$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/1A519CD615DD11EBAA7C4D52C4F9AE02.roa File: 1A519CD615DD11EBAA7C4D52C4F9AE02.roa (raw, json) Hash identifier: FR8FX9EXrL2jVochwcD/Id1QKP91UMmw+2eIcY6MZog= Subject key identifier: 48:9F:8F:C5:56:C5:16:7B:4B:3B:F3:E3:54:65:5F:D6:27:93:87:7E Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 22BA Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/1A519CD615DD11EBAA7C4D52C4F9AE02.roa Signing time: Mon 02 Dec 2024 15:52:56 +0000 ROA not before: Mon 02 Dec 2024 15:52:56 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 213122 IP address blocks: 103.27.76.0/24 maxlen: 24 103.27.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8890 (0x22ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE Validity Not Before: Dec 2 15:52:56 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674dd7d8-d4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:90:1e:28:a2:4a:ae:a4:43:53:2f:21:98: 36:b2:55:0d:f1:7b:7f:81:17:c6:a5:89:25:aa:67: 22:e9:e0:5a:49:8a:e8:ba:50:cb:a1:21:a7:bd:d2: 40:6d:0c:ca:62:10:6d:62:d7:f8:c8:11:96:11:d5: 41:c4:64:64:ba:c8:5a:c2:53:4c:b4:11:7a:60:25: 31:7e:bc:ac:25:76:e9:d9:39:2f:63:94:7f:5b:9c: 2e:66:21:0a:1d:15:0b:d7:bc:e8:2c:3f:23:91:49: ef:52:31:c4:b5:ec:15:00:31:fb:63:58:24:05:64: 1b:d5:12:ce:af:a6:7c:fd:c2:05:92:09:69:f1:b5: 10:47:4f:0f:1c:91:40:da:c6:2f:ac:0a:1b:84:54: 7a:eb:78:33:7a:77:b6:33:a8:0f:55:65:0d:ae:4c: f0:fd:8f:1e:c6:be:88:b5:e1:73:e9:3d:71:28:1f: f3:70:ec:c3:b0:06:ec:32:cc:3d:65:e0:7a:93:ab: 47:26:88:d2:50:67:42:7b:09:00:90:76:aa:65:99: 38:6a:b6:f1:5a:9d:43:6e:96:71:ea:75:25:e9:bf: b7:70:db:a5:b0:9b:38:6e:69:a6:14:55:32:ba:c3: 82:98:cd:20:c0:39:9c:a3:e0:8d:b3:49:58:f6:8a: d3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9F:8F:C5:56:C5:16:7B:4B:3B:F3:E3:54:65:5F:D6:27:93:87:7E X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/1A519CD615DD11EBAA7C4D52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.27.76.0/23 Signature Algorithm: sha256WithRSAEncryption 21:7d:77:2f:82:2a:b2:2a:43:62:a2:d5:f0:00:68:25:05:ad: 33:33:9a:cd:ac:3b:f6:2a:09:f3:ff:69:2d:c8:0c:97:1d:89: c3:8f:27:45:30:c3:79:63:49:f4:77:97:06:c2:3e:ba:df:1d: ae:5e:c4:2e:58:ef:d7:b3:ac:60:16:85:6c:f7:39:3e:ca:16: 9b:cd:32:eb:1c:90:a2:64:b1:6c:74:d8:75:78:5b:55:9f:dd: 68:96:21:10:2d:a0:ad:2a:b1:31:2b:a9:e2:81:99:59:55:d5: 53:ee:f0:ad:f2:c8:f4:d8:1f:23:c1:95:cc:35:eb:cb:a0:aa: d8:9b:f5:6b:0a:cd:e2:4c:3c:b6:7e:c5:b5:b2:10:66:13:fb: cb:59:6e:54:ff:31:93:2a:cd:e8:50:94:3d:a7:0c:69:94:0f: dc:bb:ee:9b:19:5b:76:a3:ee:8d:e3:2c:01:63:ed:ec:22:cc: aa:03:a8:04:1f:20:cd:43:95:fa:7c:b7:e7:a3:a6:fb:d5:26: 86:17:0f:92:df:09:4a:67:ab:b1:2f:79:db:bb:a7:d7:58:94: 29:ad:31:b3:61:ed:83:c0:47:98:81:eb:c5:d3:99:b4:6c:77: bb:f5:55:de:0c:a6:46:fb:c8:10:e4:b6:ae:34:71:b2:26:27: 04:0d:cf:1b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjQxMjAyMTU1MjU2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRkZDdkOC1kNGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOaQHiiiSq6kQ1MvIZg2slUN8Xt/gRfGpYklqmci6eBaSYroulDLoSGnvdJA bQzKYhBtYtf4yBGWEdVBxGRkushawlNMtBF6YCUxfrysJXbp2TkvY5R/W5wuZiEK HRUL17zoLD8jkUnvUjHEtewVADH7Y1gkBWQb1RLOr6Z8/cIFkglp8bUQR08PHJFA 2sYvrAobhFR663gzene2M6gPVWUNrkzw/Y8exr6IteFz6T1xKB/zcOzDsAbsMsw9 ZeB6k6tHJojSUGdCewkAkHaqZZk4arbxWp1DbpZx6nUl6b+3cNulsJs4bmmmFFUy usOCmM0gwDmco+CNs0lY9orTZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEifj8VW xRZ7Szvz41RlX9Ynk4d+MB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTAxQ0UvOTNCQTg1M0E5N0YwMTFFNUI5MjAxMDZBQzRGOUFFMDIvMUE1MTlDRDYx NUREMTFFQkFBN0M0RDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnG0wwDQYJKoZIhvcNAQELBQADggEBACF9dy+CKrIqQ2Ki 1fAAaCUFrTMzms2sO/YqCfP/aS3IDJcdicOPJ0Uww3ljSfR3lwbCPrrfHa5exC5Y 79ezrGAWhWz3OT7KFpvNMusckKJksWx02HV4W1Wf3WiWIRAtoK0qsTErqeKBmVlV 1VPu8K3yyPTYHyPBlcw168ugqtib9WsKzeJMPLZ+xbWyEGYT+8tZblT/MZMqzehQ lD2nDGmUD9y77psZW3aj7o3jLAFj7ewizKoDqAQfIM1Dlfp8t+ejpvvVJoYXD5Lf CUpnq7Evedu7p9dYlCmtMbNh7YPAR5iB68XTmbRsd7v1Vd4Mpkb7yBDktq40cbIm JwQNzxs= -----END CERTIFICATE-----Generated at Sat Apr 5 16:54:43 2025 by rpki-client