$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/7DD0E8845A3211EDB637E665C4F9AE02.roa File: 7DD0E8845A3211EDB637E665C4F9AE02.roa (raw, json) Hash identifier: wtWT4PZFgcn64rOhtqw01Kyp1pjejdqieeode8aJT6o= Subject key identifier: 60:11:E9:25:84:2E:16:ED:AB:89:E2:A2:B2:66:0E:00:31:1D:3B:67 Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Certificate serial: 0193 Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/7DD0E8845A3211EDB637E665C4F9AE02.roa Signing time: Thu 21 Nov 2024 02:16:19 +0000 ROA not before: Thu 21 Nov 2024 02:16:19 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 150377 IP address blocks: 103.23.252.0/23 maxlen: 23 103.23.252.0/24 maxlen: 24 103.23.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91314BC Validity Not Before: Nov 21 02:16:19 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=673e97f2-bfe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:01:fc:c0:c3:4d:b5:3a:94:c8:32:aa:f7: b2:27:11:a0:81:a2:9c:dc:c0:2c:20:34:41:0d:87: 7b:e6:62:ac:bb:83:b5:2f:e7:9f:d5:21:a1:80:9f: d6:13:1d:b8:ab:d0:19:3d:c3:e1:3d:01:ed:43:1e: ed:f8:4e:7a:68:5e:35:a5:d5:33:8b:af:4c:44:63: dc:d1:3c:4f:a6:c5:ec:ac:81:f2:24:5f:26:11:db: 84:10:1e:ab:85:7a:af:97:fc:52:f2:ea:92:23:a9: 1a:c4:11:74:9b:91:e4:4a:af:40:b4:fe:f2:2c:86: ff:6b:b6:b8:ff:b6:24:ad:a4:f0:ae:e4:d6:59:03: 3c:9b:22:dc:cd:5d:d8:65:ba:de:d9:97:61:03:20: bd:48:1e:5c:70:86:93:83:ab:b2:ae:63:6a:0c:3b: 5f:d3:20:4e:4c:1e:87:c6:37:e6:79:eb:6e:94:a6: 27:b5:1c:c1:45:ae:cf:51:5d:ae:50:38:f9:7d:66: b0:b3:00:04:88:d4:82:05:b7:35:fd:77:d7:db:0c: 35:46:12:b2:a1:57:9d:69:4a:85:24:b1:df:4a:c3: 0f:fd:13:e5:92:ad:d1:9b:4a:66:48:30:2b:ae:fe: 51:3a:fb:71:7c:66:4d:49:4c:4b:3f:83:22:f6:55: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:11:E9:25:84:2E:16:ED:AB:89:E2:A2:B2:66:0E:00:31:1D:3B:67 X509v3 Authority Key Identifier: keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/7DD0E8845A3211EDB637E665C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.23.252.0/23 Signature Algorithm: sha256WithRSAEncryption 98:22:29:ef:76:ed:7f:0a:0b:e6:b5:13:42:ec:61:6e:a3:bf: d5:f8:3a:70:75:a8:a9:6c:f3:e4:50:dc:e1:98:56:d6:01:2e: b2:c8:c4:8a:1d:ef:b9:0e:db:d5:6e:45:22:b3:f2:d9:0d:3d: 14:e9:d8:5c:9b:94:01:5c:38:ac:42:8d:27:47:45:73:27:83: 9d:e9:8a:bf:dc:ce:ee:12:03:5e:a9:d2:c8:ea:7d:6b:c7:16: d7:74:c5:46:b6:5f:0f:e9:81:e3:4e:f8:a7:1a:6b:4c:45:31: da:70:b0:be:5e:af:04:58:65:ed:80:57:6e:d5:2a:75:0b:09: bc:d3:b9:60:fe:ea:64:fd:50:f4:2c:7d:ac:0d:d6:19:47:66: 63:53:79:2e:25:cd:05:d2:99:19:65:68:91:58:af:0a:53:ce: 20:a9:17:48:71:30:34:af:24:44:b4:0f:45:c6:b3:70:35:81: ad:c2:7b:23:53:c0:16:15:da:9b:c3:f2:0e:2b:b9:7a:08:78: 53:7e:aa:03:e5:60:5e:89:2c:5e:3b:32:33:06:46:9b:70:58: c2:8a:2b:50:08:d9:27:8f:af:c9:28:95:74:fa:92:2e:49:de: 87:7a:e4:47:0c:95:6a:73:58:6d:d2:b0:88:5e:33:dc:49:f1: eb:34:fe:1c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1 Rjg1MDNCMTQwHhcNMjQxMTIxMDIxNjE5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNlOTdmMi1iZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSUB/MDDTbU6lMgyqveyJxGggaKc3MAsIDRBDYd75mKsu4O1L+ef1SGhgJ/W Ex24q9AZPcPhPQHtQx7t+E56aF41pdUzi69MRGPc0TxPpsXsrIHyJF8mEduEEB6r hXqvl/xS8uqSI6kaxBF0m5HkSq9AtP7yLIb/a7a4/7YkraTwruTWWQM8myLczV3Y Zbre2ZdhAyC9SB5ccIaTg6uyrmNqDDtf0yBOTB6HxjfmeetulKYntRzBRa7PUV2u UDj5fWawswAEiNSCBbc1/XfX2ww1RhKyoVedaUqFJLHfSsMP/RPlkq3Rm0pmSDAr rv5ROvtxfGZNSUxLP4Mi9lUdKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGAR6SWE Lhbtq4niorJmDgAxHTtnMB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzE0QkMvN0ZEMDE2NkM1QTJGMTFFREExOUU1RTYxQzRGOUFFMDIvN0REMEU4ODQ1 QTMyMTFFREI2MzdFNjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnF/wwDQYJKoZIhvcNAQELBQADggEBAJgiKe927X8KC+a1 E0LsYW6jv9X4OnB1qKls8+RQ3OGYVtYBLrLIxIod77kO29VuRSKz8tkNPRTp2Fyb lAFcOKxCjSdHRXMng53pir/czu4SA16p0sjqfWvHFtd0xUa2Xw/pgeNO+Kcaa0xF MdpwsL5erwRYZe2AV27VKnULCbzTuWD+6mT9UPQsfawN1hlHZmNTeS4lzQXSmRll aJFYrwpTziCpF0hxMDSvJES0D0XGs3A1ga3CeyNTwBYV2pvD8g4ruXoIeFN+qgPl YF6JLF47MjMGRptwWMKKK1AI2SePr8kolXT6ki5J3od65EcMlWpzWG3SsIheM9xJ 8es0/hw= -----END CERTIFICATE-----Generated at Fri Apr 4 23:50:11 2025 by rpki-client