$ rpki-client -vvf rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/AE5AD474C41811EDBF6F4D62C4F9AE02.roa File: AE5AD474C41811EDBF6F4D62C4F9AE02.roa (raw, json) Hash identifier: a1yJ81vXEQl6eW+DeRPkeeRapH1H4TRXVpBx6pNp3t0= Subject key identifier: 70:5C:3B:84:0A:86:5E:FF:E7:6C:30:3C:C9:B9:15:73:5C:8D:E4:17 Certificate issuer: /CN=A91975B6/serialNumber=E95FA0EDF1112E320C225E7B8D50418667A30ACF Certificate serial: 012C Authority key identifier: E9:5F:A0:ED:F1:11:2E:32:0C:22:5E:7B:8D:50:41:86:67:A3:0A:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V-g7fERLjIMIl57jVBBhmejCs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/AE5AD474C41811EDBF6F4D62C4F9AE02.roa Signing time: Sat 21 Sep 2024 03:26:21 +0000 ROA not before: Sat 21 Sep 2024 03:26:21 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 38193 IP address blocks: 103.236.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/6V-g7fERLjIMIl57jVBBhmejCs8.crl rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/6V-g7fERLjIMIl57jVBBhmejCs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V-g7fERLjIMIl57jVBBhmejCs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91975B6 Validity Not Before: Sep 21 03:26:21 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66ee3cdd-60bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:59:31:eb:86:74:ea:22:14:85:76:70:14:74: b0:68:c2:c3:c9:cf:67:5c:6e:47:cf:f4:76:61:a9: ef:6e:8f:ca:7e:43:bd:27:65:15:d3:2f:c5:63:49: e8:ce:c7:d5:fb:22:da:b7:1f:15:8d:a4:e2:7a:57: db:18:0e:b8:32:39:9b:fa:bf:38:af:be:67:71:49: 39:6c:63:d3:1c:e6:54:fa:a8:bf:6a:61:9f:dd:31: 80:7d:24:c1:76:f6:76:5e:66:b5:3b:a5:c9:cf:4a: ec:e8:5e:e8:5c:0b:fb:35:b2:07:f7:a4:fa:c6:11: 62:f9:46:ae:25:2d:be:3c:e3:30:be:5f:36:5f:35: 76:4c:dd:77:dc:b5:6a:52:9e:5b:95:fc:6c:a9:9c: ba:66:af:7b:a4:9a:af:0b:38:e6:e9:48:14:a4:0d: 98:e8:34:a5:2c:2d:de:d1:9e:70:a2:6e:a2:cc:b9: b8:83:dd:c6:ce:76:cf:79:ae:1d:48:ee:a2:61:37: 57:41:81:61:6c:63:a0:3d:94:84:01:af:7a:28:15: 83:78:60:16:70:c7:b7:a2:71:99:ce:2b:ef:24:40: 95:37:99:c9:7d:24:0d:77:34:33:43:12:6d:df:42: 86:b2:b3:bd:61:a1:1c:bb:57:40:aa:17:54:44:e7: 93:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5C:3B:84:0A:86:5E:FF:E7:6C:30:3C:C9:B9:15:73:5C:8D:E4:17 X509v3 Authority Key Identifier: keyid:E9:5F:A0:ED:F1:11:2E:32:0C:22:5E:7B:8D:50:41:86:67:A3:0A:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/6V-g7fERLjIMIl57jVBBhmejCs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V-g7fERLjIMIl57jVBBhmejCs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/AE5AD474C41811EDBF6F4D62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.236.132.