$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/551FA6B620DE11EC8CA3EC74C4F9AE02.roa File: 551FA6B620DE11EC8CA3EC74C4F9AE02.roa (raw, json) Hash identifier: sy0Mbt4ke59HBbem5DYUNkJ8NfZs0P/CrbYjmapjxqM= Subject key identifier: 45:33:37:23:B0:0F:3F:F6:BB:0F:5B:A8:23:37:C8:BB:4C:7F:FF:79 Certificate issuer: /CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721 Certificate serial: 0478 Authority key identifier: 06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/551FA6B620DE11EC8CA3EC74C4F9AE02.roa Signing time: Tue 26 Nov 2024 23:52:55 +0000 ROA not before: Tue 26 Nov 2024 23:52:55 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 135607 IP address blocks: 103.131.204.0/22 maxlen: 22 103.131.204.0/24 maxlen: 24 103.131.205.0/24 maxlen: 24 103.131.206.0/24 maxlen: 24 103.131.207.0/24 maxlen: 24 2403:ebc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1144 (0x478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B2C1 Validity Not Before: Nov 26 23:52:55 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67465f57-1e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a7:20:09:d1:2b:39:33:3d:3e:d8:f5:66:76: 14:68:b7:90:d8:a5:eb:3e:16:ee:79:f9:74:bc:4a: e2:83:96:7f:17:1a:ca:7f:f6:2b:77:20:0a:4c:31: 0e:00:33:99:c1:6d:c3:ef:0c:1d:0c:fb:9e:2d:5c: 6d:a5:01:7b:fd:f0:7d:58:32:70:c8:3c:53:74:52: 05:3d:ee:56:bd:52:d4:60:b7:05:94:9e:70:c6:f3: f8:c4:55:51:ed:21:85:d0:06:54:8f:f7:d5:9b:9c: 99:8c:27:23:a3:d9:89:e9:15:ef:e8:6f:08:09:69: 0f:8b:e8:78:ea:60:81:bb:cf:d0:67:d6:4c:c5:41: a5:03:7e:bb:e2:c2:37:c1:e0:e5:8e:ac:ce:08:14: 2a:b6:d5:ab:d7:a2:8f:3c:80:9b:fd:5b:fc:90:0d: 18:49:50:27:be:4c:a5:24:7b:8b:66:c8:14:68:03: 2b:54:63:6f:f4:4f:16:36:24:23:29:69:1b:5a:c1: 40:62:5b:d5:93:ed:e1:1b:42:80:54:3c:0a:20:07: 93:b2:66:8e:f9:f8:1e:b8:88:d4:55:92:f3:35:c6: 1c:fd:50:2c:57:06:57:53:75:6c:01:80:0d:17:7c: a0:21:b7:6f:f0:fb:ae:15:1f:e3:7c:73:c6:a9:cc: e5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:33:37:23:B0:0F:3F:F6:BB:0F:5B:A8:23:37:C8:BB:4C:7F:FF:79 X509v3 Authority Key Identifier: keyid:06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/551FA6B620DE11EC8CA3EC74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.204.0/22 IPv6: 2403:ebc0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:eb:ea:8d:57:85:a2:a0:54:74:db:d5:c4:04:9c:e6:b6:ff: d0:3d:30:62:58:85:cc:e1:33:48:1c:e2:dd:d0:ea:c0:7c:d2: d8:1a:7e:e7:27:a1:28:c1:19:eb:f7:b3:69:c9:a9:79:20:65: b2:92:39:7f:84:45:99:8b:84:ef:b8:b1:cb:5d:60:b9:f3:73: 24:b4:50:25:65:70:ba:74:fe:82:b2:c1:9b:cf:a7:dc:09:fa: 07:5e:3a:e1:47:78:c6:8e:28:4e:95:a1:03:8b:17:17:39:bd: d6:e5:88:ac:a3:2c:6e:48:c6:98:76:7f:5f:6a:4a:67:a8:64: ea:ab:85:49:15:f5:de:ab:cc:26:5f:85:bc:07:d4:84:1a:5f: 69:9f:6c:63:e4:88:0e:91:da:59:db:c5:0f:37:84:39:6d:0f: e8:2b:4e:8f:c7:41:51:11:1a:17:1c:ab:85:d3:f6:69:84:6b: 52:59:7e:c0:ce:ea:17:b9:65:89:8b:d5:93:de:15:44:28:ea: 76:5b:e6:1d:49:f8:58:92:e6:76:9e:ad:f6:1a:c1:44:13:e4: 99:df:fb:39:08:6e:a2:3d:cc:d6:f2:0f:86:30:2b:54:10:9b: ff:94:06:16:37:b4:04:29:89:1e:90:27:89:e4:b0:51:96:48: 7b:1d:b6:93 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIyQzExMTAvBgNVBAUTKDA2RDdBMTAyRDM4QzEwOTY4MDRGOERBNTJFMkNGNzhE ODkxQUM3MjEwHhcNMjQxMTI2MjM1MjU1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ2NWY1Ny0xZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6cgCdErOTM9Ptj1ZnYUaLeQ2KXrPhbuefl0vErig5Z/FxrKf/YrdyAKTDEO ADOZwW3D7wwdDPueLVxtpQF7/fB9WDJwyDxTdFIFPe5WvVLUYLcFlJ5wxvP4xFVR 7SGF0AZUj/fVm5yZjCcjo9mJ6RXv6G8ICWkPi+h46mCBu8/QZ9ZMxUGlA3674sI3 weDljqzOCBQqttWr16KPPICb/Vv8kA0YSVAnvkylJHuLZsgUaAMrVGNv9E8WNiQj KWkbWsFAYlvVk+3hG0KAVDwKIAeTsmaO+fgeuIjUVZLzNcYc/VAsVwZXU3VsAYAN F3ygIbdv8PuuFR/jfHPGqczlywIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEUzNyOw Dz/2uw9bqCM3yLtMf/95MB8GA1UdIwQYMBaAFAbXoQLTjBCWgE+NpS4s942JGsch MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjJDMS8yRUE1MUQ1NjIw REMxMUVDOUIzQ0U5NzNDNEY5QUUwMi9CdGVoQXRPTUVKYUFUNDJsTGl6M2pZa2F4 eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0ZWhBdE9NRUphQVQ0MmxMaXozallrYXh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkIyQzEvMkVBNTFENTYyMERDMTFFQzlCM0NFOTczQzRGOUFFMDIvNTUxRkE2QjYy MERFMTFFQzhDQTNFQzc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJng8wwDQQCAAIwBwMFACQD68AwDQYJKoZIhvcNAQELBQAD ggEBAA7r6o1XhaKgVHTb1cQEnOa2/9A9MGJYhczhM0gc4t3Q6sB80tgafucnoSjB Gev3s2nJqXkgZbKSOX+ERZmLhO+4sctdYLnzcyS0UCVlcLp0/oKywZvPp9wJ+gde OuFHeMaOKE6VoQOLFxc5vdbliKyjLG5Ixph2f19qSmeoZOqrhUkV9d6rzCZfhbwH 1IQaX2mfbGPkiA6R2lnbxQ83hDltD+grTo/HQVERGhccq4XT9mmEa1JZfsDO6he5 ZYmL1ZPeFUQo6nZb5h1J+FiS5naerfYawUQT5Jnf+zkIbqI9zNbyD4YwK1QQm/+U BhY3tAQpiR6QJ4nksFGWSHsdtpM= -----END CERTIFICATE-----Generated at Sat Apr 5 06:12:16 2025 by rpki-client