$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/BA3FE218315611F0951A037DC4F9AE02.roa File: BA3FE218315611F0951A037DC4F9AE02.roa (raw, json) Hash identifier: qVVzOp455rcs6g+f/MmhYpdl/2N+Lt1OuCuyTK7KoGY= Subject key identifier: 66:BF:A6:3F:4C:04:DE:55:D9:87:9E:31:27:16:3D:07:B8:A5:94:11 Certificate issuer: /CN=A91DF352/serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40 Certificate serial: 02 Authority key identifier: 1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/BA3FE218315611F0951A037DC4F9AE02.roa Signing time: Thu 15 May 2025 06:35:01 +0000 ROA not before: Thu 15 May 2025 06:35:01 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 24042 IP address blocks: 103.149.222.0/24 maxlen: 24 103.149.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF352, serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40 Validity Not Before: May 15 06:35:01 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=68258b15-3873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:45:e0:eb:cf:ba:04:f2:e2:0c:3b:80:4c:31: ea:29:d8:c5:bd:bd:e5:30:b4:f6:a4:e9:09:fd:33: 1f:ea:9e:84:65:95:32:ab:30:66:a9:b0:3c:9c:48: 6f:6a:b1:ad:20:b7:3f:d2:a1:1f:73:c9:6a:ff:e6: aa:8a:9f:2e:29:27:ad:03:ff:0c:8d:4c:16:28:fd: e2:70:2a:61:fc:67:e9:7c:17:56:27:ad:a1:f9:60: 8d:da:54:98:68:05:6d:c3:03:db:76:11:e4:b4:02: 8b:5e:45:04:3e:07:52:0c:8a:8b:7b:36:18:18:ae: 17:6d:e1:5d:fe:9c:d5:48:71:63:1f:57:0f:16:c8: 54:6b:43:aa:66:58:7e:9a:f9:41:7c:fa:87:37:41: d3:56:63:1c:b7:f7:69:e7:40:42:c3:19:7c:4e:5b: 3f:4a:78:ac:f3:46:2e:79:6b:09:0a:e1:b3:fa:6f: 58:65:3c:87:cf:86:02:ee:b4:97:3e:5d:3e:6f:1e: c5:06:8f:ff:0b:b0:51:1c:e3:8c:65:43:79:0b:ff: 48:73:39:0f:9e:c1:d0:2b:87:ef:ab:b6:8a:e7:c4: fb:44:0f:51:eb:4b:4c:e1:09:31:c3:9c:99:20:3d: 90:10:f6:19:52:60:8a:4e:59:5b:bc:1a:b5:91:6e: a8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BF:A6:3F:4C:04:DE:55:D9:87:9E:31:27:16:3D:07:B8:A5:94:11 X509v3 Authority Key Identifier: keyid:1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/BA3FE218315611F0951A037DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.222.0/23 Signature Algorithm: sha256WithRSAEncryption 19:cf:a1:77:d8:b2:61:98:5a:8b:c0:8d:d8:ac:d2:30:14:12: 5d:e1:a8:c0:f6:c2:d3:00:f8:96:cf:58:e2:46:90:f1:ea:4d: 55:6f:c8:37:c6:29:d3:ae:92:64:59:9b:53:e1:9b:d6:20:03: 17:ba:7b:12:7a:fe:62:37:96:23:a7:be:fd:4a:06:18:3f:aa: 10:22:cb:4f:b9:4b:f0:ab:1a:43:f0:e1:0a:67:d3:08:3e:8e: 6b:07:c7:df:02:c9:63:8e:2d:b9:9f:64:5b:80:4e:bc:08:96: f4:2f:c7:38:77:96:7d:2c:00:bb:fc:77:0c:fc:6b:14:96:b9: c1:78:3b:89:2a:79:4a:82:97:d8:3f:48:3c:d6:5c:0e:71:b5: 86:24:7e:14:ec:9c:53:4a:9a:1d:b5:82:c8:cf:c5:65:53:05: 34:0e:69:49:ea:dd:77:37:4e:0e:cb:5b:f7:16:c1:d2:83:d2: d6:60:22:cc:47:fe:96:4f:c6:61:4b:2d:ec:30:e7:42:8f:3d: cf:3f:34:47:f2:ab:41:c9:8a:cc:4b:8a:cc:5d:63:dd:61:45: d7:76:a2:80:cf:bb:1d:da:e7:97:46:cf:29:df:53:38:18:c4: 5f:e2:3c:d8:8d:51:a5:38:16:67:1d:0b:4c:2d:af:35:47:0d: 74:b4:69:5c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjM1MjExMC8GA1UEBRMoMUJBNUFDRkU0RUNFOTlFQUJCNkU1NDE0NjUzMkZEMTM3 MzVDRUY0MDAeFw0yNTA1MTUwNjM1MDFaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MjU4YjE1LTM4NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpReDrz7oE8uIMO4BMMeop2MW9veUwtPak6Qn9Mx/qnoRllTKrMGapsDycSG9q sa0gtz/SoR9zyWr/5qqKny4pJ60D/wyNTBYo/eJwKmH8Z+l8F1YnraH5YI3aVJho BW3DA9t2EeS0AoteRQQ+B1IMiot7NhgYrhdt4V3+nNVIcWMfVw8WyFRrQ6pmWH6a +UF8+oc3QdNWYxy392nnQELDGXxOWz9KeKzzRi55awkK4bP6b1hlPIfPhgLutJc+ XT5vHsUGj/8LsFEc44xlQ3kL/0hzOQ+ewdArh++rtornxPtED1HrS0zhCTHDnJkg PZAQ9hlSYIpOWVu8GrWRbqhPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZr+mP0wE 3lXZh54xJxY9B7illBEwHwYDVR0jBBgwFoAUG6Ws/k7Omeq7blQUZTL9E3Nc70Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMzUyLzgyOTM4MDQ2MzE1 NTExRjBBNzJGQkY1QkM0RjlBRTAyL0c2V3NfazdPbWVxN2JsUVVaVEw5RTNOYzcw QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRzZXc19rN09tZXE3YmxRVVpUTDlFM05jNzBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjM1Mi84MjkzODA0NjMxNTUxMUYwQTcyRkJGNUJDNEY5QUUwMi9CQTNGRTIxODMx NTYxMUYwOTUxQTAzN0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeV3jANBgkqhkiG9w0BAQsFAAOCAQEAGc+hd9iyYZhai8CN 2KzSMBQSXeGowPbC0wD4ls9Y4kaQ8epNVW/IN8Yp066SZFmbU+Gb1iADF7p7Enr+ YjeWI6e+/UoGGD+qECLLT7lL8KsaQ/DhCmfTCD6OawfH3wLJY44tuZ9kW4BOvAiW 9C/HOHeWfSwAu/x3DPxrFJa5wXg7iSp5SoKX2D9IPNZcDnG1hiR+FOycU0qaHbWC yM/FZVMFNA5pSerddzdODstb9xbB0oPS1mAizEf+lk/GYUst7DDnQo89zz80R/Kr QcmKzEuKzF1j3WFF13aigM+7Hdrnl0bPKd9TOBjEX+I82I1RpTgWZx0LTC2vNUcN dLRpXA== -----END CERTIFICATE-----Generated at Mon Jun 2 06:31:34 2025 by rpki-client