$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/4EEE01FCE15611EF9560323EC4F9AE02.roa File: 4EEE01FCE15611EF9560323EC4F9AE02.roa (raw, json) Hash identifier: 9Nz/F+iPTsdfTjIzxhDauJBST5Z1hrA/MujlPAQ3LmU= Subject key identifier: 30:88:C2:DF:70:7E:8D:EF:92:47:67:2E:C4:98:71:FC:09:E0:5F:77 Certificate issuer: /CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33 Certificate serial: 0D76 Authority key identifier: 0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/4EEE01FCE15611EF9560323EC4F9AE02.roa Signing time: Thu 08 May 2025 18:11:40 +0000 ROA not before: Thu 08 May 2025 18:11:40 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 138983 IP address blocks: 103.138.30.0/24 maxlen: 24 103.138.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3446 (0xd76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD096, serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33 Validity Not Before: May 8 18:11:40 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681cf3dc-5005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:32:72:1d:96:c3:6d:44:c5:ef:58:21:93: a5:84:e1:7c:e4:8a:8e:44:4a:f9:b8:40:fb:fa:d5: 94:71:4d:1f:c2:ec:1e:a3:27:48:c6:41:85:fc:3a: 13:58:42:86:ff:28:42:9e:4b:6e:06:67:d0:dd:b1: 5c:dd:05:f8:9a:22:85:06:ed:ef:2a:50:a6:1f:cc: b3:fb:2e:34:d4:76:d7:d7:6e:48:db:29:9d:7f:ab: 83:0d:8c:40:4a:45:bc:3c:6e:71:b3:41:04:1a:9b: 06:6b:90:84:46:8c:f2:8b:6e:19:f6:57:f9:c8:8a: cd:c0:c2:38:6b:00:2d:20:3a:49:4a:46:c5:ef:c1: 4f:7f:e0:4a:c1:70:b0:0b:74:83:28:53:32:5d:17: 7e:f1:ba:ac:47:bd:bd:bc:02:1f:66:a7:42:20:a7: 82:d1:e6:80:ed:bb:a0:c8:a1:13:74:e6:a6:ac:d9: 3a:17:25:48:7b:97:16:9e:97:e0:84:03:bf:d6:25: 91:d1:22:c9:24:50:76:7d:f5:3d:3e:2d:74:b8:00: 24:bd:36:b5:db:c0:38:37:66:4e:01:51:51:9b:83: 27:cd:d8:d3:db:ea:05:02:f2:fd:f4:44:f6:23:e2: e6:53:f2:84:2c:88:14:11:0d:3d:6c:0c:96:9e:ef: 48:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:88:C2:DF:70:7E:8D:EF:92:47:67:2E:C4:98:71:FC:09:E0:5F:77 X509v3 Authority Key Identifier: keyid:0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/4EEE01FCE15611EF9560323EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.30.0/23 Signature Algorithm: sha256WithRSAEncryption 45:17:24:fa:c2:2d:e6:38:f7:26:5d:88:7c:01:24:45:88:e3: ae:03:1c:9e:8b:5b:6a:f2:39:24:12:14:74:5f:1c:ab:5e:5f: 02:48:66:99:54:1a:66:05:dd:ba:26:87:70:63:f6:58:7b:9f: 08:46:01:ef:2f:ef:67:73:08:61:2b:ed:be:1e:7c:28:72:fe: 68:78:3f:23:db:2b:1a:22:88:7e:ae:1d:af:c2:cd:cd:9b:40: 28:d9:ff:ef:3e:8a:ab:08:28:7c:0f:46:5b:cd:b3:b4:9e:3f: 3b:6f:27:43:e2:d5:91:c4:25:fc:b4:dc:19:67:4a:14:d8:9a: 7f:55:be:29:5e:e6:3d:67:52:7e:7f:aa:dd:26:7e:80:f7:08: 44:d8:3f:84:e8:7c:d9:db:e0:21:7a:8a:41:be:30:d9:8f:27: ce:24:47:d7:de:d1:1f:bd:45:b4:91:5c:52:e3:ec:bc:8c:ac: c9:6d:1f:07:1b:35:1c:dd:a5:55:83:36:cc:d9:52:d6:5a:b8: fb:4b:4a:34:62:1a:14:44:37:29:b8:db:ee:7c:82:96:cb:ed: af:0f:de:51:e1:e9:59:98:bc:e9:5f:c3:db:88:f6:a4:f4:93: 1e:98:28:29:35:08:f8:1c:5b:67:6f:f0:87:2c:c9:a7:fd:7b: bb:25:af:62 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwOTYxMTAvBgNVBAUTKDBBMkU1REYxQjJDM0Q3OTdERUExNTM2N0ZBQTlEQzM4 ODRDRDFCMzMwHhcNMjUwNTA4MTgxMTQwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZjNkYy01MDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMgych2Ww21Exe9YIZOlhOF85IqOREr5uED7+tWUcU0fwuweoydIxkGF/DoT WEKG/yhCnktuBmfQ3bFc3QX4miKFBu3vKlCmH8yz+y401HbX125I2ymdf6uDDYxA SkW8PG5xs0EEGpsGa5CERozyi24Z9lf5yIrNwMI4awAtIDpJSkbF78FPf+BKwXCw C3SDKFMyXRd+8bqsR729vAIfZqdCIKeC0eaA7bugyKETdOamrNk6FyVIe5cWnpfg hAO/1iWR0SLJJFB2ffU9Pi10uAAkvTa128A4N2ZOAVFRm4MnzdjT2+oFAvL99ET2 I+LmU/KELIgUEQ09bAyWnu9I7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFDCIwt9w fo3vkkdnLsSYcfwJ4F93MB8GA1UdIwQYMBaAFAouXfGyw9eX3qFTZ/qp3DiEzRsz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA5Ni9FNTA0MkMyQUNB MzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1ZmVvVk5uLXFuY09JVE5H ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpNWQ4YkxEMTVmZW9WTm4tcW5jT0lUTkd6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QwOTYvRTUwNDJDMkFDQTMyMTFFOUE3MzlCNzUzQzRGOUFFMDIvNEVFRTAxRkNF MTU2MTFFRjk1NjAzMjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnih4wDQYJKoZIhvcNAQELBQADggEBAEUXJPrCLeY49yZd iHwBJEWI464DHJ6LW2ryOSQSFHRfHKteXwJIZplUGmYF3bomh3Bj9lh7nwhGAe8v 72dzCGEr7b4efChy/mh4PyPbKxoiiH6uHa/Czc2bQCjZ/+8+iqsIKHwPRlvNs7Se PztvJ0Pi1ZHEJfy03BlnShTYmn9Vvile5j1nUn5/qt0mfoD3CETYP4TofNnb4CF6 ikG+MNmPJ84kR9fe0R+9RbSRXFLj7LyMrMltHwcbNRzdpVWDNszZUtZauPtLSjRi GhRENym42+58gpbL7a8P3lHh6VmYvOlfw9uI9qT0kx6YKCk1CPgcW2dv8Icsyaf9 e7slr2I= -----END CERTIFICATE-----Generated at Mon May 12 15:40:19 2025 by rpki-client