$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/39FCB4EC4F4E11EDB169BF33C4F9AE02.roa File: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (raw, json) Hash identifier: 0dIG8fQMRzlILpkTDJVo/XSoC64SAKbRto45S4Eicvs= Subject key identifier: 9D:37:AA:38:37:4C:14:34:52:96:B8:9A:B0:9E:82:0C:A2:4C:9F:11 Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Certificate serial: 0235 Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/39FCB4EC4F4E11EDB169BF33C4F9AE02.roa Signing time: Fri 29 Nov 2024 01:54:38 +0000 ROA not before: Fri 29 Nov 2024 01:54:38 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 212238 IP address blocks: 103.102.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580D2 Validity Not Before: Nov 29 01:54:38 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67491edd-89f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:e7:9c:31:51:df:95:33:34:53:a5:6c:87: 00:ea:34:f6:35:e2:f3:62:bd:5a:ca:7c:26:2d:74: a6:c3:c7:d7:c9:85:30:a3:00:ff:94:a9:81:6a:b9: 2b:3a:a9:c4:55:cc:f9:0a:2f:3e:4e:39:87:8e:d5: 6b:d2:11:51:60:99:1b:94:69:6c:76:dd:23:2c:33: eb:40:08:c0:c5:68:f6:26:48:70:b5:de:6a:75:6f: bd:f0:75:d7:21:01:8c:8b:cd:19:bb:a9:d1:a5:1f: f1:c4:75:8f:14:71:fe:01:81:47:a3:e9:9d:13:65: fa:b2:0e:85:ff:53:96:d8:90:7a:cf:23:7a:5f:f2: 9e:8b:11:3c:cd:c2:49:fb:ff:03:0c:f2:80:e3:9e: bf:c2:72:44:7e:aa:66:a8:82:73:eb:d2:3f:4c:6a: f5:25:c3:0b:b7:28:28:d1:ef:8d:13:12:cc:b0:92: bc:b0:e5:0a:08:58:9c:4f:7d:62:bd:1a:ed:2d:5d: 78:f7:ee:17:dc:d0:66:26:55:fc:a4:df:99:3c:5e: 94:72:99:b7:41:3a:c8:9b:57:bd:0f:21:79:5b:ba: a8:36:d6:45:1d:f9:00:30:f7:d1:3e:4d:c3:71:b1: 50:19:b8:47:4d:70:18:d5:6b:ff:54:02:86:c7:74: 22:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:37:AA:38:37:4C:14:34:52:96:B8:9A:B0:9E:82:0C:A2:4C:9F:11 X509v3 Authority Key Identifier: keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/39FCB4EC4F4E11EDB169BF33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.127.0/24 Signature Algorithm: sha256WithRSAEncryption cf:31:5d:fe:7f:17:c0:fe:a7:e0:19:bf:49:a0:dc:45:99:8f: 11:09:e2:d6:3c:e8:cd:13:29:92:e7:55:cc:c4:1a:00:73:81: 9f:10:1e:bc:69:a8:25:f1:df:f9:c9:07:9e:62:41:46:fc:aa: 4e:f4:cd:88:99:01:36:2f:7b:21:be:bb:d7:16:f1:73:e1:91: f3:25:ae:60:ed:f1:d0:3d:67:41:a6:34:b8:66:1d:f5:7c:8a: 77:5c:e8:23:b4:2b:5c:36:61:47:21:01:4b:65:1d:4b:1f:aa: 91:80:f3:df:e9:99:6d:ee:e3:f8:3a:13:f3:f9:5f:cf:0d:4f: 29:7f:f3:f4:9d:91:c8:ec:42:c1:8a:18:00:1e:e0:10:41:90: 38:8e:d3:f4:ad:b3:92:6f:33:25:52:cd:1e:bc:8c:1a:d9:74: 6b:7c:88:b4:89:57:2a:e3:a8:d5:e5:61:6d:d4:61:ef:03:ab: d0:0f:e6:58:f7:65:b1:a0:8b:31:20:74:ce:2d:e8:d8:12:6f: f3:d6:7e:c8:b3:9d:32:7c:6a:0f:40:20:70:75:aa:8e:e2:1e: 0a:d0:a7:1e:b2:ca:00:51:2d:8a:10:69:dc:2a:8c:24:e2:2d: f5:35:df:5e:03:ce:d3:7c:18:f3:84:2f:e8:64:9f:2e:c9:76: c0:07:93:15 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG MkU0MDkyQjQwHhcNMjQxMTI5MDE1NDM4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ5MWVkZC04OWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI3nnDFR35UzNFOlbIcA6jT2NeLzYr1aynwmLXSmw8fXyYUwowD/lKmBarkr OqnEVcz5Ci8+TjmHjtVr0hFRYJkblGlsdt0jLDPrQAjAxWj2Jkhwtd5qdW+98HXX IQGMi80Zu6nRpR/xxHWPFHH+AYFHo+mdE2X6sg6F/1OW2JB6zyN6X/KeixE8zcJJ +/8DDPKA456/wnJEfqpmqIJz69I/TGr1JcMLtygo0e+NExLMsJK8sOUKCFicT31i vRrtLV149+4X3NBmJlX8pN+ZPF6Ucpm3QTrIm1e9DyF5W7qoNtZFHfkAMPfRPk3D cbFQGbhHTXAY1Wv/VAKGx3QiOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ03qjg3 TBQ0Upa4mrCeggyiTJ8RMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4 NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgwRDIvRUJDMUFDMkMxODRGMTFFREFEQkMzQzY1QzRGOUFFMDIvMzlGQ0I0RUM0 RjRFMTFFREIxNjlCRjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnZn8wDQYJKoZIhvcNAQELBQADggEBAM8xXf5/F8D+p+AZ v0mg3EWZjxEJ4tY86M0TKZLnVczEGgBzgZ8QHrxpqCXx3/nJB55iQUb8qk70zYiZ ATYveyG+u9cW8XPhkfMlrmDt8dA9Z0GmNLhmHfV8indc6CO0K1w2YUchAUtlHUsf qpGA89/pmW3u4/g6E/P5X88NTyl/8/SdkcjsQsGKGAAe4BBBkDiO0/Sts5JvMyVS zR68jBrZdGt8iLSJVyrjqNXlYW3UYe8Dq9AP5lj3ZbGgizEgdM4t6NgSb/PWfsiz nTJ8ag9AIHB1qo7iHgrQpx6yygBRLYoQadwqjCTiLfU1314DztN8GPOEL+hkny7J dsAHkxU= -----END CERTIFICATE-----Generated at Sat Apr 5 02:08:08 2025 by rpki-client