$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/AF0508E8B1EE11EF93E70F63C4F9AE02.roa File: AF0508E8B1EE11EF93E70F63C4F9AE02.roa (raw, json) Hash identifier: 3pP3sdtqTiWCcrGq+H7BVXzx0my8jLX9t9qyXkMSDe8= Subject key identifier: FC:E0:36:41:8F:4E:C3:5E:D2:A1:ED:1E:16:5A:68:5E:A4:E8:DD:6F Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Certificate serial: 0C56 Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/AF0508E8B1EE11EF93E70F63C4F9AE02.roa Signing time: Wed 04 Dec 2024 03:20:17 +0000 ROA not before: Wed 04 Dec 2024 03:20:17 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141452 IP address blocks: 103.214.80.0/24 maxlen: 24 103.214.81.0/24 maxlen: 24 103.214.83.0/24 maxlen: 24 144.48.85.0/24 maxlen: 24 144.48.86.0/24 maxlen: 24 144.48.87.0/24 maxlen: 24 2404:d580::/32 maxlen: 32 2404:d580::/48 maxlen: 48 2404:d580:1::/48 maxlen: 48 2404:d580:2::/48 maxlen: 48 2404:d580:3::/48 maxlen: 48 2404:d580:4::/48 maxlen: 48 2404:d580:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3158 (0xc56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEBE3 Validity Not Before: Dec 4 03:20:17 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=674fca71-b5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:f6:3e:82:f8:06:8e:9f:5c:04:cc:da:34: 28:92:24:09:d1:5c:4a:ba:c0:42:a3:bd:b6:a6:04: 00:03:6f:38:64:3b:c8:fc:2f:13:fa:7b:f7:58:3f: 14:f4:c0:b0:13:dc:90:61:e5:71:50:f2:a5:fc:4f: bd:26:04:88:2d:2d:47:34:4d:be:5f:ab:78:16:f9: 8b:3d:4f:5e:7a:76:f7:5d:d7:27:80:40:d1:72:a3: 99:90:b7:5d:e2:06:90:4c:fc:df:6d:91:3c:d6:b8: 61:1b:84:07:4b:c1:ad:34:99:01:0c:17:02:05:52: 5a:ef:bd:67:eb:5b:9b:43:63:8a:1d:7a:33:89:20: c9:94:2a:70:49:c8:8d:0e:a1:44:5c:a3:2a:53:e1: 83:2f:61:b8:89:19:e0:14:de:91:90:aa:4f:cb:b9: 38:e2:57:8f:ec:9c:0e:31:09:0b:7b:27:57:9d:8b: bc:3c:c0:21:19:86:24:3a:df:26:45:92:cc:78:0e: 18:e3:09:8e:22:9b:07:fc:74:80:f5:52:69:7a:3d: 35:54:4a:6e:09:3d:54:17:14:f0:55:c1:f9:9d:9c: 4b:5c:dd:a3:a8:a1:30:e3:59:0b:fc:fb:90:9b:7e: e0:5e:11:68:2a:c3:63:28:35:33:87:35:43:86:96: 20:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E0:36:41:8F:4E:C3:5E:D2:A1:ED:1E:16:5A:68:5E:A4:E8:DD:6F X509v3 Authority Key Identifier: keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/AF0508E8B1EE11EF93E70F63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.214.80.0/23 103.214.83.0/24 144.48.85.0-144.48.87.255 IPv6: 2404:d580::/32 Signature Algorithm: sha256WithRSAEncryption 97:22:fb:1e:c8:91:0d:36:22:f6:6d:be:a5:a4:cf:5a:95:66: 5f:6c:bd:d6:3f:00:bc:6d:3c:5c:0b:55:28:4c:88:90:1c:80: d3:9c:5f:d8:d7:db:96:3b:d8:13:f9:3d:f0:54:a4:df:4e:55: 95:cd:bb:af:47:22:c4:c5:30:1d:ac:90:22:b4:18:c5:39:75: 10:62:4f:93:7d:aa:9e:3d:21:a8:a8:c0:74:de:bc:c1:60:ac: 0f:71:37:31:4e:1f:b2:0a:e9:24:58:48:0f:f7:e0:68:9b:b6: 0a:11:ec:60:3e:a3:e7:dd:11:d6:c0:b8:66:f6:c1:91:85:47: 89:c6:62:ec:58:7c:cf:8a:bc:12:fb:d3:54:17:0f:90:55:3b: 9b:c4:cf:70:b6:64:9f:bd:c1:47:4b:5e:e4:74:00:01:26:ef: d2:db:05:76:50:59:4d:77:68:02:b2:6f:bc:be:07:5e:f0:6c: 1a:09:92:59:a1:73:24:fc:8d:3b:f4:6f:fb:c2:bc:c6:2d:ee: 05:81:34:a3:87:af:75:f2:9e:a5:2d:e7:28:f2:b7:f7:52:32: d1:d6:52:59:97:f2:76:e0:2b:76:7e:8b:6f:5b:d6:02:31:ae: 3d:0d:c7:01:8a:a8:7f:2e:2d:19:5a:d6:66:93:0b:ff:39:b4: 15:91:9e:0e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICDFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE MTdGQTk2Q0QwHhcNMjQxMjA0MDMyMDE3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRmY2E3MS1iNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugL2PoL4Bo6fXATM2jQokiQJ0VxKusBCo722pgQAA284ZDvI/C8T+nv3WD8U 9MCwE9yQYeVxUPKl/E+9JgSILS1HNE2+X6t4FvmLPU9eenb3XdcngEDRcqOZkLdd 4gaQTPzfbZE81rhhG4QHS8GtNJkBDBcCBVJa771n61ubQ2OKHXoziSDJlCpwSciN DqFEXKMqU+GDL2G4iRngFN6RkKpPy7k44leP7JwOMQkLeydXnYu8PMAhGYYkOt8m RZLMeA4Y4wmOIpsH/HSA9VJpej01VEpuCT1UFxTwVcH5nZxLXN2jqKEw41kL/PuQ m37gXhFoKsNjKDUzhzVDhpYgQwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFPzgNkGP TsNe0qHtHhZaaF6k6N1vMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0 NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVCRTMvODBBRTEwQzYwNDUwMTFFQUJBODJDNDE1QzRGOUFFMDIvQUYwNTA4RThC MUVFMTFFRjkzRTcwRjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMCAEAgABMBoDBAFn1lADBABn1lMwDAMEAJAwVQMEA5AwUDANBAIAAjAHAwUA JATVgDANBgkqhkiG9w0BAQsFAAOCAQEAlyL7HsiRDTYi9m2+paTPWpVmX2y91j8A vG08XAtVKEyIkByA05xf2NfbljvYE/k98FSk305Vlc27r0cixMUwHayQIrQYxTl1 EGJPk32qnj0hqKjAdN68wWCsD3E3MU4fsgrpJFhID/fgaJu2ChHsYD6j590R1sC4 ZvbBkYVHicZi7Fh8z4q8EvvTVBcPkFU7m8TPcLZkn73BR0te5HQAASbv0tsFdlBZ TXdoArJvvL4HXvBsGgmSWaFzJPyNO/Rv+8K8xi3uBYE0o4evdfKepS3nKPK391Iy 0dZSWZfyduArdn6Lb1vWAjGuPQ3HAYqofy4tGVrWZpML/zm0FZGeDg== -----END CERTIFICATE-----Generated at Sat Apr 5 03:34:26 2025 by rpki-client