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:f2:96:cc:4c:bd:f0:13:48:77:3a:b3:4e:6c:b7:bc:1f:ba: 62:26:6a:11:47:44:7f:10:ec:da:df:e7:b8:cc:dc:56:4d:44: ac:bd:a0:f4:40:8f:af:4c:d8:6a:f6:33:9c:12:8a:f8:97:83: bc:6c:34:3c:fc:68:48:f7:db:d7:91:52:18:ec:8e:e7:67:5a: 91:fb:6c:72:7f:c1:a1:de:67:ce:f6:09:84:7d:86:b9:42:a0: 75:fc:0b:6a:8f:3d:ec:69:8d:bb:e5:52:76:0d:66:83:b4:8a: d1:fd:7f:89:ec:85:c7:1e:8a:1e:46:83:cc:6a:7a:8f:8f:3b: 91:21:96:e9:3b:bf:4f:4a:23:6a:a4:ad:60:7b:1a:aa:08:54: eb:f5:f5:a5:dc:cb:76:76:f8:bc:c6:dd:ff:05:11:6e:c0:53: 8a:49:e3:48:9a:7f:e7:0d:fc:1c:71:2f:7c:2b:8e:d6:41:0d: f7:48:86:82:20:c4:89:27:ef:c3:78:17:70:af:35:de:66:95: 33:61:5e:da:0c:74:4b:73:e8:17:2e:02:3b:55:f2:0a:6a:eb: 35:c3:fd:41:77:6e:07:1c:ce:d2:8e:de:4f:07:41:74:80:56: aa:d2:e2:fa:37:f5:11:6c:84:80:c0:a9:86:54:59:0d:61:a1: 11:85:36:60 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1QjYxMTAvBgNVBAUTKEU5NUZBMEVERjExMTJFMzIwQzIyNUU3QjhENTA0MTg2 NjdBMzBBQ0YwHhcNMjQwOTIxMDMyNjIxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmVlM2NkZC02MGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFkx64Z06iIUhXZwFHSwaMLDyc9nXG5Hz/R2Yanvbo/KfkO9J2UV0y/FY0no zsfV+yLatx8VjaTielfbGA64Mjmb+r84r75ncUk5bGPTHOZU+qi/amGf3TGAfSTB dvZ2Xma1O6XJz0rs6F7oXAv7NbIH96T6xhFi+UauJS2+POMwvl82XzV2TN133LVq Up5blfxsqZy6Zq97pJqvCzjm6UgUpA2Y6DSlLC3e0Z5wom6izLm4g93GznbPea4d SO6iYTdXQYFhbGOgPZSEAa96KBWDeGAWcMe3onGZzivvJECVN5nJfSQNdzQzQxJt 30KGsrO9YaEcu1dAqhdUROeTFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHBcO4QK hl7/52wwPMm5FXNcjeQXMB8GA1UdIwQYMBaAFOlfoO3xES4yDCJee41QQYZnowrP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVCNi9CNTc2MkRENkMy N0QxMUVEOTEyQjc3NEJDNEY5QUUwMi82Vi1nN2ZFUkxqSU1JbDU3alZCQmhtZWpD czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZWLWc3ZkVSTGpJTUlsNTdqVkJCaG1lakNzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTc1QjYvQjU3NjJERDZDMjdEMTFFRDkxMkI3NzRCQzRGOUFFMDIvQUU1QUQ0NzRD NDE4MTFFREJGNkY0RDYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn7IQwDQYJKoZIhvcNAQELBQADggEBAErylsxMvfATSHc6 s05st7wfumImahFHRH8Q7Nrf57jM3FZNRKy9oPRAj69M2Gr2M5wSiviXg7xsNDz8 aEj329eRUhjsjudnWpH7bHJ/waHeZ872CYR9hrlCoHX8C2qPPexpjbvlUnYNZoO0 itH9f4nshcceih5Gg8xqeo+PO5Ehluk7v09KI2qkrWB7GqoIVOv19aXcy3Z2+LzG 3f8FEW7AU4pJ40iaf+cN/BxxL3wrjtZBDfdIhoIgxIkn78N4F3CvNd5mlTNhXtoM dEtz6BcuAjtV8gpq6zXD/UF3bgccztKO3k8HQXSAVqrS4vo39RFshIDAqYZUWQ1h oRGFNmA= -----END CERTIFICATE-----Generated at Sat Apr 5 03:30:37 2025 by rpki-client