$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FF720066912211EF9222B024C4F9AE02.roa File: FF720066912211EF9222B024C4F9AE02.roa (raw, json) Hash identifier: h77qVtLquD/X4JrUUGGNVBj3HXRYKw2hld2PollMwvg= Subject key identifier: 01:1F:6F:F9:51:67:C7:A0:C9:96:49:E0:65:B2:05:13:C6:C7:5E:05 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 487C Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FF720066912211EF9222B024C4F9AE02.roa Signing time: Fri 29 Nov 2024 04:05:19 +0000 ROA not before: Fri 29 Nov 2024 04:05:19 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 56153 IP address blocks: 103.97.124.0/24 maxlen: 24 103.97.125.0/24 maxlen: 24 103.97.126.0/24 maxlen: 24 103.97.127.0/24 maxlen: 24 103.255.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18556 (0x487c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Nov 29 04:05:19 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67493d7f-bfb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:64:d3:d3:f7:4e:fc:16:c7:7b:13:cc:ae:1d: 59:eb:13:63:39:92:4b:c8:ed:4e:a4:81:79:0f:70: ee:31:92:61:35:1b:97:8a:8e:32:56:94:5f:53:de: 42:f9:5b:92:e4:2c:32:82:a9:b0:ad:38:1b:92:8b: 6a:3e:3a:bc:80:28:31:43:bb:c6:9d:aa:1a:52:94: 31:0b:a3:a8:20:93:a7:f1:26:87:93:c7:53:a1:df: 3b:54:30:16:c7:34:86:77:1e:4a:30:d1:6c:a1:8b: 14:d9:2c:af:fd:9c:ef:c5:c0:bc:c6:ea:b5:e9:30: 9a:c8:e4:2d:f9:29:b3:2f:c4:a6:a3:e5:22:a7:04: 46:a0:3e:aa:b5:6c:de:02:b3:ea:4e:d7:b5:25:fa: f8:ac:6c:d5:b7:e4:75:ec:67:50:eb:70:d9:c1:72: 3f:a5:45:ca:f4:8e:a8:4d:e5:d5:3d:06:3d:43:4b: 1c:50:a8:64:ea:94:e1:59:bc:ec:f9:4d:df:c3:8f: 6c:cc:e0:e8:6e:e2:b9:f9:a4:f0:88:da:1d:10:3c: c4:95:54:27:5a:d1:0b:b3:a4:88:8e:45:76:3b:5f: c6:4d:74:36:d0:34:07:dc:36:0f:91:a8:ba:eb:db: c3:2a:bc:7b:5e:db:68:f7:19:30:11:35:0b:e1:1a: ef:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1F:6F:F9:51:67:C7:A0:C9:96:49:E0:65:B2:05:13:C6:C7:5E:05 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FF720066912211EF9222B024C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.97.124.0/22 103.255.238.0/24 Signature Algorithm: sha256WithRSAEncryption 41:00:27:96:da:25:ba:93:70:71:c5:35:b9:25:56:55:78:d6: f6:11:3e:7b:c5:9d:38:63:57:d0:af:21:5b:ce:b8:46:fe:fd: a4:08:3d:7d:d9:26:40:4e:96:fc:64:52:a9:a9:87:ef:15:be: db:5a:f9:3f:0c:b8:cc:cf:1f:33:59:d9:fc:1f:7d:01:5f:02: fe:8f:99:7e:e8:40:2e:d0:73:07:04:1d:6f:2b:dd:5e:62:01: 67:10:f1:83:ae:86:c0:7c:17:2b:ae:f4:6f:24:fc:6b:b7:04: c5:77:64:99:b5:53:cf:2e:06:14:49:24:38:16:bb:95:e9:f3: b7:20:02:18:01:95:43:b7:26:b7:cd:e0:b5:cf:cb:d0:36:d3: fc:1f:05:e8:23:bb:30:a7:e7:3e:a9:f0:b6:d2:7a:53:88:f9: ec:11:b7:a7:c2:04:52:99:e8:a5:7f:fb:23:4e:96:2e:54:5b: d5:75:e3:39:9b:2f:a0:3b:97:27:b4:67:d1:52:3c:34:20:fe: 19:40:6f:43:e0:81:83:a8:38:4b:1e:00:ef:3e:66:81:cf:66: be:68:80:a6:c4:26:a5:f7:a6:0b:68:01:7a:85:6d:d3:dd:de: e3:78:2f:10:f9:73:d5:a5:5b:c2:ce:42:7d:2f:bc:fa:6c:ed: f3:38:75:c3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICSHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQxMTI5MDQwNTE5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ5M2Q3Zi1iZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk2TT0/dO/BbHexPMrh1Z6xNjOZJLyO1OpIF5D3DuMZJhNRuXio4yVpRfU95C +VuS5CwygqmwrTgbkotqPjq8gCgxQ7vGnaoaUpQxC6OoIJOn8SaHk8dTod87VDAW xzSGdx5KMNFsoYsU2Syv/ZzvxcC8xuq16TCayOQt+SmzL8Smo+UipwRGoD6qtWze ArPqTte1Jfr4rGzVt+R17GdQ63DZwXI/pUXK9I6oTeXVPQY9Q0scUKhk6pThWbzs +U3fw49szODobuK5+aTwiNodEDzElVQnWtELs6SIjkV2O1/GTXQ20DQH3DYPkai6 69vDKrx7Xtto9xkwETUL4RrvsQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAEfb/lR Z8egyZZJ4GWyBRPGx14FMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRkY3MjAwNjY5 MTIyMTFFRjkyMjJCMDI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnYXwDBABn/+4wDQYJKoZIhvcNAQELBQADggEBAEEAJ5ba JbqTcHHFNbklVlV41vYRPnvFnThjV9CvIVvOuEb+/aQIPX3ZJkBOlvxkUqmph+8V vtta+T8MuMzPHzNZ2fwffQFfAv6PmX7oQC7QcwcEHW8r3V5iAWcQ8YOuhsB8Fyuu 9G8k/Gu3BMV3ZJm1U88uBhRJJDgWu5Xp87cgAhgBlUO3JrfN4LXPy9A20/wfBegj uzCn5z6p8LbSelOI+ewRt6fCBFKZ6KV/+yNOli5UW9V14zmbL6A7lye0Z9FSPDQg /hlAb0PggYOoOEseAO8+ZoHPZr5ogKbEJqX3pgtoAXqFbdPd3uN4LxD5c9WlW8LO Qn0vvPps7fM4dcM= -----END CERTIFICATE-----Generated at Sat Apr 5 14:43:38 2025 by rpki-client