$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/507A39A632B011EE89DFF774C4F9AE02.roa File: 507A39A632B011EE89DFF774C4F9AE02.roa (raw, json) Hash identifier: TYrZ+B6VIzKW11uXjXFH3B1vYwvh9CEWEvcjwdCYyoM= Subject key identifier: A7:51:12:F7:12:56:06:3F:06:93:58:BD:ED:F1:CD:37:47:71:26:01 Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Certificate serial: 172E Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/507A39A632B011EE89DFF774C4F9AE02.roa Signing time: Thu 28 Nov 2024 17:04:42 +0000 ROA not before: Thu 28 Nov 2024 17:04:42 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 137047 IP address blocks: 103.103.42.0/24 maxlen: 24 103.103.43.0/24 maxlen: 24 103.120.70.0/24 maxlen: 24 103.120.71.0/24 maxlen: 24 2402:2ec0::/34 maxlen: 34 2402:2ec0:4000::/34 maxlen: 34 2402:2ec0:8000::/34 maxlen: 34 2402:2ec0:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5934 (0x172e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478E2 Validity Not Before: Nov 28 17:04:42 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6748a2aa-4b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:79:dc:bd:c8:7f:3c:27:f2:5c:b6:b5:00: df:21:77:8d:91:0a:d4:cb:9e:10:1c:24:e9:a8:bb: 76:9e:ad:20:76:e1:fb:eb:00:3a:93:23:ff:07:a7: 56:a3:2c:86:75:8f:4c:64:b3:ba:a4:f0:ae:7c:cb: 14:94:c4:f7:3d:6b:0d:ed:7f:de:0b:4c:f8:44:71: c0:c9:d9:22:dd:29:79:31:1f:ce:b1:89:5e:a9:77: 06:ed:2e:3e:5d:4e:29:76:c9:5a:2c:b9:14:3e:0e: ed:96:21:1f:d1:86:ab:76:50:e2:0f:42:76:fe:d8: c3:c6:de:b5:02:e2:b8:72:aa:3c:af:b9:d1:d0:3b: 63:6f:14:9f:fe:37:52:99:98:26:f4:bb:11:8d:db: da:b7:b0:75:73:0f:c8:f9:bf:64:b4:06:43:23:26: e1:cd:a2:3b:79:f8:3e:93:67:68:84:94:6f:8f:d9: 8e:73:ae:67:dd:74:53:72:c9:a1:5e:02:53:c7:18: c7:ba:79:75:b9:f2:c5:12:a3:ec:c2:6a:d2:74:e0: 84:fc:1f:56:19:dd:36:0c:88:90:d6:6d:80:a5:8f: 39:94:12:cd:c0:ac:a0:2a:cf:22:6f:b2:99:b4:c3: e8:c8:55:8f:ff:e6:7c:31:ea:61:e5:49:1a:19:f7: ca:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:51:12:F7:12:56:06:3F:06:93:58:BD:ED:F1:CD:37:47:71:26:01 X509v3 Authority Key Identifier: keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/507A39A632B011EE89DFF774C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.103.42.0/23 103.120.70.0/23 IPv6: 2402:2ec0::/32 Signature Algorithm: sha256WithRSAEncryption 02:58:82:03:f3:74:30:2b:6a:0e:2d:4f:25:59:3f:f4:75:dd: 70:59:c0:8e:6e:01:53:ab:68:20:3b:80:90:86:59:5a:de:ed: c1:d2:17:58:30:74:35:ae:34:42:b7:a0:57:f6:6e:d0:d4:4c: b8:9c:f3:1b:49:fa:12:91:64:77:8f:91:81:2a:33:7c:f7:aa: da:ab:64:dc:2d:06:b7:80:5c:ee:16:19:a2:62:ee:4c:c3:72: 0b:0b:09:b3:2c:e3:af:8b:9e:a8:89:5e:70:0e:8d:23:93:59: 6b:fd:e6:6b:c7:c5:59:5d:98:f0:88:84:b2:10:ee:ea:27:0e: 75:4f:a3:2f:7a:7b:ac:a8:21:b3:33:72:94:89:1e:e0:0b:4f: d3:b2:bc:ed:48:c0:b1:7d:b0:0c:4a:67:8f:2c:35:ea:e0:c5: 54:38:fe:a5:00:f9:e7:a8:b2:c6:a4:16:a1:de:d2:f9:35:78: da:d8:cb:67:da:9e:fd:92:db:59:07:a4:21:99:6d:3b:37:51: af:46:88:dc:9c:c6:9e:46:2f:5b:c2:35:ef:8e:26:78:17:15: 1e:d3:fd:18:81:0d:da:4b:a1:17:02:44:e6:c4:df:0c:a5:3c: b1:a0:f3:60:32:62:42:40:5b:de:3c:fd:2d:d1:05:db:21:bb: 5a:f1:76:05 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICFy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4RTIxMTAvBgNVBAUTKEMxNDg1M0Q5QkQzRjc4RjY0ODBDNjMzNTIwNzY5NDNC Qzc5QjlGQzIwHhcNMjQxMTI4MTcwNDQyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ4YTJhYS00YjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdB53L3Ifzwn8ly2tQDfIXeNkQrUy54QHCTpqLt2nq0gduH76wA6kyP/B6dW oyyGdY9MZLO6pPCufMsUlMT3PWsN7X/eC0z4RHHAydki3Sl5MR/OsYleqXcG7S4+ XU4pdslaLLkUPg7tliEf0YardlDiD0J2/tjDxt61AuK4cqo8r7nR0DtjbxSf/jdS mZgm9LsRjdvat7B1cw/I+b9ktAZDIybhzaI7efg+k2dohJRvj9mOc65n3XRTcsmh XgJTxxjHunl1ufLFEqPswmrSdOCE/B9WGd02DIiQ1m2ApY85lBLNwKygKs8ib7KZ tMPoyFWP/+Z8Meph5UkaGffKCQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFKdREvcS VgY/BpNYve3xzTdHcSYBMB8GA1UdIwQYMBaAFMFIU9m9P3j2SAxjNSB2lDvHm5/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhFMi80QzkwOEEyMkUw QjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQWklER00xSUhhVU84ZWJu OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVaFQyYjBfZVBaSURHTTFJSGFVTzhlYm44SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc4RTIvNEM5MDhBMjJFMEI2MTFFN0IyRDBGRDgwQzRGOUFFMDIvNTA3QTM5QTYz MkIwMTFFRTg5REZGNzc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnZyoDBAFneEYwDQQCAAIwBwMFACQCLsAwDQYJKoZIhvcN AQELBQADggEBAAJYggPzdDArag4tTyVZP/R13XBZwI5uAVOraCA7gJCGWVre7cHS F1gwdDWuNEK3oFf2btDUTLic8xtJ+hKRZHePkYEqM3z3qtqrZNwtBreAXO4WGaJi 7kzDcgsLCbMs46+LnqiJXnAOjSOTWWv95mvHxVldmPCIhLIQ7uonDnVPoy96e6yo IbMzcpSJHuALT9OyvO1IwLF9sAxKZ48sNergxVQ4/qUA+eeossakFqHe0vk1eNrY y2fanv2S21kHpCGZbTs3Ua9GiNycxp5GL1vCNe+OJngXFR7T/RiBDdpLoRcCRObE 3wylPLGg82AyYkJAW948/S3RBdshu1rxdgU= -----END CERTIFICATE-----Generated at Sat Apr 5 02:18:05 2025 by rpki-client