$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/17A27C7E116211EF8FC7E061C4F9AE02.roa File: 17A27C7E116211EF8FC7E061C4F9AE02.roa (raw, json) Hash identifier: cztAbxO48iiXYnmlMNinP2Teys3bNMwe8+H32sjLLV0= Subject key identifier: 52:43:37:97:CF:AC:A2:14:43:B3:EC:AA:5A:07:3F:BF:7D:8B:06:5B Certificate issuer: /CN=A91E0C33/serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945 Certificate serial: EC Authority key identifier: 80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/17A27C7E116211EF8FC7E061C4F9AE02.roa Signing time: Sun 01 Dec 2024 04:07:16 +0000 ROA not before: Sun 01 Dec 2024 04:07:16 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 151844 IP address blocks: 103.249.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C33 Validity Not Before: Dec 1 04:07:16 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674be0f4-71ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:35:6e:a0:2c:ca:1b:84:d9:06:ac:c2:17: 2c:06:03:13:dd:31:3b:00:31:7e:e4:b7:88:40:f9: f4:5c:0e:df:f7:e3:56:5c:78:ad:7d:ba:a5:1a:d2: 0e:98:ea:fe:3f:25:0b:d5:68:f0:78:44:b8:e8:42: 34:85:26:0c:40:65:0e:f8:60:57:75:54:8f:dc:7b: e2:3e:bc:6b:f3:89:9f:14:c7:cc:21:41:53:81:d1: 3d:6f:b9:b4:5d:e8:13:c5:95:b3:83:b4:8d:9e:48: 92:5d:bd:36:bc:5c:0f:d9:02:ec:8a:c7:ea:2b:39: 46:d1:df:c8:0a:51:a4:3c:5c:63:87:27:5d:75:65: 6e:c1:7a:a5:11:0d:59:22:16:39:46:b0:5d:ce:b7: 5e:8a:48:65:45:ac:07:34:18:44:30:51:ae:de:9b: 1b:5e:c9:fb:db:94:97:eb:fd:ee:be:47:51:0e:da: 10:f3:13:c0:f3:29:74:41:20:9c:c3:d9:7a:89:10: 59:f7:7c:d3:07:c2:a1:69:50:95:79:23:c4:31:2e: ff:e5:22:a9:ba:fe:c2:e9:8a:7c:58:c5:fe:01:b0: 01:95:b0:7e:b1:f5:1b:c1:97:7a:61:9e:c2:ee:a4: c1:e2:e7:51:be:19:09:98:61:88:f5:19:cb:da:87: d5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:43:37:97:CF:AC:A2:14:43:B3:EC:AA:5A:07:3F:BF:7D:8B:06:5B X509v3 Authority Key Identifier: keyid:80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/17A27C7E116211EF8FC7E061C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.249.114.0/24 Signature Algorithm: sha256WithRSAEncryption 57:a7:d1:26:2f:a3:ff:41:9c:d4:29:23:4a:6f:ec:35:fd:78: f9:12:65:69:fb:a9:17:36:ac:c6:c4:08:32:d4:58:ad:ba:79: 49:04:db:a5:c2:aa:ab:69:86:87:2c:3f:a9:19:53:29:1d:2e: ef:e1:a8:72:5d:87:bf:7e:9a:31:82:59:a8:c4:23:44:23:6e: 64:19:70:32:79:14:7d:c8:ef:f9:ff:28:66:7b:5d:f0:20:ba: 48:e3:88:fd:7c:2f:61:32:61:1a:de:5b:58:0a:00:e5:bf:e7: 3f:b0:f1:ea:b7:15:44:37:5b:fd:6a:38:2c:f1:4f:d1:23:2f: a1:8a:25:42:39:34:45:c1:77:3f:54:2f:43:f5:4f:9b:fb:ea: db:e2:6b:19:37:44:12:35:0b:eb:67:8d:40:b6:a6:82:a3:07: 77:22:ea:b7:db:4c:83:c8:a4:ec:46:cf:23:e5:8f:72:78:c2: be:2c:b0:90:23:c6:84:92:de:ff:38:d1:2e:68:8e:79:8b:35: 41:8c:43:68:96:98:63:5e:05:08:24:a3:ca:45:0d:a8:ef:84: fb:0b:6d:7d:5c:18:c4:1b:1f:18:c5:81:34:c7:22:d0:e3:e1: 4f:da:59:1f:ab:bb:da:1f:d5:84:c3:77:8f:91:e9:79:df:00: f7:78:59:e3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDMzMxMTAvBgNVBAUTKDgwQkU5MzBFMzA2NDlCMTJBQ0VFOERDNDBCNTc1QUI3 RERFNjQ5NDUwHhcNMjQxMjAxMDQwNzE2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRiZTBmNC03MWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqY1bqAsyhuE2QaswhcsBgMT3TE7ADF+5LeIQPn0XA7f9+NWXHitfbqlGtIO mOr+PyUL1WjweES46EI0hSYMQGUO+GBXdVSP3HviPrxr84mfFMfMIUFTgdE9b7m0 XegTxZWzg7SNnkiSXb02vFwP2QLsisfqKzlG0d/IClGkPFxjhydddWVuwXqlEQ1Z IhY5RrBdzrdeikhlRawHNBhEMFGu3psbXsn725SX6/3uvkdRDtoQ8xPA8yl0QSCc w9l6iRBZ93zTB8KhaVCVeSPEMS7/5SKpuv7C6Yp8WMX+AbABlbB+sfUbwZd6YZ7C 7qTB4udRvhkJmGGI9RnL2ofVtQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFJDN5fP rKIUQ7PsqloHP799iwZbMB8GA1UdIwQYMBaAFIC+kw4wZJsSrO6NxAtXWrfd5klF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEMzMy81NDI2NUYzNDY2 ODcxMUVFQjkzRDNGNkNDNEY5QUUwMi9nTDZURGpCa214S3M3bzNFQzFkYXQ5M21T VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dMNlREakJrbXhLczdvM0VDMWRhdDkzbVNVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBDMzMvNTQyNjVGMzQ2Njg3MTFFRUI5M0QzRjZDQzRGOUFFMDIvMTdBMjdDN0Ux MTYyMTFFRjhGQzdFMDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn+XIwDQYJKoZIhvcNAQELBQADggEBAFen0SYvo/9BnNQp I0pv7DX9ePkSZWn7qRc2rMbECDLUWK26eUkE26XCqqtphocsP6kZUykdLu/hqHJd h79+mjGCWajEI0QjbmQZcDJ5FH3I7/n/KGZ7XfAgukjjiP18L2EyYRreW1gKAOW/ 5z+w8eq3FUQ3W/1qOCzxT9EjL6GKJUI5NEXBdz9UL0P1T5v76tviaxk3RBI1C+tn jUC2poKjB3ci6rfbTIPIpOxGzyPlj3J4wr4ssJAjxoSS3v840S5ojnmLNUGMQ2iW mGNeBQgko8pFDajvhPsLbX1cGMQbHxjFgTTHItDj4U/aWR+ru9of1YTDd4+R6Xnf APd4WeM= -----END CERTIFICATE-----Generated at Sun Apr 6 00:39:45 2025 by rpki-client