$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/59D82E00DE9B11EC9AE23269C4F9AE02.roa File: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (raw, json) Hash identifier: z9il2KLvmM35CEJ33D6dQT01IjqffT1KfUHR8PJEmYw= Subject key identifier: 56:3C:7D:01:23:AF:1C:4D:3F:01:6B:FB:4E:43:7C:69:FD:59:5F:15 Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Certificate serial: 03D0 Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/59D82E00DE9B11EC9AE23269C4F9AE02.roa Signing time: Tue 17 Dec 2024 00:14:38 +0000 ROA not before: Tue 17 Dec 2024 00:14:38 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 212921 IP address blocks: 103.80.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 976 (0x3d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398A3 Validity Not Before: Dec 17 00:14:38 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6760c26d-593c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:8b:22:aa:3b:c0:ad:96:77:cd:f0:a6:93: 4a:39:ac:de:07:2d:49:17:d9:43:5f:ec:2b:dd:2d: d0:d2:1e:25:bb:0b:a8:3e:0b:a0:12:17:7f:47:51: b8:6f:4b:0c:f6:d2:ab:1f:54:72:61:39:19:92:9d: 8f:19:8f:20:0b:2c:4c:74:4b:ed:f1:04:9e:ef:dc: 40:82:ae:41:f1:8d:86:5e:fc:00:0e:77:83:03:70: 7c:d2:9b:0e:cf:df:e4:f8:1c:2b:59:5e:53:f5:9d: 93:05:a5:aa:29:34:6e:0a:a0:dc:5c:6c:5c:5b:c2: dc:01:e9:15:37:d0:67:fe:44:e5:6e:78:7e:96:c4: 58:2f:b4:99:1b:48:e5:10:e8:32:c6:bf:4e:69:aa: d8:ca:73:64:09:d3:06:04:36:d1:9b:81:c1:f5:13: 7e:09:d1:f7:12:e1:3a:8f:3d:06:7d:ed:38:c9:be: 94:da:87:37:ee:50:50:8f:7e:cd:59:09:74:c9:de: fd:6b:7f:89:b5:cc:b0:51:fb:44:2c:20:a5:aa:d7: 8d:f9:3c:0f:ac:a5:c3:da:88:f9:e8:eb:82:77:d6: 40:6d:a8:3b:13:8b:6e:e1:63:84:33:42:5b:a5:33: ba:06:e3:da:4e:57:5f:fc:54:5f:0e:a8:54:9d:26: 2b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3C:7D:01:23:AF:1C:4D:3F:01:6B:FB:4E:43:7C:69:FD:59:5F:15 X509v3 Authority Key Identifier: keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/59D82E00DE9B11EC9AE23269C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.80.135.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:69:85:77:67:46:30:8d:96:0c:8d:bb:97:0e:15:bc:e7:15: 7a:6a:02:d0:b0:9a:c2:93:99:2a:83:e9:72:d8:7c:7f:3c:b2: ae:df:39:b2:40:88:d9:30:49:25:17:2e:1d:8b:41:fd:ad:8f: ed:a2:d9:f2:da:75:d5:12:7d:7e:08:6a:80:a0:e5:51:47:15: 2e:f4:90:72:7a:fc:ef:b7:5c:bc:f7:9e:c0:54:d3:17:53:99: 2b:03:22:85:b7:f1:e5:c8:55:a3:38:85:bf:1e:a5:cb:31:4d: 50:b3:35:d8:d4:bf:77:fa:47:17:6c:91:e6:8a:fb:e9:45:8c: 9a:cf:fb:bb:4f:aa:7e:f3:c6:46:9d:ee:b3:33:e4:39:4a:1c: f2:86:b0:60:53:cc:8b:48:bd:6a:c0:ca:ee:e7:18:66:cd:38: 0b:f2:60:35:9f:30:6b:48:ab:8c:51:72:05:06:6e:37:43:d2: fb:80:e3:52:ed:72:ee:0a:71:6c:37:99:98:27:64:07:6c:b7: 12:57:52:31:7e:09:b8:c6:eb:82:db:0a:7d:b3:0f:b9:48:01: 6a:b0:b3:ac:cb:89:7d:54:f4:1f:65:ba:84:b9:db:33:c5:62: 6e:a8:00:f5:9c:77:46:35:48:b8:04:bb:aa:83:5e:a8:58:05: fb:90:2b:e4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2 NERBNTBCMkEwHhcNMjQxMjE3MDAxNDM4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYwYzI2ZC01OTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt22LIqo7wK2Wd83wppNKOazeBy1JF9lDX+wr3S3Q0h4luwuoPgugEhd/R1G4 b0sM9tKrH1RyYTkZkp2PGY8gCyxMdEvt8QSe79xAgq5B8Y2GXvwADneDA3B80psO z9/k+BwrWV5T9Z2TBaWqKTRuCqDcXGxcW8LcAekVN9Bn/kTlbnh+lsRYL7SZG0jl EOgyxr9OaarYynNkCdMGBDbRm4HB9RN+CdH3EuE6jz0Gfe04yb6U2oc37lBQj37N WQl0yd79a3+JtcywUftELCClqteN+TwPrKXD2oj56OuCd9ZAbag7E4tu4WOEM0Jb pTO6BuPaTldf/FRfDqhUnSYrnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFY8fQEj rxxNPwFr+05DfGn9WV8VMB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzk4QTMvRTIxOUI2MUM3MTEzMTFFQ0JDMzA4OTE5QzRGOUFFMDIvNTlEODJFMDBE RTlCMTFFQzlBRTIzMjY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnUIcwDQYJKoZIhvcNAQELBQADggEBAGpphXdnRjCNlgyN u5cOFbznFXpqAtCwmsKTmSqD6XLYfH88sq7fObJAiNkwSSUXLh2LQf2tj+2i2fLa ddUSfX4IaoCg5VFHFS70kHJ6/O+3XLz3nsBU0xdTmSsDIoW38eXIVaM4hb8epcsx TVCzNdjUv3f6RxdskeaK++lFjJrP+7tPqn7zxkad7rMz5DlKHPKGsGBTzItIvWrA yu7nGGbNOAvyYDWfMGtIq4xRcgUGbjdD0vuA41Ltcu4KcWw3mZgnZAdstxJXUjF+ CbjG64LbCn2zD7lIAWqws6zLiX1U9B9luoS52zPFYm6oAPWcd0Y1SLgEu6qDXqhY BfuQK+Q= -----END CERTIFICATE-----Generated at Sat Apr 5 20:01:35 2025 by rpki-client