$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/577FD5BE067C11ED882FC127C4F9AE02.roa File: 577FD5BE067C11ED882FC127C4F9AE02.roa (raw, json) Hash identifier: FZgwTWzQksQtmk/Nfe/JqxwRHSDF1+BlazvC8MqkPtA= Subject key identifier: 01:CC:20:4C:38:D5:82:25:5B:63:B5:6D:4A:4B:D5:A5:86:8F:18:AE Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Certificate serial: 0837 Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/577FD5BE067C11ED882FC127C4F9AE02.roa Signing time: Tue 24 Dec 2024 20:39:29 +0000 ROA not before: Tue 24 Dec 2024 20:39:29 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 137409 IP address blocks: 103.125.144.0/24 maxlen: 24 103.125.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 20:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103 (0x837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91998BE Validity Not Before: Dec 24 20:39:29 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676b1c00-ca5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7d:2b:f5:83:f3:ed:d9:df:29:83:ad:da:04: 46:cf:b1:2e:37:c1:2f:57:68:08:0e:26:b6:1a:bb: 24:a7:92:ea:41:d2:06:0e:47:47:7b:7a:92:ef:36: 9e:d5:f3:68:bf:0f:e1:5e:4f:cd:5c:fe:2b:d0:16: b3:2a:f4:a3:44:62:91:12:01:e0:3a:41:bb:e9:1e: 03:ac:ce:1f:38:d6:bb:10:45:4c:32:2f:f0:50:af: 23:d0:77:cf:54:4e:29:df:87:0b:cc:d6:15:24:ef: ca:5b:2f:44:76:ec:b9:a5:98:9f:2c:ed:3d:a6:e9: b9:07:de:e5:20:09:03:c0:e2:ea:44:6c:93:65:a6: 45:0f:0f:a4:f0:10:fc:74:7f:bd:ad:77:2d:9e:d3: fd:07:32:af:a3:47:54:7f:87:3b:55:66:fd:7b:98: 4e:44:fb:27:fb:04:b7:e5:4b:7e:39:d4:56:66:23: 0f:bf:0e:90:92:99:d3:33:cc:ca:8d:7f:92:07:87: c3:e1:91:61:26:9f:25:f0:0a:13:d5:89:29:9b:71: 5d:45:46:2b:0f:02:c9:3f:7b:a2:29:4f:be:f2:45: 91:49:b0:be:2f:32:40:0a:f8:3c:d2:bc:9b:bc:f0: 58:92:8e:51:9f:bd:da:56:07:88:79:a7:6c:f2:e8: ef:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CC:20:4C:38:D5:82:25:5B:63:B5:6D:4A:4B:D5:A5:86:8F:18:AE X509v3 Authority Key Identifier: keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/577FD5BE067C11ED882FC127C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.125.144.0/23 Signature Algorithm: sha256WithRSAEncryption ad:26:d1:21:d7:ae:64:9f:57:fe:5e:62:7f:3d:a5:df:fa:97: 34:e0:1b:6b:a0:a3:4f:d6:bb:fc:21:40:30:a5:b2:d4:9b:8b: 40:6e:55:b2:09:93:3f:73:20:44:e3:4f:e6:82:d7:8e:ab:7f: 09:dd:2d:46:22:4d:f9:66:e3:bf:95:4b:55:d3:6a:e9:3b:a6: 48:36:e4:7c:b3:06:53:98:fa:b1:37:b5:e7:5a:1d:a7:b2:2d: f2:8e:f4:66:cf:00:11:7a:47:9a:38:98:bb:21:19:4c:37:4e: ae:31:fe:3b:db:29:3a:47:60:51:aa:0b:4e:7a:47:09:25:1e: 75:8e:c0:9e:8b:7a:d5:4f:d9:0e:44:2a:21:1a:2d:e2:77:bc: e3:59:a6:69:25:f2:cd:bb:c4:30:fd:d3:c0:79:13:d7:23:79: 71:e6:0a:5d:15:8b:9c:d7:c2:e8:a1:89:e9:a7:b3:29:37:cf: 4a:a2:5f:ef:27:76:98:66:c3:57:83:6d:aa:64:14:10:7e:ab: 11:d0:23:3c:10:65:5c:5c:38:4d:e6:c6:69:bb:ad:03:2d:93: 7b:0b:15:13:8b:b1:83:67:5a:82:f0:86:a5:ad:bb:83:48:25: f8:47:7a:22:46:30:a5:71:b1:79:15:46:47:4d:73:12:bd:ae: 07:48:df:e1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4QkUxMTAvBgNVBAUTKEQwRDBENkNENjg3NzBDMzg3ODNCQkVCODQxQjExMkQw NTYwMTc0QTIwHhcNMjQxMjI0MjAzOTI5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZiMWMwMC1jYTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzX0r9YPz7dnfKYOt2gRGz7EuN8EvV2gIDia2Grskp5LqQdIGDkdHe3qS7zae 1fNovw/hXk/NXP4r0BazKvSjRGKREgHgOkG76R4DrM4fONa7EEVMMi/wUK8j0HfP VE4p34cLzNYVJO/KWy9Eduy5pZifLO09pum5B97lIAkDwOLqRGyTZaZFDw+k8BD8 dH+9rXctntP9BzKvo0dUf4c7VWb9e5hORPsn+wS35Ut+OdRWZiMPvw6QkpnTM8zK jX+SB4fD4ZFhJp8l8AoT1Ykpm3FdRUYrDwLJP3uiKU++8kWRSbC+LzJACvg80ryb vPBYko5Rn73aVgeIeads8ujvhQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAHMIEw4 1YIlW2O1bUpL1aWGjxiuMB8GA1UdIwQYMBaAFNDQ1s1odww4eDu+uEGxEtBWAXSi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OThCRS8xNTBFNTdDNkNG NDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0REaDRPNzY0UWJFUzBGWUJk S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBORFd6V2gzRERoNE83NjRRYkVTMEZZQmRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTk4QkUvMTUwRTU3QzZDRjQ5MTFFQTlDQzkzNTNFQzRGOUFFMDIvNTc3RkQ1QkUw NjdDMTFFRDg4MkZDMTI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnfZAwDQYJKoZIhvcNAQELBQADggEBAK0m0SHXrmSfV/5e Yn89pd/6lzTgG2ugo0/Wu/whQDClstSbi0BuVbIJkz9zIETjT+aC146rfwndLUYi Tflm47+VS1XTauk7pkg25HyzBlOY+rE3tedaHaeyLfKO9GbPABF6R5o4mLshGUw3 Tq4x/jvbKTpHYFGqC056RwklHnWOwJ6LetVP2Q5EKiEaLeJ3vONZpmkl8s27xDD9 08B5E9cjeXHmCl0Vi5zXwuihiemnsyk3z0qiX+8ndphmw1eDbapkFBB+qxHQIzwQ ZVxcOE3mxmm7rQMtk3sLFROLsYNnWoLwhqWtu4NIJfhHeiJGMKVxsXkVRkdNcxK9 rgdI3+E= -----END CERTIFICATE-----Generated at Sat Apr 12 00:31:11 2025 by rpki-client