$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/C698E13ED1BD11EF9C00D867C4F9AE02.roa File: C698E13ED1BD11EF9C00D867C4F9AE02.roa (raw, json) Hash identifier: xRbmb+/1S1f8++5LVT2TgnO4g2wWlkEYjHuBK2BLWRw= Subject key identifier: 03:D5:D9:90:A2:CC:D6:C4:9D:90:4B:9D:B1:16:40:80:DC:DA:6F:4F Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: 010D Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/C698E13ED1BD11EF9C00D867C4F9AE02.roa Signing time: Mon 13 Jan 2025 14:50:48 +0000 ROA not before: Mon 13 Jan 2025 14:50:48 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.190.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33 Validity Not Before: Jan 13 14:50:48 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67852848-eb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e1:8a:d7:10:6b:5b:91:c4:08:d4:8f:e4:01: f4:ca:b9:39:2e:b9:c2:22:bd:2a:6c:eb:9f:73:ff: 14:e2:02:17:bd:6f:bf:97:ef:9d:a3:11:d9:7e:1a: ff:64:50:8f:22:cb:e6:6e:6a:e2:25:36:f7:81:fa: d5:79:16:2f:83:c8:7d:e0:e5:98:4f:12:dc:7a:ef: 9a:a3:88:f6:e7:22:37:82:c1:ad:26:24:80:50:de: 7c:0d:79:43:3d:28:f6:51:bb:a0:00:aa:1d:9b:19: 0c:5a:66:85:d2:61:d0:77:1d:07:fa:0c:cc:51:83: 6a:13:85:85:8b:f3:18:21:71:bb:fa:cc:3c:27:44: a9:51:19:93:72:ec:e5:27:a6:67:29:44:c2:7c:c8: e3:82:52:b4:06:c4:7b:a7:51:42:bb:6a:d3:4d:e1: 36:2c:ec:6b:27:76:fc:a6:9d:54:8e:0d:16:ad:69: 20:af:f5:74:e6:e8:b1:e7:76:d9:14:0e:3c:bb:8e: 26:9f:c9:65:4f:ee:08:49:03:60:eb:c1:ae:99:47: 64:f5:90:e0:61:e9:c1:5c:69:73:82:ee:1f:a0:57: 42:08:72:64:24:f8:07:31:cb:b4:53:d3:07:e4:f5: 86:27:50:b9:e6:03:84:e2:bb:65:9a:fb:a9:d6:f1: 6c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D5:D9:90:A2:CC:D6:C4:9D:90:4B:9D:B1:16:40:80:DC:DA:6F:4F X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/C698E13ED1BD11EF9C00D867C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.70.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:d4:e9:74:94:be:7d:1c:e2:5a:93:cd:7b:0d:d4:34:08:e3: 60:c9:16:db:09:5c:89:c6:e4:69:4a:7a:cf:09:23:ee:3a:b5: 79:b4:9f:bb:73:0a:52:6c:a0:4e:40:76:a1:0a:8f:ca:40:5d: 04:5d:98:7b:ce:e1:6d:64:0f:d3:09:a7:ba:4e:8b:a5:2a:25: a2:8e:11:0b:c0:6e:56:3c:88:0a:38:8f:b2:6d:25:27:59:fb: 20:8a:db:5c:38:cb:7b:af:62:c2:0a:e8:25:84:5f:6c:5a:6d: 2f:23:9d:b1:4e:ee:6b:68:41:93:48:1a:c0:b2:05:2f:98:1c: 9d:bf:d7:aa:34:92:26:5a:55:fa:00:9d:35:fc:2e:3f:65:79: 20:fe:b3:ab:82:b2:64:98:74:f5:43:6e:16:2f:1c:1d:12:1e: 8f:2e:52:f1:06:46:8e:cf:e0:0c:e5:c8:f3:b2:41:0c:c5:c2: da:55:41:36:94:4d:d6:d6:37:84:fa:da:e1:56:fb:04:67:b8: d5:43:33:d2:e5:a6:96:69:d2:b5:f2:b3:3e:b1:47:98:18:2f: ac:df:0e:ba:56:24:3c:51:27:b8:50:31:21:1b:7b:a4:80:04: b7:7f:48:e6:ac:21:50:8b:10:93:79:cf:e2:9f:7e:d8:9b:b1: 7c:23:9c:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjUwMTEzMTQ1MDQ4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg1Mjg0OC1lYjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuGK1xBrW5HECNSP5AH0yrk5LrnCIr0qbOufc/8U4gIXvW+/l++doxHZfhr/ ZFCPIsvmbmriJTb3gfrVeRYvg8h94OWYTxLceu+ao4j25yI3gsGtJiSAUN58DXlD PSj2UbugAKodmxkMWmaF0mHQdx0H+gzMUYNqE4WFi/MYIXG7+sw8J0SpURmTcuzl J6ZnKUTCfMjjglK0BsR7p1FCu2rTTeE2LOxrJ3b8pp1Ujg0WrWkgr/V05uix53bZ FA48u44mn8llT+4ISQNg68GumUdk9ZDgYenBXGlzgu4foFdCCHJkJPgHMcu0U9MH 5PWGJ1C55gOE4rtlmvup1vFs5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFAPV2ZCi zNbEnZBLnbEWQIDc2m9PMB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjhEMzMvNTk2MjY3MTA0Nzc3MTFFRUE2QkQ1MzdFQzRGOUFFMDIvQzY5OEUxM0VE MUJEMTFFRjlDMDBEODY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnvkYwDQYJKoZIhvcNAQELBQADggEBACvU6XSUvn0c4lqT zXsN1DQI42DJFtsJXInG5GlKes8JI+46tXm0n7tzClJsoE5AdqEKj8pAXQRdmHvO 4W1kD9MJp7pOi6UqJaKOEQvAblY8iAo4j7JtJSdZ+yCK21w4y3uvYsIK6CWEX2xa bS8jnbFO7mtoQZNIGsCyBS+YHJ2/16o0kiZaVfoAnTX8Lj9leSD+s6uCsmSYdPVD bhYvHB0SHo8uUvEGRo7P4AzlyPOyQQzFwtpVQTaUTdbWN4T62uFW+wRnuNVDM9Ll ppZp0rXysz6xR5gYL6zfDrpWJDxRJ7hQMSEbe6SABLd/SOasIVCLEJN5z+Kfftib sXwjnFk= -----END CERTIFICATE-----Generated at Sun Apr 6 01:40:52 2025 by rpki-client