$ rpki-client -vvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/128FC51CBE5811EBAADC5261C4F9AE02.roa File: 128FC51CBE5811EBAADC5261C4F9AE02.roa (raw, json) Hash identifier: vzlf4Y/jlVLmn/XIqiHOTNR6WlEQEJ5x+yCq0nmUmO0= Subject key identifier: FE:02:31:2A:B0:D6:B3:2A:A0:75:34:8E:9B:6C:8A:38:00:90:72:78 Certificate issuer: /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E Certificate serial: 148C Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/128FC51CBE5811EBAADC5261C4F9AE02.roa Signing time: Tue 03 Dec 2024 20:50:48 +0000 ROA not before: Tue 03 Dec 2024 20:50:48 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 137868 IP address blocks: 103.115.252.0/24 maxlen: 24 103.115.253.0/24 maxlen: 24 103.115.254.0/24 maxlen: 24 103.115.255.0/24 maxlen: 24 2402:f1c0::/32 maxlen: 38 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5260 (0x148c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91549E0 Validity Not Before: Dec 3 20:50:48 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=674f6f28-62b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cd:73:e3:6e:d7:85:f3:05:2c:c6:c5:36:53: 32:46:b2:ad:a5:79:75:33:01:b7:0e:0e:b2:25:96: 0a:4a:fd:e1:74:06:0a:73:c2:b0:5c:1f:ee:cb:cf: ab:14:c3:38:15:2f:3c:3e:f6:4d:85:58:95:3e:e1: 12:27:0e:6a:1e:3e:c5:30:3f:40:eb:c7:a9:de:d7: c0:0c:b2:16:89:92:9e:06:5d:1a:42:0c:3c:b3:21: 56:0d:2c:b9:09:56:5d:89:e3:2f:1f:1e:10:5b:44: ce:f1:5a:4a:06:77:0e:e4:09:81:1b:da:0d:db:ac: d8:6f:b3:6e:4a:c1:0c:c9:45:9d:a3:4f:38:85:f5: 6f:b8:8b:2c:75:13:db:8b:98:a8:c8:00:a6:f6:86: 72:2a:1b:c1:2f:ee:f9:d5:fc:04:15:5f:d2:10:90: 0d:50:de:95:c2:f2:4a:c5:cd:c4:03:75:ad:02:0c: b0:34:f9:b5:fb:26:b1:e5:5b:15:db:2a:80:c4:7c: 83:49:e1:0b:a2:45:34:cb:92:12:77:d0:fa:d5:6d: 7d:64:02:cd:ee:e8:5d:e3:4d:c0:4e:69:86:6a:17: 91:2b:c5:a7:03:9f:71:8d:28:5d:59:12:a7:e4:d5: 57:0e:c0:6e:66:55:1f:8c:c6:a5:33:62:97:01:57: 95:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:02:31:2A:B0:D6:B3:2A:A0:75:34:8E:9B:6C:8A:38:00:90:72:78 X509v3 Authority Key Identifier: keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/128FC51CBE5811EBAADC5261C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.252.0/22 IPv6: 2402:f1c0::/32 Signature Algorithm: sha256WithRSAEncryption 73:45:9e:d4:f9:34:94:c1:1f:6d:de:88:9a:4f:40:37:44:06: 8d:ac:c1:c5:c5:18:f2:fa:0c:0a:f5:6f:58:17:53:3e:59:44: 16:ab:e2:5d:4b:d7:8e:75:3b:8c:b3:84:a3:f9:c3:9b:1b:51: 8d:16:f5:f4:f4:9d:7b:3a:88:fc:be:e5:64:00:0d:2a:48:8a: e1:de:e4:32:b0:be:be:86:40:9a:2f:20:73:47:de:dd:79:85: 12:1e:cc:42:23:c4:fc:84:a8:c9:44:a4:1f:07:7f:70:28:b2: c5:63:90:3e:2b:32:bf:b3:5f:f5:ea:ac:d0:e0:a1:c8:f6:be: e1:5d:e1:e3:09:5b:d0:6b:b3:36:47:7e:3b:43:af:c0:7e:0a: 83:7c:70:e8:80:d4:6b:bf:3e:cc:35:d1:69:a3:4c:39:7d:ba: 8c:3d:d7:07:a6:4a:20:a1:ba:23:2b:9b:87:67:84:57:67:b0: 9f:a0:59:7d:08:21:79:58:5b:10:37:da:38:48:de:6e:8b:a8: 6e:04:9b:69:0f:b9:c0:c0:22:44:c0:50:bf:c8:22:ad:6d:03: ee:df:dd:43:d7:94:8d:f4:1f:57:29:0a:21:85:1e:80:d9:19: c6:00:94:1a:18:c4:49:18:a5:9f:6f:0f:17:a3:7d:21:ef:6d: 18:dd:24:40 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICFIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5RTAxMTAvBgNVBAUTKEI2QzI0M0M2MzlCMzExRTk4NzhFQzA2QkYyNDdGN0FE RTU0QjA5M0UwHhcNMjQxMjAzMjA1MDQ4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRmNmYyOC02MmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0c1z427XhfMFLMbFNlMyRrKtpXl1MwG3Dg6yJZYKSv3hdAYKc8KwXB/uy8+r FMM4FS88PvZNhViVPuESJw5qHj7FMD9A68ep3tfADLIWiZKeBl0aQgw8syFWDSy5 CVZdieMvHx4QW0TO8VpKBncO5AmBG9oN26zYb7NuSsEMyUWdo084hfVvuIssdRPb i5ioyACm9oZyKhvBL+751fwEFV/SEJANUN6VwvJKxc3EA3WtAgywNPm1+yax5VsV 2yqAxHyDSeELokU0y5ISd9D61W19ZALN7uhd403ATmmGaheRK8WnA59xjShdWRKn 5NVXDsBuZlUfjMalM2KXAVeVmQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFP4CMSqw 1rMqoHU0jptsijgAkHJ4MB8GA1UdIwQYMBaAFLbCQ8Y5sxHph47Aa/JH963lSwk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDlFMC81MTU0QTExMDVG RkExMUU4ODdCNTY5NDJDNEY5QUUwMi90c0pEeGptekVlbUhqc0JyOGtmM3JlVkxD VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzSkR4am16RWVtSGpzQnI4a2YzcmVWTENUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQ5RTAvNTE1NEExMTA1RkZBMTFFODg3QjU2OTQyQzRGOUFFMDIvMTI4RkM1MUNC RTU4MTFFQkFBREM1MjYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnc/wwDQQCAAIwBwMFACQC8cAwDQYJKoZIhvcNAQELBQAD ggEBAHNFntT5NJTBH23eiJpPQDdEBo2swcXFGPL6DAr1b1gXUz5ZRBar4l1L1451 O4yzhKP5w5sbUY0W9fT0nXs6iPy+5WQADSpIiuHe5DKwvr6GQJovIHNH3t15hRIe zEIjxPyEqMlEpB8Hf3AossVjkD4rMr+zX/XqrNDgocj2vuFd4eMJW9BrszZHfjtD r8B+CoN8cOiA1Gu/Psw10WmjTDl9uow91wemSiChuiMrm4dnhFdnsJ+gWX0IIXlY WxA32jhI3m6LqG4Em2kPucDAIkTAUL/IIq1tA+7f3UPXlI30H1cpCiGFHoDZGcYA lBoYxEkYpZ9vDxejfSHvbRjdJEA= -----END CERTIFICATE-----Generated at Sat Apr 5 21:09:41 2025 by rpki-client