lwXVVgZgKrMzBSiPg0QPH98GdFlPjJhs SRpK3VZMVJl3pSpDVODLCicJ2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFFefd+f0 kcjh6nxEvFuf5G3jfEzPMB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjEzQjkvMTg5N0IyNTI5RjlEMTFFNDk2MTk1MzJEQzRGOUFFMDIvOUZBOEJGMDRF MjkzMTFFRkJCMDRGQjQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn/nswDQYJKoZIhvcNAQELBQADggEBAGol7cZSXldChVjI 6Kkb08K/Ob0hWdcwqn+2tSsfKIcguGdHdp5ADadL4V7VEGncZ2fINZv07aa5/FHe KRnqHcZHSxraD1SKoAOO6V6urnjSwKsgQvAhNMfZUw3Sk+MTcHRDEC2XHyJ+jrqG L9qLZFxEOzcjlLVtFdmQiN/FNjcHtJ7Wrr7umf89H3cifoaCQpLW6/4nI5nGFM21 FA9YLYIa0XwO9baJnDXUl9f2HexvoZhHtvKGKRP1vNHmBve7qy5rRnimG/H4gxa7 qjlsQozI44yjwbKh9kjT/BSDp1gzcgzzZ7/7rCF/CG7BrSDa7fc7qFhyq7UXo/oC M6Il8oc= -----END CERTIFICATE-----Generated at Sun Apr 6 03:01:09 2025 by rpki-client