$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/D55D2990561F11E7B9B5FB2CC4F9AE02.roa File: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (raw, json) Hash identifier: 6l+okkOVayeN3r7Oa8ISbsZRxypv5sX/p1C5qPHUzI4= Subject key identifier: 66:9C:EF:BA:20:3B:19:B5:96:15:2E:26:25:6E:31:93:72:1D:21:FD Certificate issuer: /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Certificate serial: 344C Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/D55D2990561F11E7B9B5FB2CC4F9AE02.roa Signing time: Tue 26 Nov 2024 15:10:47 +0000 ROA not before: Tue 26 Nov 2024 15:10:47 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 38896 IP address blocks: 103.2.144.0/22 maxlen: 24 121.58.184.0/21 maxlen: 24 122.129.96.0/20 maxlen: 24 122.129.112.0/21 maxlen: 24 2402:8600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13388 (0x344c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC866 Validity Not Before: Nov 26 15:10:47 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6745e4f7-3c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:71:c6:26:07:d9:6c:7a:12:13:09:1f:32: fd:13:02:d6:fa:ac:de:d2:26:33:bf:4b:54:8e:c7: ef:b5:95:c6:ee:ca:17:c2:b6:60:cd:63:09:99:e2: c2:c4:be:c7:56:5b:05:e3:4a:6d:ce:5f:56:21:f3: b1:c0:51:16:20:b9:82:30:1c:22:ee:b6:8f:3e:7c: 0b:fb:78:54:29:40:bc:ba:58:30:03:08:af:33:6d: b4:44:55:fe:16:61:84:c2:5b:1f:b5:31:30:c2:08: c5:cd:12:67:be:63:19:14:de:ed:c0:39:be:be:0d: 85:72:02:b5:8d:7f:83:3d:11:da:50:28:d8:4d:71: 7d:56:b4:0a:24:16:ac:cd:49:df:61:80:34:c4:7e: 6e:a4:40:69:d9:c1:4f:16:bb:98:17:c2:42:61:87: d6:0b:43:6f:ea:ba:da:af:68:05:c3:9c:c6:77:9c: e8:0c:76:5f:a3:f7:7f:29:05:9a:7a:aa:af:b7:23: 67:f1:5f:66:52:76:d1:ff:e8:b3:6c:27:1c:1d:20: 8b:20:0c:06:d0:56:dd:28:6c:f0:41:f8:71:78:da: 40:d4:c1:7c:35:8a:9f:f2:04:d7:1b:7a:64:82:38: 51:95:7c:07:db:d7:bb:27:39:48:e0:7d:35:fa:d4: b8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9C:EF:BA:20:3B:19:B5:96:15:2E:26:25:6E:31:93:72:1D:21:FD X509v3 Authority Key Identifier: keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/D55D2990561F11E7B9B5FB2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.2.144.0/22 121.58.184.0/21 122.129.96.0-122.129.119.255 IPv6: 2402:8600::/32 Signature Algorithm: sha256WithRSAEncryption 26:75:b3:31:62:01:7f:e0:cb:0f:77:23:9e:ed:1d:47:03:41: 02:c3:52:7b:d3:66:6a:a2:79:ee:c3:99:ab:a6:f2:60:6c:29: f8:46:ce:24:41:9b:53:32:6e:49:f2:20:30:96:98:c9:05:89: 49:e4:93:9f:16:26:cc:e7:ea:64:00:72:97:40:ee:8c:7d:57: f7:18:33:6a:36:4e:ce:e0:e8:7a:91:80:03:dd:ae:e3:d4:40: 0b:2a:30:93:00:68:49:cb:b9:4f:37:40:48:0b:4b:7c:64:e8: 70:1a:72:ba:1e:51:20:d3:55:6f:8f:ad:81:3a:7e:5c:7a:f3: 91:2b:12:55:57:70:a8:c7:a8:1d:2c:ba:31:a0:97:47:45:53: b5:0a:55:1a:33:e1:16:00:43:a7:6d:73:ed:9d:ac:4e:bd:f1: 99:8d:1e:40:71:49:22:69:bd:0f:46:3a:ed:b4:22:65:ce:68: 72:95:27:e8:2a:4c:ee:7f:4c:9f:a7:81:5e:f5:24:ed:aa:bd: df:dc:12:40:db:d3:87:1c:31:14:77:78:00:ba:db:64:30:1d: a2:61:48:de:34:63:cf:cb:50:6a:6f:92:f9:4e:a1:73:87:ce: 0d:43:77:36:7e:dd:72:d2:2e:ae:e3:03:b7:8e:87:93:e5:7a: 67:fd:e8:58 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICNEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NjYxMTAvBgNVBAUTKEVCNjgwQjdERTRDNEExQjQ0M0FCRDc5OUJBRjUyNDlE RDRCMEVBOTAwHhcNMjQxMTI2MTUxMDQ3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ1ZTRmNy0zYzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1RxxiYH2Wx6EhMJHzL9EwLW+qze0iYzv0tUjsfvtZXG7soXwrZgzWMJmeLC xL7HVlsF40ptzl9WIfOxwFEWILmCMBwi7raPPnwL+3hUKUC8ulgwAwivM220RFX+ FmGEwlsftTEwwgjFzRJnvmMZFN7twDm+vg2FcgK1jX+DPRHaUCjYTXF9VrQKJBas zUnfYYA0xH5upEBp2cFPFruYF8JCYYfWC0Nv6rrar2gFw5zGd5zoDHZfo/d/KQWa eqqvtyNn8V9mUnbR/+izbCccHSCLIAwG0FbdKGzwQfhxeNpA1MF8NYqf8gTXG3pk gjhRlXwH29e7JzlI4H01+tS4cwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFGac77og Oxm1lhUuJiVuMZNyHSH9MB8GA1UdIwQYMBaAFOtoC33kxKG0Q6vXmbr1JJ3UsOqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg2Ni82QTBERjlCQTFE OTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9iUkRxOWVadXZVa25kU3c2 cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYyZ0xmZVRFb2JSRHE5ZVp1dlVrbmRTdzZwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REM4NjYvNkEwREY5QkExRDk2MTFFMkI3QjUwNTdGMDhCMDJDRDIvRDU1RDI5OTA1 NjFGMTFFN0I5QjVGQjJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMCAEAgABMBoDBAJnApADBAN5OrgwDAMEBXqBYAMEA3qBcDANBAIAAjAHAwUA JAKGADANBgkqhkiG9w0BAQsFAAOCAQEAJnWzMWIBf+DLD3cjnu0dRwNBAsNSe9Nm aqJ57sOZq6byYGwp+EbOJEGbUzJuSfIgMJaYyQWJSeSTnxYmzOfqZAByl0DujH1X 9xgzajZOzuDoepGAA92u49RACyowkwBoScu5TzdASAtLfGTocBpyuh5RINNVb4+t gTp+XHrzkSsSVVdwqMeoHSy6MaCXR0VTtQpVGjPhFgBDp21z7Z2sTr3xmY0eQHFJ Imm9D0Y67bQiZc5ocpUn6CpM7n9Mn6eBXvUk7aq939wSQNvThxwxFHd4ALrbZDAd omFI3jRjz8tQam+S+U6hc4fODUN3Nn7dctIuruMDt46Hk+V6Z/3oWA== -----END CERTIFICATE-----Generated at Fri Apr 4 23:36:03 2025 by rpki-client