$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/8322D244EA0811EFB385192AC4F9AE02.roa File: 8322D244EA0811EFB385192AC4F9AE02.roa (raw, json) Hash identifier: oTDfgY49fmT+y8+2GJaPDtK7EdeEE+LjLlZzrGykmgw= Subject key identifier: 13:D3:63:BF:3F:85:68:7C:23:A3:41:0A:3A:9F:0A:5F:AF:40:2E:EE Certificate issuer: /CN=A91E1CB1/serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E Certificate serial: 3B Authority key identifier: 06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/8322D244EA0811EFB385192AC4F9AE02.roa Signing time: Tue 27 May 2025 07:46:06 +0000 ROA not before: Tue 27 May 2025 07:46:06 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 211041 IP address blocks: 103.166.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1CB1, serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E Validity Not Before: May 27 07:46:06 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68356dbe-fc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:90:46:f0:9f:fa:25:27:29:e9:f6:f6:cb:71: 5b:94:38:a3:ba:7e:96:ab:98:e8:ee:20:42:e3:72: 33:7f:6d:80:32:cd:23:4f:d3:11:ae:dd:50:da:11: bb:75:1a:14:74:94:81:3b:96:9a:15:6b:43:94:88: 8d:cd:78:44:dd:99:c6:ed:d7:66:50:10:57:bf:f8: 3d:51:58:a7:45:dc:6f:bb:ff:a6:e9:2d:6c:45:3a: 00:cb:ec:0b:1d:c8:ba:70:3d:ae:d0:ce:06:10:18: 71:1b:1e:ff:a2:3e:c3:6a:b7:38:ca:bc:ca:29:8a: 6f:52:15:46:ae:d3:7b:4a:47:eb:08:ca:57:d2:2b: 4f:5e:6e:b9:ff:9f:c1:cc:ad:ef:ca:cf:2d:6b:be: 60:df:bf:8f:b5:77:fe:36:60:34:4b:cf:16:f5:49: fb:92:2c:81:4d:be:c4:66:29:db:d8:4d:fa:88:d2: 11:3d:bf:f0:b8:1d:82:08:74:55:b1:ae:e2:24:2e: 36:87:7a:cb:a2:82:9e:47:df:39:a7:67:49:47:f1: f1:35:01:bc:e6:87:24:a2:ec:b2:0d:49:3c:94:b7: 91:c5:3e:d2:0e:8c:ee:8c:db:a2:23:a9:54:78:db: 1c:12:e2:84:8b:d8:ce:41:73:43:b4:45:60:a9:d5: c7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D3:63:BF:3F:85:68:7C:23:A3:41:0A:3A:9F:0A:5F:AF:40:2E:EE X509v3 Authority Key Identifier: keyid:06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/8322D244EA0811EFB385192AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.229.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:33:35:0c:ba:70:72:ec:2a:7d:78:ed:b5:89:96:2a:24:16: 08:47:cc:2b:eb:de:3d:94:33:ed:29:6e:04:2e:c8:a3:ea:6a: 56:05:af:e3:d8:84:23:21:77:fa:64:3f:cc:c2:59:d0:09:7f: 5f:32:ed:61:c1:e8:1d:a7:0d:dc:b5:21:19:d9:f7:83:00:19: 1f:7d:6d:19:e4:59:da:af:a7:42:a9:d3:67:d7:34:65:16:58: 9f:27:7f:bd:24:4d:88:6e:8e:98:5c:11:33:ec:86:40:d4:e8: 83:96:ee:3d:c6:c7:83:de:aa:d1:bf:07:b8:ec:89:d4:84:94: d2:bf:b2:be:48:90:66:15:a4:07:0b:9a:29:a2:bf:ff:2f:b7: 46:2b:d6:c3:78:a3:0a:55:e7:cf:d6:ff:d0:8f:47:12:2e:72: d4:3a:d8:69:b3:a0:48:dd:f7:44:0c:45:64:58:0c:86:7e:f6: 15:80:aa:41:7a:70:9b:6c:39:47:27:d8:0d:f3:4c:a5:40:00: f9:e2:ce:62:06:d6:76:fe:b1:a9:5a:07:a0:28:dd:31:62:21: d1:3c:dd:5a:aa:33:79:96:ec:1b:26:ee:4c:be:8f:44:86:fe: 8d:fa:e4:c2:ef:33:c4:36:90:87:39:6b:6e:90:17:8d:42:33: b6:fb:a4:aa -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUNCMTExMC8GA1UEBRMoMDYzRTAxMjc0NzJBN0UyQTZGODQ3MDQwOUM5QjgyMzkw NUZBRkU4RTAeFw0yNTA1MjcwNzQ2MDZaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MzU2ZGJlLWZjMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFkEbwn/olJynp9vbLcVuUOKO6fparmOjuIELjcjN/bYAyzSNP0xGu3VDaEbt1 GhR0lIE7lpoVa0OUiI3NeETdmcbt12ZQEFe/+D1RWKdF3G+7/6bpLWxFOgDL7Asd yLpwPa7QzgYQGHEbHv+iPsNqtzjKvMopim9SFUau03tKR+sIylfSK09ebrn/n8HM re/Kzy1rvmDfv4+1d/42YDRLzxb1SfuSLIFNvsRmKdvYTfqI0hE9v/C4HYIIdFWx ruIkLjaHesuigp5H3zmnZ0lH8fE1AbzmhySi7LINSTyUt5HFPtIOjO6M26IjqVR4 2xwS4oSL2M5Bc0O0RWCp1cdRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUE9Njvz+F aHwjo0EKOp8KX69ALu4wHwYDVR0jBBgwFoAUBj4BJ0cqfipvhHBAnJuCOQX6/o4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQ0IxLzNGNEE1QTJFRUEw ODExRUY5RDMzOUIyOUM0RjlBRTAyL0JqNEJKMGNxZmlwdmhIQkFuSnVDT1FYNl9v NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQmo0QkowY3FmaXB2aEhCQW5KdUNPUVg2X280LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUNCMS8zRjRBNUEyRUVBMDgxMUVGOUQzMzlCMjlDNEY5QUUwMi84MzIyRDI0NEVB MDgxMUVGQjM4NTE5MkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGem5TANBgkqhkiG9w0BAQsFAAOCAQEAfzM1DLpwcuwqfXjt tYmWKiQWCEfMK+vePZQz7SluBC7Io+pqVgWv49iEIyF3+mQ/zMJZ0Al/XzLtYcHo HacN3LUhGdn3gwAZH31tGeRZ2q+nQqnTZ9c0ZRZYnyd/vSRNiG6OmFwRM+yGQNTo g5buPcbHg96q0b8HuOyJ1ISU0r+yvkiQZhWkBwuaKaK//y+3RivWw3ijClXnz9b/ 0I9HEi5y1DrYabOgSN33RAxFZFgMhn72FYCqQXpwm2w5RyfYDfNMpUAA+eLOYgbW dv6xqVoHoCjdMWIh0TzdWqozeZbsGybuTL6PRIb+jfrkwu8zxDaQhzlrbpAXjUIz tvukqg== -----END CERTIFICATE-----Generated at Mon Jun 2 07:14:25 2025 by rpki-client