$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/74543474865311EFAD6A3A72C4F9AE02.roa File: 74543474865311EFAD6A3A72C4F9AE02.roa (raw, json) Hash identifier: tSsmwrABsD5su5pyP7TCNOYO6hRvgrJ+hDiXInlwpOE= Subject key identifier: 40:5E:C5:78:16:48:37:E5:29:7C:77:F2:B6:64:BA:BC:E9:72:84:E7 Certificate issuer: /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Certificate serial: 062E Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/74543474865311EFAD6A3A72C4F9AE02.roa Signing time: Mon 02 Dec 2024 22:32:20 +0000 ROA not before: Mon 02 Dec 2024 22:32:20 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 50053 IP address blocks: 103.80.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1582 (0x62e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF04 Validity Not Before: Dec 2 22:32:20 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=674e3573-da20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:04:43:5f:43:4a:13:e1:69:61:07:7b:08:ec: 12:df:70:ba:eb:09:95:28:6f:52:6f:ae:96:77:8c: 4b:0c:f7:c6:37:a1:ec:86:c6:1a:c6:c9:98:10:0c: 0c:6e:67:f3:42:0d:06:01:2f:db:e1:ea:12:ef:00: 54:d8:ee:bd:4d:97:30:48:af:5c:05:76:eb:68:dd: 45:7c:78:8c:a4:23:81:7f:44:1b:d2:15:e7:57:e0: ae:8c:92:06:90:f9:35:56:8d:1e:41:1d:ae:7d:ee: eb:40:b4:0a:df:3d:20:e3:42:40:09:aa:69:b0:38: a7:c5:cd:f5:79:49:f5:b9:c6:52:6a:41:67:15:2a: 0f:07:f6:e5:a1:27:18:f6:30:d1:76:c6:f0:b1:4a: 77:75:d3:05:31:f3:3d:e0:c5:52:d2:9f:18:15:fa: b8:34:a5:8a:50:fc:f4:f2:b2:f1:1c:46:67:64:ac: 4e:86:ea:89:05:71:45:fa:90:4c:b2:52:c7:c5:df: df:62:c9:1d:f4:47:02:0a:58:64:e1:68:2f:e3:75: ef:75:41:b4:d1:49:7a:aa:2c:59:97:08:ed:e9:b2: 19:c0:23:62:18:96:0c:76:d7:40:e8:d4:5f:e2:0f: dd:e7:97:c4:95:ec:14:2e:fe:e8:3a:53:59:ee:ba: bf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5E:C5:78:16:48:37:E5:29:7C:77:F2:B6:64:BA:BC:E9:72:84:E7 X509v3 Authority Key Identifier: keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/74543474865311EFAD6A3A72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.80.86.0/23 Signature Algorithm: sha256WithRSAEncryption 34:a8:00:bc:c5:0f:ee:3e:4f:66:11:64:d8:1c:4a:52:e9:3e: a8:96:1f:6d:c4:18:b7:31:fa:3d:6d:5d:49:fd:0d:6f:71:86: d6:4a:aa:33:9d:ca:93:6e:3e:f7:66:5e:cb:b3:f8:ac:72:1e: 6b:84:76:a6:fa:75:a9:b2:4c:c8:c7:f3:75:31:5a:f8:0b:2b: 10:40:10:8a:eb:36:ee:b0:c0:5f:fa:28:4d:8e:0d:b7:f0:be: cf:09:af:6e:40:51:27:64:12:c6:00:21:fc:49:a4:fe:0d:94: e9:74:32:f8:7f:bd:b9:0a:5f:eb:ab:23:ab:6f:d0:c1:54:69: 79:8b:54:0c:5c:d4:88:d6:01:5b:60:d9:97:65:86:26:9a:23: 67:21:6c:28:65:e7:ae:39:79:a9:1b:2a:23:4e:c8:b6:1e:00: e1:4c:d3:72:0a:48:c2:3d:ea:ac:f1:21:20:55:4e:27:7c:6d: 64:a9:12:c4:e4:24:94:93:3e:8a:95:28:5c:ed:f0:09:b1:9e: 79:0a:49:64:71:f4:52:7f:69:01:1a:75:cf:b5:0a:88:af:fc: e5:df:ec:2b:0e:cb:08:ff:b9:1b:6f:f2:a2:35:05:8a:24:db: 12:d4:28:8d:11:0a:fa:94:11:87:09:2c:57:b8:3b:f2:74:b4: eb:91:e8:92 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGMDQxMTAvBgNVBAUTKDMxMTZFMDc1ODQwNTZDMTZGNTY4RjBFQzYwOThFN0RD NEY1MDRBMzgwHhcNMjQxMjAyMjIzMjIwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRlMzU3My1kYTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ARDX0NKE+FpYQd7COwS33C66wmVKG9Sb66Wd4xLDPfGN6HshsYaxsmYEAwM bmfzQg0GAS/b4eoS7wBU2O69TZcwSK9cBXbraN1FfHiMpCOBf0Qb0hXnV+CujJIG kPk1Vo0eQR2ufe7rQLQK3z0g40JACappsDinxc31eUn1ucZSakFnFSoPB/bloScY 9jDRdsbwsUp3ddMFMfM94MVS0p8YFfq4NKWKUPz08rLxHEZnZKxOhuqJBXFF+pBM slLHxd/fYskd9EcCClhk4Wgv43XvdUG00Ul6qixZlwjt6bIZwCNiGJYMdtdA6NRf 4g/d55fElewULv7oOlNZ7rq/jQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEBexXgW SDflKXx38rZkurzpcoTnMB8GA1UdIwQYMBaAFDEW4HWEBWwW9Wjw7GCY59xPUEo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUYwNC85OTFFQjc1QTdB QjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJCYjFhUERzWUpqbjNFOVFT amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SYmdkWVFGYkJiMWFQRHNZSmpuM0U5UVNqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVGMDQvOTkxRUI3NUE3QUIwMTFFQkEwMjdCQjdGQzRGOUFFMDIvNzQ1NDM0NzQ4 NjUzMTFFRkFENkEzQTcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnUFYwDQYJKoZIhvcNAQELBQADggEBADSoALzFD+4+T2YR ZNgcSlLpPqiWH23EGLcx+j1tXUn9DW9xhtZKqjOdypNuPvdmXsuz+KxyHmuEdqb6 damyTMjH83UxWvgLKxBAEIrrNu6wwF/6KE2ODbfwvs8Jr25AUSdkEsYAIfxJpP4N lOl0Mvh/vbkKX+urI6tv0MFUaXmLVAxc1IjWAVtg2ZdlhiaaI2chbChl5645eakb KiNOyLYeAOFM03IKSMI96qzxISBVTid8bWSpEsTkJJSTPoqVKFzt8AmxnnkKSWRx 9FJ/aQEadc+1Coiv/OXf7CsOywj/uRtv8qI1BYok2xLUKI0RCvqUEYcJLFe4O/J0 tOuR6JI= -----END CERTIFICATE-----Generated at Sun Apr 6 09:10:18 2025 by rpki-client