$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/C10CE08C97D311EE9299330CC4F9AE02.roa File: C10CE08C97D311EE9299330CC4F9AE02.roa (raw, json) Hash identifier: gJAOPk4iFoIW/KqNitxUF3g+S02/W0OUx3yJyNEqzJI= Subject key identifier: 8A:D6:F4:AB:31:7B:D6:CF:8B:59:DE:D9:AF:97:E0:B9:B0:7A:00:18 Certificate issuer: /CN=A91B7B23/serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8 Certificate serial: C8 Authority key identifier: 3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/C10CE08C97D311EE9299330CC4F9AE02.roa Signing time: Fri 13 Dec 2024 04:38:07 +0000 ROA not before: Fri 13 Dec 2024 04:38:07 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 38611 IP address blocks: 103.12.200.0/22 maxlen: 23 103.253.64.0/22 maxlen: 23 113.11.184.0/22 maxlen: 23 180.92.208.0/22 maxlen: 22 203.17.148.0/22 maxlen: 23 203.33.236.0/24 maxlen: 24 203.55.188.0/24 maxlen: 24 203.57.15.0/24 maxlen: 24 203.80.168.0/24 maxlen: 24 203.193.192.0/19 maxlen: 19 203.193.196.0/22 maxlen: 22 203.193.200.0/23 maxlen: 23 203.193.206.0/23 maxlen: 23 203.193.208.0/21 maxlen: 21 203.193.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B23, serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8 Validity Not Before: Dec 13 04:38:07 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=675bba2f-c3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:82:21:fb:28:5e:50:00:49:c8:e7:33:9b: 5a:ab:6f:34:f7:0b:46:8e:3b:1e:fc:0b:c4:33:dc: 51:2f:a0:b4:57:ec:61:83:4d:0c:b2:bb:36:d5:f3: a1:85:87:87:d4:5a:27:b3:0f:a1:c5:8c:c5:99:2f: 36:87:6a:5d:6d:d9:ad:ad:24:41:26:d0:b0:e4:1b: 44:98:38:ef:b3:0c:a8:17:16:ea:a0:ce:e7:51:c1: b6:e4:2c:65:d3:ba:c0:58:5b:ef:3e:b0:95:c2:48: 48:58:33:4e:c0:88:a7:70:29:9c:b3:d9:55:f6:bd: 02:52:ff:04:2a:a1:11:eb:f9:59:d0:75:f1:a5:a4: 88:1d:0a:2e:ba:61:1d:db:b9:b7:a0:93:e0:ee:38: 7a:e4:36:b3:6c:d2:d6:c2:81:e5:90:a7:14:66:88: 2c:3a:b7:34:f9:10:d2:fc:bc:10:a1:a0:ea:c5:e7: 17:80:62:f2:be:1d:6c:7c:df:16:e6:4a:e6:34:2a: 99:e2:c7:da:24:fc:7b:2c:a2:75:e4:6b:16:d0:96: f5:b8:6f:06:13:98:3e:19:ec:05:59:09:c9:b0:6c: 6c:0e:7f:79:70:d2:e1:e9:6c:66:e1:2e:3e:6f:3b: fd:03:0c:f9:d6:d3:db:eb:b5:ff:d1:98:9d:f4:88: 3f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D6:F4:AB:31:7B:D6:CF:8B:59:DE:D9:AF:97:E0:B9:B0:7A:00:18 X509v3 Authority Key Identifier: keyid:3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/C10CE08C97D311EE9299330CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.12.200.0/22 103.253.64.0/22 113.11.184.0/22 180.92.208.0/22 203.17.148.0/22 203.33.236.0/24 203.55.188.0/24 203.57.15.0/24 203.80.168.0/24 