$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa File: 2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa (raw, json) Hash identifier: /ckEG51NBhBYEZtZSbLBPmavN3UuTjHbEpYTSHsiIm0= Subject key identifier: 7D:66:C7:BA:F8:3D:0B:79:93:8F:28:AD:25:0A:D6:6C:96:71:22:B3 Certificate issuer: /CN=A91D4803/serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Certificate serial: 053B Authority key identifier: 42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa Signing time: Sat 31 May 2025 00:25:46 +0000 ROA not before: Sat 31 May 2025 00:25:46 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 55482 IP address blocks: 103.153.86.0/24 maxlen: 24 103.153.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1339 (0x53b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4803, serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Validity Not Before: May 31 00:25:46 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683a4c89-f617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:28:b0:e3:6d:be:95:7e:c9:9e:e5:02:38:b2: fc:6c:3f:83:d6:c7:49:32:86:2d:43:c3:6f:f2:4a: c7:89:59:17:3b:58:c5:74:2d:3b:2c:c4:da:2e:56: 92:6a:57:47:15:23:31:cc:d2:17:66:63:1e:0a:d2: f8:aa:8b:ee:83:b4:f1:ee:66:5e:e4:5c:a5:01:ad: d5:d8:21:3c:0e:9e:e1:af:8c:38:ab:3b:f6:bd:84: 7c:d8:92:91:4b:21:8c:c5:d5:d3:e8:e5:b7:55:cd: 15:2f:5e:4d:dc:c1:3d:f7:af:76:47:f3:a8:7e:ec: a8:12:49:8c:c2:f0:34:be:87:1d:5d:33:8b:86:db: 37:a9:ce:d4:d8:79:3a:57:57:03:a3:3b:85:88:56: d9:ca:13:13:2b:00:e0:5e:80:46:d6:38:20:0f:9a: bb:1d:d4:7b:43:0e:89:a3:3d:81:46:54:94:63:f2: 14:c1:1e:2f:d1:28:4f:75:56:f6:51:e8:67:53:55: 62:65:c5:0b:00:8a:c1:f2:95:93:1f:2a:97:c8:5c: df:7d:3b:49:c8:68:87:45:b9:90:09:f5:1c:5e:fa: d5:7e:d1:3d:27:ac:8b:df:25:54:3c:23:dd:46:64: 5a:c8:6d:ce:33:26:a8:93:2f:08:51:9a:2b:ae:86: ce:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:66:C7:BA:F8:3D:0B:79:93:8F:28:AD:25:0A:D6:6C:96:71:22:B3 X509v3 Authority Key Identifier: keyid:42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.86.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:43:f5:33:45:7e:ba:af:9d:dd:3b:7b:fa:40:80:29:e0:55: 18:2b:1d:23:0c:a1:75:b3:2d:39:dd:28:19:ee:ba:c2:8d:d2: 98:db:24:0b:ba:11:36:fa:e8:5f:f3:35:dd:f9:07:f1:a9:83: e9:79:6c:80:69:57:81:02:d5:dd:2a:da:69:ff:0d:51:d8:04: 17:3f:f2:c7:fc:eb:ea:2e:d4:c6:f3:ea:cc:e5:83:6f:be:44: ac:97:4c:63:e5:11:f8:22:f9:3d:28:5d:f3:02:2e:f4:0e:bc: e8:86:a0:3c:90:57:6d:2d:79:c0:68:50:1b:b7:dc:14:00:7c: 8a:9f:b9:24:d7:e6:b3:8a:17:18:e7:de:6b:cf:de:a1:9d:2e: c6:76:2c:e2:5a:cd:e1:d4:99:c9:a8:bc:f6:09:e4:d5:dc:d9: 13:39:d5:08:fd:b6:22:55:bb:9e:4d:17:0a:c0:31:14:75:04: d7:1f:e1:97:dd:7a:ac:49:b5:7a:31:31:cf:ec:87:f8:4e:ce: 3a:e5:35:a4:74:ec:5a:e6:b4:65:ff:b9:d2:8c:78:ec:3d:af: ab:8a:d7:9c:9b:44:5d:9c:98:59:19:89:3f:31:07:57:ef:79: e1:32:05:1f:95:b3:8b:ba:db:5a:18:66:41:74:81:dc:0a:9c: 74:b8:85:d6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MDMxMTAvBgNVBAUTKDQyQTk3OEFEODNERDVFRDI5QTRFNUREQjYxQjU2RjEz MTdBNUE1QTQwHhcNMjUwNTMxMDAyNTQ2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNhNGM4OS1mNjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyiw422+lX7JnuUCOLL8bD+D1sdJMoYtQ8Nv8krHiVkXO1jFdC07LMTaLlaS aldHFSMxzNIXZmMeCtL4qovug7Tx7mZe5FylAa3V2CE8Dp7hr4w4qzv2vYR82JKR SyGMxdXT6OW3Vc0VL15N3ME99692R/OofuyoEkmMwvA0vocdXTOLhts3qc7U2Hk6 V1cDozuFiFbZyhMTKwDgXoBG1jggD5q7HdR7Qw6Joz2BRlSUY/IUwR4v0ShPdVb2 UehnU1ViZcULAIrB8pWTHyqXyFzffTtJyGiHRbmQCfUcXvrVftE9J6yL3yVUPCPd RmRayG3OMyaoky8IUZorrobO3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFH1mx7r4 PQt5k48orSUK1myWcSKzMB8GA1UdIwQYMBaAFEKpeK2D3V7Smk5d22G1bxMXpaWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgwMy84MEYwMzRCRUY5 RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0S2FUbDNiWWJWdkV4ZWxw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxbDRyWVBkWHRLYVRsM2JZYlZ2RXhlbHBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ4MDMvODBGMDM0QkVGOUUxMTFFQkEzMkNFMjFCQzRGOUFFMDIvMkIxQjhDOTJG OUU1MTFFQkJCOUI1RDIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmVYwDQYJKoZIhvcNAQELBQADggEBAJpD9TNFfrqvnd07 e/pAgCngVRgrHSMMoXWzLTndKBnuusKN0pjbJAu6ETb66F/zNd35B/Gpg+l5bIBp V4EC1d0q2mn/DVHYBBc/8sf86+ou1Mbz6szlg2++RKyXTGPlEfgi+T0oXfMCLvQO vOiGoDyQV20tecBoUBu33BQAfIqfuSTX5rOKFxjn3mvP3qGdLsZ2LOJazeHUmcmo vPYJ5NXc2RM51Qj9tiJVu55NFwrAMRR1BNcf4ZfdeqxJtXoxMc/sh/hOzjrlNaR0 7FrmtGX/udKMeOw9r6uK15ybRF2cmFkZiT8xB1fveeEyBR+Vs4u621oYZkF0gdwK nHS4hdY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:18 2025 by rpki-client