$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/B377200E5ADD11EF9A462440C4F9AE02.roa File: B377200E5ADD11EF9A462440C4F9AE02.roa (raw, json) Hash identifier: ku0nQgImAfjqlfmOWSwIKN/zsrk6kYnMycZSjI2lh3o= Subject key identifier: 17:8C:3B:44:B5:3A:DE:6A:39:50:C3:3B:7C:6B:34:F0:F1:A1:51:20 Certificate issuer: /CN=A91F2CE7/serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33 Certificate serial: 3B Authority key identifier: 90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/B377200E5ADD11EF9A462440C4F9AE02.roa Signing time: Fri 29 Nov 2024 05:49:43 +0000 ROA not before: Fri 29 Nov 2024 05:49:43 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 26658 IP address blocks: 103.197.192.0/22 maxlen: 22 220.158.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2CE7 Validity Not Before: Nov 29 05:49:43 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674955f6-ccbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:86:94:0c:f4:a6:ee:1f:aa:90:82:96:b2:aa: e6:61:73:72:c1:d0:55:ac:f5:7f:4a:ff:30:b4:97: bf:ca:61:50:cf:27:c6:31:ca:ef:9b:87:e9:41:2d: c5:69:a8:2f:a1:36:3f:56:91:cd:03:cc:74:ee:41: 5d:44:67:ac:ad:0b:0e:e0:6c:32:23:0f:ce:f4:2d: 13:fa:ff:47:30:b1:91:61:26:78:49:82:99:29:5f: 31:62:3b:29:3b:24:10:85:cf:56:fc:e8:cf:fc:95: 79:0c:a7:54:c5:87:4e:d5:b9:37:c0:4e:e8:af:ec: 0f:0a:42:f2:dd:c6:d2:d6:a7:6b:96:de:4f:1d:f4: 97:a2:9e:41:69:44:b5:8f:a0:d0:be:04:64:c8:33: 43:44:47:8f:38:0c:b6:9b:40:89:3f:45:bf:aa:29: e9:8a:b8:4f:1d:d8:41:07:e0:3a:ff:4d:ff:95:19: 11:24:d2:52:03:2c:79:e6:c4:f6:51:29:d1:1e:e3: 14:9c:ce:3f:86:f4:b3:19:e7:61:dc:ef:c0:53:27: f6:1a:1d:23:8a:e3:2c:81:97:36:30:48:46:00:15: 7a:1d:3d:ac:55:ec:53:8b:fc:e2:2a:71:a5:2b:c9: fb:c9:1e:5d:5e:ff:b0:5f:da:1d:cb:fe:7c:17:af: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8C:3B:44:B5:3A:DE:6A:39:50:C3:3B:7C:6B:34:F0:F1:A1:51:20 X509v3 Authority Key Identifier: keyid:90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/B377200E5ADD11EF9A462440C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.192.0/22 220.158.244.0/22 Signature Algorithm: sha256WithRSAEncryption 56:b8:b9:01:a5:ee:d1:ba:a2:ec:a4:80:c2:9f:99:c2:63:a2: 9f:a8:6a:70:10:f8:c5:33:7e:96:d6:6c:6c:5c:ce:c0:08:a7: 50:58:d7:ea:dc:8f:ed:c9:f2:73:82:16:3e:16:36:26:f9:89: 5a:93:76:44:c2:83:24:2b:f2:d3:d1:39:94:8d:22:d2:38:cb: 6f:50:94:2b:94:22:2a:8c:34:10:b4:19:26:c3:87:1e:52:b7: b8:b7:55:ae:bb:2c:49:83:60:df:e5:db:03:da:8d:cc:ce:ab: 35:df:bf:37:17:45:6d:c4:41:b4:21:eb:0c:74:1e:c9:e3:fc: 23:cb:d3:5e:32:92:e7:54:ec:09:32:9b:94:ae:42:f0:d0:eb: 60:ee:b0:9b:ee:ce:69:85:12:58:97:25:07:12:1c:b4:d7:07: 30:25:31:84:f3:e5:c5:07:92:62:0d:6f:46:a9:bd:93:9a:cd: 02:a1:02:b1:08:2a:a6:a6:77:f6:d9:58:36:b8:d3:46:08:3c: 05:99:08:79:01:15:9f:08:e6:4b:d5:a5:10:16:a8:a9:4f:b9: 03:c7:a7:80:33:5d:83:a8:af:d8:e9:42:b5:7c:83:76:54:c3: 5f:ac:54:a7:03:a7:6b:52:89:0c:d7:4a:87:ba:3f:09:db:de: 6c:23:b9:60 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkNFNzExMC8GA1UEBRMoOTAxQTlGOUU4QUU0MDYyRTUyMTlCNzY1MkQ4RTlGRUU3 RUM1QUUzMzAeFw0yNDExMjkwNTQ5NDNaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NDk1NWY2LWNjYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCShpQM9KbuH6qQgpayquZhc3LB0FWs9X9K/zC0l7/KYVDPJ8Yxyu+bh+lBLcVp qC+hNj9Wkc0DzHTuQV1EZ6ytCw7gbDIjD870LRP6/0cwsZFhJnhJgpkpXzFiOyk7 JBCFz1b86M/8lXkMp1TFh07VuTfATuiv7A8KQvLdxtLWp2uW3k8d9JeinkFpRLWP oNC+BGTIM0NER484DLabQIk/Rb+qKemKuE8d2EEH4Dr/Tf+VGREk0lIDLHnmxPZR KdEe4xSczj+G9LMZ52Hc78BTJ/YaHSOK4yyBlzYwSEYAFXodPaxV7FOL/OIqcaUr yfvJHl1e/7Bf2h3L/nwXr4U9AgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUF4w7RLU6 3mo5UMM7fGs08PGhUSAwHwYDVR0jBBgwFoAUkBqfnorkBi5SGbdlLY6f7n7FrjMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyQ0U3LzcyRjc1Qjk4NUFE RDExRUY4MTJDOTIzRkM0RjlBRTAyL2tCcWZub3JrQmk1U0diZGxMWTZmN243RnJq TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0JxZm5vcmtCaTVTR2JkbExZNmY3bjdGcmpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkNFNy83MkY3NUI5ODVBREQxMUVGODEyQzkyM0ZDNEY5QUUwMi9CMzc3MjAwRTVB REQxMUVGOUE0NjI0NDBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmfFwAMEAtye9DANBgkqhkiG9w0BAQsFAAOCAQEAVri5AaXu 0bqi7KSAwp+ZwmOin6hqcBD4xTN+ltZsbFzOwAinUFjX6tyP7cnyc4IWPhY2JvmJ WpN2RMKDJCvy09E5lI0i0jjLb1CUK5QiKow0ELQZJsOHHlK3uLdVrrssSYNg3+Xb A9qNzM6rNd+/NxdFbcRBtCHrDHQeyeP8I8vTXjKS51TsCTKblK5C8NDrYO6wm+7O aYUSWJclBxIctNcHMCUxhPPlxQeSYg1vRqm9k5rNAqECsQgqpqZ39tlYNrjTRgg8 BZkIeQEVnwjmS9WlEBaoqU+5A8engDNdg6iv2OlCtXyDdlTDX6xUpwOna1KJDNdK h7o/CdvebCO5YA== -----END CERTIFICATE-----Generated at Sat Apr 5 02:13:36 2025 by rpki-client