$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/B5A58DFAA1DB11EDA7229653C4F9AE02.roa File: B5A58DFAA1DB11EDA7229653C4F9AE02.roa (raw, json) Hash identifier: 4bJR1ae0CXmv08R9QhnGSRGtLcQpBgDCwnqDFh7A4l0= Subject key identifier: DB:CB:80:9A:8B:93:F5:A6:94:5E:E5:E9:9D:11:79:06:A9:6B:D2:B5 Certificate issuer: /CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5 Certificate serial: 02F0 Authority key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/B5A58DFAA1DB11EDA7229653C4F9AE02.roa Signing time: Thu 05 Dec 2024 01:15:32 +0000 ROA not before: Thu 05 Dec 2024 01:15:32 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 40747 IP address blocks: 103.68.200.0/24 maxlen: 24 103.68.201.0/24 maxlen: 24 103.163.77.0/24 maxlen: 30 2001:df1:c081::/48 maxlen: 49 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324 Validity Not Before: Dec 5 01:15:32 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6750feb4-d9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:34:3d:ec:10:48:8d:bc:a1:90:33:e8:8e:7e: a0:6b:fd:c5:65:7d:2e:32:59:75:a3:d7:7c:00:4c: ae:1a:6e:ab:58:cf:f8:63:77:cd:1b:fa:2e:ed:20: 1f:e1:9a:83:13:32:8c:8a:cc:d4:3f:19:f3:ae:79: ff:bc:73:cb:65:44:f1:ec:44:ce:87:0e:6c:88:19: 61:9f:d3:02:40:1f:40:44:1e:45:8f:bc:e4:e6:6a: c4:53:18:59:22:ab:99:76:78:05:c5:dd:4c:06:ca: d0:e3:69:52:05:e6:b6:35:72:e3:31:f0:59:c3:4f: 30:44:2b:63:45:52:09:a5:48:cf:c3:53:f0:1b:d8: a7:90:b5:33:b8:2d:ea:47:98:f7:92:80:47:a9:bb: 4c:f7:4c:86:76:ba:17:15:e9:85:18:26:38:1e:24: 51:2a:49:74:66:75:8d:78:cb:48:a8:b2:bc:03:a3: 01:2b:0c:5c:24:09:74:3f:8c:e2:1e:0f:e4:c9:98: d7:40:d8:69:b3:da:db:f8:e3:01:31:5a:6b:d7:00: a1:00:19:a3:24:31:58:ac:63:e0:c0:8e:22:77:fd: ac:2c:60:71:0b:fb:93:90:8f:57:16:8d:a1:69:87: 7d:e8:d7:1c:aa:b0:05:68:f1:97:d4:34:e8:57:86: b5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CB:80:9A:8B:93:F5:A6:94:5E:E5:E9:9D:11:79:06:A9:6B:D2:B5 X509v3 Authority Key Identifier: keyid:77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/B5A58DFAA1DB11EDA7229653C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.200.0/23 103.163.77.0/24 IPv6: 2001:df1:c081::/48 Signature Algorithm: sha256WithRSAEncryption 36:72:c3:c9:3f:cc:79:b0:1d:14:b3:cf:7d:4a:62:14:fb:21: 8c:d4:be:a4:fb:03:5e:b8:a5:12:48:c8:1b:9c:46:ba:93:1f: ba:08:e2:bd:d7:c7:db:0e:c0:87:e1:2a:53:14:94:61:a2:fb: 96:e3:64:1a:1d:e4:2f:b2:67:8a:03:d9:47:f5:96:26:75:e3: 0b:49:09:d1:9a:13:6d:70:28:d9:b6:5d:c8:8b:d1:17:84:e6: 9a:30:84:a3:8f:67:bb:06:60:88:e8:da:1d:62:a3:1d:ed:51: 27:2e:08:9f:fb:32:7a:3b:fd:d9:66:78:9f:23:42:36:ab:c8: 05:db:8c:bc:38:b6:95:3e:f1:78:6a:c7:c8:c4:42:3f:e4:3b: 6e:9a:57:f3:bb:14:7d:a9:cf:c3:e9:9f:b5:2f:19:1a:7f:b6: 24:90:94:d4:ef:85:12:f0:03:50:a9:e7:c1:6a:32:ef:16:ba: f6:56:0b:b4:1a:6a:b7:a0:a8:70:37:27:4f:5a:0f:f2:37:97: 6d:18:76:55:89:5b:c9:eb:fd:9f:1b:99:5f:a7:52:20:4d:a4: 55:81:f0:85:5f:92:e8:dc:c2:9e:e7:2c:99:dd:d4:de:90:9b: 0b:f6:0d:9e:4e:5b:d2:93:d0:f3:e1:33:53:3e:23:d7:32:a9: 89:2a:e5:11 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDc3Mjg0MUEyNjMyNjMxNEVBMkU0MzgzNDc1REUzMUI2 RENFN0RCQTUwHhcNMjQxMjA1MDExNTMyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwZmViNC1kOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTQ97BBIjbyhkDPojn6ga/3FZX0uMll1o9d8AEyuGm6rWM/4Y3fNG/ou7SAf 4ZqDEzKMiszUPxnzrnn/vHPLZUTx7ETOhw5siBlhn9MCQB9ARB5Fj7zk5mrEUxhZ IquZdngFxd1MBsrQ42lSBea2NXLjMfBZw08wRCtjRVIJpUjPw1PwG9inkLUzuC3q R5j3koBHqbtM90yGdroXFemFGCY4HiRRKkl0ZnWNeMtIqLK8A6MBKwxcJAl0P4zi Hg/kyZjXQNhps9rb+OMBMVpr1wChABmjJDFYrGPgwI4id/2sLGBxC/uTkI9XFo2h aYd96NccqrAFaPGX1DToV4a1QwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFNvLgJqL k/WmlF7l6Z0ReQapa9K1MB8GA1UdIwQYMBaAFHcoQaJjJjFOouQ4NHXeMbbc59ul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC9FRjgzRTMwRUQw MDkxMUVDOTJBMTZBM0NDNEY5QUUwMi9keWhCb21NbU1VNmk1RGcwZGQ0eHR0em4y NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R5aEJvbU1tTVU2aTVEZzBkZDR4dHR6bjI2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkzMjQvRUY4M0UzMEVEMDA5MTFFQzkyQTE2QTNDQzRGOUFFMDIvQjVBNThERkFB MURCMTFFREE3MjI5NjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnRMgDBABno00wDwQCAAIwCQMHACABDfHAgTANBgkqhkiG 9w0BAQsFAAOCAQEANnLDyT/MebAdFLPPfUpiFPshjNS+pPsDXrilEkjIG5xGupMf ugjivdfH2w7Ah+EqUxSUYaL7luNkGh3kL7JnigPZR/WWJnXjC0kJ0ZoTbXAo2bZd yIvRF4TmmjCEo49nuwZgiOjaHWKjHe1RJy4In/syejv92WZ4nyNCNqvIBduMvDi2 lT7xeGrHyMRCP+Q7bppX87sUfanPw+mftS8ZGn+2JJCU1O+FEvADUKnnwWoy7xa6 9lYLtBpqt6CocDcnT1oP8jeXbRh2VYlbyev9nxuZX6dSIE2kVYHwhV+S6NzCnucs md3U3pCbC/YNnk5b0pPQ8+EzUz4j1zKpiSrlEQ== -----END CERTIFICATE-----Generated at Fri Apr 4 23:38:28 2025 by rpki-client