$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/CC2A0136F58C11EEB142585CC4F9AE02.roa File: CC2A0136F58C11EEB142585CC4F9AE02.roa (raw, json) Hash identifier: NmgnSbqhNrVMFG4Dg8/Hr5BSKbryNdhaQqVsZnbZ5iU= Subject key identifier: 1D:45:D8:DB:71:63:B8:6C:6B:06:23:C0:9B:5E:6F:EC:67:4F:00:58 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 1473 Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/CC2A0136F58C11EEB142585CC4F9AE02.roa Signing time: Fri 09 May 2025 21:02:45 +0000 ROA not before: Fri 09 May 2025 21:02:45 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 37988 IP address blocks: 103.108.228.0/24 maxlen: 24 2402:7340:1::/48 maxlen: 48 2402:7340:2::/48 maxlen: 48 2402:7340:3::/48 maxlen: 48 2402:7340:5::/48 maxlen: 48 2402:7340:4000::/34 maxlen: 34 2402:7340:8000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5235 (0x1473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: May 9 21:02:45 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=681e6d75-a790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7b:b8:26:7b:07:e4:e5:b3:87:1f:51:12:0d: f8:af:ff:80:03:a3:dd:26:ca:aa:8b:8a:d2:4d:05: 41:39:86:d6:b7:59:ed:10:3b:2f:da:07:65:ff:23: 4f:53:69:a6:08:e7:f4:d9:45:b6:55:8d:74:4c:de: b4:10:da:2e:f4:af:a9:a1:a6:d0:fc:b0:d1:fa:07: 18:b7:07:1f:cc:31:a0:27:87:4d:2d:d6:2f:3c:21: f4:30:11:61:2c:59:61:67:92:8c:2e:2e:d8:69:01: ad:7e:92:e2:4f:6f:c1:38:5f:4d:63:2a:fd:42:81: 2f:3a:67:3c:76:10:34:93:61:27:0b:1c:2f:9e:12: d3:07:cb:08:09:7f:05:da:fa:df:c2:2a:da:38:a9: 03:42:c4:81:04:bb:25:26:5a:b5:04:8c:c2:cc:75: 1d:b7:82:ec:12:fb:b9:1d:40:b7:f6:71:94:5f:82: 02:f8:b7:6c:e3:38:6e:98:32:eb:f4:f7:15:8a:49: 91:03:90:f2:ed:c6:30:3f:4d:59:a9:f0:a2:19:f7: 75:59:80:26:1e:b3:0b:1d:44:6e:cb:d8:06:f6:30: 9a:77:5e:c0:41:eb:18:12:66:bb:a1:d8:74:72:55: 70:3c:7a:1a:8a:94:32:47:8e:56:4e:17:f3:de:e3: 1c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:45:D8:DB:71:63:B8:6C:6B:06:23:C0:9B:5E:6F:EC:67:4F:00:58 X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/CC2A0136F58C11EEB142585CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.108.228.0/24 IPv6: 2402:7340:1::-2402:7340:3:ffff:ffff:ffff:ffff:ffff 2402:7340:5::/48 2402:7340:4000::-2402:7340:87ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 62:82:55:12:de:97:66:0c:5e:b2:9e:f4:8f:a3:b8:83:e3:11: 2c:59:82:62:98:ca:c8:24:8a:a8:c6:77:98:fb:9d:bb:2b:54: 38:83:62:73:89:b6:e9:b4:85:63:b8:08:fa:8d:25:ab:2e:95: c3:3c:89:d4:e7:46:b1:45:8e:36:b1:fc:a1:dc:15:db:24:a7: 13:da:8a:f7:c0:d2:a4:c7:46:b8:93:9e:59:cd:c8:ee:bf:02: 9f:8a:cf:ae:85:4b:6e:c4:04:2f:3d:ed:16:55:cf:76:56:b9: 6d:41:2e:e7:f5:a9:fd:9d:67:fa:a7:37:82:6e:06:5c:02:ce: a9:8f:ac:18:a1:84:a3:c2:f2:ff:1d:dc:b4:7c:9f:5f:7b:04: 94:bf:32:bc:a8:04:31:48:28:4d:c8:18:3f:9a:3f:0c:10:1a: d5:02:fd:d1:d2:bd:79:d1:f0:16:51:2d:12:d9:3d:7d:4d:37: 74:09:9f:95:24:ca:ea:3a:86:30:b1:72:d2:79:a0:dd:e3:cc: ac:9f:84:6e:4d:2e:d2:dd:a9:f9:47:45:fc:cc:11:8e:3d:c1: 28:5b:1d:17:a1:c5:ba:16:a5:73:27:4a:77:80:ff:1d:b2:11: 86:9e:d4:07:05:10:19:34:b8:c5:12:22:24:52:d9:d0:ea:86: 0c:8c:67:da -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgICFHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjUwNTA5MjEwMjQ1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODFlNmQ3NS1hNzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3u4JnsH5OWzhx9REg34r/+AA6PdJsqqi4rSTQVBOYbWt1ntEDsv2gdl/yNP U2mmCOf02UW2VY10TN60ENou9K+poabQ/LDR+gcYtwcfzDGgJ4dNLdYvPCH0MBFh LFlhZ5KMLi7YaQGtfpLiT2/BOF9NYyr9QoEvOmc8dhA0k2EnCxwvnhLTB8sICX8F 2vrfwiraOKkDQsSBBLslJlq1BIzCzHUdt4LsEvu5HUC39nGUX4IC+Lds4zhumDLr 9PcVikmRA5Dy7cYwP01ZqfCiGfd1WYAmHrMLHURuy9gG9jCad17AQesYEma7odh0 clVwPHoaipQyR45WThfz3uMcFQIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFB1F2Ntx Y7hsawYjwJteb+xnTwBYMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdCMTUvRkFGNkZENzg3MUU2MTFFODk5NkUyRTY0QzRGOUFFMDIvQ0MyQTAxMzZG NThDMTFFRUIxNDI1ODVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVgYIKwYBBQUHAQcBAf8E RzBFMAwEAgABMAYDBABnbOQwNQQCAAIwLzASAwcAJAJzQAABAwcCJAJzQAAAAwcA JAJzQAAFMBADBgYkAnNAQAMGAyQCc0CAMA0GCSqGSIb3DQEBCwUAA4IBAQBiglUS 3pdmDF6ynvSPo7iD4xEsWYJimMrIJIqoxneY+527K1Q4g2JzibbptIVjuAj6jSWr LpXDPInU50axRY42sfyh3BXbJKcT2or3wNKkx0a4k55ZzcjuvwKfis+uhUtuxAQv Pe0WVc92VrltQS7n9an9nWf6pzeCbgZcAs6pj6wYoYSjwvL/Hdy0fJ9fewSUvzK8 qAQxSChNyBg/mj8MEBrVAv3R0r150fAWUS0S2T19TTd0CZ+VJMrqOoYwsXLSeaDd 48ysn4RuTS7S3an5R0X8zBGOPcEoWx0XocW6FqVzJ0p3gP8dshGGntQHBRAZNLjF EiIkUtnQ6oYMjGfa -----END CERTIFICATE-----Generated at Sun May 11 22:21:54 2025 by rpki-client