$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/AC9A49A6B79811EF9C8DF330C4F9AE02.roa File: AC9A49A6B79811EF9C8DF330C4F9AE02.roa (raw, json) Hash identifier: x42cPOY42/ihAcwEOhbusv08pDLFkf2E5Qjxerl5aIk= Subject key identifier: 88:E8:20:64:07:6F:3F:89:01:D9:76:B7:46:AD:82:1E:20:63:5D:6F Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Certificate serial: 010A Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/AC9A49A6B79811EF9C8DF330C4F9AE02.roa Signing time: Wed 11 Dec 2024 08:19:43 +0000 ROA not before: Wed 11 Dec 2024 08:19:43 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 38562 IP address blocks: 103.203.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5E8B Validity Not Before: Dec 11 08:19:43 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67594b1f-c43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:f2:27:f9:9d:c1:b5:25:c0:85:06:4f:c0: 99:25:b6:87:85:ed:87:6e:ae:b3:d5:4a:b3:8e:d5: c0:f0:70:3b:d5:c0:82:ef:08:58:26:c5:75:4b:9a: 28:ed:b5:c8:1e:8f:02:64:88:d2:af:18:bc:6c:86: 50:fc:e8:27:9e:90:f5:c1:ce:9e:67:da:5b:2b:4b: b2:97:9e:4a:ee:9d:ab:a0:dc:08:bb:5f:d4:94:e2: c3:8b:6b:fa:3f:f4:c7:50:59:14:4f:d9:b0:fa:8e: 26:2b:e6:95:2b:b4:29:71:ed:ed:1c:a3:b7:9f:2b: 4c:d4:47:2c:21:37:63:04:35:d2:16:00:bd:aa:8a: e5:da:62:2e:b5:b3:a2:a0:bb:95:da:f3:ba:e1:71: 14:fd:8c:4d:9a:b3:35:eb:2c:6f:55:be:b4:6f:9e: b9:f8:be:f7:83:39:06:90:3b:8f:96:bf:1a:06:63: 85:e7:d9:25:6d:01:c8:4a:7e:da:73:c7:f3:ab:d2: 60:19:de:58:fa:26:a6:4d:f5:8d:52:66:b4:6c:01: 2c:46:45:c7:cd:1d:b5:29:5c:cd:1d:dd:d7:e9:b9: c5:5d:98:74:0a:23:57:96:50:8d:04:85:e3:15:92: 4a:10:be:d2:24:9c:6b:3f:36:fd:1b:73:f9:ce:55: d1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E8:20:64:07:6F:3F:89:01:D9:76:B7:46:AD:82:1E:20:63:5D:6F X509v3 Authority Key Identifier: keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/AC9A49A6B79811EF9C8DF330C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.203.237.0/24 Signature Algorithm: sha256WithRSAEncryption 71:88:9a:ba:8f:aa:a0:8c:0c:b8:9d:e7:49:e9:4b:68:50:45: 8a:74:2f:30:c6:ab:fe:98:0d:67:1e:3d:e7:60:36:ed:a0:aa: 15:f0:48:b8:a6:96:ea:1b:03:00:8d:a9:1b:d4:d6:b5:a7:43: ec:58:35:14:0e:f6:3d:50:09:97:be:b4:dd:c3:4d:0c:13:a1: fb:61:be:a6:69:ce:f5:83:d8:67:09:6e:37:ee:ea:a2:0e:c5: 55:3d:7d:62:6d:51:71:2f:df:bb:85:3c:5a:1f:17:c2:75:4e: 7f:ed:12:88:77:8d:3d:67:f3:a1:f0:30:45:27:5b:e8:28:de: 22:63:70:ea:90:00:c9:d0:82:ba:c0:d4:7d:87:63:86:8a:64: 87:5e:05:d0:4a:c0:1b:5d:0d:14:00:7f:03:f5:18:68:7b:43: 61:ae:8d:fc:bb:11:03:d6:40:d0:b0:9a:54:be:c6:67:37:fa: 9d:96:05:32:41:cb:46:ce:54:99:7d:b1:27:37:7d:6b:d3:61: bf:19:b9:71:fa:ab:12:84:a8:23:3b:61:f5:e7:6a:22:25:e8: 47:eb:17:fc:6f:65:e4:78:b9:3d:01:98:99:64:ca:ae:04:83: d9:1a:c1:b1:df:29:3e:bf:94:7b:2e:26:32:d8:b5:bf:f6:4b: a3:08:1e:83 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFOEIxMTAvBgNVBAUTKEJEOUQ2Njg3N0Q4NjZFN0M5MDQxNTZCRTA4Q0I0Mzcx QUFFMDAxQkQwHhcNMjQxMjExMDgxOTQzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU5NGIxZi1jNDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTLyJ/mdwbUlwIUGT8CZJbaHhe2Hbq6z1UqzjtXA8HA71cCC7whYJsV1S5oo 7bXIHo8CZIjSrxi8bIZQ/OgnnpD1wc6eZ9pbK0uyl55K7p2roNwIu1/UlOLDi2v6 P/THUFkUT9mw+o4mK+aVK7Qpce3tHKO3nytM1EcsITdjBDXSFgC9qorl2mIutbOi oLuV2vO64XEU/YxNmrM16yxvVb60b565+L73gzkGkDuPlr8aBmOF59klbQHISn7a c8fzq9JgGd5Y+iamTfWNUma0bAEsRkXHzR21KVzNHd3X6bnFXZh0CiNXllCNBIXj FZJKEL7SJJxrPzb9G3P5zlXRswIDAQABo4IClTCCApEwHQYDVR0OBBYEFIjoIGQH bz+JAdl2t0atgh4gY11vMB8GA1UdIwQYMBaAFL2dZod9hm58kEFWvgjLQ3Gq4AG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUU4Qi9ERUMzQkQ3QzVB RDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2JueVFRVmEtQ010RGNhcmdB YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaMW1oMzJHYm55UVFWYS1DTXREY2FyZ0FiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTVFOEIvREVDM0JEN0M1QUQzMTFFRUE5MkY5MzIwQzRGOUFFMDIvQUM5QTQ5QTZC Nzk4MTFFRjlDOERGMzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABny+0wDQYJKoZIhvcNAQELBQADggEBAHGImrqPqqCMDLid 50npS2hQRYp0LzDGq/6YDWcePedgNu2gqhXwSLimluobAwCNqRvU1rWnQ+xYNRQO 9j1QCZe+tN3DTQwTofthvqZpzvWD2GcJbjfu6qIOxVU9fWJtUXEv37uFPFofF8J1 Tn/tEoh3jT1n86HwMEUnW+go3iJjcOqQAMnQgrrA1H2HY4aKZIdeBdBKwBtdDRQA fwP1GGh7Q2Gujfy7EQPWQNCwmlS+xmc3+p2WBTJBy0bOVJl9sSc3fWvTYb8ZuXH6 qxKEqCM7YfXnaiIl6EfrF/xvZeR4uT0BmJlkyq4Eg9kawbHfKT6/lHsuJjLYtb/2 S6MIHoM= -----END CERTIFICATE-----Generated at Sat Apr 5 02:43:38 2025 by rpki-client