$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/0000FD82284811EFADB77468C4F9AE02.roa File: 0000FD82284811EFADB77468C4F9AE02.roa (raw, json) Hash identifier: W9xZ05fzRaVk7lWJKjvq0VcXRDKzdp+VZJErV4rbXxA= Subject key identifier: 6C:9B:CE:3B:7C:89:F1:8C:00:F2:40:ED:6C:C3:E4:3A:43:DA:7C:43 Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D Certificate serial: 34CF Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/0000FD82284811EFADB77468C4F9AE02.roa Signing time: Mon 28 Apr 2025 14:50:45 +0000 ROA not before: Mon 28 Apr 2025 14:50:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132145 IP address blocks: 103.6.12.0/22 maxlen: 22 103.6.12.0/24 maxlen: 24 103.6.13.0/24 maxlen: 24 103.6.14.0/24 maxlen: 24 103.6.15.0/24 maxlen: 24 180.233.128.0/22 maxlen: 22 180.233.128.0/24 maxlen: 24 180.233.129.0/24 maxlen: 24 180.233.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 14:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13519 (0x34cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D Validity Not Before: Apr 28 14:50:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680f95c5-5983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b8:5a:e3:36:8a:87:72:d7:43:db:f8:69:42: 7d:13:66:9a:5e:ab:fc:db:5e:ee:4d:7a:33:2c:7c: 2b:70:a2:67:dd:b1:3f:ee:a6:28:ac:14:b9:23:9e: b0:09:51:6e:e1:6b:3a:e8:df:a0:6b:8c:54:3a:ca: 9e:f1:24:d0:85:db:32:d8:5c:a8:94:4d:82:1a:d8: 17:b8:c8:3d:45:80:54:47:d6:91:a2:8f:83:1f:10: 7d:cb:92:97:df:15:63:0b:f4:50:42:cf:37:4a:5d: f1:51:b5:f9:4a:fd:2d:23:d8:67:fd:d5:c3:a4:58: 98:9b:e3:df:49:af:e1:12:de:e4:ef:01:17:e2:93: 6b:5d:2f:22:7c:ce:33:20:95:cc:af:54:17:a7:9d: de:af:cb:bc:38:2d:8b:c9:51:5d:26:66:7b:a1:92: f4:fa:77:84:3b:a3:f8:be:26:5f:23:a9:15:5b:e1: 2e:1f:c0:7e:2f:e4:7d:c9:81:13:58:42:8d:50:39: bc:ee:b1:cc:dc:24:f1:7c:0a:c0:bb:8a:46:6b:de: 69:b5:25:8e:22:25:c5:a1:10:59:98:61:ef:a4:71: 60:ba:c2:f3:95:f2:f4:a8:cf:f4:02:c7:d8:ed:71: 2e:ca:85:23:5d:56:c2:8c:97:53:a8:8a:9c:d3:aa: 31:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9B:CE:3B:7C:89:F1:8C:00:F2:40:ED:6C:C3:E4:3A:43:DA:7C:43 X509v3 Authority Key Identifier: keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/0000FD82284811EFADB77468C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.6.12.0/22 180.233.128.0/22 Signature Algorithm: sha256WithRSAEncryption 77:a4:e0:99:2c:1f:9a:05:a9:0e:23:eb:05:67:b4:67:3b:57: 2d:fe:f7:ef:3b:f4:c4:8e:da:92:92:68:58:f4:03:4f:8c:64: ce:99:40:83:75:04:30:67:4b:75:50:0f:ba:56:0b:f6:e6:d5: 6a:82:5e:c8:a9:6d:09:1d:af:9c:ea:47:b4:3b:0a:0e:62:c8: e4:22:d9:ff:5f:2d:4b:75:45:85:50:44:99:c6:16:01:25:27: ec:1a:f1:99:50:a1:42:1e:8f:73:fb:82:d2:5f:0d:60:e5:2f: cd:b6:b1:e8:9a:33:fc:9f:e9:9d:57:aa:7b:93:40:ac:53:27: 4b:9b:2e:ef:09:11:59:a2:83:5c:ea:b7:75:b5:36:9b:44:83: ef:fd:a0:de:50:37:55:37:e2:27:54:fd:a9:3f:9b:eb:b7:eb: bc:c4:3f:0d:6b:70:53:30:2e:53:47:d7:92:35:1b:b5:55:c0: 74:30:8d:4c:b3:81:3c:8e:39:f7:de:22:b4:f9:28:27:19:5c: 60:46:5a:2b:ac:0a:fa:ef:7b:a8:b4:4d:47:4b:e7:06:f2:69: 39:b7:e1:87:5c:c3:20:3c:9a:09:85:29:bd:94:12:d4:ea:7d: 33:aa:2e:0e:27:0e:52:5b:56:13:c3:91:6f:50:40:9c:08:98: 1a:3b:9a:50 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1OUMxMTAvBgNVBAUTKEMxMjk2RkZBRDM0RjI5RjA0RTBFRkFENUQ5MjQ0QzAy QTdEODdEOEQwHhcNMjUwNDI4MTQ1MDQ1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBmOTVjNS01OTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLha4zaKh3LXQ9v4aUJ9E2aaXqv8217uTXozLHwrcKJn3bE/7qYorBS5I56w CVFu4Ws66N+ga4xUOsqe8STQhdsy2FyolE2CGtgXuMg9RYBUR9aRoo+DHxB9y5KX 3xVjC/RQQs83Sl3xUbX5Sv0tI9hn/dXDpFiYm+PfSa/hEt7k7wEX4pNrXS8ifM4z IJXMr1QXp53er8u8OC2LyVFdJmZ7oZL0+neEO6P4viZfI6kVW+EuH8B+L+R9yYET WEKNUDm87rHM3CTxfArAu4pGa95ptSWOIiXFoRBZmGHvpHFgusLzlfL0qM/0AsfY 7XEuyoUjXVbCjJdTqIqc06oxXQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGybzjt8 ifGMAPJA7WzD5DpD2nxDMB8GA1UdIwQYMBaAFMEpb/rTTynwTg761dkkTAKn2H2N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjU5Qy83MzVEQzRENjFE OEQxMUUyOUE3NTQzRUIwOEIwMkNEMi93U2x2LXROUEtmQk9EdnJWMlNSTUFxZllm WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dTbHYtdE5QS2ZCT0R2clYyU1JNQXFmWWZZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUY1OUMvNzM1REM0RDYxRDhEMTFFMjlBNzU0M0VCMDhCMDJDRDIvMDAwMEZEODIy ODQ4MTFFRkFEQjc3NDY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnBgwDBAK06YAwDQYJKoZIhvcNAQELBQADggEBAHek4Jks H5oFqQ4j6wVntGc7Vy3+9+879MSO2pKSaFj0A0+MZM6ZQIN1BDBnS3VQD7pWC/bm 1WqCXsipbQkdr5zqR7Q7Cg5iyOQi2f9fLUt1RYVQRJnGFgElJ+wa8ZlQoUIej3P7 gtJfDWDlL822seiaM/yf6Z1XqnuTQKxTJ0ubLu8JEVmig1zqt3W1NptEg+/9oN5Q N1U34idU/ak/m+u367zEPw1rcFMwLlNH15I1G7VVwHQwjUyzgTyOOffeIrT5KCcZ XGBGWiusCvrve6i0TUdL5wbyaTm34YdcwyA8mgmFKb2UEtTqfTOqLg4nDlJbVhPD kW9QQJwImBo7mlA= -----END CERTIFICATE-----Generated at Wed May 7 21:40:31 2025 by rpki-client