$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/46C5452E0DD711EF85707821C4F9AE02.roa File: 46C5452E0DD711EF85707821C4F9AE02.roa (raw, json) Hash identifier: 7j0YGYj1RqHQkRdbQBx20wV0PO4RbHrIjhOnv/h1yok= Subject key identifier: 03:D0:C1:53:A1:CE:A7:55:EC:27:C8:A6:F6:69:3C:C4:1C:79:C8:E5 Certificate issuer: /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43 Certificate serial: 0B91 Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/46C5452E0DD711EF85707821C4F9AE02.roa Signing time: Tue 10 Dec 2024 19:17:39 +0000 ROA not before: Tue 10 Dec 2024 19:17:39 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 58504 IP address blocks: 103.28.84.0/22 maxlen: 22 103.28.84.0/24 maxlen: 24 103.28.85.0/24 maxlen: 24 103.28.86.0/24 maxlen: 24 103.28.87.0/24 maxlen: 24 150.107.204.0/22 maxlen: 22 150.107.204.0/24 maxlen: 24 150.107.205.0/24 maxlen: 24 150.107.206.0/24 maxlen: 24 150.107.207.0/24 maxlen: 24 2406:b700::/32 maxlen: 32 2406:b700::/48 maxlen: 48 2406:b700:2::/48 maxlen: 48 2406:b700:3::/48 maxlen: 48 2406:b700:4::/48 maxlen: 48 2406:b700:5::/48 maxlen: 48 2406:b700:6::/48 maxlen: 48 2406:b700:7::/48 maxlen: 48 2406:b700:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2961 (0xb91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916701E Validity Not Before: Dec 10 19:17:39 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=675893d2-a88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:49:dd:f8:79:d5:f6:66:0f:5d:5b:41:96:5e: 20:0c:35:b4:42:7a:2f:06:f6:fd:25:24:ad:33:fa: a5:2d:28:66:aa:fb:53:45:0a:0a:b8:aa:e0:a4:67: 7e:77:96:b4:e9:32:7b:22:aa:5e:7c:c6:bd:01:ec: 77:8e:5b:d7:c6:4b:d4:10:06:6c:23:75:ca:9f:f1: 4e:af:20:1a:ec:8b:d8:b9:07:dc:9b:3e:83:eb:6e: ae:3b:95:1a:5e:c3:ec:5c:ab:06:22:bc:fe:4c:06: 5c:80:5d:40:93:7d:18:98:aa:90:50:6a:d5:ff:ae: 1e:35:14:9f:d4:e1:f8:e6:02:95:d5:9c:78:96:ac: e4:b9:62:71:23:8e:4d:a8:a0:61:8d:8b:f9:ca:9e: db:5c:f3:a7:fd:02:c0:2c:2e:0f:db:c4:0f:26:02: 35:86:13:d1:88:8f:9f:c3:79:e6:3f:0a:e9:43:dc: 58:08:d9:cb:e4:db:4b:be:0b:1f:16:fd:99:b5:31: 75:77:5d:6f:51:1d:94:8b:0b:ec:46:d5:c5:ac:d3: ce:7d:5b:4d:a8:c2:69:b2:81:ba:90:c8:d9:0d:f8: 22:68:fd:9a:e7:16:dc:8e:a2:34:96:4b:e5:2c:62: dd:ed:d1:a9:6c:29:8c:33:cc:be:ae:9b:a0:0f:26: ab:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D0:C1:53:A1:CE:A7:55:EC:27:C8:A6:F6:69:3C:C4:1C:79:C8:E5 X509v3 Authority Key Identifier: keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/46C5452E0DD711EF85707821C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.28.84.0/22 150.107.204.0/22 IPv6: 