$ rpki-client -vvf rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/039807B286B511EFAF868C6EC4F9AE02.roa File: 039807B286B511EFAF868C6EC4F9AE02.roa (raw, json) Hash identifier: shT5jO7CGMGG+hH7ceO9PXeIRAabJhok08ZuY7EKsTc= Subject key identifier: 64:CA:6C:29:27:64:CE:B6:9A:F1:67:22:29:45:9D:46:3C:F2:40:8A Certificate issuer: /CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B Certificate serial: 0106 Authority key identifier: 4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/039807B286B511EFAF868C6EC4F9AE02.roa Signing time: Thu 10 Oct 2024 03:11:08 +0000 ROA not before: Thu 10 Oct 2024 03:11:08 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 38235 IP address blocks: 103.225.118.0/23 maxlen: 23 103.225.118.0/24 maxlen: 24 103.225.119.0/24 maxlen: 24 2401:be0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D200F Validity Not Before: Oct 10 03:11:08 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=670745cb-95dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:cf:e5:0a:76:9d:40:41:e5:50:6b:f9:05: 87:63:8e:2c:6c:f2:8f:d4:0e:3c:63:57:ea:7b:c3: a3:86:f1:e7:72:82:eb:8d:4a:78:27:20:85:12:60: 07:8a:0b:d0:00:c7:54:07:a2:08:52:74:3c:65:39: ae:31:1c:8d:c3:36:bf:4f:aa:19:ae:2c:8d:3c:d2: 19:e0:c4:69:d0:f9:77:1b:69:4b:0d:37:8c:ab:01: ec:26:dd:93:92:70:52:f6:70:48:7f:30:13:fa:f3: d9:dc:7e:91:b5:24:60:a2:8c:12:fa:d1:0c:80:fe: cc:59:b1:c6:29:ac:e2:a7:7d:2f:b5:f2:11:e5:5d: a8:6a:b6:02:95:c6:e4:f1:f8:f8:84:8c:c8:97:39: 0a:92:b2:3f:26:5c:7c:f9:de:42:2b:ff:4f:3e:e2: 41:d9:d7:98:0e:70:db:37:e4:df:2a:97:fa:d7:af: a2:02:7b:00:57:d7:25:48:f9:33:55:da:55:7c:f5: 0a:f0:19:cb:e0:22:8b:4c:58:ee:5d:4d:b0:c0:c8: 79:6f:6e:cd:3c:37:f3:62:47:d5:d2:59:03:3c:b1: 51:00:b6:a3:08:50:c8:ea:5f:41:d0:dc:64:0c:af: cf:41:5e:84:5f:20:71:4a:61:8b:64:fc:c2:0e:29: 10:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CA:6C:29:27:64:CE:B6:9A:F1:67:22:29:45:9D:46:3C:F2:40:8A X509v3 Authority Key Identifier: keyid:4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/039807B286B511EFAF868C6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.225.118.0/23 IPv6: 2401:be0::/32 Signature Algorithm: sha256WithRSAEncryption 6b:76:65:67:9b:3e:e1:e9:9a:be:7f:67:bd:72:7e:38:be:83: bc:cf:50:b6:43:02:06:06:7a:af:91:b6:66:62:89:cd:12:e0: 71:db:d6:30:bf:8e:1e:01:d3:88:bc:7a:e6:1e:08:ff:a0:08: 9e:0a:ca:13:f0:21:24:ba:66:96:32:81:8f:d2:5e:75:19:7b: 24:f1:d6:5b:92:01:d9:cc:c5:0c:41:ef:e7:87:cd:28:fe:24: fa:73:e7:6f:66:95:23:57:7f:2f:8e:cb:4c:b3:2e:f2:0e:9c: cb:6a:13:04:9c:0d:55:6a:c1:fd:03:5d:a2:35:dc:7c:26:ca: 3f:85:82:36:2e:40:27:8f:b4:79:64:05:b3:77:02:f0:7a:74: e1:5d:db:73:8a:e2:be:de:89:c4:d6:36:5d:1e:9d:14:11:01: 8c:c0:1f:08:f6:ec:75:65:d3:c6:f6:bd:cd:34:ac:f2:70:b8: 1b:01:35:fe:b4:3e:bf:98:b3:c0:d3:12:7a:ba:cc:47:fe:87: d1:b9:4b:c5:73:2a:45:46:78:19:42:a2:72:4b:b3:ff:ef:a5: 5c:5f:e3:0c:49:50:b8:13:cf:05:79:00:53:8d:f1:af:47:44: db:c2:f7:ec:40:88:ef:de:7a:95:0b:a3:f8:e3:63:8d:4a:72: c6:fc:1b:14 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIwMEYxMTAvBgNVBAUTKDREOTA5MDg3QkRERkExNTA1RTJCQkEwM0YyMDYxMTJF QUVGRkIxMUIwHhcNMjQxMDEwMDMxMTA4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA3NDVjYi05NWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvE3P5Qp2nUBB5VBr+QWHY44sbPKP1A48Y1fqe8OjhvHncoLrjUp4JyCFEmAH igvQAMdUB6IIUnQ8ZTmuMRyNwza/T6oZriyNPNIZ4MRp0Pl3G2lLDTeMqwHsJt2T knBS9nBIfzAT+vPZ3H6RtSRgoowS+tEMgP7MWbHGKazip30vtfIR5V2oarYClcbk 8fj4hIzIlzkKkrI/Jlx8+d5CK/9PPuJB2deYDnDbN+TfKpf616+iAnsAV9clSPkz VdpVfPUK8BnL4CKLTFjuXU2wwMh5b27NPDfzYkfV0lkDPLFRALajCFDI6l9B0Nxk DK/PQV6EXyBxSmGLZPzCDikQBwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGTKbCkn ZM62mvFnIilFnUY88kCKMB8GA1UdIwQYMBaAFE2QkIe936FQXiu6A/IGES6u/7Eb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjAwRi8yNTc4NzQwMjE2 NEYxMUVFOUU3MzQwNEVDNEY5QUUwMi9UWkNRaDczZm9WQmVLN29EOGdZUkxxN19z UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaQ1FoNzNmb1ZCZUs3b0Q4Z1lSTHE3X3NScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDIwMEYvMjU3ODc0MDIxNjRGMTFFRTlFNzM0MDRFQzRGOUFFMDIvMDM5ODA3QjI4 NkI1MTFFRkFGODY4QzZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFn4XYwDQQCAAIwBwMFACQBC+AwDQYJKoZIhvcNAQELBQAD ggEBAGt2ZWebPuHpmr5/Z71yfji+g7zPULZDAgYGeq+RtmZiic0S4HHb1jC/jh4B 04i8euYeCP+gCJ4KyhPwISS6ZpYygY/SXnUZeyTx1luSAdnMxQxB7+eHzSj+JPpz 529mlSNXfy+Oy0yzLvIOnMtqEwScDVVqwf0DXaI13Hwmyj+FgjYuQCePtHlkBbN3 AvB6dOFd23OK4r7eicTWNl0enRQRAYzAHwj27HVl08b2vc00rPJwuBsBNf60Pr+Y s8DTEnq6zEf+h9G5S8VzKkVGeBlConJLs//vpVxf4wxJULgTzwV5AFON8a9HRNvC 9+xAiO/eepULo/jjY41Kcsb8GxQ= -----END CERTIFICATE-----Generated at Sun Apr 6 11:22:50 2025 by rpki-client