$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/C82A0778680811EE88B5527CC4F9AE02.roa File: C82A0778680811EE88B5527CC4F9AE02.roa (raw, json) Hash identifier: FMfFksLuvdDh719tgVb78yQXrHhuawjPdGhDWuzq2VE= Subject key identifier: AF:89:46:40:F5:FC:22:D1:11:70:D9:E0:8E:F6:B4:08:77:27:07:0D Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 0192 Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/C82A0778680811EE88B5527CC4F9AE02.roa Signing time: Mon 25 Nov 2024 02:25:42 +0000 ROA not before: Mon 25 Nov 2024 02:25:42 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 149021 IP address blocks: 103.176.204.0/23 maxlen: 23 103.176.204.0/24 maxlen: 24 103.176.205.0/24 maxlen: 24 2401:43e0::/48 maxlen: 48 2401:43e0:1::/48 maxlen: 48 2401:43e0:2::/47 maxlen: 47 2401:43e0:4::/46 maxlen: 46 2401:43e0:8::/45 maxlen: 45 2401:43e0:10::/44 maxlen: 44 2401:43e0:20::/43 maxlen: 43 2401:43e0:40::/42 maxlen: 42 2401:43e0:80::/41 maxlen: 41 2401:43e0:100::/40 maxlen: 40 2401:43e0:200::/39 maxlen: 39 2401:43e0:400::/38 maxlen: 38 2401:43e0:800::/37 maxlen: 37 2401:43e0:1000::/36 maxlen: 36 2401:43e0:2000::/35 maxlen: 35 2401:43e0:4000::/34 maxlen: 34 2401:43e0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24 Validity Not Before: Nov 25 02:25:42 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6743e025-2749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5c:e3:f2:42:d5:fb:a1:be:30:26:ba:ad:3c: b0:d7:2e:9f:ad:73:80:6b:a6:30:d5:e0:99:9a:c8: 88:df:ed:15:02:7c:c7:0f:8d:e6:ad:ea:f9:36:3f: 7e:1e:03:c5:d8:11:a5:2c:a8:90:9a:06:4a:94:c8: b2:66:51:71:dd:6f:e8:57:a6:62:5f:62:a2:cc:95: a4:5c:e4:b2:12:59:5c:bd:32:20:1f:9a:03:ae:e2: fd:b5:3b:16:93:a6:93:91:67:73:99:90:3c:a1:d5: 26:0b:a9:c0:cf:15:51:ab:ba:78:5c:7d:6a:38:ae: 68:26:c1:50:29:45:be:61:2d:78:f9:b5:99:d2:ab: 19:99:43:a7:8b:ba:95:d4:8e:55:71:0b:c9:7c:08: 7b:b6:33:fa:bb:de:c5:02:19:e2:1e:3e:db:2a:02: cc:cf:4b:08:6b:c2:aa:5e:d8:3b:26:7e:9e:83:77: f9:8a:bc:7d:e4:0d:79:4c:81:df:d9:a0:73:04:a4: f8:a0:6b:60:4c:49:c7:04:be:a2:ad:32:6b:2d:12: 3d:e2:a0:d6:6b:68:a3:11:68:30:ec:ac:8c:5f:00: e0:0d:d6:7e:cf:3f:62:7a:ec:64:4d:36:35:6d:ac: a0:ed:90:b2:20:29:40:92:c2:2e:74:89:20:d0:66: 71:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:89:46:40:F5:FC:22:D1:11:70:D9:E0:8E:F6:B4:08:77:27:07:0D X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/C82A0778680811EE88B5527CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.204.0/23 IPv6: 2401:43e0::/32 Signature Algorithm: sha256WithRSAEncryption 45:b4:0c:df:40:e3:2b:bc:5f:ec:6a:82:fe:13:5f:62:9f:46: 77:5b:d7:d8:0f:3e:59:7f:db:ef:8f:17:89:25:6a:ad:6f:22: 87:da:af:23:55:c6:b7:44:0a:06:36:f0:52:26:96:47:54:c2: e2:ce:ef:bf:3a:63:65:4d:0c:99:57:a8:5e:5b:1d:88:d7:18: ba:35:fa:ec:06:df:26:f5:92:18:6b:84:85:3f:85:8d:b2:ea: 12:5f:7e:0b:ea:b4:f5:fe:01:20:96:0a:03:20:93:15:05:4e: 28:ef:86:47:6c:05:ec:a5:cc:0e:7b:00:9f:df:08:74:51:eb: fe:95:e2:4b:d3:7f:2a:8d:05:33:02:c5:f0:a9:7d:eb:1f:2a: 71:6d:fa:53:48:87:3a:94:45:61:85:2f:2f:9d:10:29:21:6f: 99:5d:a3:fb:75:df:77:39:3c:52:6f:63:23:16:d7:9f:55:dc: 7a:36:53:a1:8b:e4:98:7b:e3:07:db:ff:4b:2e:56:5f:9a:1b: 99:15:2d:95:d7:09:ff:de:ca:49:01:5c:be:40:36:19:bf:4d: f0:02:2c:68:ca:c8:11:b0:f5:82:76:df:cb:92:54:b0:7a:32: df:e0:15:87:49:76:02:14:05:45:85:0d:b1:a3:50:52:e2:f2: 1e:da:d5:84 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjQxMTI1MDIyNTQyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQzZTAyNS0yNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVzj8kLV+6G+MCa6rTyw1y6frXOAa6Yw1eCZmsiI3+0VAnzHD43mrer5Nj9+ HgPF2BGlLKiQmgZKlMiyZlFx3W/oV6ZiX2KizJWkXOSyEllcvTIgH5oDruL9tTsW k6aTkWdzmZA8odUmC6nAzxVRq7p4XH1qOK5oJsFQKUW+YS14+bWZ0qsZmUOni7qV 1I5VcQvJfAh7tjP6u97FAhniHj7bKgLMz0sIa8KqXtg7Jn6eg3f5irx95A15TIHf 2aBzBKT4oGtgTEnHBL6irTJrLRI94qDWa2ijEWgw7KyMXwDgDdZ+zz9ieuxkTTY1 bayg7ZCyIClAksIudIkg0GZx2QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFK+JRkD1 /CLREXDZ4I72tAh3JwcNMB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUNDMjQvMTZDNjEzMTY2QUZBMTFFREI3MDZGRjNDQzRGOUFFMDIvQzgyQTA3Nzg2 ODA4MTFFRTg4QjU1MjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnsMwwDQQCAAIwBwMFACQBQ+AwDQYJKoZIhvcNAQELBQAD ggEBAEW0DN9A4yu8X+xqgv4TX2KfRndb19gPPll/2++PF4klaq1vIofaryNVxrdE CgY28FImlkdUwuLO7786Y2VNDJlXqF5bHYjXGLo1+uwG3yb1khhrhIU/hY2y6hJf fgvqtPX+ASCWCgMgkxUFTijvhkdsBeylzA57AJ/fCHRR6/6V4kvTfyqNBTMCxfCp fesfKnFt+lNIhzqURWGFLy+dECkhb5ldo/t133c5PFJvYyMW159V3Ho2U6GL5Jh7 4wfb/0suVl+aG5kVLZXXCf/eykkBXL5ANhm/TfACLGjKyBGw9YJ238uSVLB6Mt/g FYdJdgIUBUWFDbGjUFLi8h7a1YQ= -----END CERTIFICATE-----Generated at Sat Apr 5 06:58:28 2025 by rpki-client