$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/373ADDFC1CC411EF90865B7DC4F9AE02.roa File: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (raw, json) Hash identifier: NRcQiGVBqenDcfR+9zwB2e+0xfcMr/ZJ4M+D8EcQ3UU= Subject key identifier: B9:E2:7E:8E:2E:59:F0:E2:65:CA:5D:6E:30:0D:7E:12:AC:8A:5C:3A Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Certificate serial: 0F4F Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/373ADDFC1CC411EF90865B7DC4F9AE02.roa Signing time: Thu 28 Nov 2024 17:36:11 +0000 ROA not before: Thu 28 Nov 2024 17:36:11 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 45447 IP address blocks: 103.131.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3919 (0xf4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Validity Not Before: Nov 28 17:36:11 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6748aa0b-1623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:27:54:18:95:60:4e:66:70:66:10:f1:52:25: 9e:62:62:1e:88:21:8c:4e:ed:00:08:af:84:15:d1: 62:f0:f3:c3:4e:75:ac:aa:dc:cc:09:e9:a7:76:89: a7:3c:51:d5:97:7a:98:2e:59:f9:e4:22:85:5b:4f: 10:df:86:8f:9e:c6:c5:17:7a:2d:bf:35:5e:29:59: ca:41:c4:9d:98:a7:68:91:a5:72:d9:b8:99:bc:05: 7f:35:4a:b5:95:f5:80:c0:ed:b7:1f:38:48:1e:47: 2c:2c:77:29:10:63:51:58:ec:71:5d:b5:e0:fe:b3: 4c:4c:ae:77:37:76:e7:8b:c2:13:39:23:40:ee:c3: 9f:a8:a4:96:43:28:a6:5c:45:fe:b3:f1:43:b1:bc: 50:63:6d:6b:0b:1f:d6:e6:2f:c8:f9:e5:19:9b:a5: 48:6d:70:d3:fb:3c:51:13:c4:76:a4:1e:0a:87:95: 5c:8a:1b:e3:4a:e5:e7:fe:fc:23:30:7b:ba:53:51: df:74:66:c8:30:ce:de:79:49:1d:a7:1f:f7:3c:5a: a5:73:ca:9d:9d:bd:8b:d3:28:f9:63:29:de:eb:e5: af:80:37:ab:4c:56:6c:75:58:ea:6b:ef:b7:58:7d: 85:72:bb:0e:1c:07:26:5b:ae:d0:22:b9:d7:2f:5a: ae:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E2:7E:8E:2E:59:F0:E2:65:CA:5D:6E:30:0D:7E:12:AC:8A:5C:3A X509v3 Authority Key Identifier: keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/373ADDFC1CC411EF90865B7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.232.0/22 Signature Algorithm: sha256WithRSAEncryption b1:03:55:ff:c6:a4:58:0b:4d:a1:99:37:d5:ef:7c:13:0a:0e: a9:92:61:b3:6e:56:0e:87:67:9a:5f:04:d5:fb:cc:20:e1:07: 71:70:31:17:e5:ac:4f:42:3d:0e:17:4d:c5:24:b6:8a:34:4e: 8c:e2:18:c7:f5:62:5b:39:35:19:b4:8d:91:67:a5:00:a3:e9: 7b:0a:d4:33:34:51:b2:6d:3d:81:62:e3:87:ab:b7:ca:8f:82: 57:e5:3e:ca:5d:64:cb:89:15:bc:8c:4c:75:2e:11:3d:76:c5: 9c:fc:6f:2b:7e:79:c8:6d:95:43:32:27:df:88:c7:9d:ee:0d: 40:9b:dd:82:f3:a6:a2:c8:45:26:8f:f8:c5:45:aa:ad:a1:66: b0:41:f2:bb:b5:06:72:39:f8:d0:75:8f:6c:de:c5:b5:eb:a6: c2:d7:88:27:da:a2:c9:5a:70:64:07:3a:95:ed:59:56:b1:38: d2:a2:ce:57:5f:8d:69:56:12:a1:58:f3:54:9e:2d:81:1f:68: 24:22:ce:95:27:d3:7c:9b:1e:4a:f9:d9:10:31:af:85:d3:33: 39:95:44:5f:42:8a:22:3d:ec:07:89:2c:6a:6e:87:44:d1:9f: 0a:fa:12:65:f9:e9:74:19:eb:ae:28:f8:28:d6:37:4a:12:cc: a5:80:9a:77 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTExMTAvBgNVBAUTKDY2RkREQjQzRTU0OTQyRTM0OTJGMTA2NTBFNTMyMzky NkM0NUM0ODQwHhcNMjQxMTI4MTczNjExWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ4YWEwYi0xNjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtydUGJVgTmZwZhDxUiWeYmIeiCGMTu0ACK+EFdFi8PPDTnWsqtzMCemndomn PFHVl3qYLln55CKFW08Q34aPnsbFF3otvzVeKVnKQcSdmKdokaVy2biZvAV/NUq1 lfWAwO23HzhIHkcsLHcpEGNRWOxxXbXg/rNMTK53N3bni8ITOSNA7sOfqKSWQyim XEX+s/FDsbxQY21rCx/W5i/I+eUZm6VIbXDT+zxRE8R2pB4Kh5VcihvjSuXn/vwj MHu6U1HfdGbIMM7eeUkdpx/3PFqlc8qdnb2L0yj5Yyne6+WvgDerTFZsdVjqa++3 WH2FcrsOHAcmW67QIrnXL1quGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLnifo4u WfDiZcpdbjANfhKsilw6MB8GA1UdIwQYMBaAFGb920PlSULjSS8QZQ5TI5JsRcSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1MS84OUY4NkYwQTVC M0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1TkpMeEJsRGxNamtteEZ4 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2M2JRLVZKUXVOSkx4QmxEbE1qa214RnhJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRFNTEvODlGODZGMEE1QjNCMTFFOTg2OUFBNjQxQzRGOUFFMDIvMzczQURERkMx Q0M0MTFFRjkwODY1QjdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJng+gwDQYJKoZIhvcNAQELBQADggEBALEDVf/GpFgLTaGZ N9XvfBMKDqmSYbNuVg6HZ5pfBNX7zCDhB3FwMRflrE9CPQ4XTcUktoo0ToziGMf1 Yls5NRm0jZFnpQCj6XsK1DM0UbJtPYFi44ert8qPglflPspdZMuJFbyMTHUuET12 xZz8byt+echtlUMyJ9+Ix53uDUCb3YLzpqLIRSaP+MVFqq2hZrBB8ru1BnI5+NB1 j2zexbXrpsLXiCfaoslacGQHOpXtWVaxONKizldfjWlWEqFY81SeLYEfaCQizpUn 03ybHkr52RAxr4XTMzmVRF9CiiI97AeJLGpuh0TRnwr6EmX56XQZ664o+CjWN0oS zKWAmnc= -----END CERTIFICATE-----Generated at Sun Apr 13 02:37:10 2025 by rpki-client