$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/C109FFF4FC0511E7BAFB3E48C4F9AE02.roa File: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (raw, json) Hash identifier: hwBxWiPVp4f2tvl+TO1kwaPXm0WY1KDdijTAJsRcx7Y= Subject key identifier: 8C:77:F8:14:BE:89:98:1A:ED:A5:40:EE:43:DA:85:CC:16:13:75:46 Certificate issuer: /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Certificate serial: 166A Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/C109FFF4FC0511E7BAFB3E48C4F9AE02.roa Signing time: Sat 28 Dec 2024 16:54:13 +0000 ROA not before: Sat 28 Dec 2024 16:54:13 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 64089 IP address blocks: 45.253.130.0/23 maxlen: 24 103.85.42.0/23 maxlen: 24 103.247.36.0/23 maxlen: 24 2402:5c40:1000::/40 maxlen: 40 2402:5c40:1100::/40 maxlen: 40 2402:5c40:1200::/40 maxlen: 40 2402:5c40:1300::/40 maxlen: 40 2402:5c40:1400::/40 maxlen: 40 2402:5c40:1500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5738 (0x166a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8161 Validity Not Before: Dec 28 16:54:13 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67702d35-4a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1e:c2:66:bc:43:a4:ce:a9:bf:5d:60:14:7e: 49:a7:5b:92:15:05:f0:5c:e5:9f:4a:47:43:a9:04: 8f:ab:50:98:47:29:3d:45:a5:6a:4e:fa:1a:43:78: 2a:39:a3:24:5f:d0:78:b4:eb:8d:3f:2b:2a:51:0a: 8e:26:e2:50:00:3b:55:7e:2f:98:22:a0:d6:a4:a4: b3:59:f2:67:9a:cc:b1:c4:80:f1:17:69:62:8a:07: 8f:14:ac:e1:fa:b1:7d:bc:f9:70:bc:0f:bf:53:d3: f8:43:01:c4:6d:34:b1:66:72:e2:91:61:0a:5c:31: 7b:fd:0d:04:fa:f4:24:27:7a:df:a4:35:e8:c0:ce: 56:b5:43:7f:c7:ed:76:a5:69:e0:68:7c:b9:2e:0e: 91:50:a3:b3:03:c8:76:e2:5a:f1:fa:73:a2:6f:8c: d4:df:b7:47:d6:ef:16:81:94:6c:54:34:70:1d:27: 8e:4d:5e:5e:4c:52:75:6a:07:82:0f:64:45:c6:b2: cb:86:40:bb:af:ca:7b:52:ed:5c:11:75:1a:6d:1b: b0:53:35:75:fd:2d:a0:5f:14:43:ee:df:e9:2d:57: fa:02:9c:ba:68:0a:f7:64:5d:78:c1:1a:83:33:61: ed:5d:99:3a:d5:be:d5:35:bc:62:70:64:60:ec:19: 5e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:77:F8:14:BE:89:98:1A:ED:A5:40:EE:43:DA:85:CC:16:13:75:46 X509v3 Authority Key Identifier: keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/C109FFF4FC0511E7BAFB3E48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.253.130.0/23 103.85.42.0/23 103.247.36.0/23 IPv6: 2402:5c40:1000::-2402:5c40:15ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 92:05:20:4e:5a:7e:82:36:6f:88:1c:67:21:74:0b:ea:90:13: 