$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/459E12EAE9C611EFB8012F10C4F9AE02.roa File: 459E12EAE9C611EFB8012F10C4F9AE02.roa (raw, json) Hash identifier: /RmfZz46so9ge+fbPNaFv77MZSPZTzTOQnyx59sNwag= Subject key identifier: 13:D2:EC:74:F6:7E:D5:7A:10:EF:8E:EC:A2:F4:36:F9:15:A1:6E:72 Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: 24 Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/459E12EAE9C611EFB8012F10C4F9AE02.roa Signing time: Tue 25 Mar 2025 07:14:03 +0000 ROA not before: Tue 25 Mar 2025 07:14:03 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 41095 IP address blocks: 103.84.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1 Validity Not Before: Mar 25 07:14:03 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e257ba-f514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ec:25:ad:76:54:68:c4:48:a4:8a:7a:28:d6: f0:25:d9:f0:d7:94:7d:d6:6d:2f:cf:75:9c:f2:7d: 7d:05:90:c3:75:1f:d2:12:47:04:2c:ee:42:50:67: da:a0:15:22:e2:bd:f9:8d:ef:9d:dd:45:6a:d9:4b: 05:00:07:73:de:b8:45:9d:a6:57:2e:94:da:d0:a1: fe:01:40:c8:f3:32:66:17:9a:2c:95:b1:01:3e:67: d4:ba:c7:0e:4f:59:50:b9:c3:47:b9:ca:ca:74:92: 97:06:d9:9f:04:2a:42:0a:5b:94:67:0d:8d:95:86: 21:27:cb:8e:2f:f2:62:01:68:42:a7:07:67:4f:f8: 1a:6c:16:30:c4:bd:aa:59:89:67:c4:6e:9e:f1:c6: f0:3f:a3:97:e0:6e:4f:a6:e5:6c:a6:9e:02:b5:56: ff:fc:40:cd:79:44:79:9b:d4:04:55:93:4e:ad:dd: e8:9b:9c:49:92:62:7a:e7:50:a5:15:63:c4:a2:eb: fc:a7:2c:b0:25:29:a0:02:0c:b3:15:bc:27:fe:05: f0:4c:7a:4d:43:13:8b:99:6f:40:08:4e:5d:f6:fc: cf:5f:64:68:64:22:43:7e:bd:e5:d9:e6:e9:6e:ca: c4:1d:6a:cb:a3:8f:a6:9e:72:45:46:f8:fc:81:d3: 6f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D2:EC:74:F6:7E:D5:7A:10:EF:8E:EC:A2:F4:36:F9:15:A1:6E:72 X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/459E12EAE9C611EFB8012F10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.169.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:2c:25:0d:e7:a6:b1:56:8a:f0:16:e9:ef:0e:03:ec:e7:81: 70:7a:ca:cd:2f:2c:64:9f:78:62:ad:98:b9:24:5b:93:b0:0d: 2c:4c:9b:8c:16:43:62:ab:88:28:e6:28:0b:43:cc:cc:6d:4d: b1:26:7e:f1:10:a8:c1:da:1f:cb:a4:db:16:ce:ec:c3:c9:b7: 90:ed:a3:cd:b5:40:c6:e7:57:dc:97:55:c9:d0:31:14:ad:a5: f4:13:2e:e7:a6:3a:d9:33:f1:4e:7e:3c:2a:24:c3:23:31:b9: 72:7d:f4:79:9d:52:e7:92:f4:11:76:bf:97:48:9f:0d:1f:48: 3e:61:c7:96:a7:9c:a4:5e:60:68:88:4d:37:11:2c:16:ee:65: 42:da:8b:99:03:23:5b:f9:7a:b7:3a:8e:8c:d0:9b:14:02:12: ed:31:0f:cd:8e:25:c4:ed:6c:5b:da:71:f8:41:03:2e:e1:99: a1:89:af:de:09:81:3a:2f:c3:de:44:73:ea:84:6b:c2:5e:ca: 27:61:3d:40:6f:50:38:34:1f:5d:80:cd:1a:16:0c:e1:9d:b6: 02:57:d9:7b:a5:e7:e0:0f:23:6e:91:b8:62:86:ab:87:82:95: ad:09:50:1c:6c:09:a5:3b:f1:cf:c9:9c:93:30:c2:4a:cf:48: 88:15:ed:98 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTRDMTExMC8GA1UEBRMoMDQ3RUYxQTFDRjY1OTY2MzQ5ODY2NzY3NjU1NjQ4RUVG OTExMEM1QTAeFw0yNTAzMjUwNzE0MDNaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZTI1N2JhLWY1MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe7CWtdlRoxEikinoo1vAl2fDXlH3WbS/PdZzyfX0FkMN1H9ISRwQs7kJQZ9qg FSLivfmN753dRWrZSwUAB3PeuEWdplculNrQof4BQMjzMmYXmiyVsQE+Z9S6xw5P WVC5w0e5ysp0kpcG2Z8EKkIKW5RnDY2VhiEny44v8mIBaEKnB2dP+BpsFjDEvapZ iWfEbp7xxvA/o5fgbk+m5WymngK1Vv/8QM15RHmb1ARVk06t3eibnEmSYnrnUKUV Y8Si6/ynLLAlKaACDLMVvCf+BfBMek1DE4uZb0AITl32/M9fZGhkIkN+veXZ5ulu ysQdasujj6aeckVG+PyB029rAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUE9LsdPZ+ 1XoQ747sovQ2+RWhbnIwHwYDVR0jBBgwFoAUBH7xoc9llmNJhmdnZVZI7vkRDFow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFNEMxLzM2NDQ4ODdBRTlC QjExRUZCQUFDOUQ3MEM0RjlBRTAyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRG by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQkg3eG9jOWxsbU5KaG1kblpWWkk3dmtSREZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRDMS8zNjQ0ODg3QUU5QkIxMUVGQkFBQzlENzBDNEY5QUUwMi80NTlFMTJFQUU5 QzYxMUVGQjgwMTJGMTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGdUqTANBgkqhkiG9w0BAQsFAAOCAQEAjywlDeemsVaK8Bbp 7w4D7OeBcHrKzS8sZJ94Yq2YuSRbk7ANLEybjBZDYquIKOYoC0PMzG1NsSZ+8RCo wdofy6TbFs7sw8m3kO2jzbVAxudX3JdVydAxFK2l9BMu56Y62TPxTn48KiTDIzG5 cn30eZ1S55L0EXa/l0ifDR9IPmHHlqecpF5gaIhNNxEsFu5lQtqLmQMjW/l6tzqO jNCbFAIS7TEPzY4lxO1sW9px+EEDLuGZoYmv3gmBOi/D3kRz6oRrwl7KJ2E9QG9Q ODQfXYDNGhYM4Z22AlfZe6Xn4A8jbpG4Yoarh4KVrQlQHGwJpTvxz8mckzDCSs9I iBXtmA== -----END CERTIFICATE-----Generated at Sat Apr 5 02:23:01 2025 by rpki-client