$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/5D432F98177711EEAB396D1CC4F9AE02.roa File: 5D432F98177711EEAB396D1CC4F9AE02.roa (raw, json) Hash identifier: 64T0QVyxSFq/Fdklobji66MEyYuHugmocsuY/nRlqQ0= Subject key identifier: EA:C5:13:97:64:4E:CD:5D:AF:A4:77:7F:39:C8:C3:2A:69:DF:37:23 Certificate issuer: /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Certificate serial: 017D Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/5D432F98177711EEAB396D1CC4F9AE02.roa Signing time: Thu 03 Jul 2025 04:08:07 +0000 ROA not before: Thu 03 Jul 2025 04:08:07 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.229.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Validity Not Before: Jul 3 04:08:07 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68660227-461b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ae:e9:31:32:32:4f:7d:f2:e0:3f:93:15:e2: 93:b4:81:81:8c:c7:54:e7:c0:58:1d:56:b7:9f:6c: 5a:39:c3:f2:02:9f:60:21:76:da:26:03:6d:cb:ea: 3a:2d:85:73:1b:53:1a:bd:e5:40:a9:53:c7:2d:54: 2b:76:e3:79:0e:91:c5:f4:c9:d4:99:7e:ba:d5:fd: 62:ac:78:16:b7:fd:dd:9b:f7:08:61:5d:9d:ab:b2: a2:50:61:51:30:27:96:46:26:62:32:ad:db:c5:dc: a6:b0:32:21:cb:3b:36:85:34:df:c0:db:f4:e9:65: 8a:73:78:76:96:ed:24:59:51:d7:4e:a8:b5:a0:f0: 1a:4b:8c:a4:b3:e9:bd:5d:6f:01:85:0d:2d:4e:d2: 9c:45:fb:ef:5a:1a:5e:e7:17:c8:54:5e:a1:86:d7: b4:56:d6:c5:8c:e8:eb:ce:cb:76:f4:b9:51:b0:01: 93:c2:2b:c8:7d:34:2c:f0:ae:c7:3b:91:43:47:21: 12:ed:73:8a:c5:c4:0e:62:cf:68:68:93:49:3d:f3: 8b:8c:e9:35:a4:a7:55:b1:0c:c5:3c:d5:26:64:a5: 05:f4:30:3a:83:30:f5:02:1d:93:85:1e:c5:37:be: 93:0f:1d:1a:e1:3e:ab:af:6f:66:9e:b2:99:fa:f1: d0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C5:13:97:64:4E:CD:5D:AF:A4:77:7F:39:C8:C3:2A:69:DF:37:23 X509v3 Authority Key Identifier: keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/5D432F98177711EEAB396D1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.233.0/24 Signature Algorithm: sha256WithRSAEncryption 29:ca:36:14:ca:a9:a2:2e:95:75:e2:44:cb:c0:e8:83:8b:d2: c2:2c:83:57:6d:f4:62:6f:0f:34:33:f0:ea:09:b3:74:ba:3c: 24:00:4f:54:34:d5:70:32:1f:b8:01:2f:0f:8a:6c:57:73:dd: 21:81:40:8c:4f:72:91:db:66:c9:f9:7f:55:7e:03:eb:2b:32: 87:83:88:ba:eb:7e:5d:4a:8b:fa:b0:9d:df:20:f6:06:c5:66: 3a:d1:d0:f0:5f:f2:63:9e:cf:26:13:db:af:95:d5:96:76:0c: cf:2b:ea:39:ef:36:50:b0:da:ba:b3:cc:d5:ae:ac:a3:f6:cd: 39:a8:d0:0d:1f:ce:49:dc:64:84:de:f5:e3:67:44:58:8d:54: 0b:43:90:d6:c0:db:eb:6b:1d:55:de:7c:d3:c2:d3:1f:42:30: e2:eb:c6:ee:29:f9:63:f2:63:7e:55:d8:44:34:8c:d1:d7:e6: 71:99:ce:60:0e:f5:4b:8f:20:aa:c6:3b:65:77:c3:85:30:c8: 05:94:2f:fa:83:ad:27:0d:73:a8:6d:1a:a3:54:e8:d3:9b:dc: c9:dc:c2:c0:6a:4e:0f:87:8f:9b:db:83:c4:92:d4:fd:d6:8b: 2e:09:38:27:2d:a9:85:96:1a:25:7b:26:54:71:43:3c:db:5f: 2a:57:09:3a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2NDExMTAvBgNVBAUTKDc3MUI3ODg3QzQ4OUJEOUIxN0IzQ0VEODMxNjRFRjQ0 REM1NjRFRjUwHhcNMjUwNzAzMDQwODA3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY2MDIyNy00NjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvq7pMTIyT33y4D+TFeKTtIGBjMdU58BYHVa3n2xaOcPyAp9gIXbaJgNty+o6 LYVzG1MaveVAqVPHLVQrduN5DpHF9MnUmX661f1irHgWt/3dm/cIYV2dq7KiUGFR MCeWRiZiMq3bxdymsDIhyzs2hTTfwNv06WWKc3h2lu0kWVHXTqi1oPAaS4yks+m9 XW8BhQ0tTtKcRfvvWhpe5xfIVF6hhte0VtbFjOjrzst29LlRsAGTwivIfTQs8K7H O5FDRyES7XOKxcQOYs9oaJNJPfOLjOk1pKdVsQzFPNUmZKUF9DA6gzD1Ah2ThR7F N76TDx0a4T6rr29mnrKZ+vHQgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOrFE5dk Ts1dr6R3fznIwypp3zcjMB8GA1UdIwQYMBaAFHcbeIfEib2bF7PO2DFk70TcVk71 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTY0MS83RDAyODdFQTE3 NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZac1hzODdZTVdUdlJOeFdU dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4dDRoOFNKdlpzWHM4N1lNV1R2Uk54V1R2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk2NDEvN0QwMjg3RUExNzcwMTFFRTk0NUNEODU5QzRGOUFFMDIvNUQ0MzJGOTgx Nzc3MTFFRUFCMzk2RDFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn5ekwDQYJKoZIhvcNAQELBQADggEBACnKNhTKqaIulXXi RMvA6IOL0sIsg1dt9GJvDzQz8OoJs3S6PCQAT1Q01XAyH7gBLw+KbFdz3SGBQIxP cpHbZsn5f1V+A+srMoeDiLrrfl1Ki/qwnd8g9gbFZjrR0PBf8mOezyYT26+V1ZZ2 DM8r6jnvNlCw2rqzzNWurKP2zTmo0A0fzkncZITe9eNnRFiNVAtDkNbA2+trHVXe fNPC0x9CMOLrxu4p+WPyY35V2EQ0jNHX5nGZzmAO9UuPIKrGO2V3w4UwyAWUL/qD rScNc6htGqNU6NOb3MncwsBqTg+Hj5vbg8SS1P3Wiy4JOCctqYWWGiV7JlRxQzzb XypXCTo= -----END CERTIFICATE-----Generated at Sat Jul 5 02:02:30 2025 by rpki-client