$ rpki-client -vvf rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/B6C2A27AF16A11E89550B621C4F9AE02.roa File: B6C2A27AF16A11E89550B621C4F9AE02.roa (raw, json) Hash identifier: rYGwlaz3R02z4ql3MvAUj9rg5+gxsDR/Fvqrh9TzcP8= Subject key identifier: B1:30:36:7A:9E:4C:EE:9D:6F:9C:28:D1:BC:D6:59:6D:20:4A:AB:76 Certificate issuer: /CN=A91371E4/serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9 Certificate serial: 1173 Authority key identifier: 29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/B6C2A27AF16A11E89550B621C4F9AE02.roa Signing time: Thu 12 Dec 2024 17:35:22 +0000 ROA not before: Thu 12 Dec 2024 17:35:22 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 138148 IP address blocks: 103.198.68.0/24 maxlen: 24 103.198.69.0/24 maxlen: 24 103.198.70.0/24 maxlen: 24 103.198.71.0/24 maxlen: 24 2001:df6:b400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4467 (0x1173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91371E4 Validity Not Before: Dec 12 17:35:22 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=675b1eda-1f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b0:3b:12:b3:d6:e4:ab:ff:00:15:4e:57:64: 50:b9:d6:90:f7:02:cf:1c:a4:32:33:45:be:cd:3d: 58:33:b6:a9:cc:56:03:31:1d:4e:72:79:ad:81:c5: 32:14:e9:ea:8e:2b:93:d1:d0:ac:33:89:17:b1:92: 85:a3:69:9c:9b:15:a7:7a:90:4f:6e:50:f3:b4:c3: 18:28:72:3d:94:f9:99:45:df:7f:39:a0:5b:6f:f5: 38:13:2e:16:9d:31:02:1d:d5:c5:b3:81:5b:e7:74: 0a:cb:97:33:2a:71:60:1b:34:1f:8c:ba:ab:b8:45: 92:81:6e:09:69:a0:74:4a:a5:c1:f0:f5:1b:5b:bc: e3:33:e1:85:a8:84:e0:bf:d0:80:ba:42:b1:9c:45: df:9f:62:6b:5f:0b:56:c9:73:67:55:06:56:75:95: 9a:18:38:37:0b:f8:23:b0:d4:f2:61:16:41:34:8c: e9:f9:41:26:a0:39:f5:39:ae:c9:29:aa:9e:a5:5c: 4d:45:01:3a:8e:8e:dd:7e:fc:1f:46:0e:13:42:90: 18:f3:7b:c3:ef:e4:08:58:ab:65:83:76:ec:09:cd: fb:63:7a:38:d2:b1:94:0d:47:44:ee:f9:56:7d:b0: 2b:f9:a4:96:4d:a7:0d:07:ec:05:5a:9a:e7:57:6b: ed:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:30:36:7A:9E:4C:EE:9D:6F:9C:28:D1:BC:D6:59:6D:20:4A:AB:76 X509v3 Authority Key Identifier: keyid:29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/B6C2A27AF16A11E89550B621C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.198.68.0/22 IPv6: 2001:df6:b400::/48 Signature Algorithm: sha256WithRSAEncryption 64:71:f5:d7:f0:dc:ac:dd:9f:6f:43:b6:88:e5:b0:f9:63:7e: 9d:2e:3e:f5:32:c6:cc:20:3e:dc:09:35:1c:07:14:89:ae:32: 