$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/97BB54A2070E11EA80718B7BC4F9AE02.roa File: 97BB54A2070E11EA80718B7BC4F9AE02.roa (raw, json) Hash identifier: fzV6mKN4RsRKk9FHAZNWKpTQRTVNAoWs1ftj78Q3KMk= Subject key identifier: EC:34:AC:17:57:A5:B6:19:D9:86:C0:5A:A8:36:FB:C8:7C:9C:C5:91 Certificate issuer: /CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Certificate serial: 0BF4 Authority key identifier: D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/97BB54A2070E11EA80718B7BC4F9AE02.roa Signing time: Sun 22 Dec 2024 18:26:53 +0000 ROA not before: Sun 22 Dec 2024 18:26:53 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 138382 IP address blocks: 103.124.32.0/22 maxlen: 24 2403:d8c0::/32 maxlen: 40 2403:d8c0::/48 maxlen: 48 2403:d8c0:1::/48 maxlen: 48 2403:d8c0:2::/48 maxlen: 48 2403:d8c0:3::/48 maxlen: 48 2403:d8c0:4::/48 maxlen: 48 2403:d8c0:5::/48 maxlen: 48 2403:d8c0:6::/48 maxlen: 48 2403:d8c0:7::/48 maxlen: 48 2403:d8c0:8::/48 maxlen: 48 2403:d8c0:9::/48 maxlen: 48 2403:d8c0:a::/48 maxlen: 48 2403:d8c0:b::/48 maxlen: 48 2403:d8c0:c::/48 maxlen: 48 2403:d8c0:d::/48 maxlen: 48 2403:d8c0:e::/48 maxlen: 48 2403:d8c0:f::/48 maxlen: 48 2403:d8c0:10::/48 maxlen: 48 2403:d8c0:11::/48 maxlen: 48 2403:d8c0:12::/48 maxlen: 48 2403:d8c0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 18:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3060 (0xbf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50FB Validity Not Before: Dec 22 18:26:53 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=676859ed-81c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0a:70:c2:62:05:51:62:88:f7:62:a6:e1:1b: 4f:e1:5e:45:59:74:45:cc:f4:50:9f:b2:cd:96:7c: d9:f6:b7:d8:11:f6:62:d8:bf:b4:1f:20:89:73:4d: e1:1c:64:f1:ab:55:df:ac:fc:35:36:b8:24:61:14: 85:6b:ee:0c:5a:28:9c:33:79:47:00:a8:30:7b:a5: 29:ef:12:97:80:5b:a3:2b:46:b6:46:48:11:e3:44: ae:18:8e:d4:1d:8d:ec:0a:d9:ea:2e:65:6a:28:2e: 84:6f:12:3e:67:e3:a4:59:57:35:97:4e:4d:a3:50: a1:13:35:30:bf:b4:ab:cb:c4:c3:0f:79:bf:13:00: 4b:48:26:52:e8:5e:a0:0a:5c:84:2e:a7:f5:5b:e8: b7:75:dd:13:ed:d0:0a:e4:b7:e4:84:9c:b0:7d:b4: b5:43:31:f0:7c:82:28:65:22:f4:3c:02:cc:a2:6f: 3b:36:c2:6d:63:53:aa:7a:4e:bc:33:8d:79:12:ec: 3e:57:33:c8:a1:a1:8b:51:8b:e0:38:38:1d:12:d4: e3:49:03:01:ce:d8:3d:84:ae:5b:6a:d4:54:8a:34: cf:57:a7:a6:ff:51:40:bb:ca:ff:6e:07:c3:18:9f: 2c:c8:4a:48:37:74:44:d2:2f:ba:d7:bc:7b:83:9a: 9b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:34:AC:17:57:A5:B6:19:D9:86:C0:5A:A8:36:FB:C8:7C:9C:C5:91 X509v3 Authority Key Identifier: