$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/98DE3894CCE411EFA6203F26C4F9AE02.roa File: 98DE3894CCE411EFA6203F26C4F9AE02.roa (raw, json) Hash identifier: VEO00g9Wl0SGw0f2i0cGvp6jjnbdvIYaLuu58A6mseU= Subject key identifier: C2:F3:2A:E7:62:65:E9:10:81:17:A5:E6:2F:7B:E4:85:3F:A6:0F:A8 Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 0882 Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/98DE3894CCE411EFA6203F26C4F9AE02.roa Signing time: Mon 28 Apr 2025 19:58:55 +0000 ROA not before: Mon 28 Apr 2025 19:58:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135030 IP address blocks: 103.111.164.0/23 maxlen: 23 103.111.164.0/24 maxlen: 24 103.111.165.0/24 maxlen: 24 103.111.166.0/24 maxlen: 24 2402:9f40::/32 maxlen: 32 2402:9f40:1::/48 maxlen: 48 2402:9f40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: Apr 28 19:58:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680fddfe-c4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d1:7a:d5:3d:07:18:8e:be:aa:e9:a5:d0:d2: d2:0f:5a:f7:0d:63:bf:e8:08:6b:d6:4f:67:19:fa: e8:89:d7:e0:4c:6f:b1:84:75:ae:67:2a:95:c4:10: ef:dc:5b:69:7c:08:ad:18:e7:30:4b:10:4e:78:e6: 76:27:b3:3b:61:d8:fa:20:01:1e:5b:d6:e1:80:54: c5:21:3f:80:76:7a:9d:89:d4:79:0f:7b:88:59:b6: ab:fe:0a:97:6d:f4:e0:5e:21:eb:48:92:4b:24:75: 87:03:a0:7a:97:7d:47:ad:af:f7:7a:ff:e7:7a:a8: cc:a2:68:ff:ce:a4:4d:0c:d2:34:52:3e:4a:f2:af: 6e:90:00:6d:cb:90:61:aa:a2:a1:ea:9c:e2:45:b3: 63:29:99:a6:36:13:23:a9:a1:9f:fd:5e:fc:e3:6f: af:79:5e:cd:1d:f5:e2:15:70:ac:5a:99:f9:9b:17: 5c:8b:1d:5d:a4:19:b4:a9:b0:ff:cf:16:72:33:60: 15:d8:ba:d3:b7:dc:f5:be:aa:0f:f3:50:8d:3b:51: 64:07:0d:f1:14:5f:22:e8:0a:95:b5:57:c2:0c:8f: 7f:9c:79:8e:9f:da:45:7b:0a:96:e6:2c:12:8d:03: d0:03:3e:4b:8b:b1:1f:27:9d:16:8c:dd:97:f9:33: 57:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F3:2A:E7:62:65:E9:10:81:17:A5:E6:2F:7B:E4:85:3F:A6:0F:A8 X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/98DE3894CCE411EFA6203F26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.164.0-103.111.166.255 IPv6: 2402:9f40::/32 Signature Algorithm: sha256WithRSAEncryption c7:f7:dc:97:63:f4:03:9f:c6:4d:9e:06:ac:6a:6e:ae:cc:65: c4:eb:da:fa:0b:9f:9a:15:c2:93:21:c1:02:b9:49:1f:9c:b5: 2b:90:e7:d5:65:d1:07:7c:8b:0c:4b:88:dc:49:55:23:ad:2c: 45:88:2a:72:96:34:05:ab:7f:e5:d6:ce:b2:d3:34:ce:cf:87: 6f:00:fb:b8:c8:66:62:cd:e8:21:b7:7c:32:33:a6:00:67:61: b0:c8:d7:0f:ee:bc:c2:6f:69:f7:2a:b1:3e:65:a4:98:38:b6: e3:30:ad:98:d3:ec:6b:35:0c:46:3f:da:a2:ec:08:07:02:cc: dc:d5:99:21:04:e0:8f:80:a8:12:b5:bf:e7:10:3c:91:e8:11: b9:ab:44:24:f1:4a:ea:8e:85:47:6a:c1:d8:8b:64:d1:83:d6: 2a:92:bb:81:ca:dc:23:22:a5:4c:de:5b:8e:6a:c7:0c:6e:d3: 42:8b:71:6d:8f:00:1c:78:aa:7f:ed:3f:0e:fa:f6:e4:19:4e: 3c:eb:e0:eb:2d:47:44:1f:97:35:5f:5a:11:1b:7f:f3:9c:9d: 57:4c:c1:ac:0c:11:85:0e:94:a5:1a:64:8b:d8:e0:d9:8c:81: 19:3c:20:3d:95:68:4a:d5:1b:7f:cf:43:e1:60:75:59:75:26: 61:8a:3b:a5 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjUwNDI4MTk1ODU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBmZGRmZS1jNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNF61T0HGI6+quml0NLSD1r3DWO/6Ahr1k9nGfroidfgTG+xhHWuZyqVxBDv 3FtpfAitGOcwSxBOeOZ2J7M7Ydj6IAEeW9bhgFTFIT+AdnqdidR5D3uIWbar/gqX bfTgXiHrSJJLJHWHA6B6l31Hra/3ev/neqjMomj/zqRNDNI0Uj5K8q9ukABty5Bh qqKh6pziRbNjKZmmNhMjqaGf/V7842+veV7NHfXiFXCsWpn5mxdcix1dpBm0qbD/ zxZyM2AV2LrTt9z1vqoP81CNO1FkBw3xFF8i6AqVtVfCDI9/nHmOn9pFewqW5iwS jQPQAz5Li7EfJ50WjN2X+TNXbQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFMLzKudi ZekQgRel5i975IU/pg+oMB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDU2MEQvNjhDM0Y0OUE0MUVFMTFFQTlDRUExRjc1QzRGOUFFMDIvOThERTM4OTRD Q0U0MTFFRkE2MjAzRjI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEAmdvpAMEAGdvpjANBAIAAjAHAwUAJAKfQDANBgkqhkiG 9w0BAQsFAAOCAQEAx/fcl2P0A5/GTZ4GrGpursxlxOva+gufmhXCkyHBArlJH5y1 K5Dn1WXRB3yLDEuI3ElVI60sRYgqcpY0Bat/5dbOstM0zs+HbwD7uMhmYs3oIbd8 MjOmAGdhsMjXD+68wm9p9yqxPmWkmDi24zCtmNPsazUMRj/aouwIBwLM3NWZIQTg j4CoErW/5xA8kegRuatEJPFK6o6FR2rB2Itk0YPWKpK7gcrcIyKlTN5bjmrHDG7T QotxbY8AHHiqf+0/Dvr25BlOPOvg6y1HRB+XNV9aERt/85ydV0zBrAwRhQ6UpRpk i9jg2YyBGTwgPZVoStUbf89D4WB1WXUmYYo7pQ== -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:56 2025 by rpki-client on console.sobornost.net