$ rpki-client -vvf rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/4FFC83964CA311EE815AF017C4F9AE02.roa File: 4FFC83964CA311EE815AF017C4F9AE02.roa (raw, json) Hash identifier: UA3Z3TNFXnNBwmElq5Ec0QuBLoZlUKqnBYT4/k/3BsY= Subject key identifier: 2F:FC:14:44:99:E5:CA:E4:2E:D8:2E:2E:F9:37:33:FD:7D:26:0D:D6 Certificate issuer: /CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4 Certificate serial: 0AC4 Authority key identifier: 76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/4FFC83964CA311EE815AF017C4F9AE02.roa Signing time: Tue 18 Mar 2025 19:39:34 +0000 ROA not before: Tue 18 Mar 2025 19:39:34 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 150774 IP address blocks: 103.136.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 19:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2756 (0xac4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E6CA, serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4 Validity Not Before: Mar 18 19:39:34 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67d9cbf6-07f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f6:66:6c:67:53:f0:a8:16:14:eb:f3:9b:a1: 9c:83:1e:e2:6f:66:d7:a3:19:78:f9:d4:93:a4:28: aa:b9:38:a7:75:f3:df:ae:c4:02:54:b6:30:6b:25: 6c:87:24:24:ac:3f:92:bc:c9:25:9b:48:18:c5:20: 0c:11:40:28:2b:7f:99:15:aa:5b:30:df:34:87:4f: 4a:2f:b7:46:ff:d4:d7:61:c9:92:8f:50:e1:91:86: c5:6a:df:bc:7a:ac:a1:42:65:a1:f3:1e:bd:84:01: 20:b3:ad:46:ec:b1:21:38:49:f8:ee:b8:fb:28:fb: f6:71:1f:be:2a:53:fb:78:86:85:90:f0:13:42:8a: 70:50:7b:64:e3:ef:4e:25:cb:af:47:37:19:e4:95: 7c:20:da:45:07:cc:22:7c:7e:78:8d:b7:d0:01:94: 88:3d:2a:fe:c1:d0:79:4c:c6:d3:51:d4:62:3d:36: ba:87:27:a6:f8:b0:e6:aa:0d:45:1c:4d:bd:4c:29: 39:b4:52:73:39:3a:95:8e:be:5e:09:47:12:46:0d: bc:9c:b5:6c:97:8e:23:5f:0c:90:4f:0a:44:eb:a9: eb:20:eb:e0:ae:f9:b9:d1:12:19:bf:d6:7d:c9:d6: 46:32:42:23:85:32:4f:a8:22:63:e9:89:25:08:dc: 02:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FC:14:44:99:E5:CA:E4:2E:D8:2E:2E:F9:37:33:FD:7D:26:0D:D6 X509v3 Authority Key Identifier: keyid:76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/4FFC83964CA311EE815AF017C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.159.0/24 Signature Algorithm: sha256WithRSAEncryption 20:51:1c:a2:1e:a4:e1:3f:c2:a3:4c:01:8c:27:fb:2a:87:0d: f8:f9:f7:a9:4a:9c:e3:20:3b:20:d6:07:3b:f9:be:29:7b:9d: fc:c5:e8:d7:02:a9:9c:14:62:1c:4b:07:a8:d6:4e:ad:a8:8d: 3f:ff:f7:67:4a:9b:d2:af:ac:85:91:8e:54:86:87:4f:0d:c3: f0:39:ce:0d:2f:dc:01:bf:05:c6:27:55:60:f5:79:52:c6:f0: 0d:71:47:7f:13:b9:f8:c3:6f:ca:12:0b:71:8e:d7:cf:76:14: 05:ac:e9:b6:58:8c:72:58:13:7d:30:03:09:ea:82:84:4c:77: c3:83:68:de:36:48:1a:9c:72:f8:54:ab:38:00:03:48:ba:09: 71:3c:8e:95:67:43:3e:14:90:3b:52:5a:91:bf:35:ef:1b:5b: 20:45:ee:a9:03:12:d9:83:3e:3f:c1:74:17:2f:b9:2d:20:0d: 4e:c0:45:1d:7d:1e:fa:5d:2a:c0:11:64:d5:a3:60:39:5c:54: d1:ba:5c:39:67:a6:71:74:89:fb:30:60:f0:39:3d:09:44:af: 17:9c:67:88:8e:33:5f:7f:73:54:f7:82:cf:6f:d5:14:46:e8: f4:68:49:5c:e1:dc:5c:90:39:d1:a1:8f:9a:a5:50:27:24:83: d3:5c:25:bf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2Q0ExMTAvBgNVBAUTKDc2QjlEMzM5RkFDRDYyQjQ3RTkzRTg4ODRERTg1MDM5 NkRCQ0VGQjQwHhcNMjUwMzE4MTkzOTM0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q5Y2JmNi0wN2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fZmbGdT8KgWFOvzm6Gcgx7ib2bXoxl4+dSTpCiquTindfPfrsQCVLYwayVs hyQkrD+SvMklm0gYxSAMEUAoK3+ZFapbMN80h09KL7dG/9TXYcmSj1DhkYbFat+8 eqyhQmWh8x69hAEgs61G7LEhOEn47rj7KPv2cR++KlP7eIaFkPATQopwUHtk4+9O JcuvRzcZ5JV8INpFB8wifH54jbfQAZSIPSr+wdB5TMbTUdRiPTa6hyem+LDmqg1F HE29TCk5tFJzOTqVjr5eCUcSRg28nLVsl44jXwyQTwpE66nrIOvgrvm50RIZv9Z9 ydZGMkIjhTJPqCJj6YklCNwCWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC/8FESZ 5crkLtguLvk3M/19Jg3WMB8GA1UdIwQYMBaAFHa50zn6zWK0fpPoiE3oUDltvO+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTZDQS83NDA5QjQ3QTRG QzcxMUVBOEU0NkQ0MTVDNEY5QUUwMi9kcm5UT2ZyTllyUi1rLWlJVGVoUU9XMjg3 N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RyblRPZnJOWXJSLWstaUlUZWhRT1cyODc3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU2Q0EvNzQwOUI0N0E0RkM3MTFFQThFNDZENDE1QzRGOUFFMDIvNEZGQzgzOTY0 Q0EzMTFFRTgxNUFGMDE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABniJ8wDQYJKoZIhvcNAQELBQADggEBACBRHKIepOE/wqNM AYwn+yqHDfj596lKnOMgOyDWBzv5vil7nfzF6NcCqZwUYhxLB6jWTq2ojT//92dK m9KvrIWRjlSGh08Nw/A5zg0v3AG/BcYnVWD1eVLG8A1xR38TufjDb8oSC3GO1892 FAWs6bZYjHJYE30wAwnqgoRMd8ODaN42SBqccvhUqzgAA0i6CXE8jpVnQz4UkDtS WpG/Ne8bWyBF7qkDEtmDPj/BdBcvuS0gDU7ARR19HvpdKsARZNWjYDlcVNG6XDln pnF0ifswYPA5PQlErxecZ4iOM19/c1T3gs9v1RRG6PRoSVzh3FyQOdGhj5qlUCck g9NcJb8= -----END CERTIFICATE-----Generated at Sat May 17 11:59:19 2025 by rpki-client