$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/871196D48AC111EA81A2626EC4F9AE02.roa File: 871196D48AC111EA81A2626EC4F9AE02.roa (raw, json) Hash identifier: j8QejNy6d2T3iItswUdDsobqJc7b/UtqrnyshfiQ4jI= Subject key identifier: 03:07:34:2B:DD:94:BE:CD:DD:24:B8:7D:68:19:D0:DF:4C:F1:D2:57 Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0AD5 Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/871196D48AC111EA81A2626EC4F9AE02.roa Signing time: Mon 02 Dec 2024 19:38:12 +0000 ROA not before: Mon 02 Dec 2024 19:38:12 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 15412 IP address blocks: 45.124.204.0/22 maxlen: 22 103.249.185.0/24 maxlen: 24 103.249.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2773 (0xad5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30 Validity Not Before: Dec 2 19:38:12 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=674e0ca3-ad26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ed:19:c5:ab:32:b6:67:09:b5:65:cf:a0:31: 64:22:5a:a3:8d:89:09:f9:00:b1:4b:cf:8e:f3:49: 9a:22:b5:5b:b5:46:ee:f6:33:e6:01:3d:2d:6d:f3: c6:1a:7d:7c:c1:50:e3:99:50:2a:de:93:82:44:b9: c6:b3:6c:12:54:82:df:19:f3:83:b3:47:5f:fb:c4: f3:76:18:4c:eb:5a:76:37:71:99:95:27:89:71:bc: 81:27:37:f3:ba:62:b8:d2:cc:96:da:84:0e:61:23: 45:d3:bb:76:30:a6:7d:ac:ac:1c:5a:a7:32:2f:67: 9f:8e:04:f3:69:98:73:1c:0f:e4:2b:c9:8a:7a:3e: 13:cd:64:dd:16:2e:f0:0b:cf:4a:53:c6:32:03:7d: 71:75:3d:3d:47:96:57:70:0e:1b:55:c9:07:1c:09: 93:09:5b:e4:1a:f4:22:0b:89:8c:1f:21:3c:40:a0: e9:8f:62:76:15:90:74:a3:37:14:b1:c2:06:87:f7: af:ea:82:c3:b7:ba:40:9d:29:06:d2:e2:f0:f1:77: a1:37:84:9d:76:4a:c8:b0:d9:c7:de:e8:4b:8d:8a: 41:16:f6:68:ba:32:ef:8f:c2:f7:63:28:ae:d6:11: 12:2a:bf:a2:69:af:54:ad:b3:2c:4e:8f:4a:da:dd: b9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:07:34:2B:DD:94:BE:CD:DD:24:B8:7D:68:19:D0:DF:4C:F1:D2:57 X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/871196D48AC111EA81A2626EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.124.204.0/22 103.249.185.0/24 103.249.187.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:eb:07:56:f6:8f:86:47:5c:77:14:c2:1a:43:c4:66:45:f7: c0:db:95:bd:a3:25:e1:ce:32:21:30:54:17:0f:27:5b:46:ae: 83:a5:bc:03:42:b4:bb:9b:c8:1c:75:e6:36:b4:31:02:1e:b1: 0f:54:36:65:19:8e:bb:ea:69:d9:29:a1:09:06:7d:f1:2c:b0: e8:3b:ec:12:29:8d:05:82:2d:f0:e3:09:c9:ef:30:0b:28:e1: 79:69:4a:e7:66:eb:3a:04:97:01:a1:fc:40:94:87:62:fc:d2: c3:37:d9:2b:7b:3b:50:9e:d1:b3:9a:6a:bc:44:e6:d7:be:e4: 2b:e3:8a:b9:32:8b:a5:e0:ae:ca:f0:81:34:10:ee:b7:be:c6: e6:76:41:23:73:81:9b:bf:44:25:c3:bb:34:29:8d:37:7a:75: 69:38:d0:99:ad:a7:e4:1d:3e:98:6d:bb:56:53:b6:35:29:f1: d5:95:43:4a:01:a7:36:1e:17:6b:a4:22:5e:27:35:33:d6:d9: dc:92:be:6e:c1:8c:47:02:89:54:da:7d:cb:33:e7:80:51:60: 16:d6:a9:37:b8:5b:75:95:0d:6c:91:c7:b9:45:f6:64:64:2d: 6d:56:8d:7d:07:98:30:2d:8f:5d:2d:a5:cb:e9:6c:a2:c6:c7: 6a:73:31:5b -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjQxMjAyMTkzODEyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRlMGNhMy1hZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7e0ZxasytmcJtWXPoDFkIlqjjYkJ+QCxS8+O80maIrVbtUbu9jPmAT0tbfPG Gn18wVDjmVAq3pOCRLnGs2wSVILfGfODs0df+8TzdhhM61p2N3GZlSeJcbyBJzfz umK40syW2oQOYSNF07t2MKZ9rKwcWqcyL2efjgTzaZhzHA/kK8mKej4TzWTdFi7w C89KU8YyA31xdT09R5ZXcA4bVckHHAmTCVvkGvQiC4mMHyE8QKDpj2J2FZB0ozcU scIGh/ev6oLDt7pAnSkG0uLw8XehN4SddkrIsNnH3uhLjYpBFvZoujLvj8L3Yyiu 1hESKr+iaa9UrbMsTo9K2t25FQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFAMHNCvd lL7N3SS4fWgZ0N9M8dJXMB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNEMzAvRTNERjQ2OUM0MTY4MTFFQUFFOEE3NzUwQzRGOUFFMDIvODcxMTk2RDQ4 QUMxMTFFQTgxQTI2MjZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAItfMwDBABn+bkDBABn+bswDQYJKoZIhvcNAQELBQADggEB ACvrB1b2j4ZHXHcUwhpDxGZF98Dblb2jJeHOMiEwVBcPJ1tGroOlvANCtLubyBx1 5ja0MQIesQ9UNmUZjrvqadkpoQkGffEssOg77BIpjQWCLfDjCcnvMAso4XlpSudm 6zoElwGh/ECUh2L80sM32St7O1Ce0bOaarxE5te+5Cvjirkyi6XgrsrwgTQQ7re+ xuZ2QSNzgZu/RCXDuzQpjTd6dWk40Jmtp+QdPphtu1ZTtjUp8dWVQ0oBpzYeF2uk Il4nNTPW2dySvm7BjEcCiVTafcsz54BRYBbWqTe4W3WVDWyRx7lF9mRkLW1WjX0H mDAtj10tpcvpbKLGx2pzMVs= -----END CERTIFICATE-----Generated at Sun Apr 6 03:57:36 2025 by rpki-client