$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/5221650C5ADE11EFBE0B0841C4F9AE02.roa File: 5221650C5ADE11EFBE0B0841C4F9AE02.roa (raw, json) Hash identifier: DfXJNnGu5R78q4knIp+T6nbwy/V4l/65/i/LBotIC/s= Subject key identifier: FD:4E:1F:78:80:3F:BF:94:C0:4D:EE:49:56:7C:8B:AC:73:5A:D1:A4 Certificate issuer: /CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Certificate serial: 3B Authority key identifier: 81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/5221650C5ADE11EFBE0B0841C4F9AE02.roa Signing time: Fri 29 Nov 2024 05:49:47 +0000 ROA not before: Fri 29 Nov 2024 05:49:47 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 26658 IP address blocks: 103.197.216.0/22 maxlen: 22 220.158.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDC32 Validity Not Before: Nov 29 05:49:47 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674955fb-bbc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d7:98:6c:59:07:af:22:1f:38:41:d6:b1:74: b3:e6:49:6f:18:0d:3b:24:32:8a:d3:9f:dc:ae:ff: 3a:a2:02:a9:56:0b:9f:cd:c7:f3:33:29:66:0f:9b: cd:64:84:f3:62:16:5e:30:a3:35:d7:ac:5b:b7:fd: 4a:da:96:38:20:cd:5e:47:e2:8f:03:85:e3:86:de: 40:ae:76:0a:2e:e7:4f:0b:8b:55:d8:13:36:10:fc: 60:20:32:c5:76:c1:d2:96:31:f6:d6:a8:f0:5f:b2: 2f:32:5f:fc:35:6a:a8:c0:15:b3:92:93:01:d8:ca: 3c:2a:f2:5e:5e:20:44:eb:e1:dc:ce:0f:2f:15:40: 1f:9d:a1:73:c8:ee:5c:11:ef:5f:68:b0:0b:62:0f: 9e:a7:1a:68:9a:8e:36:6a:37:1f:71:0f:8f:15:61: 51:2b:25:60:69:d9:25:fa:88:30:7a:38:1f:85:dd: 7f:4b:a7:cc:0d:de:25:c9:22:95:83:eb:00:e1:27: 66:48:93:e1:79:e1:77:b3:d1:5e:f3:54:9f:4b:59: a5:8d:b5:06:97:0f:3e:37:05:b0:3a:dc:3d:9e:0b: 7c:c7:99:ec:8d:ac:d5:9a:7d:39:93:8d:6d:12:a0: bb:d6:59:4c:db:8c:74:74:ba:38:38:70:07:45:a9: 88:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4E:1F:78:80:3F:BF:94:C0:4D:EE:49:56:7C:8B:AC:73:5A:D1:A4 X509v3 Authority Key Identifier: keyid:81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/5221650C5ADE11EFBE0B0841C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.216.0/22 220.158.252.0/22 Signature Algorithm: sha256WithRSAEncryption 83:12:58:9e:df:b0:6f:54:73:c1:97:59:68:26:6a:6b:e0:68: 47:fb:00:1f:53:89:b7:ef:ff:2a:3b:c6:20:0b:f1:ab:9f:f2: 14:21:b7:82:22:81:42:64:09:f4:fe:0f:04:de:d5:33:f3:8b: 9f:ec:b4:5f:b5:c3:08:0f:c0:8e:81:72:80:7b:a6:71:4b:15: 21:62:18:39:fb:2b:95:7e:0a:d2:f0:59:66:d1:a5:a9:59:f6: 34:75:77:c8:c4:bb:3a:64:aa:51:97:0b:a0:50:98:9a:49:98: bd:a5:42:07:a5:4f:83:19:fa:09:35:8c:5a:72:54:79:26:aa: 29:a7:d6:a4:b1:bc:3c:fa:83:8b:b9:f8:20:e6:12:d7:16:cb: 93:77:cf:95:11:f5:66:a0:b1:5c:bb:6f:c0:50:b7:fe:43:ac: c3:85:89:1a:77:91:d8:31:a1:22:0c:e5:c2:a6:89:82:d8:2c: 39:60:49:51:e7:33:ac:75:b6:c5:eb:6f:85:06:55:0e:26:46: c4:f4:6a:ed:f9:c3:07:b6:4d:d4:64:14:47:b0:a7:ad:61:1d: 75:9a:9a:c0:50:03:fd:68:f9:e0:f4:16:47:e9:23:ab:ea:0f: 48:a3:98:1c:c4:95:e0:09:6c:28:e4:01:e0:3e:4a:ed:02:92: 58:ca:9c:27 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REMzMjExMC8GA1UEBRMoODE5OTQ5M0FEMjY1QUQyREM3MzM5NkY2QkEwQjZFRDZD QzQxRTEwQjAeFw0yNDExMjkwNTQ5NDdaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NDk1NWZiLWJiYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm15hsWQevIh84QdaxdLPmSW8YDTskMorTn9yu/zqiAqlWC5/Nx/MzKWYPm81k hPNiFl4wozXXrFu3/UraljggzV5H4o8DheOG3kCudgou508Li1XYEzYQ/GAgMsV2 wdKWMfbWqPBfsi8yX/w1aqjAFbOSkwHYyjwq8l5eIETr4dzODy8VQB+doXPI7lwR 719osAtiD56nGmiajjZqNx9xD48VYVErJWBp2SX6iDB6OB+F3X9Lp8wN3iXJIpWD 6wDhJ2ZIk+F54Xez0V7zVJ9LWaWNtQaXDz43BbA63D2eC3zHmeyNrNWafTmTjW0S oLvWWUzbjHR0ujg4cAdFqYjjAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQU/U4feIA/ v5TATe5JVnyLrHNa0aQwHwYDVR0jBBgwFoAUgZlJOtJlrS3HM5b2ugtu1sxB4Qsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQzMyLzBGMDkyODU0NUFE RTExRUZBNUM5QTI0MEM0RjlBRTAyL2dabEpPdEpsclMzSE01YjJ1Z3R1MXN4QjRR cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1psSk90SmxyUzNITTViMnVndHUxc3hCNFFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REMzMi8wRjA5Mjg1NDVBREUxMUVGQTVDOUEyNDBDNEY5QUUwMi81MjIxNjUwQzVB REUxMUVGQkUwQjA4NDFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmfF2AMEAtye/DANBgkqhkiG9w0BAQsFAAOCAQEAgxJYnt+w b1RzwZdZaCZqa+BoR/sAH1OJt+//KjvGIAvxq5/yFCG3giKBQmQJ9P4PBN7VM/OL n+y0X7XDCA/AjoFygHumcUsVIWIYOfsrlX4K0vBZZtGlqVn2NHV3yMS7OmSqUZcL oFCYmkmYvaVCB6VPgxn6CTWMWnJUeSaqKafWpLG8PPqDi7n4IOYS1xbLk3fPlRH1 ZqCxXLtvwFC3/kOsw4WJGneR2DGhIgzlwqaJgtgsOWBJUeczrHW2xetvhQZVDiZG xPRq7fnDB7ZN1GQUR7CnrWEddZqawFAD/Wj54PQWR+kjq+oPSKOYHMSV4AlsKOQB 4D5K7QKSWMqcJw== -----END CERTIFICATE-----Generated at Sat Apr 5 00:51:30 2025 by rpki-client