$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/8CB86F5AC21A11EFAB75870CC4F9AE02.roa File: 8CB86F5AC21A11EFAB75870CC4F9AE02.roa (raw, json) Hash identifier: WQ5jUHH7wep6BOMSnSWYPD3vNOy/VLawhQ+VNu2qvIc= Subject key identifier: 97:19:94:D2:32:81:F0:FF:AC:CB:19:40:47:74:F2:10:FF:69:AB:1F Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Certificate serial: 0877 Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/8CB86F5AC21A11EFAB75870CC4F9AE02.roa Signing time: Tue 24 Dec 2024 17:14:36 +0000 ROA not before: Tue 24 Dec 2024 17:14:36 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 138619 IP address blocks: 103.134.200.0/24 maxlen: 24 2404:6ac0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2167 (0x877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073 Validity Not Before: Dec 24 17:14:36 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=676aebfc-c493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:09:f6:5a:2b:0e:24:e1:b2:ff:6e:9d:de:66: 37:8d:fb:cd:1b:f9:8f:45:b7:7d:a6:93:eb:38:97: 4a:7e:45:fc:ec:d9:5d:84:ba:55:a9:ed:73:f6:3e: 1f:18:c9:3c:8d:eb:54:06:73:c1:c9:6f:55:9f:aa: 37:b0:39:8e:e5:6c:9a:c6:cd:e9:7b:af:76:39:b4: 93:ca:8d:b6:69:de:fc:86:da:19:f4:7d:c1:d9:12: ce:48:d3:00:ce:34:f4:09:e9:cd:82:9d:cb:9f:72: 35:1c:8f:eb:8a:8c:2c:e6:49:e9:5e:c1:43:fc:27: 0a:9f:a2:9a:5f:a0:79:e5:8e:04:b0:45:52:6b:7e: 4e:97:2c:f7:6b:7a:db:ff:17:8d:e7:80:97:a8:cb: 8d:89:cf:16:38:ee:0c:a4:23:0a:0b:10:7c:62:74: e4:35:ac:0e:03:60:9c:a9:85:ff:66:bb:4c:94:f4: 0c:c8:d5:3d:30:b5:e5:b8:53:16:e7:14:0b:a8:3e: 44:ab:97:17:c0:28:24:ac:0c:16:66:24:a6:b1:41: ae:2f:9f:6c:c6:a9:a5:02:ec:ef:21:d5:b6:16:49: b1:f4:75:ab:37:82:5b:a3:41:eb:9b:d7:3b:58:f4: 1f:f8:78:b3:32:d0:97:2f:45:48:68:f1:c7:98:5c: b4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:19:94:D2:32:81:F0:FF:AC:CB:19:40:47:74:F2:10:FF:69:AB:1F X509v3 Authority Key Identifier: keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/8CB86F5AC21A11EFAB75870CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.200.0/24 IPv6: 2404:6ac0::/32 Signature Algorithm: sha256WithRSAEncryption 2c:16:ec:6f:ac:90:0b:ee:46:a9:11:bd:0a:f3:40:c4:16:44: 5f:f8:f9:85:61:91:3a:de:c8:fc:2b:95:f8:fb:21:1d:3d:6d: 6c:78:9f:b4:d6:f7:48:9d:fd:40:34:49:7d:de:c0:75:e1:26: 58:48:c0:32:b3:c2:3b:65:70:73:74:e8:23:38:b5:af:e2:62: e2:0a:58:34:a5:4d:40:62:c1:d6:6e:9f:72:61:bc:8b:be:d3: 08:cc:b0:ae:18:e6:c5:74:b9:53:2a:4b:f4:86:76:cd:90:51: 47:1e:40:1a:c2:53:45:eb:4f:df:d1:f5:81:85:8e:40:e5:00: 82:2b:25:93:cd:60:f8:5d:43:c9:eb:c5:74:b3:45:d4:43:32: b8:01:94:62:e6:47:16:86:da:3d:40:89:a5:50:7a:63:d8:2d: a1:f6:ab:02:fc:bd:79:83:6c:9f:88:c1:14:72:15:e4:5a:e4: e1:ee:64:d7:86:63:d4:b0:df:85:18:a2:e5:fe:f7:ab:90:83: e1:d6:36:49:5a:a8:f5:2f:99:4e:ab:a7:1a:79:0b:ae:3e:5b: e0:ae:cc:31:06:29:10:fc:5a:89:22:b2:4d:21:06:90:ca:46: ec:0b:c4:cd:e9:7a:58:ff:b7:7f:bd:c4:66:ab:4f:ec:f8:46: c9:42:53:28 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG Rjc5RDFFMDEwHhcNMjQxMjI0MTcxNDM2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NzZhZWJmYy1jNDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9An2WisOJOGy/26d3mY3jfvNG/mPRbd9ppPrOJdKfkX87NldhLpVqe1z9j4f GMk8jetUBnPByW9Vn6o3sDmO5Wyaxs3pe692ObSTyo22ad78htoZ9H3B2RLOSNMA zjT0CenNgp3Ln3I1HI/riows5knpXsFD/CcKn6KaX6B55Y4EsEVSa35Olyz3a3rb /xeN54CXqMuNic8WOO4MpCMKCxB8YnTkNawOA2CcqYX/ZrtMlPQMyNU9MLXluFMW 5xQLqD5Eq5cXwCgkrAwWZiSmsUGuL59sxqmlAuzvIdW2Fkmx9HWrN4Jbo0Hrm9c7 WPQf+HizMtCXL0VIaPHHmFy09QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJcZlNIy gfD/rMsZQEd08hD/aasfMB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjUwNzMvNDNGMTYyNjQzMzk1MTFFOUJGQjFDMjFBQzRGOUFFMDIvOENCODZGNUFD MjFBMTFFRkFCNzU4NzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABnhsgwDQQCAAIwBwMFACQEasAwDQYJKoZIhvcNAQELBQAD ggEBACwW7G+skAvuRqkRvQrzQMQWRF/4+YVhkTreyPwrlfj7IR09bWx4n7TW90id /UA0SX3ewHXhJlhIwDKzwjtlcHN06CM4ta/iYuIKWDSlTUBiwdZun3JhvIu+0wjM sK4Y5sV0uVMqS/SGds2QUUceQBrCU0XrT9/R9YGFjkDlAIIrJZPNYPhdQ8nrxXSz RdRDMrgBlGLmRxaG2j1AiaVQemPYLaH2qwL8vXmDbJ+IwRRyFeRa5OHuZNeGY9Sw 34UYouX+96uQg+HWNklaqPUvmU6rpxp5C64+W+CuzDEGKRD8Wokisk0hBpDKRuwL xM3pelj/t3+9xGarT+z4RslCUyg= -----END CERTIFICATE-----Generated at Sat Apr 5 23:09:33 2025 by rpki-client