$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa File: F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa (raw, json) Hash identifier: HhvN0QQ/t1aifshxGL31iNmJ/1oYowbGlAhBK1OxOCQ= Subject key identifier: D6:3E:41:0D:B5:E7:EA:09:CD:10:99:73:05:09:1C:D2:FB:C7:6F:3F Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Certificate serial: 76 Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa Signing time: Wed 05 Mar 2025 07:53:11 +0000 ROA not before: Wed 05 Mar 2025 07:53:11 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 59065 IP address blocks: 43.230.181.0/24 maxlen: 24 43.230.182.0/24 maxlen: 24 103.50.0.0/24 maxlen: 24 103.50.2.0/24 maxlen: 24 103.50.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A998A Validity Not Before: Mar 5 07:53:11 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c802e7-3949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:8d:04:e0:5d:09:b1:e1:86:62:e1:20:ae: 2c:0e:7f:3e:29:71:3c:b9:59:23:74:b0:9c:90:e9: 84:34:f1:d6:59:8f:cb:e2:f1:61:11:93:12:9b:34: ef:5e:79:f0:d7:b4:c1:c4:14:2e:25:5c:82:80:0e: bf:b8:cf:59:a8:94:b5:ea:01:5b:87:05:2f:fd:39: 0a:c3:bd:e0:70:80:f5:2f:4c:59:ea:51:2a:54:28: 17:c1:20:f3:e4:ca:d1:f6:b6:d5:bb:ed:73:01:cc: 5b:ee:8b:d3:47:65:6a:cf:1d:20:ac:30:c5:02:95: 39:9f:41:c0:69:69:f4:b1:d6:d7:26:73:fa:d7:0a: 90:cc:1c:1f:f3:86:9a:cb:e8:e3:b1:00:8f:97:eb: 0e:17:f5:82:29:0a:b5:d4:a3:ce:e7:9f:2c:49:c5: f8:ec:c0:2f:79:76:d3:73:bf:7d:0e:bc:e4:81:f1: 71:ae:2c:4a:f5:f0:27:5d:a5:a6:cb:90:a7:ba:23: e6:b9:38:f2:eb:37:85:39:e9:05:49:19:5b:18:70: e7:1c:a1:4f:1d:3c:b2:00:9f:ff:e1:d3:e6:da:29: 16:7a:19:f8:f4:42:0f:03:d3:61:8e:0a:a2:aa:4f: e4:61:2c:91:94:9e:05:af:1a:ff:05:93:df:0e:4c: a9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3E:41:0D:B5:E7:EA:09:CD:10:99:73:05:09:1C:D2:FB:C7:6F:3F X509v3 Authority Key Identifier: keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.181.0-43.230.182.255 103.50.0.0/24 103.50.2.0/23 Signature Algorithm: sha256WithRSAEncryption 04:ba:ef:03:30:75:cd:12:f2:da:e2:3a:61:37:1a:cf:ed:19: 87:94:34:96:f9:f0:f3:b3:b0:07:3d:a5:35:eb:f9:4f:35:70: 64:36:08:f9:92:2d:55:10:c0:b5:fc:b6:b1:8b:28:c1:7c:be: 4a:2d:2b:5c:86:62:f4:9d:69:4f:1a:ac:61:10:f0:cc:91:33: 1f:cd:66:16:9f:cf:b6:76:5b:82:b8:83:bc:fc:2a:93:39:92: c1:5f:b3:92:a1:c2:78:85:d9:d0:0e:8a:f7:6d:bf:1d:38:98: 68:62:3c:8e:c3:f5:c2:71:14:ec:57:18:6b:f4:a7:b8:9b:cf: a8:53:57:02:ca:21:e5:e8:8f:3f:2f:78:8e:e5:2f:9c:e9:b2: 7c:57:75:77:4b:ba:7d:93:f8:21:b8:1b:1b:60:1c:0b:ea:69: c9:3b:38:7f:b5:b4:ab:c2:9c:d6:2b:70:50:50:05:47:f3:eb: 13:c7:e3:49:a6:12:5e:71:52:ed:8d:4c:23:5a:ef:cd:f9:ed: 78:d9:85:9a:00:ea:98:59:7d:1e:50:55:17:80:93:51:d5:62: d2:4a:85:3b:65:77:73:a5:2b:6f:1f:84:f4:2e:65:90:a5:35: 60:20:19:14:ae:b7:4b:1f:6b:82:73:db:1c:81:90:b8:da:d6: 5e:24:88:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTk4QTExMC8GA1UEBRMoOUMwNzFFODE0RDgwQjEwRTJDQTFGNzFFOUIyRTUzNUMz OTA1Q0I2NTAeFw0yNTAzMDUwNzUzMTFaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzgwMmU3LTM5NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwRY0E4F0JseGGYuEgriwOfz4pcTy5WSN0sJyQ6YQ08dZZj8vi8WERkxKbNO9e efDXtMHEFC4lXIKADr+4z1molLXqAVuHBS/9OQrDveBwgPUvTFnqUSpUKBfBIPPk ytH2ttW77XMBzFvui9NHZWrPHSCsMMUClTmfQcBpafSx1tcmc/rXCpDMHB/zhprL 6OOxAI+X6w4X9YIpCrXUo87nnyxJxfjswC95dtNzv30OvOSB8XGuLEr18CddpabL kKe6I+a5OPLrN4U56QVJGVsYcOccoU8dPLIAn//h0+baKRZ6Gfj0Qg8D02GOCqKq T+RhLJGUngWvGv8Fk98OTKnlAgMBAAGjggKpMIICpTAdBgNVHQ4EFgQU1j5BDbXn 6gnNEJlzBQkc0vvHbz8wHwYDVR0jBBgwFoAUnAcegU2AsQ4sofcemy5TXDkFy2Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OThBLzUyMkNCNzM0N0FF ODExRUY5QTRBNDczN0M0RjlBRTAyL25BY2VnVTJBc1E0c29mY2VteTVUWERrRnky VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbkFjZWdVMkFzUTRzb2ZjZW15NVRYRGtGeTJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTk4QS81MjJDQjczNDdBRTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9GNjBFNUJDODdD ODcxMUVGQjlFQjVGNUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAzBggrBgEFBQcBBwEB/wQk MCIwIAQCAAEwGjAMAwQAK+a1AwQAK+a2AwQAZzIAAwQBZzICMA0GCSqGSIb3DQEB CwUAA4IBAQAEuu8DMHXNEvLa4jphNxrP7RmHlDSW+fDzs7AHPaU16/lPNXBkNgj5 ki1VEMC1/LaxiyjBfL5KLStchmL0nWlPGqxhEPDMkTMfzWYWn8+2dluCuIO8/CqT OZLBX7OSocJ4hdnQDor3bb8dOJhoYjyOw/XCcRTsVxhr9Ke4m8+oU1cCyiHl6I8/ L3iO5S+c6bJ8V3V3S7p9k/ghuBsbYBwL6mnJOzh/tbSrwpzWK3BQUAVH8+sTx+NJ phJecVLtjUwjWu/N+e142YWaAOqYWX0eUFUXgJNR1WLSSoU7ZXdzpStvH4T0LmWQ pTVgIBkUrrdLH2uCc9scgZC42tZeJIjw -----END CERTIFICATE-----Generated at Sat Apr 5 10:41:40 2025 by rpki-client