$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/FF723568A0F311EBA4E4D83CC4F9AE02.roa File: FF723568A0F311EBA4E4D83CC4F9AE02.roa (raw, json) Hash identifier: mPyJyn/hNgsJM5dLLqcQiKjGiDQ28uU6I1BenfIYNic= Subject key identifier: 44:A8:9A:26:49:32:E8:98:53:DA:04:C8:0E:58:9C:9C:32:3E:32:C6 Certificate issuer: /CN=A91A5E1F/serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C Certificate serial: 0AA9 Authority key identifier: 0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/FF723568A0F311EBA4E4D83CC4F9AE02.roa Signing time: Sat 10 May 2025 20:04:56 +0000 ROA not before: Sat 10 May 2025 20:04:56 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 140229 IP address blocks: 103.148.210.0/23 maxlen: 23 103.148.210.0/24 maxlen: 24 103.148.211.0/24 maxlen: 24 2001:df2:ec80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2729 (0xaa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5E1F, serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C Validity Not Before: May 10 20:04:56 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=681fb168-d0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:68:84:ee:2a:57:1e:f0:15:e4:39:b9:f6:42: 73:2c:5e:b0:45:92:92:9c:a5:88:c9:37:82:9e:2a: a9:c9:3a:88:42:48:64:22:40:fe:5d:06:48:9a:cf: 6d:f2:38:42:a8:db:f3:f5:a4:c6:f7:76:43:95:02: 29:65:3a:47:24:9f:dc:56:3e:59:b8:e7:c7:a9:a2: f8:c4:95:5e:ef:3b:5c:bf:b9:85:b7:eb:72:e2:6a: af:11:57:7b:72:55:0e:ff:ee:95:ca:ec:66:88:7d: cd:2d:3e:82:b8:35:24:23:7f:41:67:bb:76:4f:e2: 20:28:e2:d8:b3:a3:85:57:38:d3:57:80:05:21:6b: 62:ee:1c:e2:b7:ef:2f:7f:5b:fc:2e:a7:d5:1a:a6: 98:56:79:bd:bf:cd:2d:e5:21:e5:bb:88:ec:88:20: 59:85:02:57:e7:4e:45:d7:0a:8b:52:e5:d3:24:04: 2e:3f:ec:06:42:c2:9b:d3:b3:89:dd:7b:f2:41:9c: ed:6d:9c:92:11:b5:17:d2:69:b2:eb:ef:57:68:2d: 3c:6f:df:f8:99:a9:bf:06:b1:11:20:6b:e1:c8:af: a4:37:df:c5:e8:04:ac:34:e6:97:23:85:b0:7a:11: 7e:47:74:14:3b:fc:5f:bc:36:cb:27:34:0f:a3:79: 47:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A8:9A:26:49:32:E8:98:53:DA:04:C8:0E:58:9C:9C:32:3E:32:C6 X509v3 Authority Key Identifier: keyid:0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/FF723568A0F311EBA4E4D83CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.210.0/23 IPv6: 2001:df2:ec80::/48 Signature Algorithm: sha256WithRSAEncryption 61:6f:36:39:d9:51:8d:55:22:e9:06:f5:da:44:39:dc:14:2c: 01:b2:79:25:ea:ec:0b:85:19:23:60:8e:6a:94:49:70:a1:ac: 5e:3a:e5:40:a4:b4:2a:95:f8:ac:40:48:d9:c1:c6:b3:fb:02: 51:1c:b5:13:0f:ea:e7:25:ad:b1:98:34:32:d5:c5:83:5f:ce: c8:08:7d:b4:cc:5f:66:ce:d1:50:62:35:1a:30:bc:54:04:3d: b1:ff:24:ee:9b:e7:6e:d2:e4:ba:63:84:ad:aa:a2:91:25:74: 9c:1b:cf:1a:6e:d8:75:69:a2:49:f6:a4:dc:2d:64:3d:06:53: be:25:d0:88:74:c9:72:b0:cc:54:7f:f7:86:6a:59:f5:7d:2a: f3:25:93:85:32:b5:0c:31:a6:31:4f:04:1b:07:8c:c5:0c:20: 2b:18:d5:7c:45:32:b5:ca:31:af:7e:6b:0a:77:8d:d9:22:1a: 5f:6c:5f:d9:e0:a9:03:93:0d:9f:ad:bb:f6:85:51:3e:20:bf: 44:a2:95:3c:92:41:bb:f7:75:dc:43:91:0a:68:6e:bb:ee:6b: f1:fa:2e:34:94:f2:a1:eb:f9:1e:68:2d:41:97:4f:77:ed:79: 13:55:61:47:bf:f6:50:01:60:a4:17:52:51:b0:ac:c4:d6:82: 31:8c:51:58 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFMUYxMTAvBgNVBAUTKDBCQkQ3MDU4OTBGMjc4RTFENTkzRTk4QTc0RjAzNDcw Rjc5NEZFNUMwHhcNMjUwNTEwMjAwNDU2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODFmYjE2OC1kMGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWiE7ipXHvAV5Dm59kJzLF6wRZKSnKWIyTeCniqpyTqIQkhkIkD+XQZIms9t 8jhCqNvz9aTG93ZDlQIpZTpHJJ/cVj5ZuOfHqaL4xJVe7ztcv7mFt+ty4mqvEVd7 clUO/+6VyuxmiH3NLT6CuDUkI39BZ7t2T+IgKOLYs6OFVzjTV4AFIWti7hzit+8v f1v8LqfVGqaYVnm9v80t5SHlu4jsiCBZhQJX505F1wqLUuXTJAQuP+wGQsKb07OJ 3XvyQZztbZySEbUX0mmy6+9XaC08b9/4mam/BrERIGvhyK+kN9/F6ASsNOaXI4Ww ehF+R3QUO/xfvDbLJzQPo3lHOQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFESomiZJ MuiYU9oEyA5YnJwyPjLGMB8GA1UdIwQYMBaAFAu9cFiQ8njh1ZPpinTwNHD3lP5c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUUxRi8wMUY3RDZDQTU4 NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVPSFZrLW1LZFBBMGNQZVVf bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3MXdXSkR5ZU9IVmstbUtkUEEwY1BlVV9sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTVFMUYvMDFGN0Q2Q0E1ODYyMTFFQTgxNEQ4NDU5QzRGOUFFMDIvRkY3MjM1NjhB MEYzMTFFQkE0RTREODNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlNIwDwQCAAIwCQMHACABDfLsgDANBgkqhkiG9w0BAQsF AAOCAQEAYW82OdlRjVUi6Qb12kQ53BQsAbJ5JersC4UZI2COapRJcKGsXjrlQKS0 KpX4rEBI2cHGs/sCURy1Ew/q5yWtsZg0MtXFg1/OyAh9tMxfZs7RUGI1GjC8VAQ9 sf8k7pvnbtLkumOEraqikSV0nBvPGm7YdWmiSfak3C1kPQZTviXQiHTJcrDMVH/3 hmpZ9X0q8yWThTK1DDGmMU8EGweMxQwgKxjVfEUytcoxr35rCneN2SIaX2xf2eCp A5MNn6279oVRPiC/RKKVPJJBu/d13EORCmhuu+5r8fouNJTyoev5HmgtQZdPd+15 E1VhR7/2UAFgpBdSUbCsxNaCMYxRWA== -----END CERTIFICATE-----Generated at Tue May 13 11:23:26 2025 by rpki-client