$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/94B101721B8B11EEACEA736AC4F9AE02.roa File: 94B101721B8B11EEACEA736AC4F9AE02.roa (raw, json) Hash identifier: 8KEvrrkPqDZO6TToBnuRSPRZoDSK+MH3syDaDWUh+s0= Subject key identifier: 4A:3C:A6:5D:23:FC:D6:61:28:30:AA:D4:18:03:B4:29:F6:CD:B0:13 Certificate issuer: /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Certificate serial: 07FC Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/94B101721B8B11EEACEA736AC4F9AE02.roa Signing time: Wed 27 Nov 2024 03:32:27 +0000 ROA not before: Wed 27 Nov 2024 03:32:27 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 134555 IP address blocks: 43.247.80.0/22 maxlen: 24 103.23.174.0/24 maxlen: 24 103.87.38.0/23 maxlen: 24 103.235.188.0/22 maxlen: 24 103.236.203.0/24 maxlen: 24 202.52.54.0/23 maxlen: 24 203.25.32.0/22 maxlen: 24 2402:d840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2044 (0x7fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76E5 Validity Not Before: Nov 27 03:32:27 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=674692cb-2379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:7b:fe:8b:7d:ee:cc:a5:a2:d8:fe:43:4c: 81:d9:89:3c:85:91:64:04:b0:b7:ac:b4:08:85:01: 15:c9:b3:08:de:8a:ee:52:a6:17:08:85:26:9e:95: e0:65:e9:6a:a9:48:0d:29:56:22:13:42:30:a4:66: 85:56:19:26:85:38:e5:ab:78:9e:20:97:c5:82:81: e3:94:05:a9:07:bb:03:65:f6:12:26:2f:cd:9a:85: 44:28:d8:92:23:92:e2:b6:ef:a3:fd:19:86:2b:c4: 42:e8:5c:05:57:29:03:3e:7c:10:1e:39:87:c3:96: 12:42:58:13:c0:62:4c:33:84:58:ac:c7:d1:64:17: 01:74:47:9f:0e:5b:2d:06:c4:3e:33:fd:b8:37:ea: 65:a6:97:92:27:8d:61:ae:8b:86:73:72:e7:e7:0f: 71:de:e9:e6:22:30:a7:05:fa:21:7f:32:87:80:d0: a2:80:e2:a5:08:7e:58:26:68:e1:c1:4c:83:40:1a: 02:5c:4f:39:dd:aa:08:96:49:4b:43:7b:8f:77:d3: 7d:ef:24:0e:1c:1e:f6:4a:6c:96:58:c6:da:3e:da: 12:a9:d4:96:09:f9:ca:a4:7f:22:b5:eb:6d:85:2a: b8:60:b8:a8:23:fe:25:4b:51:dd:02:e2:26:45:6d: 11:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3C:A6:5D:23:FC:D6:61:28:30:AA:D4:18:03:B4:29:F6:CD:B0:13 X509v3 Authority Key Identifier: keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/94B101721B8B11EEACEA736AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.80.0/22 103.23.174.0/24 103.87.38.0/23 103.235.188.0/22 103.236.203.0/24 202.52.54.0/23 203.25.32.0/22 IPv6: 2402:d840::/32 Signature Algorithm: sha256WithRSAEncryption a5:bd:1d:6a:55:8e:c7:e6:55:2c:85:52:eb:19:3a:ca:ce:05: 36:d4:d8:b0:24:de:dc:ff:e0:79:17:de:e4:ca:79:18:f4:56: 2c:ef:ef:c7:1a:c1:12:d6:64:a5:43:9d:10:b9:1f:cf:9f:91: fd:3b:d6:1d:16:ed:51:87:00:16:64:d3:3e:b7:e9:22:e5:2d: c7:07:d9:00:37:1f:4c:a8:73:72:63:c0:c7:e1:b6:02:5d:89: ba:8d:f0:ef:22:90:a0:a1:3b:83:63:38:0f:7f:1c:1a:b1:07: e0:9a:5b:ad:c3:d6:f8:5f:bf:a3:6b:fd:63:3e:9b:8c:22:02: 6d:a4:17:03:45:e8:6d:89:86:e0:56:21:d1:c0:07:1f:fa:79: d0:d8:fd:5e:d6:91:c9:77:3a:bd:e4:62:e3:9d:59:06:4c:a4: 59:0e:ed:0a:23:08:53:74:41:de:5f:bc:87:90:70:0f:88:31: 8c:18:de:87:c0:6b:ef:ee:e3:a3:30:99:90:d0:41:a7:41:bc: 2a:05:a3:80:52:36:ff:23:b4:df:12:4d:54:f0:6b:aa:ea:22: de:48:01:87:11:4f:c1:17:67:33:50:03:de:50:0a:ec:80:e6: 98:e4:81:d3:7b:95:3c:8b:39:12:90:25:f8:5e:03:46:07:0a: 55:55:30:d4 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICB/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD QzE0MkY4ODYwHhcNMjQxMTI3MDMzMjI3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ2OTJjYi0yMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueh7/ot97sylotj+Q0yB2Yk8hZFkBLC3rLQIhQEVybMI3oruUqYXCIUmnpXg ZelqqUgNKVYiE0IwpGaFVhkmhTjlq3ieIJfFgoHjlAWpB7sDZfYSJi/NmoVEKNiS I5Litu+j/RmGK8RC6FwFVykDPnwQHjmHw5YSQlgTwGJMM4RYrMfRZBcBdEefDlst BsQ+M/24N+plppeSJ41hrouGc3Ln5w9x3unmIjCnBfohfzKHgNCigOKlCH5YJmjh wUyDQBoCXE853aoIlklLQ3uPd9N97yQOHB72SmyWWMbaPtoSqdSWCfnKpH8itett hSq4YLioI/4lS1HdAuImRW0RwwIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFEo8pl0j /NZhKDCq1BgDtCn2zbATMB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDc2RTUvRTA4M0EwRUFDQjEyMTFFQTkyNTA3QTJCQzRGOUFFMDIvOTRCMTAxNzIx QjhCMTFFRUFDRUE3MzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMDAEAgABMCoDBAIr91ADBABnF64DBAFnVyYDBAJn67wDBABn7MsDBAHKNDYD BALLGSAwDQQCAAIwBwMFACQC2EAwDQYJKoZIhvcNAQELBQADggEBAKW9HWpVjsfm VSyFUusZOsrOBTbU2LAk3tz/4HkX3uTKeRj0Vizv78cawRLWZKVDnRC5H8+fkf07 1h0W7VGHABZk0z636SLlLccH2QA3H0yoc3JjwMfhtgJdibqN8O8ikKChO4NjOA9/ HBqxB+CaW63D1vhfv6Nr/WM+m4wiAm2kFwNF6G2JhuBWIdHABx/6edDY/V7Wkcl3 Or3kYuOdWQZMpFkO7QojCFN0Qd5fvIeQcA+IMYwY3ofAa+/u46MwmZDQQadBvCoF o4BSNv8jtN8STVTwa6rqIt5IAYcRT8EXZzNQA95QCuyA5pjkgdN7lTyLORKQJfhe A0YHClVVMNQ= -----END CERTIFICATE-----Generated at Sat Apr 5 19:23:32 2025 by rpki-client