$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/D76AC8AC2EAB11EF9B369566C4F9AE02.roa File: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (raw, json) Hash identifier: roXdyWanhEz1VmVRl+7k+hRwHYExNJ739SbYutF/VAU= Subject key identifier: AF:D5:A7:04:D2:A0:1B:86:92:10:8C:A9:48:5D:75:EA:3E:73:23:F6 Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Certificate serial: 0400 Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/D76AC8AC2EAB11EF9B369566C4F9AE02.roa Signing time: Mon 11 Nov 2024 03:27:54 +0000 ROA not before: Mon 11 Nov 2024 03:27:54 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 132139 IP address blocks: 103.149.62.0/23 maxlen: 23 103.149.62.0/24 maxlen: 24 103.149.63.0/24 maxlen: 24 2405:e440::/32 maxlen: 32 2405:e440::/48 maxlen: 48 2405:e440:1::/48 maxlen: 48 2405:e440:2::/48 maxlen: 48 2405:e440:3::/48 maxlen: 48 2405:e440:4::/46 maxlen: 46 2405:e440:4::/48 maxlen: 48 2405:e440:5::/48 maxlen: 48 2405:e440:6::/48 maxlen: 48 2405:e440:7::/48 maxlen: 48 2405:e440:8::/46 maxlen: 46 2405:e440:8::/48 maxlen: 48 2405:e440:9::/48 maxlen: 48 2405:e440:a::/48 maxlen: 48 2405:e440:b::/48 maxlen: 48 2405:e440:c::/46 maxlen: 46 2405:e440:c::/48 maxlen: 48 2405:e440:d::/48 maxlen: 48 2405:e440:e::/48 maxlen: 48 2405:e440:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1024 (0x400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC Validity Not Before: Nov 11 03:27:54 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=673179ba-ecb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:58:30:c9:b8:e4:96:55:73:ff:72:6b:18: f3:b1:4e:09:6d:e7:fc:c3:72:c3:8b:40:7b:65:14: 62:35:6e:a3:12:3e:02:39:13:5c:65:91:c9:5b:ba: 4b:46:be:f3:07:55:5b:c2:97:ce:86:a3:ae:a8:30: 02:10:5d:4c:3c:0b:ae:ca:34:c1:a9:a5:5e:b7:90: ee:63:38:9b:3b:e9:5a:4e:26:b0:41:8e:7b:c8:44: 72:2f:88:8e:44:ba:a1:6d:aa:9c:7d:84:11:62:7e: c0:ed:df:a8:c8:7e:23:25:53:3f:f3:8f:e6:75:d3: d8:45:e4:e9:c0:c3:ec:c5:29:fa:17:c0:ab:89:8d: 15:03:fb:9a:c4:4f:61:19:c8:9d:7e:bb:7b:96:06: a0:c2:2d:14:f8:7a:92:c5:2f:70:9d:22:5e:30:f3: 2a:68:af:86:79:e9:5d:50:36:6b:9a:e2:b5:6b:da: 11:4a:21:16:b5:3c:1a:5f:69:f1:62:6f:98:cd:92: 16:8e:85:93:39:0d:32:ac:48:2a:11:c8:d3:ec:c8: a7:35:c3:c8:15:5a:94:91:b4:a7:df:89:22:16:c0: 34:d8:34:35:a8:41:3c:26:0a:85:7a:ce:bc:b4:0b: 65:c6:69:a2:47:f1:b3:38:60:bc:ba:f5:1c:a4:d5: 8a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D5:A7:04:D2:A0:1B:86:92:10:8C:A9:48:5D:75:EA:3E:73:23:F6 X509v3 Authority Key Identifier: keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/D76AC8AC2EAB11EF9B369566C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.62.0/23 