$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa File: 63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa (raw, json) Hash identifier: Xox0RKn25c/NtUoE1hfxgdRKbyAd4ZoK4OD14DUbhsc= Subject key identifier: BE:BC:0B:CD:0E:75:05:61:92:E1:82:94:1D:0E:7B:CB:FB:13:D1:F8 Certificate issuer: /CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6 Certificate serial: 074E Authority key identifier: 97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa Signing time: Thu 28 Nov 2024 21:40:51 +0000 ROA not before: Thu 28 Nov 2024 21:40:51 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 133770 IP address blocks: 103.156.238.0/23 maxlen: 23 103.156.238.0/24 maxlen: 24 103.156.239.0/24 maxlen: 24 2001:df5:180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1870 (0x74e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D46B0 Validity Not Before: Nov 28 21:40:51 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6748e363-0f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c4:04:ed:48:09:a2:83:6a:65:d1:d3:2e:45: 0c:43:ab:a8:e2:49:98:36:3b:e4:be:d7:20:7d:75: 74:1c:69:80:79:3a:b2:67:c7:2f:c2:49:e3:3d:6a: 89:33:48:6f:7c:e3:a3:a1:35:c8:6e:2f:42:b0:59: 03:c0:98:2d:18:14:2c:dd:bc:2b:f6:b4:58:f2:8e: 88:b8:39:b6:e0:60:86:5d:cb:5e:94:27:0f:67:5b: 77:54:03:0b:19:86:87:c9:48:a8:4f:39:49:48:9c: 09:03:69:2c:14:e9:41:54:19:11:47:1e:18:5d:61: c8:64:67:8e:52:33:f0:45:75:83:3c:2f:2f:28:88: 39:97:3e:3e:62:98:84:31:eb:95:f9:ee:1c:23:c0: 3a:3c:af:9c:ae:9e:7f:fe:dc:16:7b:75:d6:ab:c2: 79:82:c3:5b:f1:55:37:be:ec:ca:ca:1f:b1:cb:cd: ea:96:5a:19:74:6f:d5:e2:c7:24:b6:34:49:72:d1: 2f:d6:fe:cd:58:f1:f3:8f:a0:18:77:b2:76:fc:bc: 02:18:85:b8:0e:61:4e:62:8c:cf:d8:36:fa:59:16: a9:5f:bb:be:4e:ef:42:e2:81:04:13:06:7d:36:f9: 1e:86:2d:da:3b:53:6b:7b:97:85:7b:81:c9:60:87: cf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BC:0B:CD:0E:75:05:61:92:E1:82:94:1D:0E:7B:CB:FB:13:D1:F8 X509v3 Authority Key Identifier: keyid:97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.238.0/23 IPv6: 2001:df5:180::/48 Signature Algorithm: sha256WithRSAEncryption a6:7e:09:9f:b8:5f:97:16:33:7b:f6:2a:df:26:c6:74:d4:ed: 1a:3a:9e:aa:14:f1:34:a3:c3:fb:23:f8:5e:db:9d:20:c7:78: 28:02:9e:e8:82:0f:b7:1b:7b:e6:c5:45:b9:29:95:7e:86:28: b9:de:b0:0a:07:29:0f:a1:e1:5b:61:eb:26:fb:35:6f:7a:7c: b3:fd:a5:a5:0f:95:96:23:1a:7e:2c:17:ff:25:ba:1e:b3:fc: 4e:24:87:6a:e0:49:ad:8f:b7:b3:15:7b:47:a5:70:13:b8:80: ef:2b:cd:50:48:11:00:80:0a:74:e7:ce:9c:18:5a:4b:4d:37: 51:13:0c:0f:bd:20:36:88:40:fd:3e:0a:54:2a:2a:01:16:7b: 24:58:99:33:0f:3f:cc:6b:bf:38:25:ea:ab:06:1e:fb:63:dc: b1:e6:3a:93:e6:b4:7e:4e:1a:9e:0a:0c:db:a8:a6:c2:82:61: c7:eb:15:33:b9:24:ff:36:4f:79:d3:c0:70:5d:11:47:95:aa: 71:f7:ad:66:85:f6:f8:c8:c0:b6:ac:d6:88:ae:47:fe:c8:ad: e6:08:ca:4b:10:0e:c0:a9:ba:a7:3f:06:17:d2:40:e2:af:a8: 61:cd:61:0a:bf:fc:fd:49:3e:83:0c:ba:29:55:44:06:73:82: 1d:8c:30:b1 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2QjAxMTAvBgNVBAUTKDk3NjFGRjVGM0Y4NDE2QkUwMUUyM0ZDNzA1ODQ3REZB OTQ0ODREQjYwHhcNMjQxMTI4MjE0MDUxWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ4ZTM2My0wZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMQE7UgJooNqZdHTLkUMQ6uo4kmYNjvkvtcgfXV0HGmAeTqyZ8cvwknjPWqJ M0hvfOOjoTXIbi9CsFkDwJgtGBQs3bwr9rRY8o6IuDm24GCGXctelCcPZ1t3VAML GYaHyUioTzlJSJwJA2ksFOlBVBkRRx4YXWHIZGeOUjPwRXWDPC8vKIg5lz4+YpiE MeuV+e4cI8A6PK+crp5//twWe3XWq8J5gsNb8VU3vuzKyh+xy83qlloZdG/V4sck tjRJctEv1v7NWPHzj6AYd7J2/LwCGIW4DmFOYozP2Db6WRapX7u+Tu9C4oEEEwZ9 Nvkehi3aO1Nre5eFe4HJYIfPRQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFL68C80O dQVhkuGClB0Oe8v7E9H4MB8GA1UdIwQYMBaAFJdh/18/hBa+AeI/xwWEffqUSE22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZCMC9FNTA5MDJCNjA3 OUIxMUVCOEExRjI3MzJDNEY5QUUwMi9sMkhfWHotRUZyNEI0al9IQllSOS1wUklU YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wySF9Yei1FRnI0QjRqX0hCWVI5LXBSSVRiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ2QjAvRTUwOTAyQjYwNzlCMTFFQjhBMUYyNzMyQzRGOUFFMDIvNjNCNEREMUFE QTIzMTFFQjhBNEVDMTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnnO4wDwQCAAIwCQMHACABDfUBgDANBgkqhkiG9w0BAQsF AAOCAQEApn4Jn7hflxYze/Yq3ybGdNTtGjqeqhTxNKPD+yP4XtudIMd4KAKe6IIP txt75sVFuSmVfoYoud6wCgcpD6HhW2HrJvs1b3p8s/2lpQ+VliMafiwX/yW6HrP8 TiSHauBJrY+3sxV7R6VwE7iA7yvNUEgRAIAKdOfOnBhaS003URMMD70gNohA/T4K VCoqARZ7JFiZMw8/zGu/OCXqqwYe+2PcseY6k+a0fk4angoM26imwoJhx+sVM7kk /zZPedPAcF0RR5WqcfetZoX2+MjAtqzWiK5H/sit5gjKSxAOwKm6pz8GF9JA4q+o Yc1hCr/8/Uk+gwy6KVVEBnOCHYwwsQ== -----END CERTIFICATE-----Generated at Sat Apr 5 02:10:10 2025 by rpki-client