$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/67030B7889F111EFB3186A7BC4F9AE02.roa File: 67030B7889F111EFB3186A7BC4F9AE02.roa (raw, json) Hash identifier: jpoA3nOwURms9S72GBWIhr5w5HiTb8jNg/HLvSF6ab8= Subject key identifier: 91:98:AF:B3:22:53:BA:E2:96:F6:4E:BF:E5:0E:36:A5:AA:C5:2A:40 Certificate issuer: /CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Certificate serial: 1F Authority key identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/67030B7889F111EFB3186A7BC4F9AE02.roa Signing time: Tue 03 Dec 2024 06:40:33 +0000 ROA not before: Tue 03 Dec 2024 06:40:33 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 150399 IP address blocks: 103.30.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B31CB Validity Not Before: Dec 3 06:40:33 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674ea7e1-da5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:09:84:03:53:b8:47:db:b0:31:e0:35:1b:1c: d1:db:66:85:ce:25:b9:1f:9c:2f:9a:59:b7:65:63: fc:35:fe:10:83:9c:97:93:2b:5b:3a:da:ff:3a:cc: 64:6a:52:1c:b2:25:f5:f8:05:d2:b2:12:e3:92:e3: 23:c4:44:c6:c8:78:5f:c0:e4:58:ad:e1:b4:2f:ad: 48:e4:2c:e2:06:78:bc:0a:ee:be:26:24:e0:e6:2b: 74:c1:83:6b:7c:74:73:22:a1:55:86:af:71:2a:6d: 8c:f0:86:36:6a:0b:8b:01:5c:64:07:db:e8:b7:a1: 01:81:93:1d:16:e3:1d:c5:8a:0c:7a:96:55:16:10: da:48:df:38:0c:a4:58:5a:a6:21:a6:04:00:cb:90: 75:6f:27:ef:ec:97:e8:59:e0:f7:ab:6b:85:55:c2: 7c:29:eb:fb:fc:24:39:7e:dd:0d:f7:bb:c4:44:55: 73:49:68:30:37:2a:ca:32:f3:54:5c:60:bd:de:e7: 8c:b3:23:07:84:9c:15:51:f2:4f:8f:a6:77:00:c6: 29:a4:f5:28:fa:85:a0:f1:d7:f6:b7:12:4f:84:4b: a1:19:c6:97:8c:99:34:87:03:eb:f8:d5:b0:fc:3d: 1d:09:ea:2d:00:ff:98:60:2d:b6:a9:ce:0e:b6:42: c7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:98:AF:B3:22:53:BA:E2:96:F6:4E:BF:E5:0E:36:A5:AA:C5:2A:40 X509v3 Authority Key Identifier: keyid:DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/67030B7889F111EFB3186A7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.30.60.0/23 Signature Algorithm: sha256WithRSAEncryption 55:ae:79:81:e0:bd:ae:85:1b:69:c7:a0:49:cd:20:9e:86:b9: cd:81:31:10:3f:8f:a2:0c:73:07:b3:ca:6e:09:f3:1b:9f:d0: f0:c4:03:cd:05:90:87:33:18:cc:8a:ba:f9:2f:cb:e0:ac:62: 9f:15:48:1f:c7:d3:17:d3:87:80:d4:7f:7b:33:ac:86:9a:d1: b0:90:b6:ee:f3:5e:4f:78:7c:62:3a:5d:80:c9:ca:c3:ad:0a: 0d:2c:0a:00:86:94:2e:79:5d:11:87:9e:ff:21:36:d6:95:71: c2:2f:4a:b5:f9:63:57:53:b0:16:8b:0a:f9:bc:1b:20:5f:e7: d4:71:b1:be:5b:74:d4:5f:0d:48:6b:99:1b:f4:b2:00:91:cc: 57:af:d4:d2:3a:0f:6d:17:0e:e5:54:59:27:76:43:a4:bd:64: f8:34:34:e0:00:ee:f9:f2:53:d5:d0:e0:b9:4b:9b:18:ee:88: d7:18:9c:9f:bd:88:e1:63:86:d5:45:cf:f7:03:96:04:bc:8b: 02:fe:11:3f:69:36:a9:33:d0:25:19:d8:90:84:eb:5e:bb:6f: 82:2c:9a:40:e8:e4:43:b9:18:3f:1a:27:17:63:97:5c:30:ed: 3b:57:81:88:d1:ef:fb:33:ba:44:9f:3f:9b:76:5d:9b:77:fa: fd:1d:ec:7e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzFDQjExMC8GA1UEBRMoREZFNEFDRENBMEE2MjI0MzY1NEJEMjA5MzY4MjA1NzhF OTJEMjUyNDAeFw0yNDEyMDMwNjQwMzNaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NGVhN2UxLWRhNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkCYQDU7hH27Ax4DUbHNHbZoXOJbkfnC+aWbdlY/w1/hCDnJeTK1s62v86zGRq UhyyJfX4BdKyEuOS4yPERMbIeF/A5Fit4bQvrUjkLOIGeLwK7r4mJODmK3TBg2t8 dHMioVWGr3EqbYzwhjZqC4sBXGQH2+i3oQGBkx0W4x3Figx6llUWENpI3zgMpFha piGmBADLkHVvJ+/sl+hZ4Pera4VVwnwp6/v8JDl+3Q33u8REVXNJaDA3Ksoy81Rc YL3e54yzIweEnBVR8k+PpncAximk9Sj6haDx1/a3Ek+ES6EZxpeMmTSHA+v41bD8 PR0J6i0A/5hgLbapzg62QsfNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUkZivsyJT uuKW9k6/5Q42parFKkAwHwYDVR0jBBgwFoAU3+Ss3KCmIkNlS9IJNoIFeOktJSQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzMUNCL0Y0NENDRjdFODlG MDExRUZBRDI2Qjk3QUM0RjlBRTAyLzMtU3MzS0NtSWtObFM5SUpOb0lGZU9rdEpT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMy1TczNLQ21Ja05sUzlJSk5vSUZlT2t0SlNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzFDQi9GNDRDQ0Y3RTg5RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi82NzAzMEI3ODg5 RjExMUVGQjMxODZBN0JDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWcePDANBgkqhkiG9w0BAQsFAAOCAQEAVa55geC9roUbaceg Sc0gnoa5zYExED+PogxzB7PKbgnzG5/Q8MQDzQWQhzMYzIq6+S/L4KxinxVIH8fT F9OHgNR/ezOshprRsJC27vNeT3h8YjpdgMnKw60KDSwKAIaULnldEYee/yE21pVx wi9KtfljV1OwFosK+bwbIF/n1HGxvlt01F8NSGuZG/SyAJHMV6/U0joPbRcO5VRZ J3ZDpL1k+DQ04ADu+fJT1dDguUubGO6I1xicn72I4WOG1UXP9wOWBLyLAv4RP2k2 qTPQJRnYkITrXrtvgiyaQOjkQ7kYPxonF2OXXDDtO1eBiNHv+zO6RJ8/m3Zdm3f6 /R3sfg== -----END CERTIFICATE-----Generated at Sat Apr 5 14:59:02 2025 by rpki-client