$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/02FB1DCAEF6A11E69A4AD551C4F9AE02.roa File: 02FB1DCAEF6A11E69A4AD551C4F9AE02.roa (raw, json) Hash identifier: 87Eagj9nbEvxROvw6iIl3FH0KdIVxp+aZzvllNFI0J8= Subject key identifier: 21:78:6B:F4:99:73:90:E0:4A:18:8E:3B:F9:35:6F:D4:24:38:04:C9 Certificate issuer: /CN=A91DAFA2/serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Certificate serial: 1BAB Authority key identifier: 18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/02FB1DCAEF6A11E69A4AD551C4F9AE02.roa Signing time: Fri 06 Dec 2024 16:33:57 +0000 ROA not before: Fri 06 Dec 2024 16:33:57 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 136179 IP address blocks: 103.83.59.0/24 maxlen: 24 2001:df7:d200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7083 (0x1bab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAFA2 Validity Not Before: Dec 6 16:33:57 2024 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67532774-6f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:45:04:9f:6c:c7:b9:cd:87:69:37:f1:36:cc: 19:64:3d:81:11:fc:2c:33:74:c9:ca:6e:58:61:8e: 74:36:9f:ee:df:1a:c0:7d:f9:fb:d9:3e:d6:ff:cb: f7:d4:a6:45:7d:b1:1f:42:c6:58:59:e9:db:3e:94: c2:0e:9d:0c:8c:36:be:39:c6:8a:4c:d3:f3:58:1d: 00:c5:ea:a2:6e:a2:7d:76:e9:63:cc:c5:ae:d1:b8: 23:55:37:5f:cf:5f:61:23:fb:3a:c1:1a:26:ac:7a: 68:61:5b:63:22:54:1d:81:db:c0:ee:db:a9:da:cb: bf:83:c0:69:8e:63:1f:12:ab:3e:28:fa:25:33:c7: 44:fb:2a:c7:3d:47:4d:94:bf:24:e2:81:05:7e:ff: 81:fb:f1:12:4a:67:42:de:c2:09:4b:63:7a:04:ed: 27:59:49:49:1f:c9:f0:59:83:e2:92:f2:9c:9b:cd: 52:1d:07:ea:17:9a:6b:f0:1f:80:d5:d1:b3:15:13: 23:2a:7a:a5:35:05:4b:97:f5:4f:f1:36:48:e0:bd: e9:39:39:23:a4:00:2b:9a:90:d8:fb:f9:58:a1:ae: 9b:46:d6:7a:8d:b0:22:70:5d:ba:16:8a:27:56:40: 5b:db:cc:de:d4:d7:c5:8b:55:f3:8a:97:e5:a9:3e: 2d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:78:6B:F4:99:73:90:E0:4A:18:8E:3B:F9:35:6F:D4:24:38:04:C9 X509v3 Authority Key Identifier: keyid:18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/02FB1DCAEF6A11E69A4AD551C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.59.0/24 IPv6: 2001:df7:d200::/48 Signature Algorithm: sha256WithRSAEncryption 23:c5:13:b1:dd:fb:18:61:cd:2a:49:9b:47:15:43:e7:d1:03: 0b:ae:46:f3:21:df:a2:89:f6:ef:8f:ee:c1:c1:58:d1:35:ed: ff:3d:59:ef:72:67:1b:2f:fb:1b:68:f1:07:3c:69:a9:23:30: 38:ea:82:87:f5:89:ae:71:09:bd:5d:b6:6b:c1:35:be:84:2a: 8e:3e:74:1c:37:48:4c:fe:93:7c:7a:13:d1:85:48:aa:27:8f: 99:ed:3b:bf:9a:d5:ee:33:30:75:3e:97:3c:b2:6c:f6:3e:11: 80:5a:eb:ad:ad:74:83:31:32:53:a3:66:0a:9e:12:ce:e8:b4: cd:82:6d:7f:cf:f6:cc:ba:60:6a:c4:e6:63:82:a2:2f:4f:e8: f2:5a:d6:e8:cb:3e:e4:3d:79:b0:00:1e:2f:fb:15:1e:a4:92: 69:d3:44:b1:0b:ef:5a:7a:cd:c9:d9:71:89:13:a8:97:e6:37: cd:01:a6:c2:d9:f2:ad:3f:68:8a:75:4b:7d:a2:c0:95:87:b1: 6c:d7:b6:80:03:49:cc:75:3c:6f:09:b5:c7:b2:d9:e5:79:46: 51:b7:07:77:aa:bd:57:96:fa:31:ce:c1:25:bb:e4:46:72:3d: 6a:73:39:52:0a:86:26:ed:4d:62:4a:26:0d:6a:88:05:71:d9: 6d:04:de:7e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICG6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFGQTIxMTAvBgNVBAUTKDE4QjFDODhDRUU2OEY2M0MyMUNENkEwQ0IxQjgzMUQ1 RDZGNUQ2Q0YwHhcNMjQxMjA2MTYzMzU3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUzMjc3NC02ZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8EUEn2zHuc2HaTfxNswZZD2BEfwsM3TJym5YYY50Np/u3xrAffn72T7W/8v3 1KZFfbEfQsZYWenbPpTCDp0MjDa+OcaKTNPzWB0AxeqibqJ9duljzMWu0bgjVTdf z19hI/s6wRomrHpoYVtjIlQdgdvA7tup2su/g8BpjmMfEqs+KPolM8dE+yrHPUdN lL8k4oEFfv+B+/ESSmdC3sIJS2N6BO0nWUlJH8nwWYPikvKcm81SHQfqF5pr8B+A 1dGzFRMjKnqlNQVLl/VP8TZI4L3pOTkjpAArmpDY+/lYoa6bRtZ6jbAicF26Foon VkBb28ze1NfFi1XzipflqT4t4QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCF4a/SZ c5DgShiOO/k1b9QkOATJMB8GA1UdIwQYMBaAFBixyIzuaPY8Ic1qDLG4MdXW9dbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUZBMi9CN0I2Nzc2MEVG NjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlqd2h6V29Nc2JneDFkYjEx czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dMSElqTzVvOWp3aHpXb01zYmd4MWRiMTFzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REFGQTIvQjdCNjc3NjBFRjY5MTFFNkJENzNDNjUxQzRGOUFFMDIvMDJGQjFEQ0FF RjZBMTFFNjlBNEFENTUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnUzswDwQCAAIwCQMHACABDffSADANBgkqhkiG9w0BAQsF AAOCAQEAI8UTsd37GGHNKkmbRxVD59EDC65G8yHfoon274/uwcFY0TXt/z1Z73Jn Gy/7G2jxBzxpqSMwOOqCh/WJrnEJvV22a8E1voQqjj50HDdITP6TfHoT0YVIqieP me07v5rV7jMwdT6XPLJs9j4RgFrrra10gzEyU6NmCp4Szui0zYJtf8/2zLpgasTm Y4KiL0/o8lrW6Ms+5D15sAAeL/sVHqSSadNEsQvvWnrNydlxiROol+Y3zQGmwtny rT9oinVLfaLAlYexbNe2gANJzHU8bwm1x7LZ5XlGUbcHd6q9V5b6Mc7BJbvkRnI9 anM5UgqGJu1NYkomDWqIBXHZbQTefg== -----END CERTIFICATE-----Generated at Sat Apr 5 02:15:54 2025 by rpki-client