$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/0F1061D0868911EDA888A96CC4F9AE02.roa File: 0F1061D0868911EDA888A96CC4F9AE02.roa (raw, json) Hash identifier: aGKXoopb0arb0ntbaAeX9hZshlxruOuTWjBQoFMqiCw= Subject key identifier: 59:E0:61:C4:BD:40:32:6F:C4:71:4C:A3:80:BB:E1:0E:08:4A:B1:C9 Certificate issuer: /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9 Certificate serial: 017B Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/0F1061D0868911EDA888A96CC4F9AE02.roa Signing time: Sun 29 Dec 2024 02:16:05 +0000 ROA not before: Sun 29 Dec 2024 02:16:05 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 150699 IP address blocks: 103.60.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B30E5 Validity Not Before: Dec 29 02:16:05 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6770b0e5-2377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:c3:2b:50:6c:64:41:d8:c9:f9:c6:0a:58: f7:25:c0:f0:3b:da:c9:eb:f6:4e:b8:04:c2:a9:53: 0a:0e:07:9e:be:53:93:52:84:37:97:8e:93:a1:b9: 49:24:ec:5f:98:32:1b:dc:a3:fe:97:7d:9a:13:18: 7a:75:91:10:12:f5:d9:ec:c7:6c:79:f0:c1:42:8d: cb:14:c7:66:4b:41:52:bf:6f:9e:d5:f1:74:45:81: 91:70:fa:b1:9d:f3:3d:7f:11:7c:58:61:7e:56:18: 96:fe:42:e2:58:f8:01:c4:ce:cb:81:b6:dd:6e:00: 0c:ef:a8:6c:f7:0d:83:14:c8:19:77:35:f1:ff:23: 45:13:bb:0e:0b:30:9a:27:55:2e:69:65:65:86:c2: cc:46:e2:7a:ec:f2:13:26:3c:fb:bc:f4:c0:5d:2f: a2:9d:34:1d:97:1a:9d:54:18:47:c9:02:fa:f0:11: 0e:f6:fd:e5:00:45:b8:21:e4:c7:a1:9b:a9:b2:99: bc:11:dc:bd:69:3c:b6:9b:f5:60:cd:1b:19:42:26: a8:e7:92:ee:47:0f:5f:61:d5:c9:24:41:95:93:87: 56:c8:64:b8:59:c6:a1:e5:67:29:8c:1a:9f:3e:09: 21:c6:ac:ef:6d:cb:6c:d9:6f:56:ad:a3:70:07:39: 58:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E0:61:C4:BD:40:32:6F:C4:71:4C:A3:80:BB:E1:0E:08:4A:B1:C9 X509v3 Authority Key Identifier: keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/0F1061D0868911EDA888A96CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.188.0/23 Signature Algorithm: sha256WithRSAEncryption 67:9f:4a:16:ee:d6:47:09:bc:f2:fd:4f:e2:1e:98:a1:98:a1: 78:5a:f4:c8:b8:ad:10:85:26:d8:76:36:1f:aa:ef:18:26:39: 80:c9:33:65:bb:2e:89:06:17:1c:90:89:6d:22:e3:0a:b8:a6: 65:41:d8:2c:51:b0:7f:bd:d2:e6:be:a9:d0:d7:ff:22:17:4d: de:d2:a7:04:d8:dc:43:aa:3f:46:95:03:c3:17:fd:79:15:c8: 89:30:e9:6d:98:60:6a:3a:3e:23:59:95:74:b9:84:59:52:e7: f3:01:2e:13:ee:24:f0:ac:9d:14:e0:d1:ce:ec:6a:a4:ca:90: 7f:1b:83:d4:1e:b2:81:0d:d7:9e:41:fd:c6:ec:27:a1:01:93: 01:a5:59:5d:c1:ae:2c:68:18:1f:87:1b:82:e2:43:22:fa:83: 61:3e:37:b7:64:84:8b:7a:90:33:50:95:fa:2f:08:5b:8a:ba: ee:24:22:e9:1d:a9:5d:18:e0:fe:bb:5c:71:51:60:e7:3f:80: d4:40:9a:f7:d3:a8:b0:fb:a8:6f:51:1a:b1:da:6d:12:a9:3f: 72:0e:6d:4b:6f:a3:54:03:4b:9b:12:da:18:f7:4b:4a:5f:c4: ba:a1:5b:a5:dd:f5:1f:9e:78:e1:3e:e2:15:31:16:d8:e4:05: 02:60:f9:23 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwRTUxMTAvBgNVBAUTKDRCQURGNDIzODc5RjE1NERCOUVBQzg4RDE2MEI0RTEx NkY2NkNEQTkwHhcNMjQxMjI5MDIxNjA1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzcwYjBlNS0yMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxODDK1BsZEHYyfnGClj3JcDwO9rJ6/ZOuATCqVMKDgeevlOTUoQ3l46ToblJ JOxfmDIb3KP+l32aExh6dZEQEvXZ7MdsefDBQo3LFMdmS0FSv2+e1fF0RYGRcPqx nfM9fxF8WGF+VhiW/kLiWPgBxM7LgbbdbgAM76hs9w2DFMgZdzXx/yNFE7sOCzCa J1UuaWVlhsLMRuJ67PITJjz7vPTAXS+inTQdlxqdVBhHyQL68BEO9v3lAEW4IeTH oZupspm8Edy9aTy2m/VgzRsZQiao55LuRw9fYdXJJEGVk4dWyGS4Wcah5WcpjBqf Pgkhxqzvbcts2W9WraNwBzlY7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFFngYcS9 QDJvxHFMo4C74Q4ISrHJMB8GA1UdIwQYMBaAFEut9COHnxVNuerIjRYLThFvZs2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzBFNS83MjkzQzExNjg2 ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZVMjU2c2lORmd0T0VXOW16 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M2MzBJNGVmRlUyNTZzaU5GZ3RPRVc5bXphay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjMwRTUvNzI5M0MxMTY4Njg0MTFFREI3QkZBMTcxQzRGOUFFMDIvMEYxMDYxRDA4 Njg5MTFFREE4ODhBOTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnPLwwDQYJKoZIhvcNAQELBQADggEBAGefShbu1kcJvPL9 T+IemKGYoXha9Mi4rRCFJth2Nh+q7xgmOYDJM2W7LokGFxyQiW0i4wq4pmVB2CxR sH+90ua+qdDX/yIXTd7SpwTY3EOqP0aVA8MX/XkVyIkw6W2YYGo6PiNZlXS5hFlS 5/MBLhPuJPCsnRTg0c7saqTKkH8bg9QesoEN155B/cbsJ6EBkwGlWV3BrixoGB+H G4LiQyL6g2E+N7dkhIt6kDNQlfovCFuKuu4kIukdqV0Y4P67XHFRYOc/gNRAmvfT qLD7qG9RGrHabRKpP3IObUtvo1QDS5sS2hj3S0pfxLqhW6Xd9R+eeOE+4hUxFtjk BQJg+SM= -----END CERTIFICATE-----Generated at Sat Apr 5 22:51:20 2025 by rpki-client