203.193.192.0/19 Signature Algorithm: sha256WithRSAEncryption 65:3a:11:ec:3f:75:14:d4:3c:37:ed:5f:9d:63:eb:bb:67:0f: 2f:f4:76:47:57:f2:f9:57:01:70:5c:a6:3a:e5:b6:05:97:b4: ca:75:e0:e2:20:ee:49:86:9d:6a:78:3b:13:e8:2f:49:ea:f5: 83:b8:de:4b:4f:1b:bb:6e:0e:17:ed:c4:aa:73:48:c0:ef:f2: 33:0d:9c:e9:64:48:71:ae:9b:83:7f:c3:76:81:79:51:fd:bd: 3d:67:0b:c6:ca:95:c9:6a:b3:fc:79:62:8e:e1:65:e1:46:92: bd:ed:27:26:65:1f:88:49:d4:9d:28:04:90:51:c0:bd:2a:3f: dc:55:1a:2f:eb:03:a8:93:4a:8e:a5:40:f7:87:5f:7c:8b:6e: 88:1d:77:47:bb:d7:83:ab:30:5b:94:90:41:b5:b0:18:2b:73: 46:58:a4:53:99:b3:a7:78:3a:3c:ad:ff:12:97:fc:18:d9:d0: a0:e6:1b:4e:a6:07:1c:ae:b1:ce:e1:13:71:3d:e9:30:4b:62: 01:c4:a5:58:66:06:33:cf:9a:44:65:e6:cd:28:df:1c:20:c7: 69:36:eb:91:25:62:aa:43:25:d1:d5:16:82:07:e3:44:bd:f5: a9:51:ce:d5:3f:1c:61:7c:b8:b9:dd:b0:6b:d6:ab:58:1f:af: 05:a8:3c:cc -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMjMxMTAvBgNVBAUTKDNBMUE0MDc0NzFEMUJGMUNBMTUyNUYyMUY3REVDRjVB NkEyQTY0RDgwHhcNMjQxMjEzMDQzODA3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzViYmEyZi1jM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPGCIfsoXlAAScjnM5taq2809wtGjjse/AvEM9xRL6C0V+xhg00Msrs21fOh hYeH1Fonsw+hxYzFmS82h2pdbdmtrSRBJtCw5BtEmDjvswyoFxbqoM7nUcG25Cxl 07rAWFvvPrCVwkhIWDNOwIincCmcs9lV9r0CUv8EKqER6/lZ0HXxpaSIHQouumEd 27m3oJPg7jh65DazbNLWwoHlkKcUZogsOrc0+RDS/LwQoaDqxecXgGLyvh1sfN8W 5krmNCqZ4sfaJPx7LKJ15GsW0Jb1uG8GE5g+GewFWQnJsGxsDn95cNLh6Wxm4S4+ bzv9Awz51tPb67X/0Zid9Ig/IQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFIrW9Ksx e9bPi1ne2a+X4LmwegAYMB8GA1UdIwQYMBaAFDoaQHRx0b8coVJfIffez1pqKmTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IyMy83NTQ1RjAzQTk3 RDMxMUVFQTIzQzY2MEJDNEY5QUUwMi9PaHBBZEhIUnZ4eWhVbDhoOTk3UFdtb3Fa TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ocEFkSEhSdnh5aFVsOGg5OTdQV21vcVpOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjdCMjMvNzU0NUYwM0E5N0QzMTFFRUEyM0M2NjBCQzRGOUFFMDIvQzEwQ0UwOEM5 N0QzMTFFRTkyOTkzMzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVQYIKwYBBQUHAQcBAf8E RjBEMEIEAgABMDwDBAJnDMgDBAJn/UADBAJxC7gDBAK0XNADBALLEZQDBADLIewD BADLN7wDBADLOQ8DBADLUKgDBAXLwcAwDQYJKoZIhvcNAQELBQADggEBAGU6Eew/ dRTUPDftX51j67tnDy/0dkdX8vlXAXBcpjrltgWXtMp14OIg7kmGnWp4OxPoL0nq 9YO43ktPG7tuDhftxKpzSMDv8jMNnOlkSHGum4N/w3aBeVH9vT1nC8bKlclqs/x5 Yo7hZeFGkr3tJyZlH4hJ1J0oBJBRwL0qP9xVGi/rA6iTSo6lQPeHX3yLbogdd0e7 14OrMFuUkEG1sBgrc0ZYpFOZs6d4Ojyt/xKX/BjZ0KDmG06mBxyusc7hE3E96TBL YgHEpVhmBjPPmkRl5s0o3xwgx2k265ElYqpDJdHVFoIH40S99alRztU/HGF8uLnd sGvWq1gfrwWoPMw= -----END CERTIFICATE-----Generated at Sun Apr 13 04:01:29 2025 by rpki-client