$ rpki-client -vvf rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/90AE61AC595711EC8761C361C4F9AE02.roa File: 90AE61AC595711EC8761C361C4F9AE02.roa (raw, json) Hash identifier: xHB6klxUWxKIW0ZETWDrSBAoOokIy/M1aOS9u4crx4w= Subject key identifier: 2F:80:B1:23:91:35:C7:CF:26:84:1C:09:33:E9:EC:03:17:17:86:AE Certificate issuer: /CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Certificate serial: 03F5 Authority key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/90AE61AC595711EC8761C361C4F9AE02.roa Signing time: Sat 21 Dec 2024 00:22:31 +0000 ROA not before: Sat 21 Dec 2024 00:22:31 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 58580 IP address blocks: 103.177.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1013 (0x3f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A70D Validity Not Before: Dec 21 00:22:31 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67660a46-399b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:af:5f:68:21:1b:2c:d1:67:9f:e0:a4:8b: 91:0f:d8:56:64:93:c5:e3:63:df:18:6c:5b:af:84: d6:06:83:0a:6e:63:16:df:a3:94:c4:85:4f:d9:26: d6:6d:85:36:eb:23:7c:94:e1:b6:43:15:e1:55:45: 1a:e4:ce:d2:46:5e:5d:c8:1f:9b:3b:ef:3e:2b:1a: b2:db:e3:56:13:f2:69:ba:15:0a:bd:f9:e1:30:40: c3:cc:a5:dd:ca:a2:96:28:00:83:6b:8c:0c:25:ca: 0a:14:03:a0:5f:90:6b:87:0a:52:af:02:66:c1:56: 00:76:c7:e1:5b:62:8a:87:e2:1b:1a:02:bf:08:ac: cf:5c:d2:d1:12:1f:19:c9:ed:2a:d9:23:33:91:da: c3:1a:95:fe:da:28:26:93:02:49:0c:d9:ad:9a:dd: 84:74:c5:07:c1:cf:c6:81:cb:0a:4d:8c:5f:e2:60: 6f:ee:cc:2f:0d:ce:59:02:9d:e6:a8:de:5a:18:8d: c7:89:02:10:84:f3:f4:8c:f8:02:0e:32:5c:05:da: 5c:08:51:c1:71:5c:06:a9:09:ca:55:7f:bd:ad:84: 25:50:ca:76:13:76:0d:66:a6:0c:71:90:6a:54:5e: 97:cc:f3:9a:e6:64:7f:f9:62:63:fe:21:cd:bb:ad: 78:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:80:B1:23:91:35:C7:CF:26:84:1C:09:33:E9:EC:03:17:17:86:AE X509v3 Authority Key Identifier: keyid:78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/90AE61AC595711EC8761C361C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.46.0/23 Signature Algorithm: sha256WithRSAEncryption 43:f5:23:26:bc:cf:7e:b9:5f:a9:e4:4b:92:87:8f:00:4d:65: 7a:34:20:af:d6:3a:7f:97:b2:34:a3:ec:f1:ef:74:66:e4:3b: 5c:86:6e:f6:25:1f:a5:a4:4f:a9:10:20:88:fc:de:13:5e:fb: 0e:0c:e4:07:39:ad:9e:c3:61:21:18:b4:c1:b4:77:90:cf:b4: e2:37:0e:54:90:53:c6:3a:97:66:56:39:91:11:e4:74:b4:7b: 1a:0b:c5:86:36:a1:57:4e:bf:85:11:b5:0a:7e:a0:a6:66:60: 64:f2:39:72:76:ae:c6:d9:4e:d3:25:8c:8e:06:9a:d7:7b:77: f8:7f:37:ab:e5:69:c6:ee:12:bb:c3:2e:49:1e:47:cc:6a:7c: 23:a4:17:f1:4e:ee:e9:dd:9e:84:e6:c9:28:b4:7c:d6:69:78: 17:5a:5c:71:cf:e9:5f:c6:03:5f:7b:08:3e:3e:69:a3:2a:f5: 18:81:02:1a:34:2a:3e:0b:3b:5f:65:d2:bd:94:e1:61:6c:a6: b5:ec:d8:be:aa:bb:fb:b9:72:1e:a1:3c:14:ac:61:a4:66:0e: 2f:f8:b6:b3:b5:0f:f2:ce:f8:2f:db:41:53:1e:50:5d:1f:d0: d4:c1:af:5e:46:66:92:cc:4c:ac:80:20:09:4e:57:f6:1b:ab: 75:a3:92:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3MEQxMTAvBgNVBAUTKDc4NzY2RDYwMkE0MEVGNTcwMTQyNjg0QTcyM0U4QTM0 MEM2RkYzODIwHhcNMjQxMjIxMDAyMjMxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY2MGE0Ni0zOTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvyvX2ghGyzRZ5/gpIuRD9hWZJPF42PfGGxbr4TWBoMKbmMW36OUxIVP2SbW bYU26yN8lOG2QxXhVUUa5M7SRl5dyB+bO+8+Kxqy2+NWE/JpuhUKvfnhMEDDzKXd yqKWKACDa4wMJcoKFAOgX5BrhwpSrwJmwVYAdsfhW2KKh+IbGgK/CKzPXNLREh8Z ye0q2SMzkdrDGpX+2igmkwJJDNmtmt2EdMUHwc/GgcsKTYxf4mBv7swvDc5ZAp3m qN5aGI3HiQIQhPP0jPgCDjJcBdpcCFHBcVwGqQnKVX+9rYQlUMp2E3YNZqYMcZBq VF6XzPOa5mR/+WJj/iHNu614PQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC+AsSOR NcfPJoQcCTPp7AMXF4auMB8GA1UdIwQYMBaAFHh2bWAqQO9XAUJoSnI+ijQMb/OC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTcwRC8xMTE0QzlCQTU5 NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcxY0JRbWhLY2o2S05BeHY4 NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIWnRZQ3BBNzFjQlFtaEtjajZLTkF4djg0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkE3MEQvMTExNEM5QkE1OTUwMTFFQ0FFMDkzMjgyQzRGOUFFMDIvOTBBRTYxQUM1 OTU3MTFFQzg3NjFDMzYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnsS4wDQYJKoZIhvcNAQELBQADggEBAEP1Iya8z365X6nk S5KHjwBNZXo0IK/WOn+XsjSj7PHvdGbkO1yGbvYlH6WkT6kQIIj83hNe+w4M5Ac5 rZ7DYSEYtMG0d5DPtOI3DlSQU8Y6l2ZWOZER5HS0exoLxYY2oVdOv4URtQp+oKZm YGTyOXJ2rsbZTtMljI4Gmtd7d/h/N6vlacbuErvDLkkeR8xqfCOkF/FO7undnoTm ySi0fNZpeBdaXHHP6V/GA197CD4+aaMq9RiBAho0Kj4LO19l0r2U4WFsprXs2L6q u/u5ch6hPBSsYaRmDi/4trO1D/LO+C/bQVMeUF0f0NTBr15GZpLMTKyAIAlOV/Yb q3Wjklk= -----END CERTIFICATE-----Generated at Sat Apr 5 02:18:06 2025 by rpki-client