$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/8F14EDAA70B911EDB6E1F81BC4F9AE02.roa File: 8F14EDAA70B911EDB6E1F81BC4F9AE02.roa (raw, json) Hash identifier: KwJcRfcCHNm1/1H4hZVLWjzBmRVSuYEae2GuTglAJm0= Subject key identifier: 69:A7:FC:CD:23:67:25:15:93:CF:B9:7F:B6:64:5C:C9:2B:35:8C:46 Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Certificate serial: 0193 Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/8F14EDAA70B911EDB6E1F81BC4F9AE02.roa Signing time: Thu 19 Dec 2024 02:26:14 +0000 ROA not before: Thu 19 Dec 2024 02:26:14 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 137449 IP address blocks: 103.42.228.0/23 maxlen: 24 103.42.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A52 Validity Not Before: Dec 19 02:26:14 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67638446-6edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:3d:32:f2:82:91:f2:19:12:55:7f:d5:15: f3:d1:e7:51:63:24:72:85:b4:60:81:4c:ce:ba:b3: 27:99:bf:ee:ce:d1:2a:99:d7:9b:d8:00:53:bf:b1: 9c:6f:bc:2a:8f:3f:1d:be:f3:8d:47:b8:a5:48:49: 3d:b1:06:03:29:0f:77:ed:a1:13:63:dd:f2:dc:14: 3d:cf:37:e2:d9:a6:2b:55:cd:48:38:d1:fd:b3:83: 13:67:d1:91:67:17:54:da:34:b4:c0:f3:86:9d:50: 02:11:bb:72:83:81:83:d5:4c:d2:44:d0:a9:f1:88: e0:88:60:68:6b:6a:55:1e:ab:2c:be:5f:62:3d:b5: 0d:cc:12:c6:2a:f2:49:99:90:8e:ed:4d:c1:58:3b: df:80:a5:e3:5d:77:63:1f:93:3c:a8:17:8b:6c:34: bf:4a:6d:71:9a:07:56:e6:1e:5e:65:8d:35:54:e9: 2a:0d:f6:c5:37:50:68:51:9f:e9:14:43:db:08:c2: 7b:2b:11:61:22:c3:6d:4d:38:bb:31:2e:63:84:f6: 18:9f:07:8a:bb:12:bd:91:8e:fc:f7:fb:44:2c:b6: 48:d4:89:3a:de:7b:19:e9:cc:2d:8a:72:be:a0:7d: 4a:99:94:58:73:76:56:d1:75:36:93:cf:0c:6c:ec: d7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A7:FC:CD:23:67:25:15:93:CF:B9:7F:B6:64:5C:C9:2B:35:8C:46 X509v3 Authority Key Identifier: keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/8F14EDAA70B911EDB6E1F81BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.228.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:13:78:e9:1d:c3:9b:44:6c:bb:e4:e4:17:0e:e5:09:9a:35: 0a:f6:a6:41:45:9c:49:48:ce:8a:b8:a1:a8:53:d8:f3:20:96: 3c:c1:d8:36:a5:3f:28:2b:4f:42:5e:ca:7f:c1:e8:92:16:c5: 4e:2d:bd:ee:78:27:c1:1c:08:78:46:72:9c:37:36:35:81:02: 86:03:1f:10:81:1f:3d:0b:b8:f2:25:5c:07:f7:f1:d5:23:b3: 3d:5d:de:4a:3d:4e:93:f2:a8:13:80:7c:04:11:ef:3c:c2:12: 90:6a:56:bc:3b:44:45:da:d4:fe:31:72:5b:ec:43:f0:c1:44: cd:fb:c7:17:36:c2:29:fc:fb:82:85:98:0e:fa:30:6e:8a:ca: 21:b4:58:8e:14:94:56:fe:df:c2:18:15:d8:98:f9:bd:f8:3c: 9a:51:b8:49:29:d5:54:ca:1e:5c:00:34:2a:97:03:7a:ca:4e: d7:9f:ec:d9:8b:d4:51:3c:58:93:8a:af:21:b3:5c:7d:8f:c8: f1:58:7d:9c:c3:a4:6f:c3:80:37:06:86:47:f6:ad:cd:f4:d2: 1d:7f:ee:78:82:ff:50:f2:9d:ff:c9:c2:2c:81:af:6e:39:ee: f0:8e:fb:05:9f:77:44:64:c3:7e:82:45:b8:16:a5:9b:e8:41: e3:d3:da:3c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB REJGMUY1NDAwHhcNMjQxMjE5MDIyNjE0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYzODQ0Ni02ZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAM9MvKCkfIZElV/1RXz0edRYyRyhbRggUzOurMnmb/uztEqmdeb2ABTv7Gc b7wqjz8dvvONR7ilSEk9sQYDKQ937aETY93y3BQ9zzfi2aYrVc1IONH9s4MTZ9GR ZxdU2jS0wPOGnVACEbtyg4GD1UzSRNCp8YjgiGBoa2pVHqssvl9iPbUNzBLGKvJJ mZCO7U3BWDvfgKXjXXdjH5M8qBeLbDS/Sm1xmgdW5h5eZY01VOkqDfbFN1BoUZ/p FEPbCMJ7KxFhIsNtTTi7MS5jhPYYnweKuxK9kY789/tELLZI1Ik63nsZ6cwtinK+ oH1KmZRYc3ZW0XU2k88MbOzXDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGmn/M0j ZyUVk8+5f7ZkXMkrNYxGMB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5 VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThBNTIvRkI3RTRCREU3MEI1MTFFRDkzRjBERDE2QzRGOUFFMDIvOEYxNEVEQUE3 MEI5MTFFREI2RTFGODFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnKuQwDQYJKoZIhvcNAQELBQADggEBAFoTeOkdw5tEbLvk 5BcO5QmaNQr2pkFFnElIzoq4oahT2PMgljzB2DalPygrT0Jeyn/B6JIWxU4tve54 J8EcCHhGcpw3NjWBAoYDHxCBHz0LuPIlXAf38dUjsz1d3ko9TpPyqBOAfAQR7zzC EpBqVrw7REXa1P4xclvsQ/DBRM37xxc2win8+4KFmA76MG6KyiG0WI4UlFb+38IY FdiY+b34PJpRuEkp1VTKHlwANCqXA3rKTtef7NmL1FE8WJOKryGzXH2PyPFYfZzD pG/DgDcGhkf2rc300h1/7niC/1Dynf/JwiyBr2457vCO+wWfd0Rkw36CRbgWpZvo QePT2jw= -----END CERTIFICATE-----Generated at Sat Apr 5 07:10:35 2025 by rpki-client