$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/E64F585A060111F0BCBC7237C4F9AE02.roa File: E64F585A060111F0BCBC7237C4F9AE02.roa (raw, json) Hash identifier: So3/8BRv6CbiRlGyY4wETM3bbMNzF/0bzt2kH2rX5YA= Subject key identifier: 5C:83:54:44:51:45:C9:2F:D0:DD:55:81:61:53:8E:2C:EA:EA:C8:FE Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0B0F Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/E64F585A060111F0BCBC7237C4F9AE02.roa Signing time: Sat 12 Apr 2025 06:29:56 +0000 ROA not before: Sat 12 Apr 2025 06:29:56 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 5065 IP address blocks: 103.18.228.0/24 maxlen: 24 103.18.229.0/24 maxlen: 24 103.18.230.0/24 maxlen: 24 103.18.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 19:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2831 (0xb0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Apr 12 06:29:56 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67fa0863-69a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:c0:3e:d0:e8:eb:90:67:e7:42:0c:0f:30: 70:6b:30:a2:86:a2:39:5b:89:8d:36:9c:f3:c7:17: ab:ba:2a:2c:66:6f:6e:88:ff:7c:b8:bf:11:b3:d2: 14:95:06:72:ab:a6:6e:9b:a1:c7:0e:05:fd:e5:c2: be:90:02:6d:78:06:ed:a8:93:9b:75:16:6e:8e:f6: 8c:6c:9e:0c:84:3a:4b:ce:82:db:aa:f2:9c:18:0b: 95:ab:e0:6e:8c:28:c5:c8:bb:7b:1b:fe:2c:92:7d: 8f:aa:27:ad:8f:bb:5f:56:ef:4b:b7:7b:84:1a:07: 86:68:d2:ea:d5:60:52:f3:fb:c3:11:d6:e3:16:8d: 1f:da:6d:10:c9:e2:98:19:fb:ca:bf:8a:3b:7a:e6: c0:b5:de:0f:6b:f8:81:c3:12:12:d8:02:8e:1d:64: a0:12:d3:e5:90:1f:5b:7d:42:ee:7e:3e:54:d7:d8: d5:55:87:45:20:63:00:f3:f5:08:51:04:1d:fd:c0: c5:df:43:79:c3:48:38:d4:2b:da:17:e4:51:dc:c0: 3a:a5:e8:1d:d0:fa:cd:a2:34:83:12:e3:7e:54:45: 64:4f:d2:aa:be:16:c7:fe:61:31:86:aa:da:21:20: e0:83:ba:55:8a:5b:6d:c3:a9:38:ef:4d:02:50:1e: 76:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:83:54:44:51:45:C9:2F:D0:DD:55:81:61:53:8E:2C:EA:EA:C8:FE X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/E64F585A060111F0BCBC7237C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.18.228.0/22 Signature Algorithm: sha256WithRSAEncryption a2:d0:b0:0d:f7:93:64:9f:52:d3:c9:ec:b8:59:75:3a:a6:04: f6:c2:29:61:b1:ce:71:d8:1d:11:5e:7a:5f:35:b1:7b:67:6a: 48:70:71:30:74:fd:95:74:bb:73:f6:6d:55:48:b6:c2:cb:9c: f4:46:f1:1e:f3:f8:e7:75:d6:56:60:cd:8f:8e:4f:da:5a:cf: ad:1b:47:d5:04:0f:a9:c5:69:68:dd:b1:dc:57:d1:d4:54:02: d2:72:a8:22:6c:17:f8:43:a0:fb:f9:c0:23:b9:15:cc:62:54: 49:8f:7b:6c:ad:2f:16:8f:df:eb:41:b1:1e:d2:91:38:66:4f: 49:de:94:70:39:a6:23:11:bd:fc:43:da:93:f5:a4:3c:59:e7: d2:4a:0a:0c:d8:44:cd:14:58:4e:fd:c9:af:06:43:8c:84:59: 29:38:60:1e:54:ec:44:54:11:2d:dc:d3:14:f9:d5:b3:3e:36: 35:b7:78:15:6a:19:b0:68:11:b3:17:a2:9d:61:9f:fe:50:00: 95:41:61:d0:12:64:f3:3b:4e:d5:20:8f:26:4a:c8:13:6a:0d: 1a:c6:d3:e2:81:91:14:34:99:a6:6f:56:b1:a0:13:29:3b:ef: a2:35:59:5b:3d:99:b6:c5:be:76:4d:f2:ae:3a:11:a5:db:20: 85:6c:d6:78 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjUwNDEyMDYyOTU2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZhMDg2My02OWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqjAPtDo65Bn50IMDzBwazCihqI5W4mNNpzzxxeruiosZm9uiP98uL8Rs9IU lQZyq6Zum6HHDgX95cK+kAJteAbtqJObdRZujvaMbJ4MhDpLzoLbqvKcGAuVq+Bu jCjFyLt7G/4skn2Pqietj7tfVu9Lt3uEGgeGaNLq1WBS8/vDEdbjFo0f2m0QyeKY GfvKv4o7eubAtd4Pa/iBwxIS2AKOHWSgEtPlkB9bfULufj5U19jVVYdFIGMA8/UI UQQd/cDF30N5w0g41CvaF+RR3MA6pegd0PrNojSDEuN+VEVkT9KqvhbH/mExhqra ISDgg7pVilttw6k4700CUB52IQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFyDVERR Rckv0N1VgWFTjizq6sj+MB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJCNUIvMjlERTc0OEE0MTlFMTFFQUI4NjZFNzdBQzRGOUFFMDIvRTY0RjU4NUEw NjAxMTFGMEJDQkM3MjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnEuQwDQYJKoZIhvcNAQELBQADggEBAKLQsA33k2SfUtPJ 7LhZdTqmBPbCKWGxznHYHRFeel81sXtnakhwcTB0/ZV0u3P2bVVItsLLnPRG8R7z +Od11lZgzY+OT9paz60bR9UED6nFaWjdsdxX0dRUAtJyqCJsF/hDoPv5wCO5Fcxi VEmPe2ytLxaP3+tBsR7SkThmT0nelHA5piMRvfxD2pP1pDxZ59JKCgzYRM0UWE79 ya8GQ4yEWSk4YB5U7ERUES3c0xT51bM+NjW3eBVqGbBoEbMXop1hn/5QAJVBYdAS ZPM7TtUgjyZKyBNqDRrG0+KBkRQ0maZvVrGgEyk776I1WVs9mbbFvnZN8q46EaXb IIVs1ng= -----END CERTIFICATE-----Generated at Tue Apr 22 21:25:31 2025 by rpki-client on console.sobornost.net