$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/5B4A5E7EB7CF11EF860F535AC4F9AE02.roa File: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (raw, json) Hash identifier: P4e7hg24wbNE0iYWlZNKVYCuvbgx+YoBC75Ik3ogStQ= Subject key identifier: FD:01:E5:B0:9C:80:24:93:22:51:99:B9:40:7A:F9:81:4F:31:76:34 Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 05 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/5B4A5E7EB7CF11EF860F535AC4F9AE02.roa Signing time: Wed 11 Dec 2024 14:51:09 +0000 ROA not before: Wed 11 Dec 2024 14:51:09 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 7155 IP address blocks: 103.217.100.0/24 maxlen: 24 103.217.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485 Validity Not Before: Dec 11 14:51:09 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6759a6dd-d962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ad:df:2b:dc:8b:fd:5a:60:cc:ad:b0:bd:6a: 42:17:ce:96:2a:6e:12:00:bf:74:9c:78:5d:a7:31: ab:d0:eb:ce:c0:27:da:d1:68:41:3f:75:7c:90:f9: 9e:b7:15:08:ad:49:9f:6d:52:a4:c8:33:87:55:72: bd:60:06:70:40:0f:2e:cc:07:ff:b7:e9:d3:59:3d: de:03:e7:ca:7b:5e:f1:28:50:c2:f3:eb:61:a8:8b: 19:6a:6b:b1:d9:be:4f:1e:03:11:03:5b:ba:1f:1f: 94:b7:04:bc:04:d0:b4:8b:a4:23:d8:96:32:d5:4d: 0a:fe:48:e7:c7:f8:0a:52:ae:19:e1:d0:34:d8:de: 08:4f:a9:fd:dd:ad:4d:ab:8f:19:4c:24:66:18:db: 0c:43:1e:89:53:89:8a:f7:b1:0d:9e:ef:03:f8:78: 42:1a:38:b1:56:f7:6d:82:b4:9b:69:b8:b9:79:b0: 55:28:91:1e:a2:a6:2a:46:53:2b:de:f7:53:25:c0: 8b:d5:0f:c9:70:d7:5d:bc:dd:7b:e1:97:00:13:96: ad:0d:3e:6b:73:66:e4:d4:f3:3e:32:58:47:0c:fb: 6b:55:bc:48:8c:49:47:86:54:fc:d3:4c:7d:b5:b7: 4f:48:d9:e8:bc:7f:0e:fe:40:e2:4e:5f:8f:6c:cd: 72:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:01:E5:B0:9C:80:24:93:22:51:99:B9:40:7A:F9:81:4F:31:76:34 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/5B4A5E7EB7CF11EF860F535AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.217.100.0/24 103.217.102.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:3e:57:31:51:ca:a5:21:7d:64:6f:ea:37:8e:d0:72:ec:b8: cb:4b:6c:9a:dc:e4:a4:92:f0:f4:ae:cd:b9:64:a9:b1:26:11: 58:b0:e2:c2:5e:ba:e0:96:e7:a3:0c:d9:b2:55:41:45:af:96: 86:c0:ee:b4:33:3e:88:68:b6:0c:04:d2:af:60:17:7f:50:95: fb:63:0c:bf:28:63:d1:dd:e4:61:32:67:d3:99:ac:23:92:6d: ae:47:b6:54:06:e3:3e:20:e5:9b:37:6d:83:b1:3e:37:ed:46: 15:0d:d0:27:f2:a9:8a:d8:5a:3c:4c:43:ee:d2:a8:2a:c2:31: 8b:93:a4:c8:9f:d8:b5:82:1e:fd:cc:b2:cf:5d:c6:ab:06:97: fb:93:ec:1b:37:73:f1:cf:f0:1a:1c:13:5a:b0:c0:66:9e:40: b8:87:01:20:26:80:38:42:b2:43:63:fc:be:88:2c:da:b8:35: 44:2f:21:f8:0a:01:51:69:ca:60:a6:a4:6e:14:45:3d:3a:6c: b1:36:83:3a:f6:a3:8d:e5:b0:87:23:4c:d5:2a:87:4d:71:5e: 88:8b:65:16:50:2b:8a:6b:f5:59:28:2e:80:50:38:cd:33:2c: e2:a6:3c:8b:27:fb:7b:be:ea:9e:76:15:07:99:8d:c5:94:99: e0:c3:6b:6b -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODQ4NTExMC8GA1UEBRMoQTU4ODc4NkUyRkQ4OENGQUFGNTNBQUEyOTZDMzY0NDYw RUU2RUE2RDAeFw0yNDEyMTExNDUxMDlaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NTlhNmRkLWQ5NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgrd8r3Iv9WmDMrbC9akIXzpYqbhIAv3SceF2nMavQ687AJ9rRaEE/dXyQ+Z63 FQitSZ9tUqTIM4dVcr1gBnBADy7MB/+36dNZPd4D58p7XvEoUMLz62Goixlqa7HZ vk8eAxEDW7ofH5S3BLwE0LSLpCPYljLVTQr+SOfH+ApSrhnh0DTY3ghPqf3drU2r jxlMJGYY2wxDHolTiYr3sQ2e7wP4eEIaOLFW922CtJtpuLl5sFUokR6ipipGUyve 91MlwIvVD8lw11283XvhlwATlq0NPmtzZuTU8z4yWEcM+2tVvEiMSUeGVPzTTH21 t09I2ei8fw7+QOJOX49szXL9AgMBAAGjggKbMIIClzAdBgNVHQ4EFgQU/QHlsJyA JJMiUZm5QHr5gU8xdjQwHwYDVR0jBBgwFoAUpYh4bi/YjPqvU6qilsNkRg7m6m0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4NDg1LzJEQkNFRjQ2QjQx MjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcFloNGJpX1lqUHF2VTZxaWxzTmtSZzdtNm0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi81QjRBNUU3RUI3 Q0YxMUVGODYwRjUzNUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAGfZZAMEAGfZZjANBgkqhkiG9w0BAQsFAAOCAQEAWj5XMVHK pSF9ZG/qN47Qcuy4y0tsmtzkpJLw9K7NuWSpsSYRWLDiwl664JbnowzZslVBRa+W hsDutDM+iGi2DATSr2AXf1CV+2MMvyhj0d3kYTJn05msI5Jtrke2VAbjPiDlmzdt g7E+N+1GFQ3QJ/KpithaPExD7tKoKsIxi5OkyJ/YtYIe/cyyz13GqwaX+5PsGzdz 8c/wGhwTWrDAZp5AuIcBICaAOEKyQ2P8vogs2rg1RC8h+AoBUWnKYKakbhRFPTps sTaDOvajjeWwhyNM1SqHTXFeiItlFlArimv1WSgugFA4zTMs4qY8iyf7e77qnnYV B5mNxZSZ4MNraw== -----END CERTIFICATE-----Generated at Sat Apr 5 01:55:04 2025 by rpki-client