37:ff:64:14:8f:6b:01:fe:cb:e4:26:64:0d:6c:dc:bc:d8:70: 06:11:12:cc:11:01:84:b1:6e:62:ae:f4:23:94:54:76:5b:a2: bb:83:3f:eb:bd:55:e9:69:57:b7:06:1b:a9:87:9f:ed:19:be: ee:95:d0:27:45:b5:02:fa:0e:ec:07:82:57:33:6d:0f:63:99: e9:7c:8b:a8:38:b5:d5:1f:ed:78:07:07:89:d4:4f:19:b1:25: b6:7f:2c:ca:da:2a:fb:e7:eb:0e:64:8b:f0:21:29:53:ea:19: 43:89:7f:92:45:a0:ae:84:d2:5a:32:d9:5f:41:e3:ea:57:d8: e2:a7:3a:75:a9:71:98:4e:12:60:ce:e2:89:10:e7:b8:1b:bc: 42:62:96:d4:a7:9d:3d:7e:7e:39:cc:11:85:75:f9:83:64:a0: 11:53:0e:87:9a:93:68:5b:04:b5:31:59:3e:b5:59:bd:f4:5a: a0:f3:d3:96:ec:9b:6a:98:a3:d7:18:78:79:ab:7a:59:65:de: 9e:ff:5b:f4:ec:bf:dd:b6:e4:82:3a:40:66:e2:b8:5c:f7:82: c3:a8:c0:48:d7:2c:b2:51:d0:43:88:cd:39:e4:8e:70:65:ba: 33:b4:2b:65 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICFmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxNjExMTAvBgNVBAUTKDBGMEJDRUUxNUFEQjZENTdEMDJDRDA0QjQ1MjIzQUI4 MDY2QTU0NUQwHhcNMjQxMjI4MTY1NDEzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzcwMmQzNS00YTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzx7CZrxDpM6pv11gFH5Jp1uSFQXwXOWfSkdDqQSPq1CYRyk9RaVqTvoaQ3gq OaMkX9B4tOuNPysqUQqOJuJQADtVfi+YIqDWpKSzWfJnmsyxxIDxF2liigePFKzh +rF9vPlwvA+/U9P4QwHEbTSxZnLikWEKXDF7/Q0E+vQkJ3rfpDXowM5WtUN/x+12 pWngaHy5Lg6RUKOzA8h24lrx+nOib4zU37dH1u8WgZRsVDRwHSeOTV5eTFJ1ageC D2RFxrLLhkC7r8p7Uu1cEXUabRuwUzV1/S2gXxRD7t/pLVf6Apy6aAr3ZF14wRqD M2HtXZk61b7VNbxicGRg7Ble2QIDAQABo4ICuzCCArcwHQYDVR0OBBYEFIx3+BS+ iZga7aVA7kPahcwWE3VGMB8GA1UdIwQYMBaAFA8LzuFa221X0CzQS0UiOrgGalRd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODE2MS82NzA2MTJCMEZB NjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJWZlFMTkJMUlNJNnVBWnFW RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R3dk80VnJiYlZmUUxOQkxSU0k2dUFacVZGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTgxNjEvNjcwNjEyQjBGQTY0MTFFN0E0QzI2OTNFQzRGOUFFMDIvQzEwOUZGRjRG QzA1MTFFN0JBRkIzRTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MBgEAgABMBIDBAEt/YIDBAFnVSoDBAFn9yQwGAQCAAIwEjAQAwYEJAJcQBAD BgEkAlxAFDANBgkqhkiG9w0BAQsFAAOCAQEAkgUgTlp+gjZviBxnIXQL6pATN/9k FI9rAf7L5CZkDWzcvNhwBhESzBEBhLFuYq70I5RUdluiu4M/671V6WlXtwYbqYef 7Rm+7pXQJ0W1AvoO7AeCVzNtD2OZ6XyLqDi11R/teAcHidRPGbEltn8sytoq++fr DmSL8CEpU+oZQ4l/kkWgroTSWjLZX0Hj6lfY4qc6dalxmE4SYM7iiRDnuBu8QmKW 1KedPX5+OcwRhXX5g2SgEVMOh5qTaFsEtTFZPrVZvfRaoPPTluybapij1xh4eat6 WWXenv9b9Oy/3bbkgjpAZuK4XPeCw6jASNcsslHQQ4jNOeSOcGW6M7QrZQ== -----END CERTIFICATE-----Generated at Sat Apr 5 03:57:03 2025 by rpki-client