$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/D442A7A0BE2E11EEAFAF1934C4F9AE02.roa File: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (raw, json) Hash identifier: GqeiAvi13dSKvLM+fHPrB98afI5mQF/DJh5CG60rs0k= Subject key identifier: D1:05:1A:E5:30:7D:29:9F:68:ED:69:FD:2D:0C:71:C9:56:F0:BE:26 Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Certificate serial: AA Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/D442A7A0BE2E11EEAFAF1934C4F9AE02.roa Signing time: Fri 29 Nov 2024 04:38:34 +0000 ROA not before: Fri 29 Nov 2024 04:38:34 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 58460 IP address blocks: 103.9.226.0/24 maxlen: 24 103.209.54.0/24 maxlen: 24 2404:f440::/32 maxlen: 32 2404:f440:1012::/48 maxlen: 48 2404:f440:2012::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8117 Validity Not Before: Nov 29 04:38:34 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67494549-733b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3a:dd:0b:d8:10:af:6a:e6:9d:79:f0:82:7c: 35:83:e1:de:c2:db:a0:5b:68:0c:c5:ba:d5:c8:1d: 47:e6:cf:79:fa:b8:0b:4a:b3:6d:71:42:13:65:f1: aa:53:e3:72:97:5b:81:b9:ba:10:44:79:52:37:7a: be:83:74:e2:c0:99:2a:a9:f0:c7:76:aa:32:d6:c8: d1:72:d2:89:2e:bf:57:b8:8d:e9:ec:a0:a0:ca:b6: 11:b2:fe:34:7d:b5:96:bc:71:e5:c0:f9:cf:7f:49: b5:71:7b:6b:b6:62:e6:d2:9c:b6:f0:e8:c7:7a:46: 9e:aa:ab:c9:5b:1f:01:89:dd:b9:28:a4:20:c6:d1: 2a:cc:53:ff:35:9f:d0:3b:b5:2f:05:af:b9:ea:2f: 79:20:12:45:de:d2:df:63:3c:43:37:b4:d4:14:68: c1:01:0c:c0:df:73:fd:42:fb:8a:39:bb:6b:d5:ef: 92:52:b0:87:ad:c4:43:d1:00:e5:01:f8:f5:2c:ed: 6b:da:4f:bc:b4:b8:c8:24:ee:0c:99:cb:e7:0b:35: 35:e4:59:d0:e1:32:e5:ca:de:68:5f:d8:8d:9b:ea: 9b:ad:5b:e2:fc:a9:88:3d:b6:da:7a:5f:02:eb:c9: f9:09:43:32:4a:83:9c:da:01:2b:07:52:38:a7:ae: ad:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:05:1A:E5:30:7D:29:9F:68:ED:69:FD:2D:0C:71:C9:56:F0:BE:26 X509v3 Authority Key Identifier: keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/D442A7A0BE2E11EEAFAF1934C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.9.226.0/24 103.209.54.0/24 IPv6: 2404:f440::/32 Signature Algorithm: sha256WithRSAEncryption 7c:74:3e:d4:03:c1:aa:fb:0a:a4:d7:95:d4:cf:92:b4:b0:0a: e2:0c:16:93:71:1e:75:04:ef:5a:b7:d1:7f:d4:2e:25:6b:4b: 7c:1f:17:25:5c:3c:eb:ab:9e:1a:a5:37:dd:69:89:d1:de:99: 63:98:4d:63:52:c9:41:41:37:a7:89:b7:b6:52:de:cd:96:14: 87:39:4c:12:9c:df:f2:d6:14:1e:99:db:9f:c4:23:c4:61:4d: 63:23:c5:98:b4:24:2d:a6:7e:97:d4:bd:37:00:80:35:aa:1a: c3:71:ff:2a:12:15:bc:4d:a3:77:98:33:d3:a8:65:7b:6c:36: 0f:b8:fa:50:5a:94:a8:53:52:0c:cf:89:8b:a1:36:8e:d3:53: 5b:4c:6a:07:eb:8d:3f:b0:40:fb:45:61:75:60:09:be:c6:68: e1:2a:d1:cb:2e:f7:9c:72:a2:ee:c6:ca:83:e4:ee:f8:4f:9d: 80:87:80:66:2d:4c:83:82:bc:0f:95:dc:8b:01:ba:ba:f5:bd: 0d:51:71:e4:91:37:d4:27:a5:34:3d:f5:6e:75:83:64:23:80: 78:72:b8:98:18:7d:75:86:83:f6:d5:24:f1:4b:86:e5:42:9a: b4:a0:85:1a:8a:5f:cd:c6:35:3e:62:be:82:11:af:7a:e0:84: 3a:e6:45:59 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMTcxMTAvBgNVBAUTKDg5N0RCQUQ2NDcwMjM3OEE2RUUxODYzMEUxOEJGNzVB MTcyOTgyNjkwHhcNMjQxMTI5MDQzODM0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ5NDU0OS03MzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDrdC9gQr2rmnXnwgnw1g+HewtugW2gMxbrVyB1H5s95+rgLSrNtcUITZfGq U+Nyl1uBuboQRHlSN3q+g3TiwJkqqfDHdqoy1sjRctKJLr9XuI3p7KCgyrYRsv40 fbWWvHHlwPnPf0m1cXtrtmLm0py28OjHekaeqqvJWx8Bid25KKQgxtEqzFP/NZ/Q O7UvBa+56i95IBJF3tLfYzxDN7TUFGjBAQzA33P9QvuKObtr1e+SUrCHrcRD0QDl Afj1LO1r2k+8tLjIJO4MmcvnCzU15FnQ4TLlyt5oX9iNm+qbrVvi/KmIPbbael8C 68n5CUMySoOc2gErB1I4p66tcwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNEFGuUw fSmfaO1p/S0McclW8L4mMB8GA1UdIwQYMBaAFIl9utZHAjeKbuGGMOGL91oXKYJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODExNy84RTI4RTc5NEJF MkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040cHU0WVl3NFl2M1doY3Bn bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYMjYxa2NDTjRwdTRZWXc0WXYzV2hjcGdtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDgxMTcvOEUyOEU3OTRCRTJEMTFFRTg1MzZEMDMwQzRGOUFFMDIvRDQ0MkE3QTBC RTJFMTFFRUFGQUYxOTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnCeIDBABn0TYwDQQCAAIwBwMFACQE9EAwDQYJKoZIhvcN AQELBQADggEBAHx0PtQDwar7CqTXldTPkrSwCuIMFpNxHnUE71q30X/ULiVrS3wf FyVcPOurnhqlN91pidHemWOYTWNSyUFBN6eJt7ZS3s2WFIc5TBKc3/LWFB6Z25/E I8RhTWMjxZi0JC2mfpfUvTcAgDWqGsNx/yoSFbxNo3eYM9OoZXtsNg+4+lBalKhT UgzPiYuhNo7TU1tMagfrjT+wQPtFYXVgCb7GaOEq0csu95xyou7GyoPk7vhPnYCH gGYtTIOCvA+V3IsBurr1vQ1RceSRN9QnpTQ99W51g2QjgHhyuJgYfXWGg/bVJPFL huVCmrSghRqKX83GNT5ivoIRr3rghDrmRVk= -----END CERTIFICATE-----Generated at Sat Apr 5 06:10:01 2025 by rpki-client