$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/97E8ACD68E6611EC9EBE626FC4F9AE02.roa File: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (raw, json) Hash identifier: tLChoqAT+qMzYdiOem/hyADnIcDAlpuqVUc6loXrSu8= Subject key identifier: 8F:43:0F:DD:90:26:7C:4B:21:EA:E2:DD:D3:1B:21:6B:9C:1B:66:B1 Certificate issuer: /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A Certificate serial: 0379 Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/97E8ACD68E6611EC9EBE626FC4F9AE02.roa Signing time: Wed 25 Dec 2024 00:43:26 +0000 ROA not before: Wed 25 Dec 2024 00:43:26 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 132584 IP address blocks: 103.142.38.0/24 maxlen: 24 103.176.216.0/24 maxlen: 24 103.176.217.0/24 maxlen: 24 203.56.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 889 (0x379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91289A2 Validity Not Before: Dec 25 00:43:26 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676b552e-2073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0a:9f:b3:6c:e3:66:71:2d:43:3f:ee:51:1d: 01:59:74:37:0c:2a:47:72:c4:58:44:ad:6e:60:40: 29:d6:04:ec:a7:80:08:a8:67:01:9f:2f:46:f2:08: 9d:a4:cf:28:65:ce:75:6a:fe:47:a3:ea:ca:8f:ad: bb:4d:b0:82:64:f4:97:59:27:f8:bc:6d:76:aa:35: b5:5e:f1:26:b7:96:73:e9:d3:4c:21:b6:ca:f8:71: 9c:6a:8c:cd:af:2e:df:3f:43:e2:ad:04:e2:5a:76: 93:2c:4c:11:32:45:03:10:14:03:ac:fd:7e:fe:13: 71:d8:f7:f2:3f:0b:ec:3e:1b:9f:d8:db:61:0a:13: 35:87:db:cb:0e:b6:cd:10:1e:35:9f:ad:f4:0d:36: da:ab:03:1c:2f:ea:f5:f7:94:ba:eb:0b:d4:dc:fe: 86:0b:7e:e1:ef:6a:f8:d0:18:fa:bd:e6:70:62:72: 0a:22:0d:6f:00:7b:19:5c:e0:db:60:ff:61:e2:b0: 4a:0f:62:8e:6c:87:be:f4:9a:4a:ee:04:51:d0:2c: f1:83:58:5b:72:ff:01:de:fe:7d:2d:a6:d3:10:e4: c2:97:95:78:a3:15:b0:c4:b2:32:78:42:f5:04:7b: b4:f8:08:06:ab:ae:6e:90:e9:14:2f:0f:d8:21:ad: 13:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:43:0F:DD:90:26:7C:4B:21:EA:E2:DD:D3:1B:21:6B:9C:1B:66:B1 X509v3 Authority Key Identifier: keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/97E8ACD68E6611EC9EBE626FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.38.0/24 103.176.216.0/23 203.56.80.0/24 Signature Algorithm: sha256WithRSAEncryption a6:8a:8c:33:a3:c0:9e:a4:47:9a:c5:ab:55:d1:23:c8:cb:90: 6f:8c:9c:7a:47:d5:78:53:88:c5:5f:ff:a3:15:03:62:e6:26: f4:fc:1a:05:01:16:c0:b7:9f:4f:82:45:7f:4d:bd:c3:b7:ca: cf:ff:fc:70:e2:2c:c4:12:59:2b:ca:2d:a8:f1:f6:98:d5:09: 00:c7:40:5d:cc:00:b3:10:83:f5:5a:e5:15:18:b6:6b:24:44: 3e:20:3d:e6:98:76:b8:5a:d6:ff:d1:e3:9a:c2:43:aa:82:3f: ec:26:d2:e5:c2:f1:36:ba:e4:8a:ed:2f:7a:57:5f:03:87:68: 4d:85:0f:f6:40:16:4c:11:74:85:01:d4:f5:67:96:29:31:04: a8:c1:10:ae:0c:0d:b9:f4:51:db:1b:58:50:72:5b:63:ff:29: e0:37:0f:13:81:3a:4f:4e:d7:6d:8f:5d:19:94:f0:ee:f4:30: 47:a8:57:b1:3c:a1:ca:78:1d:6b:87:e6:ea:65:c1:42:3b:75: f2:1b:18:88:0a:40:60:63:34:e9:d9:48:5c:a2:9b:f7:fe:4b: a5:84:fa:9e:02:53:c3:20:39:f7:58:90:69:32:3c:ab:b6:50: 1d:50:12:e6:25:28:2d:bc:29:73:50:2b:ee:1d:21:66:d1:21: d0:c3:58:f1 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5QTIxMTAvBgNVBAUTKDY4MTQwQzE1ODI1RUQ1MEEwMzc4MTA1MkFEREUyRUNB MUE2RkVBM0EwHhcNMjQxMjI1MDA0MzI2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZiNTUyZS0yMDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgqfs2zjZnEtQz/uUR0BWXQ3DCpHcsRYRK1uYEAp1gTsp4AIqGcBny9G8gid pM8oZc51av5Ho+rKj627TbCCZPSXWSf4vG12qjW1XvEmt5Zz6dNMIbbK+HGcaozN ry7fP0PirQTiWnaTLEwRMkUDEBQDrP1+/hNx2PfyPwvsPhuf2NthChM1h9vLDrbN EB41n630DTbaqwMcL+r195S66wvU3P6GC37h72r40Bj6veZwYnIKIg1vAHsZXODb YP9h4rBKD2KObIe+9JpK7gRR0Czxg1hbcv8B3v59LabTEOTCl5V4oxWwxLIyeEL1 BHu0+AgGq65ukOkULw/YIa0TsQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFI9DD92Q JnxLIeri3dMbIWucG2axMB8GA1UdIwQYMBaAFGgUDBWCXtUKA3gQUq3eLsoab+o6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODlBMi9GQjUyRjY0RThF NjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFRb0RlQkJTcmQ0dXlocHY2 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCUU1GWUplMVFvRGVCQlNyZDR1eWhwdjZqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjg5QTIvRkI1MkY2NEU4RTYzMTFFQzlFMDE1RDZEQzRGOUFFMDIvOTdFOEFDRDY4 RTY2MTFFQzlFQkU2MjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnjiYDBAFnsNgDBADLOFAwDQYJKoZIhvcNAQELBQADggEB AKaKjDOjwJ6kR5rFq1XRI8jLkG+MnHpH1XhTiMVf/6MVA2LmJvT8GgUBFsC3n0+C RX9NvcO3ys///HDiLMQSWSvKLajx9pjVCQDHQF3MALMQg/Va5RUYtmskRD4gPeaY drha1v/R45rCQ6qCP+wm0uXC8Ta65IrtL3pXXwOHaE2FD/ZAFkwRdIUB1PVnlikx BKjBEK4MDbn0UdsbWFByW2P/KeA3DxOBOk9O122PXRmU8O70MEeoV7E8ocp4HWuH 5uplwUI7dfIbGIgKQGBjNOnZSFyim/f+S6WE+p4CU8MgOfdYkGkyPKu2UB1QEuYl KC28KXNQK+4dIWbRIdDDWPE= -----END CERTIFICATE-----Generated at Sun Apr 6 17:29:29 2025 by rpki-client