$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/220DBB66054011EA90A20C7EC4F9AE02.roa File: 220DBB66054011EA90A20C7EC4F9AE02.roa (raw, json) Hash identifier: l5CGLlauMb+Ni/lNc+v9jsE4+D1HZp9e9rAFpWt3fHE= Subject key identifier: 7A:B9:D6:02:D9:BB:46:19:16:7C:A1:B7:0E:8D:D3:E1:3D:65:D5:29 Certificate issuer: /CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Certificate serial: 0BEF Authority key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/220DBB66054011EA90A20C7EC4F9AE02.roa Signing time: Wed 18 Dec 2024 18:47:00 +0000 ROA not before: Wed 18 Dec 2024 18:47:00 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 138489 IP address blocks: 103.126.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3055 (0xbef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5744 Validity Not Before: Dec 18 18:47:00 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=676318a4-033a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:28:19:db:29:54:00:bd:7a:91:a4:b4:0e:e2: f5:a7:74:df:2d:5e:df:39:1c:65:21:40:7a:43:f6: 45:8b:1f:e0:83:ee:de:25:17:11:3c:d9:d2:b4:ff: 10:74:1f:f8:39:98:b0:fc:ca:95:9a:12:09:23:49: 43:c7:74:63:2e:3b:4f:ed:e6:43:30:6a:73:c7:57: ee:21:71:88:61:e8:50:97:63:5d:1e:98:6a:00:81: 05:57:99:ce:48:ea:bb:fb:63:0d:37:d3:ad:ec:eb: b8:d8:d1:7b:4d:99:a0:a1:30:1e:b1:67:51:69:7d: 45:6f:4e:5d:ee:1a:e6:6f:fe:f1:7a:ee:99:1d:a6: c3:7c:e9:0a:4d:5a:2a:4a:28:c7:9f:7e:80:46:1d: 97:75:c3:6e:41:02:b5:cd:f6:5d:09:83:13:7a:0f: e3:3f:e9:ff:8f:cc:23:bc:ff:5f:68:33:95:25:2d: d4:52:52:2e:40:5a:b0:89:c4:7a:87:bc:05:ad:30: 9e:93:1d:72:61:71:10:dc:84:34:dc:62:aa:cc:a2: 8a:65:23:b8:d7:a3:7a:f6:e3:e3:12:88:3a:b6:2b: a9:1c:08:af:c5:ca:0f:e5:b6:81:20:b2:88:23:c8: 94:3c:d6:3d:a0:b7:05:bd:62:96:8c:c6:9b:3e:03: 4d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B9:D6:02:D9:BB:46:19:16:7C:A1:B7:0E:8D:D3:E1:3D:65:D5:29 X509v3 Authority Key Identifier: keyid:AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/220DBB66054011EA90A20C7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.108.0/22 Signature Algorithm: sha256WithRSAEncryption 93:ba:1e:c3:de:2c:44:cd:e7:c3:4b:a0:84:e4:4e:1e:69:c5: b3:50:8d:96:9d:0f:ee:05:9a:7e:3b:d9:6a:60:dc:a8:de:73: a4:89:75:be:10:77:26:e1:49:2e:7f:36:de:43:76:36:75:9c: 46:84:1f:27:19:52:1e:5d:43:23:c0:27:dd:cf:17:4e:c9:64: 8d:8f:b0:b0:e8:a6:c3:22:b3:82:48:ed:c6:07:5b:f9:3f:53: b5:3a:18:d6:81:9f:e4:cd:b9:3a:52:e7:8b:27:da:ed:82:90: 7a:8f:88:aa:a6:a7:7d:22:01:55:40:bf:7d:36:f3:f7:1c:3a: b2:fd:33:06:82:3d:6b:a8:2f:09:3c:b2:d4:84:6d:0a:4d:02: 67:b9:25:2f:a1:89:65:ee:f1:34:69:44:c3:f9:d3:ef:1f:06: 03:ff:40:64:c6:bd:40:8a:8f:bf:4f:fa:77:77:98:84:5c:67: f2:3a:43:5a:00:92:ba:65:ae:78:6b:4d:5e:d8:76:a0:61:ca: 2c:64:10:1d:46:71:a2:59:96:de:a4:78:3c:10:48:43:cf:c5: 2b:99:8c:3a:d7:85:b9:c3:55:85:29:46:4f:aa:08:ed:b8:41: 26:7e:46:44:ae:29:78:cd:6b:5e:61:05:ab:38:61:c4:e8:c0: 58:fc:70:b3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3NDQxMTAvBgNVBAUTKEFBNDFDQTgxRDIzRUY1ODg2MTkzMkFBRDEyQjMxNjkw REJDRjEwMDMwHhcNMjQxMjE4MTg0NzAwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYzMThhNC0wMzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6igZ2ylUAL16kaS0DuL1p3TfLV7fORxlIUB6Q/ZFix/gg+7eJRcRPNnStP8Q dB/4OZiw/MqVmhIJI0lDx3RjLjtP7eZDMGpzx1fuIXGIYehQl2NdHphqAIEFV5nO SOq7+2MNN9Ot7Ou42NF7TZmgoTAesWdRaX1Fb05d7hrmb/7xeu6ZHabDfOkKTVoq SijHn36ARh2XdcNuQQK1zfZdCYMTeg/jP+n/j8wjvP9faDOVJS3UUlIuQFqwicR6 h7wFrTCekx1yYXEQ3IQ03GKqzKKKZSO416N69uPjEog6tiupHAivxcoP5baBILKI I8iUPNY9oLcFvWKWjMabPgNNiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHq51gLZ u0YZFnyhtw6N0+E9ZdUpMB8GA1UdIwQYMBaAFKpByoHSPvWIYZMqrRKzFpDbzxAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTc0NC8zOTdGNkNENDA1 MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZaGhreXF0RXJNV2tOdlBF QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrSEtnZEktOVloaGt5cXRFck1Xa052UEVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU3NDQvMzk3RjZDRDQwNTJFMTFFQTlEMzE0MTQ1QzRGOUFFMDIvMjIwREJCNjYw NTQwMTFFQTkwQTIwQzdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnfmwwDQYJKoZIhvcNAQELBQADggEBAJO6HsPeLETN58NL oITkTh5pxbNQjZadD+4Fmn472Wpg3Kjec6SJdb4QdybhSS5/Nt5DdjZ1nEaEHycZ Uh5dQyPAJ93PF07JZI2PsLDopsMis4JI7cYHW/k/U7U6GNaBn+TNuTpS54sn2u2C kHqPiKqmp30iAVVAv3028/ccOrL9MwaCPWuoLwk8stSEbQpNAme5JS+hiWXu8TRp RMP50+8fBgP/QGTGvUCKj79P+nd3mIRcZ/I6Q1oAkrplrnhrTV7YdqBhyixkEB1G caJZlt6keDwQSEPPxSuZjDrXhbnDVYUpRk+qCO24QSZ+RkSuKXjNa15hBas4YcTo wFj8cLM= -----END CERTIFICATE-----Generated at Sat Apr 5 04:15:18 2025 by rpki-client