$ rpki-client -vvf rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/24C853F2AE6411EF9E94822AC4F9AE02.roa File: 24C853F2AE6411EF9E94822AC4F9AE02.roa (raw, json) Hash identifier: JDZyv3s2Qwc3bu83urEP0uEoNAGKRBqIwwX8qTLx3RQ= Subject key identifier: 5A:34:BD:46:83:3E:A1:F2:8E:1C:E9:F6:36:EB:31:21:95:6A:F2:ED Certificate issuer: /CN=A91C882A/serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Certificate serial: 68 Authority key identifier: 6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/24C853F2AE6411EF9E94822AC4F9AE02.roa Signing time: Sun 01 Dec 2024 05:47:55 +0000 ROA not before: Sun 01 Dec 2024 05:47:55 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 141347 IP address blocks: 103.157.88.0/24 maxlen: 32 103.157.89.0/24 maxlen: 24 2401:a460::/34 maxlen: 34 2401:a460:4000::/34 maxlen: 34 2401:a460:8000::/34 maxlen: 34 2401:a460:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C882A, serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Validity Not Before: Dec 1 05:47:55 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674bf88b-5da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:44:34:9b:5e:55:85:86:7b:7c:4d:6a:05: fe:16:f6:5c:a4:7e:0d:c9:d4:b4:59:9f:59:e0:91: 02:28:5d:4c:ff:cb:00:83:6a:50:27:02:32:ac:63: c5:11:4e:43:43:02:3f:ea:29:ae:f3:8a:f1:23:4b: db:e2:c3:bd:fc:24:53:78:8b:a5:d0:af:15:32:6b: 4c:3b:2e:67:81:86:73:10:c5:68:d7:6e:4c:e9:a2: 20:41:57:3f:15:90:a4:44:e8:ab:95:41:ed:a7:c9: 72:45:d8:61:9a:a2:74:91:54:b0:47:82:1a:30:b3: ce:65:23:af:71:40:27:5c:6d:30:c7:45:d9:26:e8: 70:32:51:85:10:7e:b4:66:c7:05:21:96:50:49:c9: e9:18:5d:56:63:b8:71:0d:e3:7d:96:7c:9c:87:76: c1:2a:76:72:da:a9:07:19:bd:b6:aa:9b:36:e0:b8: 7b:ba:fc:25:26:44:58:cd:3b:f7:36:b9:b5:1c:f1: 84:66:e6:8f:60:0d:31:aa:b3:18:75:cd:4f:22:ca: 16:b1:c4:5d:f7:14:52:fa:85:e3:76:0f:f1:ad:90: 9b:0b:6e:42:ce:b7:ac:2a:dc:35:21:24:de:4b:f6: 10:02:14:7f:f0:64:60:14:ee:1b:98:8e:9f:4c:62: d0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:34:BD:46:83:3E:A1:F2:8E:1C:E9:F6:36:EB:31:21:95:6A:F2:ED X509v3 Authority Key Identifier: keyid:6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/24C853F2AE6411EF9E94822AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.88.0/23 IPv6: 2401:a460::/32 Signature Algorithm: sha256WithRSAEncryption 07:0f:83:a9:8d:e5:d6:85:48:ea:dc:de:17:19:64:78:7b:22: 9a:b6:0b:ce:63:1e:3d:0e:f0:8b:84:3e:81:f9:a2:0a:84:45: b8:a6:10:8b:ec:26:e2:22:f7:8a:29:80:1c:3e:8f:9c:da:e5: a7:23:d3:1b:ef:1b:1d:69:1b:f5:78:c6:bf:fe:d7:2f:aa:9b: 36:a6:f7:b8:fe:01:18:bf:c2:ff:fd:b2:dd:28:db:af:ea:ad: e5:21:9c:17:c8:39:9b:b3:a3:a9:c3:67:30:13:a8:80:26:08: 7f:8b:35:99:c6:5a:39:31:4c:77:e7:65:07:19:c6:47:4b:1b: a5:eb:82:1c:bd:7c:24:f1:df:02:1a:5d:f3:a1:ba:76:fc:9e: dc:c7:5b:8a:32:b6:1d:98:f8:d9:1b:8b:a4:66:9c:3f:df:f8: c8:f3:3d:12:e1:ee:5b:ac:4d:05:21:ab:a9:a8:d8:62:64:7d: 25:66:4f:ac:83:3e:4b:f2:ec:53:93:42:f0:24:92:fb:f0:d7: e7:e1:a0:44:c1:3e:90:0b:3a:e6:41:5c:13:d7:a9:a3:f9:d7: ef:db:8c:a9:36:17:75:ed:c4:19:6c:ee:2b:42:15:de:a7:93: 0e:c5:e4:78:e1:13:a6:c0:0c:a8:17:76:7e:06:3f:76:da:63: b3:ee:49:a8 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODgyQTExMC8GA1UEBRMoNkZBNjJCRTBBRDc5QTFCNEMzODY5QkExOTkwRjIxNERG NkIzQ0UyNzAeFw0yNDEyMDEwNTQ3NTVaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NGJmODhiLTVkYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDOUQ0m15VhYZ7fE1qBf4W9lykfg3J1LRZn1ngkQIoXUz/ywCDalAnAjKsY8UR TkNDAj/qKa7zivEjS9viw738JFN4i6XQrxUya0w7LmeBhnMQxWjXbkzpoiBBVz8V kKRE6KuVQe2nyXJF2GGaonSRVLBHghows85lI69xQCdcbTDHRdkm6HAyUYUQfrRm xwUhllBJyekYXVZjuHEN432WfJyHdsEqdnLaqQcZvbaqmzbguHu6/CUmRFjNO/c2 ubUc8YRm5o9gDTGqsxh1zU8iyhaxxF33FFL6heN2D/GtkJsLbkLOt6wq3DUhJN5L 9hACFH/wZGAU7huYjp9MYtDBAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUWjS9RoM+ ofKOHOn2NusxIZVq8u0wHwYDVR0jBBgwFoAUb6Yr4K15obTDhpuhmQ8hTfazzicw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4ODJBL0I5QzBDOTdBMjFB MjExRUZCOTA2OUE2QUM0RjlBRTAyL2I2WXI0SzE1b2JURGhwdWhtUThoVGZhenpp Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjZZcjRLMTVvYlREaHB1aG1ROGhUZmF6emljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODgyQS9COUMwQzk3QTIxQTIxMUVGQjkwNjlBNkFDNEY5QUUwMi8yNEM4NTNGMkFF NjQxMUVGOUU5NDgyMkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAWedWDANBAIAAjAHAwUAJAGkYDANBgkqhkiG9w0BAQsFAAOC AQEABw+DqY3l1oVI6tzeFxlkeHsimrYLzmMePQ7wi4Q+gfmiCoRFuKYQi+wm4iL3 iimAHD6PnNrlpyPTG+8bHWkb9XjGv/7XL6qbNqb3uP4BGL/C//2y3Sjbr+qt5SGc F8g5m7OjqcNnMBOogCYIf4s1mcZaOTFMd+dlBxnGR0sbpeuCHL18JPHfAhpd86G6 dvye3MdbijK2HZj42RuLpGacP9/4yPM9EuHuW6xNBSGrqajYYmR9JWZPrIM+S/Ls U5NC8CSS+/DX5+GgRME+kAs65kFcE9epo/nX79uMqTYXde3EGWzuK0IV3qeTDsXk eOETpsAMqBd2fgY/dtpjs+5JqA== -----END CERTIFICATE-----Generated at Sun Apr 13 04:32:03 2025 by rpki-client