$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/9FD12146ED7211ED8A92041CC4F9AE02.roa File: 9FD12146ED7211ED8A92041CC4F9AE02.roa (raw, json) Hash identifier: oRm2blLyiJS/QAfKc6f3YExIUJkkRHUJrPUQp9W2Q+s= Subject key identifier: F7:93:26:28:3D:6A:98:45:F5:28:4D:55:2A:AD:71:2D:DF:E0:7E:F2 Certificate issuer: /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Certificate serial: 0138 Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/9FD12146ED7211ED8A92041CC4F9AE02.roa Signing time: Sun 08 Dec 2024 16:13:30 +0000 ROA not before: Sun 08 Dec 2024 16:13:30 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 133866 IP address blocks: 103.76.44.0/22 maxlen: 22 103.76.44.0/24 maxlen: 24 103.76.45.0/24 maxlen: 24 103.76.46.0/24 maxlen: 24 103.76.47.0/24 maxlen: 24 116.206.88.0/22 maxlen: 22 116.206.88.0/24 maxlen: 24 116.206.89.0/24 maxlen: 24 116.206.90.0/24 maxlen: 24 116.206.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 16:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA Validity Not Before: Dec 8 16:13:30 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6755c5a9-2fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e1:8e:f2:95:e3:ed:c1:1e:67:87:97:f5:e6: e4:bb:1f:d9:df:61:e5:ac:ef:98:b2:2e:bb:c4:e2: 61:e6:76:39:ae:3a:82:9b:96:81:14:69:a9:29:7d: 4b:31:52:ee:cf:a4:52:ca:d3:b1:cc:e7:36:d7:2b: 67:54:cf:3c:8b:d5:d2:a4:dd:5a:0f:6b:9f:b4:a1: 3f:fe:8b:43:45:4b:e2:b9:98:58:17:55:60:e4:85: 19:aa:d4:3f:71:82:6c:cb:4d:81:92:bb:d7:20:a3: 1f:ba:32:55:54:d2:ae:ee:df:22:32:e0:33:83:03: 18:e7:38:7f:69:f0:77:be:93:bd:a9:dc:7a:f7:4f: 69:0e:83:25:ac:2d:9b:95:e0:a1:89:de:30:39:39: 42:82:fb:02:e0:53:dd:3e:c8:97:0d:dc:cc:13:61: d7:37:f8:39:21:dc:fb:5f:82:91:84:e5:ea:00:5d: e2:b9:f8:6e:23:3e:2a:8d:ac:68:20:40:a6:c9:ca: 97:d5:10:12:a6:58:11:f4:f4:c9:2f:2e:f6:15:43: 40:f1:60:10:9f:2a:32:72:4c:c6:45:88:fd:e6:b4: 54:6d:4b:4b:fd:6f:df:56:f6:fa:70:df:43:dc:5f: e8:2c:33:64:18:05:48:ae:98:72:bb:dd:c4:92:7c: 45:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:93:26:28:3D:6A:98:45:F5:28:4D:55:2A:AD:71:2D:DF:E0:7E:F2 X509v3 Authority Key Identifier: keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/9FD12146ED7211ED8A92041CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.44.0/22 116.206.88.0/22 Signature Algorithm: sha256WithRSAEncryption 33:a6:fd:60:26:93:f7:54:d0:c6:d5:d2:eb:98:58:ac:03:49: 0a:8a:f1:6c:7c:4d:cb:0b:ca:61:2a:74:26:0f:c2:05:35:2e: 3a:a6:bf:29:ee:ca:e9:6d:c3:ec:0b:16:b9:5a:ac:4f:11:32: 83:64:76:8a:5e:79:be:7e:4d:e9:b3:36:7e:f7:a0:9d:24:65: 6a:47:19:8b:51:7a:e4:07:34:c1:b4:cd:2d:ff:b2:af:11:86: db:47:87:81:64:cc:b0:a0:19:93:ed:01:aa:0e:c2:fd:1c:a4: 3b:62:2e:f2:99:26:6a:01:76:25:58:1b:67:e5:21:5c:c2:88: f2:35:82:46:be:e4:47:05:3d:40:52:83:06:4c:2b:c8:a4:3c: 8e:a9:1f:3f:48:7b:ca:b5:c9:f2:f8:36:18:d6:db:e4:2c:9e: e5:99:21:cb:4c:86:aa:f5:eb:c2:37:93:9b:ab:ca:f1:bc:5e: 4c:49:0a:7b:de:12:d8:e0:47:10:d0:f1:f4:b4:04:01:43:c6: 13:77:c5:de:52:7c:4b:ef:4f:e6:be:80:86:d4:f3:29:86:3a: 0d:6c:a2:0e:34:21:91:f2:ff:54:bc:9e:bc:2a:78:16:8f:ef: 27:02:15:46:9f:ff:4c:c7:47:b0:1d:c0:3f:a3:e7:78:85:1c: 73:44:2a:cc -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDM3MkYxQzc3NjFCMUREQzgzMjhDNTBCQUQwRUVFRENE OTlGMkU0RjIwHhcNMjQxMjA4MTYxMzMwWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU1YzVhOS0yZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+GO8pXj7cEeZ4eX9ebkux/Z32HlrO+Ysi67xOJh5nY5rjqCm5aBFGmpKX1L MVLuz6RSytOxzOc21ytnVM88i9XSpN1aD2uftKE//otDRUviuZhYF1Vg5IUZqtQ/ cYJsy02BkrvXIKMfujJVVNKu7t8iMuAzgwMY5zh/afB3vpO9qdx6909pDoMlrC2b leChid4wOTlCgvsC4FPdPsiXDdzME2HXN/g5Idz7X4KRhOXqAF3iufhuIz4qjaxo IECmycqX1RASplgR9PTJLy72FUNA8WAQnyoyckzGRYj95rRUbUtL/W/fVvb6cN9D 3F/oLDNkGAVIrphyu93EknxFwwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPeTJig9 aphF9ShNVSqtcS3f4H7yMB8GA1UdIwQYMBaAFDcvHHdhsd3IMoxQutDu7c2Z8uTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNjZ3lqRkM2ME83dHpabnk1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055OGNkMkd4M2NneWpGQzYwTzd0elpueTVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTQyRUEvRjUzMzJEN0U4NEMzMTFFNkI5ODIxQTgxQzRGOUFFMDIvOUZEMTIxNDZF RDcyMTFFRDhBOTIwNDFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnTCwDBAJ0zlgwDQYJKoZIhvcNAQELBQADggEBADOm/WAm k/dU0MbV0uuYWKwDSQqK8Wx8TcsLymEqdCYPwgU1Ljqmvynuyultw+wLFrlarE8R MoNkdopeeb5+TemzNn73oJ0kZWpHGYtReuQHNMG0zS3/sq8RhttHh4FkzLCgGZPt AaoOwv0cpDtiLvKZJmoBdiVYG2flIVzCiPI1gka+5EcFPUBSgwZMK8ikPI6pHz9I e8q1yfL4NhjW2+QsnuWZIctMhqr168I3k5uryvG8XkxJCnveEtjgRxDQ8fS0BAFD xhN3xd5SfEvvT+a+gIbU8ymGOg1sog40IZHy/1S8nrwqeBaP7ycCFUaf/0zHR7Ad wD+j53iFHHNEKsw= -----END CERTIFICATE-----Generated at Fri Apr 11 23:34:25 2025 by rpki-client