$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/F9141F4891AA11EDBEE1242EC4F9AE02.roa File: F9141F4891AA11EDBEE1242EC4F9AE02.roa (raw, json) Hash identifier: wW1wDfapN4aqyKsyA7zutue+89v5koktR+64VobzRks= Subject key identifier: A4:41:73:70:9B:B9:0E:83:50:DC:2A:21:F3:B1:24:59:81:FA:18:7C Certificate issuer: /CN=A91B8C12/serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6 Certificate serial: 0164 Authority key identifier: CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/F9141F4891AA11EDBEE1242EC4F9AE02.roa Signing time: Sun 01 Dec 2024 02:45:35 +0000 ROA not before: Sun 01 Dec 2024 02:45:35 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 58465 IP address blocks: 103.23.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C12 Validity Not Before: Dec 1 02:45:35 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=674bcdcf-3dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:89:32:c2:2f:ea:a5:62:2a:9a:ce:40:78: 99:15:b5:1a:6e:05:dc:16:1c:0e:84:01:09:34:5c: a9:23:ac:18:ab:d7:6e:83:d8:db:85:82:8a:91:f4: 9c:4c:a2:34:e9:eb:13:4e:b6:b6:43:54:4d:91:12: 79:ee:08:72:b1:ec:ba:3c:4b:fd:42:1a:1a:c0:db: 84:03:c6:b2:53:7e:59:f5:41:8e:b6:c4:25:a0:fb: 26:03:12:7f:ef:44:e7:aa:e1:28:4b:0b:ea:81:03: a3:3c:a5:69:e2:9a:3f:d1:79:63:07:0e:96:b0:f1: e3:4d:ec:f4:eb:0e:66:3d:08:7e:63:93:00:1f:c0: 91:36:5a:97:90:ce:44:cc:d4:17:01:25:c7:23:32: d1:9b:e8:dc:f3:a0:18:16:75:92:47:f1:0d:f7:13: c6:dc:6b:b9:db:84:82:43:0e:f4:f1:01:06:07:79: 0f:79:83:4e:ce:03:a9:93:27:b4:8e:fd:9b:50:e8: 07:74:22:c5:4d:2a:29:16:d6:c8:be:93:93:42:b1: 9e:0a:54:e7:57:38:07:47:f3:75:48:4c:e2:a5:dd: 33:b4:52:ad:46:e4:10:9c:51:20:f6:1a:25:9d:e6: 49:52:df:ff:90:39:fa:68:f4:2e:73:1b:84:3d:56: 61:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:41:73:70:9B:B9:0E:83:50:DC:2A:21:F3:B1:24:59:81:FA:18:7C X509v3 Authority Key Identifier: keyid:CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/F9141F4891AA11EDBEE1242EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.23.213.0/24 Signature Algorithm: sha256WithRSAEncryption d2:fb:c9:5d:1f:49:cd:db:31:96:73:4e:bd:20:b6:d3:6d:34: 92:dd:6c:44:ce:87:d1:fc:8c:5c:08:85:ee:80:97:e0:b2:72: 68:18:07:d1:61:bf:4c:80:5d:71:00:5a:48:bd:e4:b4:14:a6: 60:70:5c:c1:43:b0:7d:67:75:bc:bb:b0:06:8f:9c:76:d6:cd: 8d:1c:b7:9b:46:1b:1e:8f:22:3e:14:b3:d9:43:c5:72:d9:5f: 0b:39:66:8e:75:8a:ae:86:5a:b6:21:97:76:57:a9:72:bc:f8: 25:65:ae:7d:d7:7f:42:bc:2f:3d:ec:05:45:bc:ef:71:2e:52: fa:86:c9:e2:f2:63:83:05:c3:f4:61:da:4e:eb:df:ba:81:61: b6:d3:af:f0:8b:3c:0a:c1:ff:2b:ef:b5:f3:d7:26:c2:06:2d: 5c:a6:7d:a1:b5:db:01:b8:6f:3f:13:d8:86:8e:b9:b1:da:33: 57:9e:9b:cb:7f:ac:aa:a4:ba:5c:1f:de:e7:8c:4e:e8:d5:44: 98:af:6c:3a:39:c9:3b:ea:ed:2f:6f:4a:fc:c4:12:8f:17:49: dd:b3:0f:74:c4:48:1d:5d:39:97:3b:53:ee:7b:fd:55:12:23: 6a:20:6d:4c:ab:c2:ff:8d:e6:79:a9:88:23:26:d3:65:b7:c2: 1a:82:39:75 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTIxMTAvBgNVBAUTKENDOEVDNUYxOEUyNDc4NDlBNUM3MDZFOTg1M0I2MTg2 NDhFRUYyQTYwHhcNMjQxMjAxMDI0NTM1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRiY2RjZi0zZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/CJMsIv6qViKprOQHiZFbUabgXcFhwOhAEJNFypI6wYq9dug9jbhYKKkfSc TKI06esTTra2Q1RNkRJ57ghysey6PEv9QhoawNuEA8ayU35Z9UGOtsQloPsmAxJ/ 70TnquEoSwvqgQOjPKVp4po/0XljBw6WsPHjTez06w5mPQh+Y5MAH8CRNlqXkM5E zNQXASXHIzLRm+jc86AYFnWSR/EN9xPG3Gu524SCQw708QEGB3kPeYNOzgOpkye0 jv2bUOgHdCLFTSopFtbIvpOTQrGeClTnVzgHR/N1SEzipd0ztFKtRuQQnFEg9hol neZJUt//kDn6aPQucxuEPVZhRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKRBc3Cb uQ6DUNwqIfOxJFmB+hh8MB8GA1UdIwQYMBaAFMyOxfGOJHhJpccG6YU7YYZI7vKm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMi8zRUQwODUyNjkx QTYxMUVEQjcyQzU5NTZDNEY5QUUwMi96STdGOFk0a2VFbWx4d2JwaFR0aGhranU4 cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJN0Y4WTRrZUVtbHh3YnBoVHRoaGtqdThxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjhDMTIvM0VEMDg1MjY5MUE2MTFFREI3MkM1OTU2QzRGOUFFMDIvRjkxNDFGNDg5 MUFBMTFFREJFRTEyNDJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnF9UwDQYJKoZIhvcNAQELBQADggEBANL7yV0fSc3bMZZz Tr0gttNtNJLdbETOh9H8jFwIhe6Al+CycmgYB9Fhv0yAXXEAWki95LQUpmBwXMFD sH1ndby7sAaPnHbWzY0ct5tGGx6PIj4Us9lDxXLZXws5Zo51iq6GWrYhl3ZXqXK8 +CVlrn3Xf0K8Lz3sBUW873EuUvqGyeLyY4MFw/Rh2k7r37qBYbbTr/CLPArB/yvv tfPXJsIGLVymfaG12wG4bz8T2IaOubHaM1eem8t/rKqkulwf3ueMTujVRJivbDo5 yTvq7S9vSvzEEo8XSd2zD3TESB1dOZc7U+57/VUSI2ogbUyrwv+N5nmpiCMm02W3 whqCOXU= -----END CERTIFICATE-----Generated at Sat Apr 5 02:13:23 2025 by rpki-client