$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/4C304B9EA12F11EFBF514933C4F9AE02.roa File: 4C304B9EA12F11EFBF514933C4F9AE02.roa (raw, json) Hash identifier: lIJvzLYrLtuFIE0gyMhPk2/yxHi1SCB/LUlp5AIoj+E= Subject key identifier: 5B:1B:F2:42:21:4E:FB:C1:70:70:B5:15:00:94:66:32:4B:37:B3:4A Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 04A3 Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/4C304B9EA12F11EFBF514933C4F9AE02.roa Signing time: Sun 08 Dec 2024 23:43:06 +0000 ROA not before: Sun 08 Dec 2024 23:43:06 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 9232 IP address blocks: 103.174.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1187 (0x4a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9 Validity Not Before: Dec 8 23:43:06 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67562f0a-e6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:81:a1:8c:04:f3:69:93:b8:25:cd:92:a6:af: 46:c6:b1:37:ef:c4:89:ed:6e:2e:c0:99:35:58:e6: 33:38:26:3d:63:f8:5c:f0:e2:a3:1f:46:34:1e:40: f3:6a:8f:1b:de:3e:8a:69:9b:33:d7:52:be:56:95: c4:b8:02:3a:83:64:1e:90:a9:26:99:23:aa:49:38: 98:79:58:f6:2e:cb:a0:a7:50:91:20:29:15:c0:66: 71:b3:59:2c:44:ba:77:66:11:60:15:bd:50:f1:e7: 4a:d3:db:2e:72:6f:e6:88:e8:c9:87:3e:cd:79:96: 51:aa:e0:13:dd:cc:55:aa:2f:87:06:a2:4b:b6:b2: c1:3f:5c:1d:2c:72:d7:59:54:ac:61:73:1c:1e:50: 1b:61:e3:b0:14:e5:b7:93:c6:3c:4b:1e:0a:6a:b7: 65:3c:62:36:04:c6:da:ee:14:14:dc:24:31:d1:44: 27:5a:70:01:c4:6a:9e:2b:41:35:79:8f:7c:53:bd: 9d:89:83:90:7b:0c:11:56:ea:f2:f9:36:8d:5a:6b: b7:46:76:c9:ee:1e:20:a0:e5:12:4d:d4:7f:77:13: 89:bd:e8:59:22:99:f3:df:15:74:c9:29:09:75:b5: 0d:76:e3:7b:cc:4e:be:9e:10:db:77:d7:e4:f6:c6: fd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1B:F2:42:21:4E:FB:C1:70:70:B5:15:00:94:66:32:4B:37:B3:4A X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/4C304B9EA12F11EFBF514933C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.96.0/23 Signature Algorithm: sha256WithRSAEncryption 01:c4:12:78:6e:47:72:c9:3f:72:f7:77:25:32:0f:7c:76:27: 56:eb:f2:3e:01:39:36:9e:21:8d:bf:e8:8f:67:51:69:f4:c5: 42:d6:86:24:ec:e2:c1:d9:3c:fd:6d:50:b4:60:18:f2:12:52: 48:48:45:a7:e4:fc:cc:e1:5a:2f:9a:6b:a2:03:e8:9f:e8:ce: 46:ba:59:3e:97:9a:61:c8:a0:9a:7d:0d:65:ee:09:e8:a3:0b: 0c:06:bd:c1:83:16:2e:99:71:c5:3e:3b:9a:9a:46:42:4b:71: ce:b0:90:ab:c8:13:9d:ca:fc:13:39:f4:fe:47:7f:b8:c8:84: 04:7e:c9:5f:45:aa:c0:2a:fa:06:dc:1d:37:46:60:93:95:1a: d3:ae:bb:78:53:6a:03:1b:48:2f:87:ee:ce:e8:8b:0f:c2:f8: dc:ee:07:b8:0e:a9:74:59:fc:13:05:fa:0b:81:3f:a4:49:36: a7:14:92:13:63:7a:b1:7d:fe:92:05:bd:42:d9:48:7a:38:75: 4e:d0:c8:d3:84:4a:57:d4:a1:62:dc:bf:3a:32:81:5c:07:6e: 54:0f:4c:3e:71:1e:21:d1:86:16:67:65:82:63:98:00:7f:21: 22:d4:72:8e:46:99:2a:82:76:d8:8d:fc:62:c4:f5:8f:7b:08: b9:ad:f9:d2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjQxMjA4MjM0MzA2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU2MmYwYS1lNmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5IGhjATzaZO4Jc2Spq9GxrE378SJ7W4uwJk1WOYzOCY9Y/hc8OKjH0Y0HkDz ao8b3j6KaZsz11K+VpXEuAI6g2QekKkmmSOqSTiYeVj2Lsugp1CRICkVwGZxs1ks RLp3ZhFgFb1Q8edK09sucm/miOjJhz7NeZZRquAT3cxVqi+HBqJLtrLBP1wdLHLX WVSsYXMcHlAbYeOwFOW3k8Y8Sx4KardlPGI2BMba7hQU3CQx0UQnWnABxGqeK0E1 eY98U72diYOQewwRVury+TaNWmu3RnbJ7h4goOUSTdR/dxOJvehZIpnz3xV0ySkJ dbUNduN7zE6+nhDbd9fk9sb9FwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFsb8kIh TvvBcHC1FQCUZjJLN7NKMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjIzQjkvNzhDRUFDQkMyQjM2MTFFQ0FENTk1QjdDQzRGOUFFMDIvNEMzMDRCOUVB MTJGMTFFRkJGNTE0OTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnrmAwDQYJKoZIhvcNAQELBQADggEBAAHEEnhuR3LJP3L3 dyUyD3x2J1br8j4BOTaeIY2/6I9nUWn0xULWhiTs4sHZPP1tULRgGPISUkhIRafk /MzhWi+aa6ID6J/ozka6WT6XmmHIoJp9DWXuCeijCwwGvcGDFi6ZccU+O5qaRkJL cc6wkKvIE53K/BM59P5Hf7jIhAR+yV9FqsAq+gbcHTdGYJOVGtOuu3hTagMbSC+H 7s7oiw/C+NzuB7gOqXRZ/BMF+guBP6RJNqcUkhNjerF9/pIFvULZSHo4dU7QyNOE SlfUoWLcvzoygVwHblQPTD5xHiHRhhZnZYJjmAB/ISLUco5GmSqCdtiN/GLE9Y97 CLmt+dI= -----END CERTIFICATE-----Generated at Sat Apr 5 01:47:44 2025 by rpki-client