$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/2DD4424401A211F09D28335BC4F9AE02.roa File: 2DD4424401A211F09D28335BC4F9AE02.roa (raw, json) Hash identifier: YugUSTWItaHwoU0lMPP/vlXY7+UmWW6qtCLtQUAsjJc= Subject key identifier: 23:A8:A1:1C:1F:8F:9A:0A:6E:B6:0A:01:22:9D:82:A9:AA:E1:E4:10 Certificate issuer: /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Certificate serial: 1306 Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/2DD4424401A211F09D28335BC4F9AE02.roa Signing time: Sat 15 Mar 2025 13:37:26 +0000 ROA not before: Sat 15 Mar 2025 13:37:26 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 137827 IP address blocks: 103.115.33.0/24 maxlen: 24 103.139.80.0/24 maxlen: 24 2001:df7:1300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4870 (0x1306) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFFF0 Validity Not Before: Mar 15 13:37:26 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67d58295-3fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8a:08:72:49:f7:39:c9:20:ce:30:0f:f7:b5: e2:d5:e1:d8:89:db:d5:ac:ee:dd:d0:66:57:52:3b: 9f:fb:91:61:03:07:33:67:e0:cd:cf:6c:89:a1:65: 77:b2:77:f8:6b:3e:42:be:91:4a:17:f2:46:ba:5f: d5:15:df:a5:2d:67:44:77:de:33:e2:70:75:70:33: ba:6d:90:71:0d:21:a9:a1:01:95:16:8f:3b:9f:18: b5:74:43:62:b6:ed:b4:d0:18:2b:87:3c:a1:b7:60: 00:e8:c1:72:b5:c1:7c:56:94:b1:d0:e3:77:c5:09: be:b3:76:db:77:f3:78:ef:d6:bc:6c:07:19:c8:dd: 27:3a:e7:91:93:97:7c:0e:44:d5:30:be:7f:d0:a6: 96:28:d2:d3:58:fa:d2:27:75:3d:fb:3d:33:dd:a4: 09:1b:46:6e:d1:22:61:ea:4c:10:00:cb:d1:28:1c: 6b:1b:67:80:e6:59:85:f7:d8:b6:35:95:7e:d9:70: 53:14:e8:16:0b:14:d0:07:e7:92:6c:1b:fa:98:f4: 67:26:42:c5:13:0b:e2:b1:a6:f1:f5:69:18:3c:e0: 51:7e:63:0c:34:58:35:42:22:c9:be:7a:2a:f8:9b: d0:78:a5:a7:e6:dd:bf:00:f6:0e:1c:eb:09:05:7d: e5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A8:A1:1C:1F:8F:9A:0A:6E:B6:0A:01:22:9D:82:A9:AA:E1:E4:10 X509v3 Authority Key Identifier: keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/2DD4424401A211F09D28335BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.33.0/24 103.139.80.0/24 IPv6: 2001:df7:1300::/48 Signature Algorithm: sha256WithRSAEncryption 42:5c:2f:f7:24:26:b5:dd:d6:1d:7d:f4:df:99:d7:35:3e:56: 9a:a5:da:23:30:a0:7d:dc:05:ae:f3:32:67:21:72:5a:f8:e0: 64:df:95:18:f7:1a:f4:d3:ec:e5:c6:2a:1b:44:1b:69:a6:c0: 94:99:fd:81:29:ff:c2:ab:3c:32:56:76:38:50:0d:a9:00:23: 07:30:71:a8:82:ed:14:f4:c3:8d:89:f3:b0:17:01:dc:a5:21: 67:6b:a5:1e:95:91:7a:10:ab:de:75:9d:f7:01:16:80:dc:89: 0d:b3:35:ba:93:5e:42:72:1e:dd:cd:01:c6:23:5a:13:6f:19: 15:7d:ef:5e:f7:ee:29:86:a7:d8:45:1c:26:9e:91:9f:03:a1: 7c:7c:55:a0:3c:77:b2:85:06:74:f2:c6:fa:21:83:3a:6e:48: 1d:61:cf:d6:3d:8a:ef:c9:66:82:db:4b:8b:e0:41:33:a3:11: d9:63:b7:66:fe:66:bc:33:f9:1b:fa:18:6e:d4:99:39:e4:4a: 3f:e9:a7:53:35:b6:c6:e8:14:1a:47:9b:1f:83:b9:58:68:27: ef:27:10:05:f0:31:d0:34:03:a3:ff:51:fc:03:50:41:25:6c: 62:2f:65:06:b3:2f:c6:d9:80:b8:7b:ca:ef:99:dd:54:6f:9d: e1:75:b1:06 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICEwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZGRjAxMTAvBgNVBAUTKEFFRkNFNEJBMjRERkE2RUQ2NEU0MUU0RjI0NTFDOUU4 ODRBRTY5QTIwHhcNMjUwMzE1MTMzNzI2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q1ODI5NS0zZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIoIckn3OckgzjAP97Xi1eHYidvVrO7d0GZXUjuf+5FhAwczZ+DNz2yJoWV3 snf4az5CvpFKF/JGul/VFd+lLWdEd94z4nB1cDO6bZBxDSGpoQGVFo87nxi1dENi tu200Bgrhzyht2AA6MFytcF8VpSx0ON3xQm+s3bbd/N479a8bAcZyN0nOueRk5d8 DkTVML5/0KaWKNLTWPrSJ3U9+z0z3aQJG0Zu0SJh6kwQAMvRKBxrG2eA5lmF99i2 NZV+2XBTFOgWCxTQB+eSbBv6mPRnJkLFEwvisabx9WkYPOBRfmMMNFg1QiLJvnoq +JvQeKWn5t2/APYOHOsJBX3lbwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFCOooRwf j5oKbrYKASKdgqmq4eQQMB8GA1UdIwQYMBaAFK785Lok36btZOQeTyRRyeiErmmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkZGMC80NEZFQkM5MkFE QjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1MWs1QjVQSkZISjZJU3Vh YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J2emt1aVRmcHUxazVCNVBKRkhKNklTdWFhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUZGRjAvNDRGRUJDOTJBREIyMTFFODlDOUI0NTUzQzRGOUFFMDIvMkRENDQyNDQw MUEyMTFGMDlEMjgzMzVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABncyEDBABni1AwDwQCAAIwCQMHACABDfcTADANBgkqhkiG 9w0BAQsFAAOCAQEAQlwv9yQmtd3WHX3035nXNT5WmqXaIzCgfdwFrvMyZyFyWvjg ZN+VGPca9NPs5cYqG0QbaabAlJn9gSn/wqs8MlZ2OFANqQAjBzBxqILtFPTDjYnz sBcB3KUhZ2ulHpWRehCr3nWd9wEWgNyJDbM1upNeQnIe3c0BxiNaE28ZFX3vXvfu KYan2EUcJp6RnwOhfHxVoDx3soUGdPLG+iGDOm5IHWHP1j2K78lmgttLi+BBM6MR 2WO3Zv5mvDP5G/oYbtSZOeRKP+mnUzW2xugUGkebH4O5WGgn7ycQBfAx0DQDo/9R /ANQQSVsYi9lBrMvxtmAuHvK75ndVG+d4XWxBg== -----END CERTIFICATE-----Generated at Sun Apr 6 11:23:39 2025 by rpki-client