keyid:D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/97BB54A2070E11EA80718B7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.32.0/22 IPv6: 2403:d8c0::/32 Signature Algorithm: sha256WithRSAEncryption 8d:df:6d:52:7a:3d:c9:46:c5:43:11:55:13:2f:3c:ef:52:e4: 51:b3:0d:90:37:e0:b9:48:5a:37:f8:b8:db:ed:8e:e0:45:4b: 95:6d:7f:9c:80:c7:d9:f1:62:8f:b2:07:56:e3:23:a9:44:bc: 11:55:6f:57:c1:24:e1:99:45:e9:e7:ce:dd:cb:a7:12:44:1b: 74:57:f3:d3:2f:e6:b0:a1:28:92:41:a1:48:f7:de:a8:63:ee: 50:fb:ff:ef:7a:da:75:eb:aa:61:7d:d8:7a:78:ca:b0:a6:3b: 94:e6:29:04:4a:57:45:de:63:95:b8:12:7b:f9:55:90:6a:4f: ce:8d:43:c7:41:42:e3:5b:26:7d:cd:08:6c:f6:ee:bd:a5:e4: 71:ca:a2:3f:56:bb:f7:9d:2e:9c:37:c8:7b:8c:54:d6:7d:92: 0c:2b:0d:00:a9:f9:34:6c:46:47:4c:0d:77:81:82:7f:3b:d6: 83:70:9d:e0:96:e9:04:6f:8b:8a:24:22:ca:db:8a:96:f8:72: e8:b3:0b:6f:3c:46:b8:30:0f:66:c6:14:39:e3:9e:f7:95:72: 1d:2b:c4:8e:b7:3b:ce:14:d6:fb:84:b4:f5:58:8f:89:64:f2: 2b:58:66:cf:da:be:e5:d5:81:02:56:7d:9f:19:82:dd:dd:96: df:8e:a5:54 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwRkIxMTAvBgNVBAUTKEQ0Q0Y1RjA5NjczNkYyNEVBMjQxMDc5MkE2MDNDREJB REQ4MjdEQ0QwHhcNMjQxMjIyMTgyNjUzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY4NTllZC04MWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ApwwmIFUWKI92Km4RtP4V5FWXRFzPRQn7LNlnzZ9rfYEfZi2L+0HyCJc03h HGTxq1XfrPw1NrgkYRSFa+4MWiicM3lHAKgwe6Up7xKXgFujK0a2RkgR40SuGI7U HY3sCtnqLmVqKC6EbxI+Z+OkWVc1l05No1ChEzUwv7Sry8TDD3m/EwBLSCZS6F6g ClyELqf1W+i3dd0T7dAK5LfkhJywfbS1QzHwfIIoZSL0PALMom87NsJtY1Oqek68 M415Euw+VzPIoaGLUYvgODgdEtTjSQMBztg9hK5batRUijTPV6em/1FAu8r/bgfD GJ8syEpIN3RE0i+617x7g5qbpQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOw0rBdX pbYZ2YbAWqg2+8h8nMWRMB8GA1UdIwQYMBaAFNTPXwlnNvJOokEHkqYDzbrdgn3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBGQi8yNTdCQjJDNDA3 MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhrNmlRUWVTcGdQTnV0MkNm YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFNOWZDV2MyOGs2aVFRZVNwZ1BOdXQyQ2ZjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDUwRkIvMjU3QkIyQzQwNzBFMTFFQUE2MTM3MjdCQzRGOUFFMDIvOTdCQjU0QTIw NzBFMTFFQTgwNzE4QjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfCAwDQQCAAIwBwMFACQD2MAwDQYJKoZIhvcNAQELBQAD ggEBAI3fbVJ6PclGxUMRVRMvPO9S5FGzDZA34LlIWjf4uNvtjuBFS5Vtf5yAx9nx Yo+yB1bjI6lEvBFVb1fBJOGZRennzt3LpxJEG3RX89Mv5rChKJJBoUj33qhj7lD7 /+962nXrqmF92Hp4yrCmO5TmKQRKV0XeY5W4Env5VZBqT86NQ8dBQuNbJn3NCGz2 7r2l5HHKoj9Wu/edLpw3yHuMVNZ9kgwrDQCp+TRsRkdMDXeBgn871oNwneCW6QRv i4okIsrbipb4cuizC288RrgwD2bGFDnjnveVch0rxI63O84U1vuEtPVYj4lk8itY Zs/avuXVgQJWfZ8Zgt3dlt+OpVQ= -----END CERTIFICATE-----Generated at Fri Apr 11 21:32:33 2025 by rpki-client