2406:b700::/32 Signature Algorithm: sha256WithRSAEncryption a5:fa:3a:ab:2b:10:8a:5d:32:81:81:15:a7:68:9b:7b:2a:e0: 1a:09:48:de:f2:da:2a:6b:b6:44:ed:fa:7b:05:29:f8:e3:d5: c7:4c:4d:83:9a:2f:d0:ce:62:d1:b7:11:3d:76:2f:36:07:40: b4:0a:50:fd:07:82:a1:90:fe:fe:93:1d:5c:d6:ce:13:34:22: e4:31:28:38:a3:12:ff:fb:d7:a3:d9:93:51:6c:4c:5f:7a:0c: 68:ff:b9:b1:80:6c:f5:66:bc:08:e9:28:79:d9:56:ea:b6:db: d1:af:a7:e5:52:ac:23:71:a3:3c:27:6e:75:80:dd:b4:0e:c1: 41:9a:f4:38:b4:0c:16:29:30:64:be:cb:dd:6c:02:96:9e:c2: f6:8b:9b:75:a2:ea:f4:4b:17:e0:14:3c:ed:f6:1a:27:19:72: af:75:0a:1b:ea:f6:f5:88:38:03:36:52:40:4c:d9:49:8a:e3: b5:4f:58:66:84:58:e1:5b:d6:1d:f9:5a:de:53:87:7b:07:b1: 87:d5:a0:82:a5:4e:21:7d:1b:66:dd:81:e0:aa:b9:0e:ca:57: 93:67:9b:81:28:60:b6:27:73:7a:72:4e:f4:8d:97:68:80:97: 5a:86:db:39:84:b1:ad:0c:de:87:f1:43:00:7d:99:26:00:3d: 4a:3f:f5:12 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICC5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwMUUxMTAvBgNVBAUTKDUwREUxQzYwNzMzRUEyQjhCNzZFODQwMzYwOTE4RTFG MjVDNDZFNDMwHhcNMjQxMjEwMTkxNzM5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU4OTNkMi1hODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0nd+HnV9mYPXVtBll4gDDW0QnovBvb9JSStM/qlLShmqvtTRQoKuKrgpGd+ d5a06TJ7IqpefMa9Aex3jlvXxkvUEAZsI3XKn/FOryAa7IvYuQfcmz6D626uO5Ua XsPsXKsGIrz+TAZcgF1Ak30YmKqQUGrV/64eNRSf1OH45gKV1Zx4lqzkuWJxI45N qKBhjYv5yp7bXPOn/QLALC4P28QPJgI1hhPRiI+fw3nmPwrpQ9xYCNnL5NtLvgsf Fv2ZtTF1d11vUR2UiwvsRtXFrNPOfVtNqMJpsoG6kMjZDfgiaP2a5xbcjqI0lkvl LGLd7dGpbCmMM8y+rpugDyaruQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAPQwVOh zqdV7CfIpvZpPMQcecjlMB8GA1UdIwQYMBaAFFDeHGBzPqK4t26EA2CRjh8lxG5D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAxRS83ODVEN0VEMjFD MDgxMUVBODU3NkIxNTFDNEY5QUUwMi9VTjRjWUhNLW9yaTNib1FEWUpHT0h5WEVi a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VONGNZSE0tb3JpM2JvUURZSkdPSHlYRWJrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjcwMUUvNzg1RDdFRDIxQzA4MTFFQTg1NzZCMTUxQzRGOUFFMDIvNDZDNTQ1MkUw REQ3MTFFRjg1NzA3ODIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnHFQDBAKWa8wwDQQCAAIwBwMFACQGtwAwDQYJKoZIhvcN AQELBQADggEBAKX6OqsrEIpdMoGBFadom3sq4BoJSN7y2iprtkTt+nsFKfjj1cdM TYOaL9DOYtG3ET12LzYHQLQKUP0HgqGQ/v6THVzWzhM0IuQxKDijEv/716PZk1Fs TF96DGj/ubGAbPVmvAjpKHnZVuq229Gvp+VSrCNxozwnbnWA3bQOwUGa9Di0DBYp MGS+y91sApaewvaLm3Wi6vRLF+AUPO32GicZcq91Chvq9vWIOAM2UkBM2UmK47VP WGaEWOFb1h35Wt5Th3sHsYfVoIKlTiF9G2bdgeCquQ7KV5Nnm4EoYLYnc3pyTvSN l2iAl1qG2zmEsa0M3ofxQwB9mSYAPUo/9RI= -----END CERTIFICATE-----Generated at Sat Apr 5 22:24:35 2025 by rpki-client