$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/28FC424AA93711EE91871F0AC4F9AE02.roa File: 28FC424AA93711EE91871F0AC4F9AE02.roa (raw, json) Hash identifier: g8Elzlw4tRoXrBliL3a4u/fyR/SHOUoxq/RpKAIAzgk= Subject key identifier: 41:E6:10:DD:0D:1E:E6:06:A7:B8:BB:65:BA:47:DD:51:61:1F:76:EA Certificate issuer: /CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Certificate serial: BA Authority key identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/28FC424AA93711EE91871F0AC4F9AE02.roa Signing time: Tue 03 Dec 2024 04:38:56 +0000 ROA not before: Tue 03 Dec 2024 04:38:56 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 151983 IP address blocks: 103.253.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1D4 Validity Not Before: Dec 3 04:38:56 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674e8b5f-87ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:73:8d:cf:d8:59:51:ce:f0:31:b0:fe:24: 62:7c:16:a1:28:c3:33:36:34:97:16:73:e0:6c:b9: 3a:88:bd:26:bb:09:81:bc:63:6b:0c:a2:d0:b6:85: 0c:e0:d5:b1:2e:30:49:e4:da:14:64:84:ec:af:82: 85:f3:f7:56:ed:a7:9d:c7:1f:8f:83:eb:f4:52:8f: 57:4a:ed:bd:27:0e:f8:ea:cc:04:a5:cb:6d:28:66: 5d:96:55:b5:24:3a:1d:55:6b:ac:fd:90:6a:3e:7c: 36:57:07:ae:4b:88:64:29:a0:93:58:b3:26:91:c4: 1e:e2:21:1b:68:fe:ee:ab:62:02:bd:e1:62:21:15: e1:e6:71:25:5a:d0:79:f5:4b:c9:58:37:83:92:a3: 30:43:b1:bd:c8:02:20:f5:e6:2b:3d:13:1b:16:46: 8d:41:b5:3a:37:48:ba:26:21:bf:ed:7c:42:27:d2: ee:03:97:a5:26:aa:bc:9a:c1:07:c6:74:ea:73:de: e8:10:cc:0f:b9:b1:45:2f:49:9b:d2:52:0c:32:4a: 4b:b8:28:b2:8c:bd:35:dd:1a:7c:6a:37:25:1c:70: de:41:2b:87:c9:bb:bc:5a:e7:6e:6a:72:71:f1:0d: c3:59:78:c3:b8:34:86:5c:1f:d2:90:ae:73:e4:13: 1e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E6:10:DD:0D:1E:E6:06:A7:B8:BB:65:BA:47:DD:51:61:1F:76:EA X509v3 Authority Key Identifier: keyid:2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/28FC424AA93711EE91871F0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.253.18.0/23 Signature Algorithm: sha256WithRSAEncryption 00:e8:7a:7c:fa:7a:98:bd:23:7a:c4:fa:c2:9a:95:3a:97:9c: cc:58:cd:71:ba:b5:01:51:95:0b:6c:21:8e:c6:ae:d8:b9:bc: d4:3c:8c:f0:a2:26:08:61:d2:9c:73:48:68:81:87:66:a6:c1: 17:ee:c9:48:2f:1c:03:e3:04:f9:4a:32:fe:c5:c6:3e:c1:ad: 43:21:c0:b8:c5:c9:91:1f:7e:e2:89:f8:1d:69:d3:7f:58:67: 77:7c:b8:5f:0f:50:4b:54:27:6c:e1:2a:c5:58:99:69:85:be: 79:4d:bc:d7:33:1f:1d:57:3c:9c:80:60:18:59:c1:b5:06:00: 50:4f:11:b8:8a:34:6e:84:85:eb:b0:1b:b8:cb:a1:4b:d4:a4: 0d:a8:7a:52:0f:b6:55:31:f3:7e:f4:a7:33:c8:02:91:94:ad: 2c:33:ad:83:0f:c3:76:8d:77:56:0b:0e:17:28:8e:ea:f4:5b: 36:18:a2:96:74:f6:ea:9d:34:c3:9c:dc:ad:75:79:28:8f:ba: 99:22:b2:4e:23:63:c2:4d:44:a2:38:1a:a5:f1:b6:0e:f5:9a: 8b:3a:28:89:f9:ed:59:91:fc:61:5b:a6:6e:b1:18:66:f6:6b: 3f:64:25:3e:bf:dd:c0:23:9b:2c:2d:63:31:ef:47:b7:f6:16: 14:cf:ca:b9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExRDQxMTAvBgNVBAUTKDJDMkM1QzlBNzg1RjJFQTczNDA3OUMxNDBFM0E0NzE5 QjM4NkQzODMwHhcNMjQxMjAzMDQzODU2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRlOGI1Zi04N2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA1zjc/YWVHO8DGw/iRifBahKMMzNjSXFnPgbLk6iL0muwmBvGNrDKLQtoUM 4NWxLjBJ5NoUZITsr4KF8/dW7aedxx+Pg+v0Uo9XSu29Jw746swEpcttKGZdllW1 JDodVWus/ZBqPnw2VweuS4hkKaCTWLMmkcQe4iEbaP7uq2ICveFiIRXh5nElWtB5 9UvJWDeDkqMwQ7G9yAIg9eYrPRMbFkaNQbU6N0i6JiG/7XxCJ9LuA5elJqq8msEH xnTqc97oEMwPubFFL0mb0lIMMkpLuCiyjL013Rp8ajclHHDeQSuHybu8WuduanJx 8Q3DWXjDuDSGXB/SkK5z5BMetQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEHmEN0N HuYGp7i7ZbpH3VFhH3bqMB8GA1UdIwQYMBaAFCwsXJp4Xy6nNAecFA46RxmzhtOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFENC81NTQ1RTIxQ0E5 MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxxYzBCNXdVRGpwSEdiT0cw NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xDeGNtbmhmTHFjMEI1d1VEanBIR2JPRzA0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkExRDQvNTU0NUUyMUNBOTM2MTFFRTg4NEFCMTU5QzRGOUFFMDIvMjhGQzQyNEFB OTM3MTFFRTkxODcxRjBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn/RIwDQYJKoZIhvcNAQELBQADggEBAADoenz6epi9I3rE +sKalTqXnMxYzXG6tQFRlQtsIY7Grti5vNQ8jPCiJghh0pxzSGiBh2amwRfuyUgv HAPjBPlKMv7Fxj7BrUMhwLjFyZEffuKJ+B1p039YZ3d8uF8PUEtUJ2zhKsVYmWmF vnlNvNczHx1XPJyAYBhZwbUGAFBPEbiKNG6EheuwG7jLoUvUpA2oelIPtlUx8370 pzPIApGUrSwzrYMPw3aNd1YLDhcojur0WzYYopZ09uqdNMOc3K11eSiPupkisk4j Y8JNRKI4GqXxtg71mos6KIn57VmR/GFbpm6xGGb2az9kJT6/3cAjmywtYzHvR7f2 FhTPyrk= -----END CERTIFICATE-----Generated at Sat Apr 5 01:57:53 2025 by rpki-client