$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/B43753D005AC11ECB86F694EC4F9AE02.roa File: B43753D005AC11ECB86F694EC4F9AE02.roa (raw, json) Hash identifier: 4k+rKheNnbTveN1MujuQeZF7WX147LGgGeCmhBGihc4= Subject key identifier: 29:75:03:08:E0:71:97:36:46:9C:17:D5:5D:08:0C:E3:74:66:34:62 Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Certificate serial: 0715 Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/B43753D005AC11ECB86F694EC4F9AE02.roa Signing time: Sun 02 Feb 2025 22:01:49 +0000 ROA not before: Sun 02 Feb 2025 22:01:49 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 135353 IP address blocks: 103.161.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1813 (0x715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91871C2 Validity Not Before: Feb 2 22:01:49 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=679feb4c-77b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:10:b7:5e:2c:69:74:ff:8a:44:5a:43:ce:81: 26:ce:4a:1b:c7:da:13:d9:8f:79:1e:da:54:14:a0: c0:ac:f3:dd:4d:a8:27:af:e6:4f:49:71:08:e0:0a: 61:37:02:f6:0c:93:c2:d5:c1:51:db:17:4b:78:2a: 77:34:27:25:b3:74:43:92:17:df:03:ab:83:dd:4e: e0:dc:e4:8b:d9:0e:ce:bf:a3:38:8e:e9:69:c8:92: ed:42:21:b4:bd:34:b7:42:0e:11:e9:70:f2:b2:9b: 69:ad:9c:9c:a0:1a:2d:65:7d:19:52:76:47:44:6d: ee:64:dc:8a:01:a9:3f:78:0d:9a:21:63:22:ba:14: 2a:2a:7e:e8:fb:55:9f:7c:3b:37:06:65:03:cb:58: a4:9b:fa:8b:31:4a:a9:49:e5:e8:e7:18:b1:ec:bc: 2f:cf:aa:e2:e7:17:f7:5b:38:b3:a8:e6:56:cd:52: 3c:e5:12:de:db:39:d8:61:9a:b3:5e:1e:96:3c:bb: 43:d4:1e:80:04:b1:7e:6c:cd:79:a3:9c:01:7e:8f: 89:05:e6:fa:99:5a:5c:26:95:e0:4e:b8:d9:fb:b3: 3e:40:35:4f:64:8d:0c:95:f0:63:ca:97:dd:ce:9f: af:50:29:6a:4a:2b:ce:3a:c5:a4:5e:fb:2d:12:2d: 4f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:75:03:08:E0:71:97:36:46:9C:17:D5:5D:08:0C:E3:74:66:34:62 X509v3 Authority Key Identifier: keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/B43753D005AC11ECB86F694EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.168.0/23 Signature Algorithm: sha256WithRSAEncryption d7:49:ce:b8:04:d1:fe:63:e5:42:c9:a4:61:11:a0:50:8d:9a: 4d:33:50:f9:d5:20:7e:39:9a:75:fe:2c:40:0b:fe:1c:12:b7: 48:d3:28:ab:24:3c:b4:5b:5c:4d:e1:fd:7f:28:26:e5:1b:e9: 93:21:d0:9a:f3:1a:db:8b:a7:e9:a8:79:e3:ae:e3:c7:73:c9: ed:55:46:d1:5a:d6:0c:5a:92:26:cc:e4:79:41:8e:bc:b9:70: 53:5c:b1:d8:3d:29:85:04:78:23:3c:fc:44:fa:62:33:13:c6: 75:fb:67:68:ab:68:30:dc:1e:42:12:0f:4e:30:ec:d7:d3:89: 18:10:35:d5:09:f5:e7:29:e1:38:fa:d1:32:5f:0f:64:99:bc: 57:64:c1:7b:07:b8:b7:3e:fb:f9:a1:23:7a:fa:64:db:99:28: 65:a2:a6:bb:22:14:7e:cc:9f:04:74:fd:76:92:f3:02:45:eb: a6:f2:b4:c0:37:67:9b:73:7f:b8:cf:a7:ca:9a:d3:d6:80:3d: b6:4d:e5:98:5d:5d:f5:d0:d1:60:fd:61:8f:2d:61:89:d6:ec: cb:12:f1:96:1b:19:12:04:6d:46:a5:c5:af:c5:0b:52:27:5d: 36:2c:37:11:ef:64:6e:bf:eb:73:38:c6:cb:fb:87:19:c8:40: ba:3b:20:a7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxQzIxMTAvBgNVBAUTKEE5RUFCQzI0NjUxMTZFRDExRDZDOENEQUUyMDExMjM3 Q0YxRjU5REYwHhcNMjUwMjAyMjIwMTQ5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzlmZWI0Yy03N2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxC3XixpdP+KRFpDzoEmzkobx9oT2Y95HtpUFKDArPPdTagnr+ZPSXEI4Aph NwL2DJPC1cFR2xdLeCp3NCcls3RDkhffA6uD3U7g3OSL2Q7Ov6M4julpyJLtQiG0 vTS3Qg4R6XDysptprZycoBotZX0ZUnZHRG3uZNyKAak/eA2aIWMiuhQqKn7o+1Wf fDs3BmUDy1ikm/qLMUqpSeXo5xix7Lwvz6ri5xf3WzizqOZWzVI85RLe2znYYZqz Xh6WPLtD1B6ABLF+bM15o5wBfo+JBeb6mVpcJpXgTrjZ+7M+QDVPZI0MlfBjypfd zp+vUClqSivOOsWkXvstEi1P8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFCl1Awjg cZc2RpwX1V0IDON0ZjRiMB8GA1UdIwQYMBaAFKnqvCRlEW7RHWyM2uIBEjfPH1nf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzFDMi9ERTYxNjY2ODU1 QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0RWRiSXphNGdFU044OGZX ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlcThKR1VSYnRFZGJJemE0Z0VTTjg4ZldkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODcxQzIvREU2MTY2Njg1NUE5MTFFQjk5QUZEQTVEQzRGOUFFMDIvQjQzNzUzRDAw NUFDMTFFQ0I4NkY2OTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnoagwDQYJKoZIhvcNAQELBQADggEBANdJzrgE0f5j5ULJ pGERoFCNmk0zUPnVIH45mnX+LEAL/hwSt0jTKKskPLRbXE3h/X8oJuUb6ZMh0Jrz GtuLp+moeeOu48dzye1VRtFa1gxakibM5HlBjry5cFNcsdg9KYUEeCM8/ET6YjMT xnX7Z2iraDDcHkISD04w7NfTiRgQNdUJ9ecp4Tj60TJfD2SZvFdkwXsHuLc++/mh I3r6ZNuZKGWiprsiFH7MnwR0/XaS8wJF66bytMA3Z5tzf7jPp8qa09aAPbZN5Zhd XfXQ0WD9YY8tYYnW7MsS8ZYbGRIEbUalxa/FC1InXTYsNxHvZG6/63M4xsv7hxnI QLo7IKc= -----END CERTIFICATE-----Generated at Sat Apr 5 07:08:30 2025 by rpki-client