$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/1E018994AEBF11E993F33C65C4F9AE02.roa File: 1E018994AEBF11E993F33C65C4F9AE02.roa (raw, json) Hash identifier: VAz7Q8OmwNVtqjw21t41eYyn3+glN8lqbyiXL2P+yek= Subject key identifier: DA:00:7D:47:C4:1C:7F:31:C0:30:70:0C:D4:49:0B:F0:69:58:B7:DD Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Certificate serial: 0DC9 Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/1E018994AEBF11E993F33C65C4F9AE02.roa Signing time: Fri 14 Feb 2025 18:37:11 +0000 ROA not before: Fri 14 Feb 2025 18:37:11 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 63526 IP address blocks: 103.106.236.0/22 maxlen: 22 103.106.236.0/23 maxlen: 23 103.106.236.0/24 maxlen: 24 103.106.237.0/24 maxlen: 24 103.106.238.0/23 maxlen: 23 103.106.238.0/24 maxlen: 24 103.106.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3529 (0xdc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4294 Validity Not Before: Feb 14 18:37:11 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67af8d57-fe92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dd:97:e8:92:28:2a:49:c0:0a:60:4b:15:2b: 34:2c:05:2c:62:f0:f3:5a:48:62:2c:85:ef:06:25: f0:d6:f1:ad:f6:67:aa:c3:5e:77:0f:3b:95:8f:e2: 6c:36:3d:50:9c:52:7e:1f:ad:1f:6a:bf:86:b1:47: 49:58:93:df:23:1c:ed:57:0e:04:a0:d5:c9:a4:a8: 5c:08:16:19:86:8a:36:92:8c:79:ca:f5:da:02:ee: 96:44:59:d3:e0:b0:cf:8b:fd:40:49:d7:d0:80:af: d4:23:70:25:7a:2c:9c:98:d5:f6:08:b7:37:06:9f: 26:57:5e:1f:6f:5a:e5:1d:8a:5c:17:c4:7c:10:69: 0c:a9:ff:4e:09:cb:2f:cc:f7:02:38:b2:fb:ef:ea: af:13:23:fc:60:06:05:ad:b8:e3:08:9f:a1:01:5c: ed:2e:7f:c1:61:1f:2d:8c:1a:0a:6a:b5:43:20:90: 09:57:79:1d:d0:c9:e3:63:2b:51:16:3a:7e:38:75: 77:65:7c:82:08:25:12:c2:d5:12:b6:ea:8b:8d:d0: fe:d9:0a:99:b5:18:58:61:2a:94:04:ce:c7:d0:30: 4e:3d:21:30:a6:70:22:a6:f4:24:1f:d6:88:1f:92: ea:46:00:42:92:17:44:bd:8c:12:33:81:12:d7:8c: b8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:00:7D:47:C4:1C:7F:31:C0:30:70:0C:D4:49:0B:F0:69:58:B7:DD X509v3 Authority Key Identifier: keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/1E018994AEBF11E993F33C65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.236.0/22 Signature Algorithm: sha256WithRSAEncryption 04:16:cc:c2:dd:47:f3:f0:98:28:27:e0:d7:8f:54:33:3e:df: d3:16:dd:f6:e0:47:47:70:bb:ef:a9:06:00:17:a7:e4:18:18: 4d:1a:6e:c1:f2:c5:70:a7:b0:18:5c:0f:0b:78:05:b3:71:2a: 13:54:a9:f2:d0:99:5f:42:c1:a0:cf:06:90:60:b0:62:26:49: e4:e6:9b:6b:c5:57:1f:97:6c:4b:8f:35:6a:50:82:3e:68:bd: b0:aa:5b:36:66:71:ec:31:f1:ec:25:68:2c:25:e9:5d:66:38: 19:ed:22:5f:a6:60:63:f1:74:6f:f8:94:53:6f:32:2d:7b:be: 5a:47:4d:93:b7:a7:69:ec:2b:dc:36:35:20:4c:16:d0:6c:fd: 83:0f:a5:72:2b:7c:41:d8:44:59:e2:c8:f1:b1:b3:51:d3:da: f8:d8:32:3b:4d:22:fd:ab:2d:12:af:fc:ed:de:4f:65:ca:83: 3e:3d:0e:55:d5:89:71:82:b3:b6:01:83:68:4d:b3:bd:98:f1: 4a:f5:19:aa:86:73:59:89:31:9a:e6:2c:23:2e:ff:b8:a0:44: 19:3a:31:d8:12:4f:95:4e:7f:ab:c0:27:e8:93:72:6f:07:5b: 1c:d9:36:ea:53:de:78:37:95:f8:dc:ba:85:86:41:06:0a:d8: c9:8c:7e:9f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF M0UyMjc4ODcwHhcNMjUwMjE0MTgzNzExWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FmOGQ1Ny1mZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2d2X6JIoKknACmBLFSs0LAUsYvDzWkhiLIXvBiXw1vGt9meqw153DzuVj+Js Nj1QnFJ+H60far+GsUdJWJPfIxztVw4EoNXJpKhcCBYZhoo2kox5yvXaAu6WRFnT 4LDPi/1ASdfQgK/UI3AleiycmNX2CLc3Bp8mV14fb1rlHYpcF8R8EGkMqf9OCcsv zPcCOLL77+qvEyP8YAYFrbjjCJ+hAVztLn/BYR8tjBoKarVDIJAJV3kd0MnjYytR Fjp+OHV3ZXyCCCUSwtUStuqLjdD+2QqZtRhYYSqUBM7H0DBOPSEwpnAipvQkH9aI H5LqRgBCkhdEvYwSM4ES14y41wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNoAfUfE HH8xwDBwDNRJC/BpWLfdMB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQyOTQvMENCNUVBRkFBRUJFMTFFOTgwRkI0RTYzQzRGOUFFMDIvMUUwMTg5OTRB RUJGMTFFOTkzRjMzQzY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnauwwDQYJKoZIhvcNAQELBQADggEBAAQWzMLdR/PwmCgn 4NePVDM+39MW3fbgR0dwu++pBgAXp+QYGE0absHyxXCnsBhcDwt4BbNxKhNUqfLQ mV9CwaDPBpBgsGImSeTmm2vFVx+XbEuPNWpQgj5ovbCqWzZmcewx8ewlaCwl6V1m OBntIl+mYGPxdG/4lFNvMi17vlpHTZO3p2nsK9w2NSBMFtBs/YMPpXIrfEHYRFni yPGxs1HT2vjYMjtNIv2rLRKv/O3eT2XKgz49DlXViXGCs7YBg2hNs72Y8Ur1GaqG c1mJMZrmLCMu/7igRBk6MdgST5VOf6vAJ+iTcm8HWxzZNupT3ng3lfjcuoWGQQYK 2MmMfp8= -----END CERTIFICATE-----Generated at Fri Apr 4 23:45:22 2025 by rpki-client