IPv6: 2405:e440::/32 Signature Algorithm: sha256WithRSAEncryption 48:70:31:67:ec:0c:eb:84:e4:ff:c8:69:82:bf:f7:07:f0:a8: a9:40:b0:86:a8:04:7e:d5:d7:9d:a3:b1:59:fd:1c:b7:34:1a: 3d:be:69:53:f1:0b:ce:c2:fc:78:62:cf:59:ae:ff:5f:d5:c8: 58:9c:95:64:85:fb:9b:57:df:f7:58:e4:ab:21:db:e0:b1:28: 97:7c:bb:0c:db:87:8e:17:8d:b6:33:ee:18:ef:ac:9a:eb:81: ec:95:57:46:2b:a7:ed:b9:b8:67:a9:44:85:2c:a9:4a:86:1f: f0:3c:6a:ce:d6:f9:2d:f3:67:81:68:21:8b:63:15:85:17:f3: e6:60:28:4a:ac:63:8a:0b:6e:37:3a:76:f4:7e:ad:e6:57:b1: 75:92:91:a4:4c:78:be:b7:ab:dc:f4:c5:43:e2:53:ea:c7:ee: 24:f3:d6:ac:91:fa:0c:89:4f:e7:fb:6c:19:a5:86:d5:e4:32: 56:6a:46:b9:81:8b:47:91:ff:04:4c:bd:1a:fe:f2:f4:4e:2f: 4b:3c:ae:bb:e6:2e:91:3e:40:cd:8d:52:f4:12:47:15:13:8b: af:2d:34:f7:32:70:84:b8:c1:6e:22:22:00:77:d3:d0:ca:32: 6f:aa:86:cf:bb:40:25:3d:24:4d:94:d1:9a:d8:00:22:91:3c: 22:ec:0a:47 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEQ0M0I0NEQ1RjkzN0Y2NUU4QkFCOUI3Rjk4N0EzREM5 RDIxMDRBMzIwHhcNMjQxMTExMDMyNzU0WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzMxNzliYS1lY2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnhYMMm45JZVc/9yaxjzsU4Jbef8w3LDi0B7ZRRiNW6jEj4CORNcZZHJW7pL Rr7zB1VbwpfOhqOuqDACEF1MPAuuyjTBqaVet5DuYzibO+laTiawQY57yERyL4iO RLqhbaqcfYQRYn7A7d+oyH4jJVM/84/mddPYReTpwMPsxSn6F8CriY0VA/uaxE9h Gcidfrt7lgagwi0U+HqSxS9wnSJeMPMqaK+GeeldUDZrmuK1a9oRSiEWtTwaX2nx Ym+YzZIWjoWTOQ0yrEgqEcjT7MinNcPIFVqUkbSn34kiFsA02DQ1qEE8JgqFes68 tAtlxmmiR/GzOGC8uvUcpNWKTQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFK/VpwTS oBuGkhCMqUhddeo+cyP2MB8GA1UdIwQYMBaAFNQ7RNX5N/Zei6ubf5h6PcnSEEoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy82ODFDOEY0NjU4 QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzlsNkxxNXRfbUhvOXlkSVFT akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEdEUxZmszOWw2THE1dF9tSG85eWRJUVNqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjdCREMvNjgxQzhGNDY1OEJFMTFFQzhBRUQ1RjJDQzRGOUFFMDIvRDc2QUM4QUMy RUFCMTFFRjlCMzY5NTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnlT4wDQQCAAIwBwMFACQF5EAwDQYJKoZIhvcNAQELBQAD ggEBAEhwMWfsDOuE5P/IaYK/9wfwqKlAsIaoBH7V152jsVn9HLc0Gj2+aVPxC87C /Hhiz1mu/1/VyFiclWSF+5tX3/dY5Ksh2+CxKJd8uwzbh44XjbYz7hjvrJrrgeyV V0Yrp+25uGepRIUsqUqGH/A8as7W+S3zZ4FoIYtjFYUX8+ZgKEqsY4oLbjc6dvR+ reZXsXWSkaRMeL63q9z0xUPiU+rH7iTz1qyR+gyJT+f7bBmlhtXkMlZqRrmBi0eR /wRMvRr+8vROL0s8rrvmLpE+QM2NUvQSRxUTi68tNPcycIS4wW4iIgB309DKMm+q hs+7QCU9JE2U0ZrYACKRPCLsCkc= -----END CERTIFICATE-----Generated at Sun Apr 6 00:34:04 2025 by rpki-client