$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/8698CD28A42211EB91621734C4F9AE02.roa File: 8698CD28A42211EB91621734C4F9AE02.roa (raw, json) Hash identifier: liguL5yWelfphfIz9rHVaKh3TqmzzrhEVoBWguDMI9M= Subject key identifier: C7:70:CC:FD:9C:86:D4:B6:64:3B:40:EF:27:D7:0C:19:EF:FB:0C:3D Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 088E Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/8698CD28A42211EB91621734C4F9AE02.roa Signing time: Wed 04 Dec 2024 20:29:10 +0000 ROA not before: Wed 04 Dec 2024 20:29:10 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 137990 IP address blocks: 103.104.100.0/22 maxlen: 22 103.104.100.0/24 maxlen: 24 103.104.101.0/24 maxlen: 24 103.104.102.0/24 maxlen: 24 103.104.103.0/24 maxlen: 24 202.43.224.0/24 maxlen: 24 2402:940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2190 (0x88e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD Validity Not Before: Dec 4 20:29:10 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6750bb96-3f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:d2:d4:32:5c:e9:ed:ee:74:a0:71:58:36: 9f:5a:43:e4:66:9b:80:52:ab:59:7f:ff:ce:18:93: e9:bc:27:86:f4:a2:2e:de:1d:6a:dc:b2:ae:f6:c9: 6a:56:12:ae:e1:b4:46:5d:c9:3d:7d:8b:b7:f3:b0: 9a:0f:1c:6e:52:c5:5c:17:15:35:e5:b9:74:f9:1d: a3:5a:aa:0f:7d:fa:10:9f:92:4f:11:de:df:b6:97: 59:e6:af:c7:64:ee:45:ef:cb:7b:6c:ac:eb:bd:bf: 02:e3:3f:7c:95:a7:f2:17:ce:fa:2e:01:01:9c:bc: 90:54:e6:22:1a:7b:c2:f8:e4:1b:6d:57:5b:2c:1d: 33:91:c1:83:41:0a:58:0c:0f:7a:f5:ba:d7:bb:01: 0e:38:e1:8c:8e:91:8b:5c:bf:7d:6f:c7:3c:5b:b2: 49:be:ed:2e:70:cc:a1:47:6f:75:1f:a7:03:34:05: 99:02:77:69:21:ec:d9:58:af:30:a4:f3:39:6d:dc: 62:df:07:12:2a:a9:68:24:3b:c2:22:c6:ec:44:82: b2:58:f5:da:96:a2:ed:62:13:a4:26:6c:21:4d:a9: 16:f2:1b:87:11:9a:93:9b:00:7b:84:2a:5d:f6:f0: 06:9c:20:45:d4:f7:f4:28:a8:73:87:59:96:bc:0b: a8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:70:CC:FD:9C:86:D4:B6:64:3B:40:EF:27:D7:0C:19:EF:FB:0C:3D X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/8698CD28A42211EB91621734C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.100.0/22 202.43.224.0/24 IPv6: 2402:940::/32 Signature Algorithm: sha256WithRSAEncryption 2c:04:63:e4:ee:82:b5:16:90:ac:02:b2:9a:a5:a2:ba:2f:de: ec:00:48:c8:57:67:0d:ef:75:ce:2b:37:67:63:38:28:42:f1: 8f:c2:dc:83:21:9e:51:66:6e:6f:41:f7:f1:ba:e4:2a:44:a4: 3e:6b:ba:dd:de:dc:92:e5:d9:f2:a5:7f:7a:a6:40:bb:57:68: 8e:41:34:84:14:65:f3:31:03:ba:4a:d9:3c:59:3c:0d:29:f1: 65:1d:cb:b7:7b:b9:26:d6:32:09:f9:44:c3:2a:3d:00:41:5f: 6a:ee:24:90:94:6f:b3:3b:2b:b8:79:e4:a8:99:a6:11:73:c8: 81:df:bd:de:08:dc:5f:ed:16:f3:25:ef:5c:7a:7c:77:2e:50: f0:57:05:92:2e:09:88:0c:52:37:86:4b:4c:4b:5e:3d:89:1d: a4:8f:39:d7:9d:d9:d8:d3:21:c4:8b:52:5e:ca:91:48:c5:8f: 85:e9:7e:aa:24:ad:ea:d0:9f:b6:f7:f9:5a:4d:ba:4f:df:fd: 51:76:97:3c:4e:2d:5a:b5:1a:e9:51:00:f5:c8:17:65:15:6d: 4c:40:48:91:70:8d:8c:9b:7a:26:26:3a:ad:41:87:f4:af:6e: ff:4a:af:a7:c7:ae:1d:d3:8d:71:cd:60:06:33:80:ba:20:1e: 7b:93:a0:9b -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjQxMjA0MjAyOTEwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwYmI5Ni0zZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQDS1DJc6e3udKBxWDafWkPkZpuAUqtZf//OGJPpvCeG9KIu3h1q3LKu9slq VhKu4bRGXck9fYu387CaDxxuUsVcFxU15bl0+R2jWqoPffoQn5JPEd7ftpdZ5q/H ZO5F78t7bKzrvb8C4z98lafyF876LgEBnLyQVOYiGnvC+OQbbVdbLB0zkcGDQQpY DA969brXuwEOOOGMjpGLXL99b8c8W7JJvu0ucMyhR291H6cDNAWZAndpIezZWK8w pPM5bdxi3wcSKqloJDvCIsbsRIKyWPXalqLtYhOkJmwhTakW8huHEZqTmwB7hCpd 9vAGnCBF1Pf0KKhzh1mWvAuo4wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMdwzP2c htS2ZDtA7yfXDBnv+ww9MB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg5Q0QvM0MwRDRBMTZCMDU1MTFFQUEwNDVCODBFQzRGOUFFMDIvODY5OENEMjhB NDIyMTFFQjkxNjIxNzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnaGQDBADKK+AwDQQCAAIwBwMFACQCCUAwDQYJKoZIhvcN AQELBQADggEBACwEY+TugrUWkKwCspqlorov3uwASMhXZw3vdc4rN2djOChC8Y/C 3IMhnlFmbm9B9/G65CpEpD5rut3e3JLl2fKlf3qmQLtXaI5BNIQUZfMxA7pK2TxZ PA0p8WUdy7d7uSbWMgn5RMMqPQBBX2ruJJCUb7M7K7h55KiZphFzyIHfvd4I3F/t FvMl71x6fHcuUPBXBZIuCYgMUjeGS0xLXj2JHaSPOded2djTIcSLUl7KkUjFj4Xp fqokrerQn7b3+VpNuk/f/VF2lzxOLVq1GulRAPXIF2UVbUxASJFwjYybeiYmOq1B h/Svbv9Kr6fHrh3TjXHNYAYzgLogHnuToJs= -----END CERTIFICATE-----Generated at Fri Apr 4 23:36:03 2025 by rpki-client