$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/1EE59B10AFB911EF843BCE46C4F9AE02.roa File: 1EE59B10AFB911EF843BCE46C4F9AE02.roa (raw, json) Hash identifier: lLGc/5mA5kFPjBXAMgczp/DBVxx7SVF6m6e/8RR/fUw= Subject key identifier: 31:10:87:ED:54:98:F7:ED:6C:5B:BA:53:3B:D8:C5:9D:2C:25:C5:6A Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Certificate serial: 2C77 Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/1EE59B10AFB911EF843BCE46C4F9AE02.roa Signing time: Sun 01 Dec 2024 07:51:50 +0000 ROA not before: Sun 01 Dec 2024 07:51:50 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 133468 IP address blocks: 103.96.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11383 (0x2c77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA2D5 Validity Not Before: Dec 1 07:51:50 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=674c1595-ff85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:17:38:b2:28:e2:97:2f:44:2a:51:59:df:7d: b8:90:c5:b8:96:2a:17:6e:ee:0e:a6:ab:c8:7b:4a: cd:2a:df:49:26:99:c3:c4:60:59:14:31:a3:5f:0d: 59:6d:db:81:fa:08:ee:6c:12:fe:5f:40:2c:fe:ee: f0:e7:05:14:23:46:f3:44:a7:c4:43:c5:3a:f6:57: 91:f7:80:b6:4d:0e:e9:76:c9:08:5f:74:58:2d:92: 84:62:ed:08:bc:87:c1:bf:02:93:f6:0f:7f:14:c3: 2e:52:be:db:e2:ac:76:e6:51:85:1e:b6:43:c9:dc: d2:af:7e:a3:92:ca:88:bf:7e:d9:10:26:22:4b:f5: bc:d5:98:1a:48:dd:ef:88:2f:59:1e:e9:c4:42:6c: d2:89:c3:19:53:21:cd:9c:e6:f8:b2:09:0d:2e:57: 73:90:80:3e:9c:62:18:60:bc:3b:c0:d6:8f:41:d4: 98:e8:8b:8d:3a:e2:7f:e9:3e:79:93:05:97:42:9b: 0d:12:0f:90:ec:e4:0f:bf:43:a3:5b:6b:a0:84:f8: 2e:38:cf:c7:55:e2:d4:a1:3a:fb:99:7e:6b:f4:4d: 54:9c:aa:88:56:e5:c4:17:b2:cb:d7:d1:23:da:db: b0:2f:3b:e3:50:0b:3e:46:c3:21:47:18:6a:22:68: 39:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:10:87:ED:54:98:F7:ED:6C:5B:BA:53:3B:D8:C5:9D:2C:25:C5:6A X509v3 Authority Key Identifier: keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/1EE59B10AFB911EF843BCE46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.96.68.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:87:d7:a0:eb:9d:23:25:d0:c4:78:e9:15:50:59:8b:26:8c: 0e:f1:e4:1e:5f:98:7d:66:c4:a9:0d:84:12:94:63:8c:4e:ad: 2b:0a:cf:fe:a4:e2:5a:48:47:1c:9b:e0:dd:c8:02:7d:f8:6d: dd:81:b0:d4:6f:c9:f3:c0:75:9c:8e:24:58:43:ea:19:2d:3f: 4d:85:47:e2:3f:30:f7:ff:b8:de:aa:ef:74:3f:b2:79:8f:ba: 51:63:bc:02:fb:d9:fe:6b:9e:f9:53:bb:ad:43:7b:bf:d8:6c: d1:6e:25:e3:cb:ba:12:d4:36:22:ea:11:b4:a4:ca:0b:85:cc: 65:4e:30:35:b1:1f:0c:ce:fa:19:2c:a7:a1:2b:b4:22:9f:15: b5:27:64:38:da:fc:d4:73:76:10:5e:62:e4:54:3e:db:b8:eb: 63:6f:28:87:bf:6a:1f:0e:8e:85:ca:75:8a:6c:9a:69:31:ba: ac:c6:b8:94:d8:42:ac:8c:9a:b4:6e:c3:66:b7:2b:45:5a:6c: 10:ca:43:04:fe:91:01:f4:cf:b2:be:46:8e:62:6e:ac:5c:d5: 29:df:52:9a:74:21:f7:d2:c9:fc:eb:ba:3e:ca:aa:19:0e:3e: 43:51:ac:6e:29:14:ad:03:6d:62:da:cb:ae:e8:d8:71:84:eb: fa:15:8a:1b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICLHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyRDUxMTAvBgNVBAUTKDNDMUM4NzczNDdFRTgyNzI5NjM2QUYwRjNBMzc1RDM5 MTA5MEY5MjEwHhcNMjQxMjAxMDc1MTUwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRjMTU5NS1mZjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxc4sijily9EKlFZ3324kMW4lioXbu4OpqvIe0rNKt9JJpnDxGBZFDGjXw1Z bduB+gjubBL+X0As/u7w5wUUI0bzRKfEQ8U69leR94C2TQ7pdskIX3RYLZKEYu0I vIfBvwKT9g9/FMMuUr7b4qx25lGFHrZDydzSr36jksqIv37ZECYiS/W81ZgaSN3v iC9ZHunEQmzSicMZUyHNnOb4sgkNLldzkIA+nGIYYLw7wNaPQdSY6IuNOuJ/6T55 kwWXQpsNEg+Q7OQPv0OjW2ughPguOM/HVeLUoTr7mX5r9E1UnKqIVuXEF7LL19Ej 2tuwLzvjUAs+RsMhRxhqImg5+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFDEQh+1U mPftbFu6UzvYxZ0sJcVqMB8GA1UdIwQYMBaAFDwch3NH7oJyljavDzo3XTkQkPkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTJENS81Rjg2MUVFNkI4 OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWduS1dOcThQT2pkZE9SQ1Et U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCeUhjMGZ1Z25LV05xOFBPamRkT1JDUS1TRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REEyRDUvNUY4NjFFRTZCODlBMTFFM0I0QUM3RTc4NTkxMUVBMzIvMUVFNTlCMTBB RkI5MTFFRjg0M0JDRTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnYEQwDQYJKoZIhvcNAQELBQADggEBAJ2H16DrnSMl0MR4 6RVQWYsmjA7x5B5fmH1mxKkNhBKUY4xOrSsKz/6k4lpIRxyb4N3IAn34bd2BsNRv yfPAdZyOJFhD6hktP02FR+I/MPf/uN6q73Q/snmPulFjvAL72f5rnvlTu61De7/Y bNFuJePLuhLUNiLqEbSkyguFzGVOMDWxHwzO+hksp6ErtCKfFbUnZDja/NRzdhBe YuRUPtu462NvKIe/ah8OjoXKdYpsmmkxuqzGuJTYQqyMmrRuw2a3K0VabBDKQwT+ kQH0z7K+Ro5ibqxc1SnfUpp0IffSyfzruj7KqhkOPkNRrG4pFK0DbWLay67o2HGE 6/oVihs= -----END CERTIFICATE-----Generated at Sun Apr 6 07:53:20 2025 by rpki-client