$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/452D9EF494F811ED85ADE381C4F9AE02.roa File: 452D9EF494F811ED85ADE381C4F9AE02.roa (raw, json) Hash identifier: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo= Subject key identifier: 75:27:34:B5:6C:7A:81:79:08:87:46:06:9C:5D:16:D4:13:B0:11:A8 Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Certificate serial: 0192 Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/452D9EF494F811ED85ADE381C4F9AE02.roa Signing time: Sun 23 Feb 2025 04:36:25 +0000 ROA not before: Sun 23 Feb 2025 04:36:25 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137406 IP address blocks: 103.107.156.0/22 maxlen: 24 2403:8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8066 Validity Not Before: Feb 23 04:36:25 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67baa5c9-573e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:36:31:50:69:b9:44:79:84:a0:16:39:5b:1c: 49:0b:e0:30:44:c2:8d:07:31:45:8a:9e:d1:9f:aa: 34:54:7a:e2:8c:16:ba:29:36:78:50:5f:3e:bc:c8: 0f:f7:8f:fd:20:61:69:db:d8:02:ff:8a:8f:36:b1: b7:a8:f8:b2:c9:2d:d8:73:76:80:c4:22:56:f4:5b: 02:5e:6f:57:b9:a3:06:11:71:cd:5a:cb:27:bf:df: ec:53:fb:69:f7:99:11:e2:04:af:ce:4e:c7:f1:f8: 72:11:5e:7a:29:c1:4e:b4:8a:3b:91:a6:cb:82:1e: 7f:75:bf:69:a3:16:9f:05:af:10:fd:3f:81:17:b4: d1:a8:1b:fb:0c:18:5a:21:b8:ee:c3:a3:c5:56:02: 4f:dd:37:d0:c8:3a:90:22:00:eb:f6:f8:3a:50:a0: 12:71:20:a8:40:66:30:2d:4b:c0:f5:b2:9d:55:3e: 63:b8:f1:8f:5b:3c:57:3f:a1:03:23:10:df:23:1b: ce:90:4b:8a:43:74:10:44:9e:2e:97:e9:e6:99:53: d1:01:0a:a0:d0:90:2d:d1:e2:17:4e:d6:37:a7:0d: 6c:3c:a8:03:79:4f:c7:24:d9:fa:1b:11:ee:a7:b8: 7d:72:d0:10:31:01:f1:fc:9a:be:78:a1:09:e2:58: b8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:27:34:B5:6C:7A:81:79:08:87:46:06:9C:5D:16:D4:13:B0:11:A8 X509v3 Authority Key Identifier: keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/452D9EF494F811ED85ADE381C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.107.156.0/22 IPv6: 2403:8c0::/32 Signature Algorithm: sha256WithRSAEncryption 92:a9:65:1b:fc:00:9d:f8:86:cf:18:a0:33:f7:c9:52:e2:f1: e6:d2:a5:23:35:6b:99:e4:d0:da:41:b1:28:11:af:ed:03:9b: c1:6e:7e:ac:6c:c2:c5:c1:0b:ae:32:16:bf:3d:1e:75:a3:82: 51:34:9e:03:e5:64:70:84:c3:9d:69:f5:98:fa:2b:71:24:11: bb:46:52:d3:ba:f7:10:b2:8f:8f:c9:30:99:e5:d0:72:a3:b5: 31:95:62:de:5c:a0:e2:15:2d:7b:c9:a9:be:43:39:23:98:f4: 52:8b:b8:1d:05:93:23:d1:fc:9f:8c:8e:78:68:12:11:97:18: 0e:94:65:25:ee:a7:14:17:70:9b:ba:78:3f:be:83:f9:61:1e: bf:d7:9d:50:67:e6:c6:df:c0:cd:2f:85:d0:82:68:d8:17:98: 90:48:c4:71:18:ee:8d:92:84:8d:ec:83:75:64:0e:aa:7c:f4: 88:e8:0b:7c:1c:44:87:82:d2:9f:1a:b9:db:3e:4b:5e:ac:63: b0:22:41:3a:7c:2e:af:d7:29:bf:1d:9b:cf:82:d9:d5:b3:f9: d6:ad:7f:a5:11:32:06:e8:00:b2:5f:45:7b:ba:b9:3a:53:80: f9:35:78:d4:82:55:33:02:b6:23:e4:55:41:7c:b6:cd:4b:cd: 05:46:06:e8 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz NUE1MUFBOUUwHhcNMjUwMjIzMDQzNjI1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JhYTVjOS01NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzYxUGm5RHmEoBY5WxxJC+AwRMKNBzFFip7Rn6o0VHrijBa6KTZ4UF8+vMgP 94/9IGFp29gC/4qPNrG3qPiyyS3Yc3aAxCJW9FsCXm9XuaMGEXHNWssnv9/sU/tp 95kR4gSvzk7H8fhyEV56KcFOtIo7kabLgh5/db9poxafBa8Q/T+BF7TRqBv7DBha Ibjuw6PFVgJP3TfQyDqQIgDr9vg6UKAScSCoQGYwLUvA9bKdVT5juPGPWzxXP6ED IxDfIxvOkEuKQ3QQRJ4ul+nmmVPRAQqg0JAt0eIXTtY3pw1sPKgDeU/HJNn6GxHu p7h9ctAQMQHx/Jq+eKEJ4li48QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFHUnNLVs eoF5CIdGBpxdFtQTsBGoMB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0 RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzgwNjYvMThBNTEyNDg5NEY1MTFFREIxMEJDMjdEQzRGOUFFMDIvNDUyRDlFRjQ5 NEY4MTFFRDg1QURFMzgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJna5wwDQQCAAIwBwMFACQDCMAwDQYJKoZIhvcNAQELBQAD ggEBAJKpZRv8AJ34hs8YoDP3yVLi8ebSpSM1a5nk0NpBsSgRr+0Dm8FufqxswsXB C64yFr89HnWjglE0ngPlZHCEw51p9Zj6K3EkEbtGUtO69xCyj4/JMJnl0HKjtTGV Yt5coOIVLXvJqb5DOSOY9FKLuB0FkyPR/J+MjnhoEhGXGA6UZSXupxQXcJu6eD++ g/lhHr/XnVBn5sbfwM0vhdCCaNgXmJBIxHEY7o2ShI3sg3VkDqp89IjoC3wcRIeC 0p8auds+S16sY7AiQTp8Lq/XKb8dm8+C2dWz+datf6URMgboALJfRXu6uTpTgPk1 eNSCVTMCtiPkVUF8ts1LzQVGBug= -----END CERTIFICATE-----Generated at Sat Apr 5 01:50:43 2025 by rpki-client