$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/DA61635E534811EC8FFBDB7CC4F9AE02.roa File: DA61635E534811EC8FFBDB7CC4F9AE02.roa (raw, json) Hash identifier: k6KOlaww8ZZoE8DhHLb+fcqbZNEuZUquu+zgOXhayXw= Subject key identifier: E7:00:92:BF:28:2C:21:E6:50:B0:74:09:01:34:06:62:FF:94:59:2D Certificate issuer: /CN=A91EA522/serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4 Certificate serial: 0451 Authority key identifier: EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/DA61635E534811EC8FFBDB7CC4F9AE02.roa Signing time: Fri 09 May 2025 00:17:22 +0000 ROA not before: Fri 09 May 2025 00:17:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132694 IP address blocks: 103.18.92.0/22 maxlen: 22 103.18.92.0/24 maxlen: 24 103.18.93.0/24 maxlen: 24 103.18.94.0/24 maxlen: 24 103.18.95.0/24 maxlen: 24 2406:7700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1105 (0x451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA522, serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4 Validity Not Before: May 9 00:17:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681d4992-b8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:99:0c:7e:c8:04:2a:6a:e8:d0:0a:b4:38: 1d:1e:13:10:a4:cc:6c:d2:fe:89:ea:bd:4d:f7:ca: 51:53:5f:ff:e5:26:25:fe:ee:83:63:36:d5:d0:44: b6:58:5e:df:9b:38:23:3e:45:21:32:af:fe:4a:19: 7a:f1:42:08:ad:60:61:a5:79:97:a4:89:83:75:65: 27:19:9e:24:0e:42:5b:23:e3:0c:aa:14:a4:f5:b3: d4:ad:b0:87:25:61:d6:eb:3d:3d:80:2f:c9:fe:d2: c5:46:26:53:6b:e8:32:ec:19:6d:d1:8e:13:b5:c6: af:95:eb:c4:86:a0:3f:28:25:94:89:a6:9b:e0:10: da:df:dc:59:43:be:76:e5:3a:5d:d0:05:bf:01:ac: 18:a8:b7:fd:ad:d9:45:91:1a:f4:ea:86:ab:80:dc: 6f:53:cb:f7:27:8d:e4:4c:ed:2c:58:fb:42:97:f2: 69:60:68:69:9f:b9:ba:71:26:64:74:0f:a4:84:13: fc:5e:ce:cc:36:cb:30:b7:95:b2:b3:3c:1f:39:66: 54:dc:fd:fe:ef:f2:a2:1d:a5:ba:21:b8:22:96:42: 3d:3e:2f:6b:d4:30:2f:b4:74:92:f7:de:78:a2:5b: c2:92:cd:be:55:04:5c:cc:8c:a3:b4:3e:ad:5e:f1: 42:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:00:92:BF:28:2C:21:E6:50:B0:74:09:01:34:06:62:FF:94:59:2D X509v3 Authority Key Identifier: keyid:EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/DA61635E534811EC8FFBDB7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.18.92.0/22 IPv6: 2406:7700::/32 Signature Algorithm: sha256WithRSAEncryption 88:60:22:66:b3:a8:6a:20:a7:de:38:f9:f2:9c:49:3c:f6:89: eb:01:07:13:8c:1c:e3:e9:dd:44:a3:8b:bd:38:92:8a:28:29: df:38:ba:f0:5a:33:9b:05:f0:1d:e7:32:74:51:54:cf:b8:3f: 8c:0e:de:d6:13:6b:46:c5:20:1f:ae:68:e3:e1:ad:be:7c:dc: ba:4a:6f:b8:af:34:62:17:25:e1:2b:98:a0:9c:9b:91:9a:65: 97:77:03:a4:6b:3d:3a:be:9f:35:03:ee:0e:68:a5:2c:41:0b: 58:3f:53:d0:5c:36:fe:05:b5:c5:a6:6d:54:a6:91:46:12:40: e6:be:99:30:0b:67:59:90:22:25:dd:a3:9e:11:84:2b:51:16: 78:44:f3:f9:6e:04:64:a4:5e:94:1f:ba:2c:ad:27:21:49:71: ad:ab:94:77:8b:2c:c6:8e:25:43:39:24:e7:92:bc:72:55:dd: 83:e2:04:44:ee:ca:59:af:d5:cd:8d:8c:29:70:87:1f:f8:07: 1b:6f:a5:c6:f2:12:ad:1c:fd:5b:36:75:6a:33:4d:74:35:44: 8f:a5:80:a5:a4:14:84:98:bd:f6:cc:29:9b:8d:8b:38:14:47: 93:cc:a2:68:90:b6:c7:81:33:4a:31:9a:60:0e:06:1c:c2:f9: 82:38:9f:0e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1MjIxMTAvBgNVBAUTKEVBQ0I5NUZGMDU3RDY0MTQwMENBMzA5NDJCNTYyQkQy NTYzQ0FFQjQwHhcNMjUwNTA5MDAxNzIyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFkNDk5Mi1iOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuCZDH7IBCpq6NAKtDgdHhMQpMxs0v6J6r1N98pRU1//5SYl/u6DYzbV0ES2 WF7fmzgjPkUhMq/+Shl68UIIrWBhpXmXpImDdWUnGZ4kDkJbI+MMqhSk9bPUrbCH JWHW6z09gC/J/tLFRiZTa+gy7Blt0Y4TtcavlevEhqA/KCWUiaab4BDa39xZQ752 5Tpd0AW/AawYqLf9rdlFkRr06oargNxvU8v3J43kTO0sWPtCl/JpYGhpn7m6cSZk dA+khBP8Xs7MNsswt5WyszwfOWZU3P3+7/KiHaW6IbgilkI9Pi9r1DAvtHSS9954 olvCks2+VQRczIyjtD6tXvFC+QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOcAkr8o LCHmULB0CQE0BmL/lFktMB8GA1UdIwQYMBaAFOrLlf8FfWQUAMowlCtWK9JWPK60 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTUyMi84ODY5MkFCQTUz NDIxMUVDOENEMkQ3MjJDNEY5QUUwMi82c3VWX3dWOVpCUUF5akNVSzFZcjBsWThy clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzdVZfd1Y5WkJRQXlqQ1VLMVlyMGxZOHJyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE1MjIvODg2OTJBQkE1MzQyMTFFQzhDRDJENzIyQzRGOUFFMDIvREE2MTYzNUU1 MzQ4MTFFQzhGRkJEQjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnElwwDQQCAAIwBwMFACQGdwAwDQYJKoZIhvcNAQELBQAD ggEBAIhgImazqGogp944+fKcSTz2iesBBxOMHOPp3USji704koooKd84uvBaM5sF 8B3nMnRRVM+4P4wO3tYTa0bFIB+uaOPhrb583LpKb7ivNGIXJeErmKCcm5GaZZd3 A6RrPTq+nzUD7g5opSxBC1g/U9BcNv4FtcWmbVSmkUYSQOa+mTALZ1mQIiXdo54R hCtRFnhE8/luBGSkXpQfuiytJyFJca2rlHeLLMaOJUM5JOeSvHJV3YPiBETuylmv 1c2NjClwhx/4BxtvpcbyEq0c/Vs2dWozTXQ1RI+lgKWkFISYvfbMKZuNizgUR5PM omiQtseBM0oxmmAOBhzC+YI4nw4= -----END CERTIFICATE-----Generated at Mon May 12 05:36:03 2025 by rpki-client