$ rpki-client -vvf rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/ACC8D92C543611EEA8C54616C4F9AE02.roa File: ACC8D92C543611EEA8C54616C4F9AE02.roa (raw, json) Hash identifier: iIYe3iAqeI3EEeITOhoXPScYKg3h3YTnGvgaSVvgFv4= Subject key identifier: F1:EA:5E:6F:90:3A:3C:5A:13:AB:8E:2E:04:0D:0B:3C:2A:7C:91:44 Certificate issuer: /CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA Certificate serial: 02B2 Authority key identifier: 0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/ACC8D92C543611EEA8C54616C4F9AE02.roa Signing time: Wed 07 May 2025 09:03:24 +0000 ROA not before: Wed 07 May 2025 09:03:24 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 139016 IP address blocks: 103.187.22.0/23 maxlen: 23 103.187.22.0/24 maxlen: 24 103.187.23.0/24 maxlen: 24 2400:7920::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C756, serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA Validity Not Before: May 7 09:03:24 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=681b21dc-7c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:63:c5:be:91:57:c3:d6:68:ba:fa:13:65:86: 18:45:bb:7b:47:05:89:4a:88:c2:3f:24:74:0c:97: 57:a0:c3:56:97:24:b1:41:b5:9d:c3:ec:24:aa:14: 60:27:2f:0c:b8:1d:5a:6a:66:ae:bb:ac:1b:7a:ba: 8b:27:b7:8c:83:1f:6a:f7:e9:d6:e8:02:b1:0f:05: 3b:48:7e:a5:e8:2b:a5:73:07:01:ca:e3:4d:64:95: f3:91:66:96:88:75:8f:c6:91:d5:39:64:c4:fb:85: b4:0e:f2:7a:24:49:72:37:89:02:8e:61:d1:83:e2: e6:05:9e:6f:04:e9:9a:ec:0f:b3:12:6e:14:3f:22: 7b:fa:55:b1:ae:c5:c5:5c:58:e5:bc:7b:0d:c0:49: 75:b0:ac:7d:65:2f:51:f5:b6:39:1f:16:b8:73:a4: 49:b4:ce:1b:19:e1:c6:56:8b:ad:e4:ab:42:46:e7: 6a:10:ec:8d:6f:f6:88:c6:17:1a:bd:6a:32:5c:8c: 78:ea:0f:1c:6c:e6:b0:f9:af:27:d4:08:df:6a:07: 9a:fc:9f:03:73:44:ba:d2:b3:72:f5:52:fb:e9:6d: 5a:54:22:37:a4:52:2d:60:dc:7c:4b:ab:54:bb:79: 7f:f4:18:6d:3a:4b:af:60:30:21:99:7d:80:93:d1: 68:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EA:5E:6F:90:3A:3C:5A:13:AB:8E:2E:04:0D:0B:3C:2A:7C:91:44 X509v3 Authority Key Identifier: keyid:0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/ACC8D92C543611EEA8C54616C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.187.22.0/23 IPv6: 2400:7920::/32 Signature Algorithm: sha256WithRSAEncryption 3d:bd:c7:5b:e2:55:ed:5b:eb:49:05:66:55:b3:54:43:ea:6c: 2b:02:f1:0d:9a:5d:f1:02:4d:80:36:42:51:77:d1:c9:1e:bf: a8:a6:eb:5d:3d:2b:93:02:58:06:5d:35:66:9f:23:19:66:14: 92:ab:ea:35:36:9b:3f:9a:81:9a:ba:b5:09:a4:07:60:33:9a: c7:9d:9f:02:a5:96:ad:77:bc:f0:e9:a7:ff:d2:01:f3:ee:98: 4f:3a:2f:6c:1a:2a:23:68:08:b4:ac:25:6b:23:f7:58:b1:73: 09:18:5e:86:5d:4a:dd:63:60:66:66:1f:3d:e0:2e:80:01:19: 03:b3:d3:26:7e:60:75:44:79:57:0e:9b:ad:91:ae:f2:30:45: 44:aa:19:d5:84:08:8d:af:02:cd:cf:5d:56:d1:44:4c:9e:33: 85:26:ba:12:24:84:8a:b6:77:ac:56:9c:d5:90:b5:ce:bb:27: 3b:ca:a7:dc:12:40:35:37:6c:2b:e1:0d:1d:1f:6d:be:2a:5d: 1d:c0:21:44:f9:48:d7:3a:5c:36:ff:71:cb:91:3d:dc:ae:71: 6e:01:ee:0f:05:a1:d8:98:c8:22:a9:a6:bb:53:98:09:07:00: 32:28:c7:05:4b:8c:de:59:88:40:73:12:9a:78:07:4d:61:1b: 5c:9b:77:87 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3NTYxMTAvBgNVBAUTKDBENTYyQUFEQzFDMDQ5OERBRUUyNjEwQzFBN0RBODc1 QkU2MzVDRUEwHhcNMjUwNTA3MDkwMzI0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFiMjFkYy03YzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2PFvpFXw9ZouvoTZYYYRbt7RwWJSojCPyR0DJdXoMNWlySxQbWdw+wkqhRg Jy8MuB1aamauu6wberqLJ7eMgx9q9+nW6AKxDwU7SH6l6CulcwcByuNNZJXzkWaW iHWPxpHVOWTE+4W0DvJ6JElyN4kCjmHRg+LmBZ5vBOma7A+zEm4UPyJ7+lWxrsXF XFjlvHsNwEl1sKx9ZS9R9bY5Hxa4c6RJtM4bGeHGVout5KtCRudqEOyNb/aIxhca vWoyXIx46g8cbOaw+a8n1Ajfagea/J8Dc0S60rNy9VL76W1aVCI3pFItYNx8S6tU u3l/9BhtOkuvYDAhmX2Ak9FoQwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPHqXm+Q OjxaE6uOLgQNCzwqfJFEMB8GA1UdIwQYMBaAFA1WKq3BwEmNruJhDBp9qHW+Y1zq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzc1Ni85MTkwNjg1MkY4 OTExMUVDODdFREVDNkFDNEY5QUUwMi9EVllxcmNIQVNZMnU0bUVNR24yb2RiNWpY T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RWWXFyY0hBU1kydTRtRU1HbjJvZGI1alhPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM3NTYvOTE5MDY4NTJGODkxMTFFQzg3RURFQzZBQzRGOUFFMDIvQUNDOEQ5MkM1 NDM2MTFFRUE4QzU0NjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnuxYwDQQCAAIwBwMFACQAeSAwDQYJKoZIhvcNAQELBQAD ggEBAD29x1viVe1b60kFZlWzVEPqbCsC8Q2aXfECTYA2QlF30ckev6im6109K5MC WAZdNWafIxlmFJKr6jU2mz+agZq6tQmkB2AzmsednwKllq13vPDpp//SAfPumE86 L2waKiNoCLSsJWsj91ixcwkYXoZdSt1jYGZmHz3gLoABGQOz0yZ+YHVEeVcOm62R rvIwRUSqGdWECI2vAs3PXVbRREyeM4UmuhIkhIq2d6xWnNWQtc67JzvKp9wSQDU3 bCvhDR0fbb4qXR3AIUT5SNc6XDb/ccuRPdyucW4B7g8FodiYyCKpprtTmAkHADIo xwVLjN5ZiEBzEpp4B01hG1ybd4c= -----END CERTIFICATE-----Generated at Mon May 12 10:26:58 2025 by rpki-client