$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/A3013D2A0CCB11ED97820077C4F9AE02.roa File: A3013D2A0CCB11ED97820077C4F9AE02.roa (raw, json) Hash identifier: h+ue+R5DGdF0uaqUXBTnmoh/DYvzHxp90t2bN+4sANk= Subject key identifier: 6C:F1:CE:7A:2D:9C:B1:28:7F:6D:67:DA:24:9B:AE:95:E4:E6:FC:5B Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Certificate serial: 0231 Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/A3013D2A0CCB11ED97820077C4F9AE02.roa Signing time: Tue 31 Dec 2024 01:44:09 +0000 ROA not before: Tue 31 Dec 2024 01:44:09 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 64065 IP address blocks: 103.19.36.0/24 maxlen: 24 103.88.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED5D9 Validity Not Before: Dec 31 01:44:09 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67734c68-df2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:56:13:dc:79:9a:29:d6:0e:2b:d3:a3:f7:8a: a6:a2:ef:3d:93:4f:76:33:9c:50:68:16:d4:a2:e8: 5a:b4:e6:7c:d5:42:04:f2:30:13:54:57:09:e0:76: 46:18:ec:52:74:83:95:2f:ed:7f:fa:3b:99:b8:a1: b8:b0:61:db:fb:7f:1b:2d:c3:0e:8f:64:7b:74:22: f3:8b:6f:81:a7:d6:c4:75:22:91:43:82:05:3e:f8: 7b:eb:c9:08:39:3d:26:1f:b3:46:97:05:84:ca:96: d1:e1:12:15:f1:8c:f9:5a:21:50:32:db:3f:d9:bc: b7:49:8b:f0:e2:78:b0:6a:21:2e:87:b9:d8:3b:24: 0a:1f:41:1d:7d:c7:84:de:d7:df:aa:04:1d:59:46: 46:b8:62:7c:dd:1a:1a:5c:fa:ff:7c:ab:54:8c:e7: 10:8c:17:a0:3c:d8:b6:7e:60:8a:8b:a5:c8:d0:a1: e8:f1:63:c7:82:16:a5:6a:ef:02:1b:a9:fa:12:4e: 64:f6:01:fa:97:77:dc:4a:9e:bc:cb:2d:68:ff:5f: 1b:e2:a1:61:f6:47:8b:fa:c9:96:f8:8f:b3:7d:07: 6b:16:9e:b3:e4:89:54:0a:59:9e:16:78:b3:80:03: d7:80:3f:01:4b:0d:f3:68:e0:40:2d:56:fa:cb:9d: 5d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F1:CE:7A:2D:9C:B1:28:7F:6D:67:DA:24:9B:AE:95:E4:E6:FC:5B X509v3 Authority Key Identifier: keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/A3013D2A0CCB11ED97820077C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.19.36.0/24 103.88.136.0/23 Signature Algorithm: sha256WithRSAEncryption a8:bb:1c:6d:13:7c:7f:bd:72:48:16:30:3c:c5:6b:5f:e4:60: 27:db:f5:da:b0:ac:2f:23:be:27:5c:93:a6:99:d1:5e:bc:34: b1:bd:11:26:5b:52:ee:49:79:cb:63:d6:4c:a2:d8:77:40:f7: 6e:cd:b6:3e:f2:ca:60:2e:b4:9e:06:a2:84:06:59:78:32:13: 0f:78:35:a2:08:4e:92:a6:b7:56:42:f2:8b:bd:26:69:ba:3f: e9:2e:37:84:44:52:85:4a:6c:d2:72:39:4b:ee:b3:00:4c:98: 93:8f:f4:91:fb:ed:c0:df:79:b5:53:43:3a:3e:21:ef:f7:0e: de:67:87:d4:93:3a:5a:6b:b8:81:18:72:d4:ee:e9:33:b1:82: 70:08:a1:f4:12:51:de:b7:17:9b:33:ba:13:8d:72:65:69:15: 52:c3:aa:25:66:ff:5b:4b:02:20:bd:86:b4:98:57:27:68:07: 63:06:12:38:83:f0:0a:3a:ec:38:26:16:56:25:73:78:23:ad: e0:22:89:9e:d2:a9:ff:dd:92:c2:4a:03:72:25:e8:8c:56:11: 75:07:fc:d0:d1:62:9a:16:48:d1:62:9d:e9:f1:15:c2:08:a8: 32:37:a8:2d:bd:d7:f0:28:f8:d7:6c:4e:52:01:7e:3f:3f:bb: e4:f5:f1:b7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1RDkxMTAvBgNVBAUTKEUzMUU2N0NBMEU1QkVEQjI0OEY5N0E2NTdERUZGNjJF Qzg2RjUyNEIwHhcNMjQxMjMxMDE0NDA5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzczNGM2OC1kZjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9FYT3HmaKdYOK9Oj94qmou89k092M5xQaBbUouhatOZ81UIE8jATVFcJ4HZG GOxSdIOVL+1/+juZuKG4sGHb+38bLcMOj2R7dCLzi2+Bp9bEdSKRQ4IFPvh768kI OT0mH7NGlwWEypbR4RIV8Yz5WiFQMts/2by3SYvw4niwaiEuh7nYOyQKH0EdfceE 3tffqgQdWUZGuGJ83RoaXPr/fKtUjOcQjBegPNi2fmCKi6XI0KHo8WPHghalau8C G6n6Ek5k9gH6l3fcSp68yy1o/18b4qFh9keL+smW+I+zfQdrFp6z5IlUClmeFniz gAPXgD8BSw3zaOBALVb6y51dQwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGzxznot nLEof21n2iSbrpXk5vxbMB8GA1UdIwQYMBaAFOMeZ8oOW+2ySPl6ZX3v9i7Ib1JL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDVEOS84OUU4N0ZFMDBD QzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1YjdiSkktWHBsZmVfMkxzaHZV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4NW55ZzViN2JKSS1YcGxmZV8yTHNodlVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUQ1RDkvODlFODdGRTAwQ0M4MTFFREIzM0IxMzcxQzRGOUFFMDIvQTMwMTNEMkEw Q0NCMTFFRDk3ODIwMDc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnEyQDBAFnWIgwDQYJKoZIhvcNAQELBQADggEBAKi7HG0T fH+9ckgWMDzFa1/kYCfb9dqwrC8jvidck6aZ0V68NLG9ESZbUu5Jectj1kyi2HdA 927Ntj7yymAutJ4GooQGWXgyEw94NaIITpKmt1ZC8ou9Jmm6P+kuN4REUoVKbNJy OUvuswBMmJOP9JH77cDfebVTQzo+Ie/3Dt5nh9STOlpruIEYctTu6TOxgnAIofQS Ud63F5szuhONcmVpFVLDqiVm/1tLAiC9hrSYVydoB2MGEjiD8Ao67DgmFlYlc3gj reAiiZ7Sqf/dksJKA3Il6IxWEXUH/NDRYpoWSNFinenxFcIIqDI3qC291/Ao+Nds TlIBfj8/u+T18bc= -----END CERTIFICATE-----Generated at Sat Apr 5 02:13:19 2025 by rpki-client