00:9a:c8:43:bf:25:e4:7b:b0:71:c8:e3:a7:d8:8e:2c:ae:7e: 62:54:cb:39:78:82:78:e5:92:74:54:c3:cd:ce:70:82:6f:93: 4a:c7:e6:f1:03:00:fc:1a:5d:12:89:29:2e:a0:53:f1:9c:a7: 1f:cd:a0:26:93:8e:b3:5b:2e:c8:02:c2:5d:c1:04:7d:01:5f: 05:3c:3b:13:2e:40:d2:dc:e3:d8:be:51:3f:a6:0f:c6:d0:8d: 7b:0d:82:f6:5d:e8:08:2a:70:62:3e:3c:00:aa:0b:3d:2b:3c: 58:49:4b:18:14:1f:3b:7e:a1:ec:3e:03:92:d1:4f:90:f1:ba: 03:8c:cd:82:e6:0c:1e:1d:f1:aa:e7:c0:af:39:3b:8d:fe:0a: 42:cd:11:b7:37:5d:2c:3d:f1:79:2e:d2:26:d8:ed:1f:05:ce: 0b:86:ed:39:14:4b:2f:b3:90:a4:89:85:09:b7:7f:ae:45:df: 27:66:53:c1:11:f1:e5:19:66:7a:7a:31:f4:20:65:00:8d:19: a6:bb:01:a8:5e:a6:ab:ee:f7:00:4d:02:e9:9f:5e:df:51:ed: a1:07:41:b6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICEXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcxRTQxMTAvBgNVBAUTKDI5QjlFNkFDMDE5Mjk4Q0NBMDk2REU4OTcxQTlEQzhG N0Q3OEUxRDkwHhcNMjQxMjEyMTczNTIyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzViMWVkYS0xZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLA7ErPW5Kv/ABVOV2RQudaQ9wLPHKQyM0W+zT1YM7apzFYDMR1OcnmtgcUy FOnqjiuT0dCsM4kXsZKFo2mcmxWnepBPblDztMMYKHI9lPmZRd9/OaBbb/U4Ey4W nTECHdXFs4Fb53QKy5czKnFgGzQfjLqruEWSgW4JaaB0SqXB8PUbW7zjM+GFqITg v9CAukKxnEXfn2JrXwtWyXNnVQZWdZWaGDg3C/gjsNTyYRZBNIzp+UEmoDn1Oa7J KaqepVxNRQE6jo7dfvwfRg4TQpAY83vD7+QIWKtlg3bsCc37Y3o40rGUDUdE7vlW fbAr+aSWTacNB+wFWprnV2vt6wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLEwNnqe TO6db5wo0bzWWW0gSqt2MB8GA1UdIwQYMBaAFCm55qwBkpjMoJbeiXGp3I99eOHZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzFFNC8zODI0N0E3MEYx NjkxMUU4QjNBNzlEMUVDNEY5QUUwMi9LYm5tckFHU21NeWdsdDZKY2FuY2ozMTQ0 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tibm1yQUdTbU15Z2x0NkpjYW5jajMxNDRkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzcxRTQvMzgyNDdBNzBGMTY5MTFFOEIzQTc5RDFFQzRGOUFFMDIvQjZDMkEyN0FG MTZBMTFFODk1NTBCNjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnxkQwDwQCAAIwCQMHACABDfa0ADANBgkqhkiG9w0BAQsF AAOCAQEAZHH11/DcrN2fb0O2iOWw+WN+nS4+9TLGzCA+3Ak1HAcUia4yAJrIQ78l 5Huwccjjp9iOLK5+YlTLOXiCeOWSdFTDzc5wgm+TSsfm8QMA/BpdEokpLqBT8Zyn H82gJpOOs1suyALCXcEEfQFfBTw7Ey5A0tzj2L5RP6YPxtCNew2C9l3oCCpwYj48 AKoLPSs8WElLGBQfO36h7D4DktFPkPG6A4zNguYMHh3xqufArzk7jf4KQs0Rtzdd LD3xeS7SJtjtHwXOC4btORRLL7OQpImFCbd/rkXfJ2ZTwRHx5Rlmenox9CBlAI0Z prsBqF6mq+73AE0C6Z9e31HtoQdBtg== -----END CERTIFICATE-----Generated at Sat Apr 5 02:15:34 2025 by rpki-client