$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/8D118442AFEF11EF8ECBD419C4F9AE02.roa File: 8D118442AFEF11EF8ECBD419C4F9AE02.roa (raw, json) Hash identifier: KI2Zth831SHZa7H1q/FJwGft44T3BB5LQxYRDizs6aI= Subject key identifier: 5D:7D:28:16:0F:53:93:FE:52:11:7D:BC:68:03:71:DE:4B:37:06:FF Certificate issuer: /CN=A91C1710/serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228 Certificate serial: 0131 Authority key identifier: C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/8D118442AFEF11EF8ECBD419C4F9AE02.roa Signing time: Sun 01 Dec 2024 14:21:27 +0000 ROA not before: Sun 01 Dec 2024 14:21:27 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 153038 IP address blocks: 103.20.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1710 Validity Not Before: Dec 1 14:21:27 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=674c70e7-be62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:d0:ff:2b:42:7d:3f:28:f3:e3:39:48:4b: 4e:bb:71:0f:0c:5f:22:7f:e4:32:7b:58:ce:ee:1f: c9:37:6a:83:85:13:2d:10:f2:24:2b:53:95:38:f4: eb:45:ee:d1:b9:77:95:6c:9a:18:b9:2f:fd:cb:09: 14:25:31:d7:c0:4a:a4:e4:59:de:e6:c3:07:e1:01: c2:14:20:ca:9b:8b:d9:59:18:b9:f7:5c:2b:09:0f: 4d:a0:25:8f:8c:96:80:0b:17:0b:20:95:b8:48:70: c8:f8:2a:e6:82:8a:39:f3:be:16:f6:53:8d:57:1c: c3:2a:d8:98:8c:0b:63:77:f8:2f:5a:33:69:a8:c3: 6d:de:be:95:f0:61:ec:aa:29:fc:01:76:8f:57:b3: c3:d8:94:0e:bd:51:60:62:d6:f6:09:c2:b6:15:34: aa:94:93:26:0c:65:93:51:ae:ca:1d:c5:48:49:3f: 90:43:57:f0:b7:bb:e3:58:41:41:db:e5:ef:e7:3c: ca:b7:0c:59:4e:fc:24:6d:7a:62:7d:9e:28:9c:e4: 93:d6:c3:01:03:58:6a:d5:0a:02:83:16:7e:21:cc: 37:db:2d:c3:f1:ec:5f:95:37:96:41:2f:40:9e:44: 7b:81:a7:f0:0b:1d:a2:03:a3:6c:c1:c2:03:63:06: 59:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7D:28:16:0F:53:93:FE:52:11:7D:BC:68:03:71:DE:4B:37:06:FF X509v3 Authority Key Identifier: keyid:C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/8D118442AFEF11EF8ECBD419C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.89.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:80:6c:64:26:7b:8b:33:80:a8:db:4a:33:1b:70:95:eb:ee: 89:d9:61:90:3d:07:99:bf:5d:4b:0f:10:c6:93:98:23:2e:fa: 18:2d:9f:c6:aa:e6:c3:a8:7d:d5:2e:86:28:6b:fd:ad:e3:2b: 91:64:92:bd:54:c4:88:92:1e:91:ce:73:c0:86:ee:c2:46:1f: 79:a1:02:f2:0e:8b:55:e7:08:a9:52:66:10:d6:16:9b:25:5d: 8c:14:c8:22:a1:d2:30:c9:ee:8d:c8:ff:d7:bc:e9:ae:46:6d: 33:f6:bc:97:79:89:6f:ae:4d:78:75:28:d1:eb:fb:16:11:d6: 9f:08:38:22:a9:15:be:a9:2a:a7:68:e5:28:86:2d:5c:fc:c6: 6c:b5:31:a7:da:41:b5:de:a4:93:de:d7:3e:b4:27:8e:9a:79: d3:b2:53:83:c0:ed:17:7b:fc:23:df:f8:c0:79:51:c6:3f:4b: 43:dd:93:04:9b:de:80:1d:84:17:3a:f1:25:2b:07:fd:05:72: 40:3f:9f:e9:a9:6b:2f:34:2c:cc:c6:66:f1:f6:6e:07:c0:f3: 6f:72:4a:e1:52:d7:20:99:72:98:79:56:8c:9d:28:fe:8d:74: f5:25:4e:3b:d0:ec:4f:78:e6:fa:52:33:11:82:3c:5a:a1:8b: e6:99:d7:4a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE3MTAxMTAvBgNVBAUTKEM5Mzc1M0E5QUFBMkE4NkU1NkNBNEVBMEMzRkY4NTdD MzBFMzQyMjgwHhcNMjQxMjAxMTQyMTI3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRjNzBlNy1iZTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx37Q/ytCfT8o8+M5SEtOu3EPDF8if+Qye1jO7h/JN2qDhRMtEPIkK1OVOPTr Re7RuXeVbJoYuS/9ywkUJTHXwEqk5Fne5sMH4QHCFCDKm4vZWRi591wrCQ9NoCWP jJaACxcLIJW4SHDI+Crmgoo5874W9lONVxzDKtiYjAtjd/gvWjNpqMNt3r6V8GHs qin8AXaPV7PD2JQOvVFgYtb2CcK2FTSqlJMmDGWTUa7KHcVIST+QQ1fwt7vjWEFB 2+Xv5zzKtwxZTvwkbXpifZ4onOST1sMBA1hq1QoCgxZ+Icw32y3D8exflTeWQS9A nkR7gafwCx2iA6NswcIDYwZZ4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFF19KBYP U5P+UhF9vGgDcd5LNwb/MB8GA1UdIwQYMBaAFMk3U6mqoqhuVspOoMP/hXww40Io MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy NkIxMUVDQTExQkE1MkJDNEY5QUUwMi95VGRUcWFxaXFHNVd5azZnd18tRmZERGpR aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lUZFRxYXFpcUc1V3lrNmd3Xy1GZkREalFpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzE3MTAvMTgyMjlBODY4MjZCMTFFQ0ExMUJBNTJCQzRGOUFFMDIvOEQxMTg0NDJB RkVGMTFFRjhFQ0JENDE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnFFkwDQYJKoZIhvcNAQELBQADggEBABuAbGQme4szgKjb SjMbcJXr7onZYZA9B5m/XUsPEMaTmCMu+hgtn8aq5sOofdUuhihr/a3jK5Fkkr1U xIiSHpHOc8CG7sJGH3mhAvIOi1XnCKlSZhDWFpslXYwUyCKh0jDJ7o3I/9e86a5G bTP2vJd5iW+uTXh1KNHr+xYR1p8IOCKpFb6pKqdo5SiGLVz8xmy1MafaQbXepJPe 1z60J46aedOyU4PA7Rd7/CPf+MB5UcY/S0PdkwSb3oAdhBc68SUrB/0FckA/n+mp ay80LMzGZvH2bgfA829ySuFS1yCZcph5VoydKP6NdPUlTjvQ7E945vpSMxGCPFqh i+aZ10o= -----END CERTIFICATE-----Generated at Sat Apr 5 07:03:42 2025 by rpki-client