$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/B20C8966F0A011EBAAC0FE77C4F9AE02.roa File: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (raw, json) Hash identifier: jqlRAPGaEdmIwhXKVlJXO3tWNtos7YAe+HUzS0naVT0= Subject key identifier: EB:A3:76:08:90:43:46:19:C2:8F:58:C6:63:F8:71:6D:43:98:A8:95 Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Certificate serial: 3486 Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/B20C8966F0A011EBAAC0FE77C4F9AE02.roa Signing time: Sun 16 Feb 2025 15:20:56 +0000 ROA not before: Sun 16 Feb 2025 15:20:56 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 56038 IP address blocks: 103.43.116.0/22 maxlen: 22 103.43.116.0/24 maxlen: 24 103.43.117.0/24 maxlen: 24 103.43.118.0/24 maxlen: 24 103.43.119.0/24 maxlen: 24 103.69.72.0/24 maxlen: 24 103.69.73.0/24 maxlen: 24 110.232.116.0/22 maxlen: 24 116.206.80.0/22 maxlen: 22 116.206.80.0/24 maxlen: 24 116.206.81.0/24 maxlen: 24 116.206.82.0/24 maxlen: 24 116.206.83.0/24 maxlen: 24 2406:4a00::/48 maxlen: 48 2406:4a00:1100::/48 maxlen: 48 2406:4a00:1600::/40 maxlen: 40 2406:4a00:1600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13446 (0x3486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB Validity Not Before: Feb 16 15:20:56 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67b20258-a5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8e:2e:47:8b:2b:f9:41:66:db:1e:77:d3:4b: f6:97:4e:99:71:98:e4:07:44:27:8e:70:cd:99:50: e5:74:f3:ce:9e:2e:93:79:13:8c:e6:bb:1b:60:7c: 01:db:12:0d:0c:01:df:87:d2:50:3a:66:fc:11:3f: 4f:83:c5:a4:4b:04:c7:47:59:8e:aa:b7:36:12:5c: ba:96:ba:0e:3f:b8:85:16:4f:81:55:5c:ff:75:a3: 18:19:ab:ed:0c:ad:97:c0:df:70:a0:04:5d:e8:48: da:f9:39:61:ee:6e:8c:6d:ad:38:d6:71:74:df:ab: fe:55:48:65:77:fd:66:e7:39:91:6e:77:89:98:36: 5b:8a:21:6e:ea:66:d9:ca:30:81:fc:06:ac:2e:7c: 82:60:71:85:6e:e3:9d:9c:0a:f6:ea:f3:b8:46:60: 36:a8:1a:c8:56:1d:ba:50:22:74:31:01:a0:9d:c1: 80:7e:db:ea:2a:e8:c8:bd:d4:2d:c8:89:fa:17:70: be:ef:b2:26:44:f1:74:33:ec:6f:25:eb:86:d6:b1: da:03:dd:c9:45:ed:e7:ea:a3:bb:a0:fc:1d:c9:56: 48:6f:a9:67:92:84:be:54:53:9b:c9:70:a3:ea:91: 1c:00:02:7c:3e:b6:20:82:00:44:23:f2:1c:24:83: 22:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A3:76:08:90:43:46:19:C2:8F:58:C6:63:F8:71:6D:43:98:A8:95 X509v3 Authority Key Identifier: keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/B20C8966F0A011EBAAC0FE77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.43.116.0/22 103.69.72.0/23 110.232.116.0/22 116.206.80.0/22 IPv6: 2406:4a00::/48 2406:4a00:1100::/48 2406:4a00:1600::/40 Signature Algorithm: