$ rpki-client -vvf rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/7AEB97D2A45011ED8AB8A437C4F9AE02.roa File: 7AEB97D2A45011ED8AB8A437C4F9AE02.roa (raw, json) Hash identifier: onrdwOUBSMf30DMB2gEtxkD8C7GCfvol8JynThaYBqs= Subject key identifier: 7A:84:20:03:B0:3B:B2:96:96:7E:CB:B9:48:46:2A:4A:34:3E:46:02 Certificate issuer: /CN=A911E369/serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27 Certificate serial: 01A0 Authority key identifier: FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/7AEB97D2A45011ED8AB8A437C4F9AE02.roa Signing time: Thu 27 Feb 2025 04:27:05 +0000 ROA not before: Thu 27 Feb 2025 04:27:05 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 150695 IP address blocks: 103.60.6.0/24 maxlen: 24 2001:df1:bbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E369, serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27 Validity Not Before: Feb 27 04:27:05 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67bfe999-b768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:04:8a:d5:1a:54:29:8c:2c:43:58:9e:cf: f1:64:cf:ab:0c:a5:d1:db:b9:5d:0f:88:48:af:3e: db:9f:3e:a7:85:bd:95:47:3c:0b:77:47:c2:51:cf: 13:10:67:95:2f:43:0b:87:a9:ed:fd:38:37:87:cc: 3b:34:01:9c:78:70:70:7a:f4:f0:c8:b2:98:32:4b: a5:cf:29:16:b1:12:2e:c8:b4:76:55:31:0d:ca:5f: c1:ca:59:e9:72:58:eb:80:51:50:b0:f0:dc:bd:23: c6:1f:b5:cf:1d:cf:61:26:cd:48:37:fa:1c:41:03: ec:d7:02:a9:b4:ad:ec:82:f6:fb:a6:69:ac:b0:eb: 08:d6:2e:60:3b:41:65:21:7e:22:05:bc:e0:e2:47: 58:a3:35:d6:73:1d:b2:9a:13:d5:59:71:14:1e:35: 10:e6:b2:50:85:6d:d6:95:b4:bb:b9:21:f0:65:29: 2e:66:57:21:b1:93:5a:b5:68:29:f6:77:ae:26:c5: c5:2c:57:1f:07:fe:3f:7e:70:ec:02:df:99:77:be: a4:e7:3b:35:1e:7c:60:98:49:2a:21:55:be:17:f7: 08:bf:14:dc:cf:90:58:be:2b:13:9d:a0:b8:8c:e9: 1e:f4:9d:fa:64:54:cc:21:05:30:b3:2b:06:a2:8c: fe:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:84:20:03:B0:3B:B2:96:96:7E:CB:B9:48:46:2A:4A:34:3E:46:02 X509v3 Authority Key Identifier: keyid:FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/7AEB97D2A45011ED8AB8A437C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.6.0/24 IPv6: 2001:df1:bbc0::/48 Signature Algorithm: sha256WithRSAEncryption a8:dd:57:7c:69:61:5f:f0:41:ff:9e:9a:c4:3c:c1:2c:1a:a9: 0d:05:73:a7:b5:50:a5:d1:f1:9d:fa:bc:a6:b1:0a:b3:e1:27: 55:c6:ba:f0:e3:29:af:78:53:85:cd:33:c0:28:31:1c:58:81: 3e:86:f6:30:3d:73:f2:5c:5d:6f:49:db:e5:72:21:20:37:e1: 62:44:e9:de:3c:48:f5:73:53:8b:04:06:0d:ba:4b:c9:d6:ec: e1:49:e1:c0:fc:77:9d:9d:9b:28:e6:4c:32:26:b5:c3:6f:8e: 71:14:2a:af:2a:44:12:a8:1b:a9:a2:bd:2e:c0:0d:41:96:c1: 5a:f1:4f:d4:1a:35:72:cc:d0:13:2a:30:c8:56:e4:5b:19:37: b7:31:67:84:86:d0:0d:24:a0:5d:b5:0a:06:eb:04:91:c9:fe: 24:ca:5d:e3:5e:e0:04:dd:60:54:ba:9f:46:83:1e:d4:2e:a9: 57:8e:cc:b9:a7:42:11:f1:b5:f5:8c:49:65:70:70:f4:35:96: 6e:6a:07:56:6a:74:51:a6:43:46:ae:70:cc:03:1a:03:8c:10: 23:b0:40:62:d4:e1:cb:b1:e1:d8:6c:fd:cf:6b:70:26:f3:41: 13:10:ce:86:09:6b:a1:4d:17:71:18:d7:35:a5:6a:ba:d4:34: 67:56:90:2c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUzNjkxMTAvBgNVBAUTKEZFMTM5MUMwQjIyNkM4Q0VCRkE0QTJBRDY2OTZBRTRC ODJCRjdFMjcwHhcNMjUwMjI3MDQyNzA1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JmZTk5OS1iNzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy4EitUaVCmMLENYns/xZM+rDKXR27ldD4hIrz7bnz6nhb2VRzwLd0fCUc8T EGeVL0MLh6nt/Tg3h8w7NAGceHBwevTwyLKYMkulzykWsRIuyLR2VTENyl/Bylnp cljrgFFQsPDcvSPGH7XPHc9hJs1IN/ocQQPs1wKptK3sgvb7pmmssOsI1i5gO0Fl IX4iBbzg4kdYozXWcx2ymhPVWXEUHjUQ5rJQhW3WlbS7uSHwZSkuZlchsZNatWgp 9neuJsXFLFcfB/4/fnDsAt+Zd76k5zs1HnxgmEkqIVW+F/cIvxTcz5BYvisTnaC4 jOke9J36ZFTMIQUwsysGooz+AwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHqEIAOw O7KWln7LuUhGKko0PkYCMB8GA1UdIwQYMBaAFP4TkcCyJsjOv6SirWaWrkuCv34n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM2OS8wRTJGQjNDODg4 RDgxMUVEOUI4NUU1NDhDNEY5QUUwMi9faE9Sd0xJbXlNNl9wS0t0WnBhdVM0S19m aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19oT1J3TElteU02X3BLS3RacGF1UzRLX2ZpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUUzNjkvMEUyRkIzQzg4OEQ4MTFFRDlCODVFNTQ4QzRGOUFFMDIvN0FFQjk3RDJB NDUwMTFFRDhBQjhBNDM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnPAYwDwQCAAIwCQMHACABDfG7wDANBgkqhkiG9w0BAQsF AAOCAQEAqN1XfGlhX/BB/56axDzBLBqpDQVzp7VQpdHxnfq8prEKs+EnVca68OMp r3hThc0zwCgxHFiBPob2MD1z8lxdb0nb5XIhIDfhYkTp3jxI9XNTiwQGDbpLydbs 4UnhwPx3nZ2bKOZMMia1w2+OcRQqrypEEqgbqaK9LsANQZbBWvFP1Bo1cszQEyow yFbkWxk3tzFnhIbQDSSgXbUKBusEkcn+JMpd417gBN1gVLqfRoMe1C6pV47MuadC EfG19YxJZXBw9DWWbmoHVmp0UaZDRq5wzAMaA4wQI7BAYtThy7Hh2Gz9z2twJvNB ExDOhglroU0XcRjXNaVqutQ0Z1aQLA== -----END CERTIFICATE-----Generated at Fri May 16 09:24:46 2025 by rpki-client