$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/8FDE93DACCD811EFB1B8FC73C4F9AE02.roa File: 8FDE93DACCD811EFB1B8FC73C4F9AE02.roa (raw, json) Hash identifier: IDtuSb9pshQsdcFPIHbWdOApLt7FtA2VqFokYkqY6Yc= Subject key identifier: E3:33:00:11:4B:40:8E:78:12:F8:79:37:32:91:65:73:5D:40:1F:DE Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 083A Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/8FDE93DACCD811EFB1B8FC73C4F9AE02.roa Signing time: Tue 07 Jan 2025 09:19:57 +0000 ROA not before: Tue 07 Jan 2025 09:19:57 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135030 IP address blocks: 103.111.164.0/22 maxlen: 22 103.111.164.0/23 maxlen: 23 103.111.164.0/24 maxlen: 24 103.111.165.0/24 maxlen: 24 103.111.166.0/23 maxlen: 23 103.111.166.0/24 maxlen: 24 2402:9f40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2106 (0x83a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: Jan 7 09:19:57 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=677cf1bd-3b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:34:ef:99:c9:9a:eb:14:fc:71:b2:e6:60: 22:c1:9c:b0:ea:08:0f:5e:3e:98:46:23:7e:89:ae: b7:6e:de:86:58:07:5c:48:74:30:60:a3:84:a5:16: 56:84:f3:f2:b0:b8:bc:a8:8e:35:d8:51:f1:18:62: 3a:a7:ce:92:34:4d:62:cc:17:f5:df:77:38:69:71: 0b:71:90:29:9d:23:e3:31:cf:fa:6d:0a:05:96:9d: 58:cd:3e:e2:1c:58:4f:a7:1b:1e:f6:5c:b4:89:8b: af:3d:43:a9:3a:e2:5f:34:68:88:db:1d:2e:cc:10: 41:8a:1c:25:03:04:b6:86:79:cc:69:df:cc:ba:7b: ac:44:42:0a:53:dd:6a:f3:82:c0:18:47:4e:3e:5b: f3:18:38:6f:02:38:c8:7e:cd:df:52:5f:c7:4e:7b: a0:64:73:13:bb:4f:41:ed:34:81:0f:ea:4f:ab:de: 65:c6:ab:4c:17:a1:57:c6:aa:e7:24:47:4c:a1:57: e8:02:9c:08:83:fd:c1:36:e3:b1:3b:d4:75:10:64: 15:36:e9:82:5b:84:b1:b6:39:78:31:2b:f8:68:36: 73:5b:9b:a4:a9:3f:63:50:c1:e0:25:b1:3d:c8:4d: 5e:5c:c3:bc:cc:fb:79:64:87:b1:64:73:43:72:82: 67:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:33:00:11:4B:40:8E:78:12:F8:79:37:32:91:65:73:5D:40:1F:DE X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/8FDE93DACCD811EFB1B8FC73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.164.0/22 IPv6: 2402:9f40::/32 Signature Algorithm: sha256WithRSAEncryption 7b:2f:9c:2c:b5:55:a3:a6:7c:fc:a6:e7:33:52:6e:19:9f:96: 6f:1e:96:3e:8f:4b:04:f3:b6:04:9d:42:b1:98:1a:15:10:36: 6f:7a:b0:50:4c:ba:24:7c:bc:71:05:86:5f:e2:3d:ba:a7:0a: b0:5e:8e:a9:ef:50:6b:72:11:2f:33:1d:43:0b:d7:4b:92:d6: 38:d7:bb:ad:dc:c1:92:d6:6a:82:85:f9:db:f3:ea:c7:56:90: 2a:30:ae:dc:23:f1:f5:8a:85:af:78:30:2d:9c:e2:16:95:d6: 75:21:04:3b:32:a4:dd:b8:0d:a5:61:ce:34:f4:6c:ed:4f:87: cb:2c:76:88:56:7d:18:e8:ae:6e:05:2d:ec:26:4f:3c:72:03: fc:b7:20:10:d0:4e:cb:9d:bb:25:7e:bc:83:d1:71:16:54:e7: c0:91:7b:e0:30:64:84:ea:46:1f:60:ee:c1:c6:6e:6b:6f:17: 88:90:1f:52:58:4c:35:e3:f0:db:a4:a4:43:fa:40:e8:c8:98: 92:19:12:b3:a3:49:8e:95:7f:6a:51:5c:9b:b1:a2:e9:c2:1c: 3a:51:4f:37:b7:7e:37:c9:4b:f2:4b:a8:e1:fb:a8:3a:8c:45: 8f:6a:9c:2e:f6:f1:b6:11:92:7d:1f:fa:55:6b:a0:07:18:27: 5c:0c:92:0b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjUwMTA3MDkxOTU3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdjZjFiZC0zYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/E075nJmusU/HGy5mAiwZyw6ggPXj6YRiN+ia63bt6GWAdcSHQwYKOEpRZW hPPysLi8qI412FHxGGI6p86SNE1izBf133c4aXELcZApnSPjMc/6bQoFlp1YzT7i HFhPpxse9ly0iYuvPUOpOuJfNGiI2x0uzBBBihwlAwS2hnnMad/MunusREIKU91q 84LAGEdOPlvzGDhvAjjIfs3fUl/HTnugZHMTu09B7TSBD+pPq95lxqtMF6FXxqrn JEdMoVfoApwIg/3BNuOxO9R1EGQVNumCW4Sxtjl4MSv4aDZzW5ukqT9jUMHgJbE9 yE1eXMO8zPt5ZIexZHNDcoJngQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOMzABFL QI54Evh5NzKRZXNdQB/eMB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDU2MEQvNjhDM0Y0OUE0MUVFMTFFQTlDRUExRjc1QzRGOUFFMDIvOEZERTkzREFD Q0Q4MTFFRkIxQjhGQzczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnb6QwDQQCAAIwBwMFACQCn0AwDQYJKoZIhvcNAQELBQAD ggEBAHsvnCy1VaOmfPym5zNSbhmflm8elj6PSwTztgSdQrGYGhUQNm96sFBMuiR8 vHEFhl/iPbqnCrBejqnvUGtyES8zHUML10uS1jjXu63cwZLWaoKF+dvz6sdWkCow rtwj8fWKha94MC2c4haV1nUhBDsypN24DaVhzjT0bO1Ph8ssdohWfRjorm4FLewm TzxyA/y3IBDQTsuduyV+vIPRcRZU58CRe+AwZITqRh9g7sHGbmtvF4iQH1JYTDXj 8NukpEP6QOjImJIZErOjSY6Vf2pRXJuxounCHDpRTze3fjfJS/JLqOH7qDqMRY9q nC728bYRkn0f+lVroAcYJ1wMkgs= -----END CERTIFICATE-----Generated at Tue May 13 02:04:30 2025 by rpki-client