sha256WithRSAEncryption 55:98:0d:9c:17:a8:6a:e6:88:bc:33:04:6f:15:b3:be:2b:46: ae:33:d5:bf:54:e0:99:c1:c6:43:8b:e5:8f:c0:d3:72:ac:99: 6e:36:9c:2f:34:a9:7b:b9:7f:36:6b:99:38:ee:8a:c6:f9:66: a1:84:86:91:26:05:0a:14:42:9f:a7:a6:a5:4c:f6:97:cd:45: ba:74:20:58:6b:e9:71:55:7b:1e:a4:a2:61:e5:ce:fd:f2:98: f5:ee:ea:ed:18:9a:3d:63:ba:e7:1d:6f:9f:dc:91:11:dd:b5: d5:23:5e:53:e9:40:29:2f:02:e2:fc:af:cd:de:c5:b5:e6:5f: 5c:ab:b6:6b:d6:6f:95:66:a7:4a:9e:c3:74:86:fc:09:e1:18: fa:77:3b:9d:1c:34:bc:0f:35:31:50:95:c2:a3:16:75:39:4a: 6c:dd:31:7b:84:15:1f:d5:ca:27:0e:db:04:3f:75:36:57:04: 17:c0:a5:6d:10:13:7e:3b:db:57:08:ac:5f:ef:9d:2a:5e:fb: 4e:c6:d9:09:83:3b:ee:e5:fa:10:11:7f:32:a0:5a:b2:61:dd: 4e:cb:0d:55:25:f9:46:e0:4d:03:d2:fd:5f:e0:b5:30:0a:14: 6d:96:4e:c9:86:5b:97:b2:bb:ac:f7:2e:8d:ef:74:7b:51:c7: 29:a6:30:1b -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgICNIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKEMzQTUxRTg0RTM3ODdGQjA4QzUyOENDQzM0QkMxODA4 MDgxMzVFRkUwHhcNMjUwMjE2MTUyMDU2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2IyMDI1OC1hNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2o4uR4sr+UFm2x5300v2l06ZcZjkB0QnjnDNmVDldPPOni6TeROM5rsbYHwB 2xINDAHfh9JQOmb8ET9Pg8WkSwTHR1mOqrc2Ely6lroOP7iFFk+BVVz/daMYGavt DK2XwN9woARd6Eja+Tlh7m6Mba041nF036v+VUhld/1m5zmRbneJmDZbiiFu6mbZ yjCB/AasLnyCYHGFbuOdnAr26vO4RmA2qBrIVh26UCJ0MQGgncGAftvqKujIvdQt yIn6F3C+77ImRPF0M+xvJeuG1rHaA93JRe3n6qO7oPwdyVZIb6lnkoS+VFObyXCj 6pEcAAJ8PrYgggBEI/IcJIMixQIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFOujdgiQ Q0YZwo9YxmP4cW1DmKiVMB8GA1UdIwQYMBaAFMOlHoTjeH+wjFKMzDS8GAgIE17+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8xMTgwMzVFMDFE QTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3Q01Vb3pNTkx3WUNBZ1RY djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c2VWVoT040ZjdDTVVvek1OTHdZQ0FnVFh2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTcxQ0IvMTE4MDM1RTAxREE3MTFFMjlBQUE5MkEwMDhCMDJDRDIvQjIwQzg5NjZG MEEwMTFFQkFBQzBGRTc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUwYIKwYBBQUHAQcBAf8E RDBCMB4EAgABMBgDBAJnK3QDBAFnRUgDBAJu6HQDBAJ0zlAwIAQCAAIwGgMHACQG SgAAAAMHACQGSgARAAMGACQGSgAWMA0GCSqGSIb3DQEBCwUAA4IBAQBVmA2cF6hq 5oi8MwRvFbO+K0auM9W/VOCZwcZDi+WPwNNyrJluNpwvNKl7uX82a5k47orG+Wah hIaRJgUKFEKfp6alTPaXzUW6dCBYa+lxVXsepKJh5c798pj17urtGJo9Y7rnHW+f 3JER3bXVI15T6UApLwLi/K/N3sW15l9cq7Zr1m+VZqdKnsN0hvwJ4Rj6dzudHDS8 DzUxUJXCoxZ1OUps3TF7hBUf1conDtsEP3U2VwQXwKVtEBN+O9tXCKxf750qXvtO xtkJgzvu5foQEX8yoFqyYd1Oyw1VJflG4E0D0v1f4LUwChRtlk7JhluXsrus9y6N 73R7UccppjAb -----END CERTIFICATE-----Generated at Sat Apr 5 22:05:37 2025 by rpki-client