$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/87F6FDDC880911EB96D8882DC4F9AE02.roa File: 87F6FDDC880911EB96D8882DC4F9AE02.roa (raw, json) Hash identifier: HlAv5VKHlCkHYXAj9IKNWvazVRDv1+Tmr+7FuDlOMWM= Subject key identifier: EC:EE:29:A8:2B:63:F7:BF:47:C7:1C:95:37:96:00:57:62:62:7F:EE Certificate issuer: /CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F Certificate serial: 05F9 Authority key identifier: 76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/87F6FDDC880911EB96D8882DC4F9AE02.roa Signing time: Thu 28 Nov 2024 22:42:30 +0000 ROA not before: Thu 28 Nov 2024 22:42:30 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 133528 IP address blocks: 103.131.88.0/22 maxlen: 22 103.131.88.0/24 maxlen: 24 103.131.89.0/24 maxlen: 24 103.131.90.0/24 maxlen: 24 103.131.91.0/24 maxlen: 24 2403:c8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1529 (0x5f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7E17, serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F Validity Not Before: Nov 28 22:42:30 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6748f1d6-7d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:a0:a3:fd:ec:d7:b1:9b:d3:3c:0a:46:83: d6:75:4e:2a:b2:46:81:45:aa:b3:a4:b6:af:bf:5a: 60:e6:26:7b:ab:e2:d4:3d:a2:20:72:3e:bf:e4:f3: 7e:bc:08:15:e8:48:32:74:16:07:25:98:22:86:86: a9:d8:21:3b:1c:e8:e9:21:51:b8:04:3c:53:81:59: 91:62:72:b7:37:7e:cc:08:25:41:cf:fe:bb:87:1b: 2d:5c:ef:a2:ba:e1:ee:f4:69:9c:dd:b3:19:4a:ab: c1:4e:f6:8c:f5:77:85:7e:a0:ab:25:df:ec:16:84: 8b:ad:f6:f5:a2:2e:65:05:ea:f9:56:fe:99:61:d0: df:fa:23:11:43:71:34:08:61:d8:16:31:c7:12:1f: 7a:f7:e1:fa:d0:35:6f:05:78:ec:f8:04:0e:40:51: b6:0a:e3:13:58:0c:da:ce:62:c5:b8:55:4b:b4:54: b0:70:77:30:aa:79:01:0a:33:0b:8d:75:d4:17:f2: ad:0c:fa:51:1a:d3:07:ee:24:3d:5f:96:1f:56:f7: 8a:a9:48:b6:05:51:60:41:b0:3e:7b:f3:96:d9:41: bb:2a:56:35:0d:93:18:08:7f:56:64:f1:88:05:94: 14:aa:77:64:3f:bd:bb:a1:95:45:ad:d7:e2:4d:11: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EE:29:A8:2B:63:F7:BF:47:C7:1C:95:37:96:00:57:62:62:7F:EE X509v3 Authority Key Identifier: keyid:76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/87F6FDDC880911EB96D8882DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.88.0/22 IPv6: 2403:c8c0::/32 Signature Algorithm: sha256WithRSAEncryption 14:2b:4c:73:b0:0e:76:34:88:7b:24:7c:97:d3:aa:2d:8c:22: d8:2b:6b:f1:c4:17:3e:8c:4c:3a:df:3a:6b:00:6e:e9:5f:53: 33:4c:29:31:1e:39:26:58:e0:49:d2:2f:15:20:5b:2c:de:89: fe:18:ae:1a:2e:82:b9:f0:e2:32:ed:74:6f:75:c5:cb:18:98: 27:9f:bd:84:71:98:4d:1d:26:cc:b7:54:b3:92:4f:10:9a:9b: c6:d3:ff:5d:c6:fd:0d:ff:3c:e3:6e:07:68:63:85:7d:13:d5: 8b:97:10:62:72:bf:9a:80:6e:c0:3d:ca:89:63:eb:d6:24:ec: 04:35:0b:c0:ab:64:00:8a:e4:49:b9:9a:f4:90:40:c2:68:de: 55:34:1e:57:77:9c:9e:52:d8:64:14:61:cf:2d:37:ef:70:e6: 09:c1:72:3c:dc:74:35:8d:c9:97:87:67:94:8a:65:ba:8a:16: 1e:c2:8e:8e:ec:ee:b6:95:da:45:47:89:12:70:02:b4:2d:55: 34:ff:bd:dc:d4:cf:9e:37:26:2e:60:bd:b0:e7:d3:30:da:56: 14:30:cf:cc:bb:8e:c6:24:4e:89:a5:2a:6a:9d:f8:df:67:56: 9d:a6:3e:51:53:12:a7:52:ea:dc:04:c1:5e:32:47:aa:26:3b: a1:a7:ba:0e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdFMTcxMTAvBgNVBAUTKDc2RDFGNjZDMDE2REMxODQ3MzRFNkQ5QkUxQkVFOTA4 MDFGRkEwMUYwHhcNMjQxMTI4MjI0MjMwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ4ZjFkNi03ZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3U6go/3s17Gb0zwKRoPWdU4qskaBRaqzpLavv1pg5iZ7q+LUPaIgcj6/5PN+ vAgV6EgydBYHJZgihoap2CE7HOjpIVG4BDxTgVmRYnK3N37MCCVBz/67hxstXO+i uuHu9Gmc3bMZSqvBTvaM9XeFfqCrJd/sFoSLrfb1oi5lBer5Vv6ZYdDf+iMRQ3E0 CGHYFjHHEh969+H60DVvBXjs+AQOQFG2CuMTWAzazmLFuFVLtFSwcHcwqnkBCjML jXXUF/KtDPpRGtMH7iQ9X5YfVveKqUi2BVFgQbA+e/OW2UG7KlY1DZMYCH9WZPGI BZQUqndkP727oZVFrdfiTREopQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOzuKagr Y/e/R8cclTeWAFdiYn/uMB8GA1UdIwQYMBaAFHbR9mwBbcGEc05tm+G+6QgB/6Af MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0UxNy83QUIwQjU2Njg4 MDcxMUVCQTBBOUI2MkFDNEY5QUUwMi9kdEgyYkFGdHdZUnpUbTJiNGI3cENBSF9v QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0SDJiQUZ0d1lSelRtMmI0YjdwQ0FIX29COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjdFMTcvN0FCMEI1NjY4ODA3MTFFQkEwQTlCNjJBQzRGOUFFMDIvODdGNkZEREM4 ODA5MTFFQjk2RDg4ODJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJng1gwDQQCAAIwBwMFACQDyMAwDQYJKoZIhvcNAQELBQAD ggEBABQrTHOwDnY0iHskfJfTqi2MItgra/HEFz6MTDrfOmsAbulfUzNMKTEeOSZY 4EnSLxUgWyzeif4Yrhougrnw4jLtdG91xcsYmCefvYRxmE0dJsy3VLOSTxCam8bT /13G/Q3/PONuB2hjhX0T1YuXEGJyv5qAbsA9yolj69Yk7AQ1C8CrZACK5Em5mvSQ QMJo3lU0Hld3nJ5S2GQUYc8tN+9w5gnBcjzcdDWNyZeHZ5SKZbqKFh7Cjo7s7raV 2kVHiRJwArQtVTT/vdzUz543Ji5gvbDn0zDaVhQwz8y7jsYkTomlKmqd+N9nVp2m PlFTEqdS6twEwV4yR6omO6Gnug4= -----END CERTIFICATE-----Generated at Sat Apr 12 20:19:36 2025 by rpki-client