$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/7E044E58A06B11ECBF29B644C4F9AE02.roa File: 7E044E58A06B11ECBF29B644C4F9AE02.roa (raw, json) Hash identifier: EglzY5P8gEG+IosP670+janTnu12u5QYgDoCSiDyeR8= Subject key identifier: 91:05:66:D3:C8:B9:8E:77:22:23:B3:47:41:6E:9C:41:65:8D:24:F3 Certificate issuer: /CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE Certificate serial: 0373 Authority key identifier: 5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/7E044E58A06B11ECBF29B644C4F9AE02.roa Signing time: Thu 13 Feb 2025 02:43:54 +0000 ROA not before: Thu 13 Feb 2025 02:43:54 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 133929 IP address blocks: 103.163.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 883 (0x373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB8D9 Validity Not Before: Feb 13 02:43:54 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ad5c6a-4e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:f1:3a:8e:ca:d0:28:56:15:06:38:19:51: 20:0e:4d:21:d8:24:b6:ca:ec:9f:de:86:d0:a5:64: f9:59:3d:d3:63:62:c6:29:2b:62:cc:f4:7b:8e:e6: fe:e3:df:71:22:b6:c5:49:df:95:13:77:4f:ca:93: 6f:30:ce:d3:68:70:c9:e4:34:04:7a:9a:33:16:3c: f2:75:7f:7c:2f:13:95:c0:fa:ba:96:79:65:34:f1: 7c:9c:82:e6:87:c2:03:2a:f1:3b:c5:78:7c:6c:19: 1a:55:7f:91:6c:a4:3e:18:b4:ff:01:03:1d:2d:62: 80:23:63:a5:76:eb:e8:b3:74:a6:b1:62:59:2a:21: 87:a1:61:88:94:2d:47:6d:08:df:ef:7f:d3:64:03: 05:09:ac:3b:a2:6c:d1:87:ff:4c:53:86:0d:7a:9b: e8:77:80:b5:41:2e:ad:cc:3f:e3:ad:47:98:a0:06: 85:c3:20:38:1e:59:46:62:cb:74:7d:98:00:ce:38: aa:66:15:2c:5a:3e:15:4b:df:40:ab:58:0c:ec:16: 9d:73:f3:41:87:7f:04:9d:2e:d2:17:f1:25:80:ab: 9a:49:8f:3f:65:e6:39:57:54:38:21:73:be:74:ff: 78:57:ad:bf:8f:05:ca:5a:44:2c:00:db:8e:33:3e: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:05:66:D3:C8:B9:8E:77:22:23:B3:47:41:6E:9C:41:65:8D:24:F3 X509v3 Authority Key Identifier: keyid:5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/7E044E58A06B11ECBF29B644C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.154.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:08:e6:2d:fe:3d:89:a3:eb:54:5a:5e:05:6e:3a:56:0a:46: a0:cc:0e:da:d1:68:cc:1d:93:c0:e3:2b:ee:9c:a3:a5:e1:5e: 6a:9f:71:e2:23:ef:d0:c1:a8:fc:d2:a9:5e:07:fa:3f:79:f5: 3d:91:41:46:73:be:c3:6a:1b:0e:20:2f:05:15:fc:5c:b5:98: dc:30:e4:84:34:ab:d2:2a:f8:57:26:12:ed:52:3e:d6:3a:55: 7f:93:65:de:19:30:dd:ac:c4:2c:e1:b5:0e:94:aa:35:33:42: e7:72:9e:39:1f:35:5a:15:a3:8f:31:10:6d:ba:89:c3:9e:e7: 78:62:0c:b1:4a:66:8b:d3:33:78:b6:8d:92:5e:93:9b:1a:9e: fb:d9:e4:5e:96:30:b3:8e:13:85:ae:24:0f:dc:28:79:8d:da: 6b:1a:03:be:13:84:e3:20:d9:0e:de:37:34:82:ba:ef:59:3e: 07:e9:5e:71:fd:f6:dd:18:ed:69:45:a2:3b:f1:0d:a9:c4:d0: ee:38:5a:20:df:fc:2d:8a:3d:8b:9f:78:80:96:96:37:d9:75: 24:99:77:3a:ce:80:e5:35:af:c0:f3:8c:ff:eb:e5:04:da:70: 3b:da:bf:ee:d5:71:cc:7d:90:2d:11:06:e7:b9:52:75:bd:95: 89:7f:d2:7b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI4RDkxMTAvBgNVBAUTKDVFQ0VFRjVGMjhGMkYzNjUwNTNERkI4Q0VGQ0QxNkUx QzNERTg0QUUwHhcNMjUwMjEzMDI0MzU0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FkNWM2YS00ZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsovxOo7K0ChWFQY4GVEgDk0h2CS2yuyf3obQpWT5WT3TY2LGKStizPR7jub+ 499xIrbFSd+VE3dPypNvMM7TaHDJ5DQEepozFjzydX98LxOVwPq6lnllNPF8nILm h8IDKvE7xXh8bBkaVX+RbKQ+GLT/AQMdLWKAI2Olduvos3SmsWJZKiGHoWGIlC1H bQjf73/TZAMFCaw7omzRh/9MU4YNepvod4C1QS6tzD/jrUeYoAaFwyA4HllGYst0 fZgAzjiqZhUsWj4VS99Aq1gM7Badc/NBh38EnS7SF/ElgKuaSY8/ZeY5V1Q4IXO+ dP94V62/jwXKWkQsANuOMz5ICQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJEFZtPI uY53IiOzR0FunEFljSTzMB8GA1UdIwQYMBaAFF7O718o8vNlBT37jO/NFuHD3oSu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjhEOS84QjAwMjM3NjlB MDIxMUVDOEI4MTc3ODVDNEY5QUUwMi9Yczd2WHlqeTgyVUZQZnVNNzgwVzRjUGVo SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzN3ZYeWp5ODJVRlBmdU03ODBXNGNQZWhLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI4RDkvOEIwMDIzNzY5QTAyMTFFQzhCODE3Nzg1QzRGOUFFMDIvN0UwNDRFNThB MDZCMTFFQ0JGMjlCNjQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABno5owDQYJKoZIhvcNAQELBQADggEBAC4I5i3+PYmj61Ra XgVuOlYKRqDMDtrRaMwdk8DjK+6co6XhXmqfceIj79DBqPzSqV4H+j959T2RQUZz vsNqGw4gLwUV/Fy1mNww5IQ0q9Iq+FcmEu1SPtY6VX+TZd4ZMN2sxCzhtQ6UqjUz QudynjkfNVoVo48xEG26icOe53hiDLFKZovTM3i2jZJek5sanvvZ5F6WMLOOE4Wu JA/cKHmN2msaA74ThOMg2Q7eNzSCuu9ZPgfpXnH99t0Y7WlFojvxDanE0O44WiDf /C2KPYufeICWljfZdSSZdzrOgOU1r8DzjP/r5QTacDvav+7Vccx9kC0RBue5UnW9 lYl/0ns= -----END CERTIFICATE-----Generated at Sat Apr 5 07:08:21 2025 by rpki-client