$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/A3E08ED6825711EFB7585B6FC4F9AE02.roa File: A3E08ED6825711EFB7585B6FC4F9AE02.roa (raw, json) Hash identifier: c6Y5sHXtnUIlloWQfNj0Oltc+Rkovm/FExQvQHllfw0= Subject key identifier: CE:0E:0C:AD:60:C4:83:6A:0C:94:69:8F:D2:FE:31:E8:C3:BD:23:57 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 0118 Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/A3E08ED6825711EFB7585B6FC4F9AE02.roa Signing time: Thu 26 Dec 2024 17:24:47 +0000 ROA not before: Thu 26 Dec 2024 17:24:47 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 151987 IP address blocks: 203.99.144.0/24 maxlen: 24 2001:df3:18c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C Validity Not Before: Dec 26 17:24:47 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=676d915f-968d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:1b:2c:61:24:f5:2a:80:cc:b2:7a:be:46: 4b:63:8a:65:9f:b3:83:fa:88:f0:45:b4:6e:a6:bc: aa:9a:73:d3:c8:c8:1f:eb:7e:f8:f0:9b:1e:14:da: fa:41:ab:5d:08:c0:d1:02:db:c1:f3:36:4a:bb:40: fc:de:62:29:38:3b:8c:55:b0:45:41:8a:fc:fe:8f: 24:26:34:ce:c9:dc:72:80:a9:53:e8:a2:9b:b6:d4: 71:a2:88:8a:88:13:90:b1:88:6c:d2:36:96:93:6e: e7:77:bc:fa:3f:ad:a7:7e:3b:b7:cd:68:69:0a:aa: c5:4c:b6:7c:5c:78:38:59:3d:d5:7a:f7:ba:3f:45: 4b:67:ab:34:5f:1a:8b:51:de:75:d1:50:08:6f:df: ff:77:1a:51:e8:a4:c2:e1:f1:1c:f2:97:ec:c4:b9: 0f:fd:f8:d4:c1:43:0c:81:a4:84:07:09:19:d5:88: db:e9:ff:72:af:66:68:ea:48:7e:86:ed:67:e6:f1: 8f:02:0c:a3:c0:fd:3b:c6:6e:32:b3:e6:29:73:90: 25:0e:8c:2a:46:1a:a8:23:51:84:2c:28:f4:67:12: 5c:9e:45:bb:78:f4:12:98:80:c5:96:4a:f7:da:de: 99:1b:0a:bc:bd:19:03:c2:1c:c4:18:84:6d:f7:8b: f5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0E:0C:AD:60:C4:83:6A:0C:94:69:8F:D2:FE:31:E8:C3:BD:23:57 X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/A3E08ED6825711EFB7585B6FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.99.144.0/24 IPv6: 2001:df3:18c0::/48 Signature Algorithm: sha256WithRSAEncryption 43:9d:20:fc:73:24:44:07:e0:fe:e6:9f:0a:02:8e:db:9e:e1: 53:92:53:c7:bc:d8:c6:ee:f8:45:ed:78:9f:57:d7:a2:d7:be: f5:0d:23:e7:9d:9b:33:b9:7e:d9:c4:11:27:2a:2d:14:1d:c4: 9d:01:5d:13:ea:65:d7:f6:fb:54:7f:76:75:83:46:c4:86:6b: fd:f6:fe:a4:6a:19:97:a4:73:53:eb:3f:1c:62:28:b0:94:cf: 51:5e:58:88:74:03:86:66:44:d2:ee:71:40:aa:7a:63:54:b4: db:9a:fa:a9:85:98:45:22:b6:3a:06:55:e8:2b:05:a0:11:6b: 61:4e:43:48:df:b5:51:81:81:b9:05:eb:7a:6a:bc:f3:18:d5: 53:ad:21:d4:fb:b4:39:d5:0b:c9:15:22:b2:10:b3:f2:3e:74: e7:61:6e:18:6a:1c:80:8f:4a:37:3c:71:36:b7:99:3b:1c:b3: ff:23:fc:c4:93:ac:14:cd:34:64:70:c0:ef:81:3f:21:67:81: cd:5a:1b:c9:fa:c7:9b:07:dc:2d:0b:e0:70:b4:8e:cb:b6:fa: a4:d9:0d:27:9b:31:e4:fa:21:d2:7a:fd:f9:d9:48:e8:35:4f: 1a:23:0e:cd:ac:1c:ba:6c:1d:51:7e:e1:7a:11:8b:99:94:01: 34:21:fe:29 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjQxMjI2MTcyNDQ3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZkOTE1Zi05NjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vYbLGEk9SqAzLJ6vkZLY4pln7OD+ojwRbRupryqmnPTyMgf63748JseFNr6 QatdCMDRAtvB8zZKu0D83mIpODuMVbBFQYr8/o8kJjTOydxygKlT6KKbttRxooiK iBOQsYhs0jaWk27nd7z6P62nfju3zWhpCqrFTLZ8XHg4WT3Veve6P0VLZ6s0XxqL Ud510VAIb9//dxpR6KTC4fEc8pfsxLkP/fjUwUMMgaSEBwkZ1Yjb6f9yr2Zo6kh+ hu1n5vGPAgyjwP07xm4ys+Ypc5AlDowqRhqoI1GELCj0ZxJcnkW7ePQSmIDFlkr3 2t6ZGwq8vRkDwhzEGIRt94v1UQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFM4ODK1g xINqDJRpj9L+MejDvSNXMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwOUMvRUVGNzYyQzA5MDc1MTFFRTg3RDI2NjgwQzRGOUFFMDIvQTNFMDhFRDY4 MjU3MTFFRkI3NTg1QjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADLY5AwDwQCAAIwCQMHACABDfMYwDANBgkqhkiG9w0BAQsF AAOCAQEAQ50g/HMkRAfg/uafCgKO257hU5JTx7zYxu74Re14n1fXote+9Q0j552b M7l+2cQRJyotFB3EnQFdE+pl1/b7VH92dYNGxIZr/fb+pGoZl6RzU+s/HGIosJTP UV5YiHQDhmZE0u5xQKp6Y1S025r6qYWYRSK2OgZV6CsFoBFrYU5DSN+1UYGBuQXr emq88xjVU60h1Pu0OdULyRUishCz8j5052FuGGocgI9KNzxxNreZOxyz/yP8xJOs FM00ZHDA74E/IWeBzVobyfrHmwfcLQvgcLSOy7b6pNkNJ5sx5Poh0nr9+dlI6DVP GiMOzawcumwdUX7hehGLmZQBNCH+KQ== -----END CERTIFICATE-----Generated at Sat Apr 5 00:52:25 2025 by rpki-client