$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/36020660DD2411EF9F4FB925C4F9AE02.roa File: 36020660DD2411EF9F4FB925C4F9AE02.roa (raw, json) Hash identifier: j9Po9H6BwdSd4+LJVOpstqA6CfVsNzASbprlAvb5WDg= Subject key identifier: 83:43:94:06:B0:A1:B6:65:08:C4:F2:92:39:9B:1C:47:06:9C:E5:80 Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 0106 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/36020660DD2411EF9F4FB925C4F9AE02.roa Signing time: Tue 28 Jan 2025 03:01:46 +0000 ROA not before: Tue 28 Jan 2025 03:01:46 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 149994 IP address blocks: 103.240.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD Validity Not Before: Jan 28 03:01:46 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6798489a-9a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:91:66:2c:36:a6:3e:89:8b:d9:98:a9:4b:15: 79:03:ce:54:6d:95:b2:22:c9:2d:9f:20:77:de:e2: dd:6b:28:ad:58:81:66:4e:86:a8:eb:14:22:df:7b: ed:ec:48:9b:0e:76:7c:94:da:36:77:01:26:18:f5: 6d:f2:35:c5:d7:8d:58:16:70:1c:fe:d3:24:9a:d5: a8:25:99:8e:00:f0:74:9e:15:f1:71:fe:2a:df:4d: dc:7c:d5:77:de:e3:ce:f7:cf:6f:15:16:9e:1a:05: 1e:8b:55:16:88:1b:63:52:f0:68:c3:ba:53:b3:07: 72:5a:4e:96:16:a6:57:10:8f:d1:de:73:4c:5c:35: 9a:0f:7d:fb:b6:e2:f9:bf:07:10:28:a7:19:75:a4: cc:88:6e:b4:d7:3f:e6:97:d3:61:f6:58:55:f7:d4: 98:f3:e9:44:37:54:f4:1a:47:d2:15:5d:a8:f1:15: a8:4e:93:07:b3:a8:bf:96:8f:ab:4a:aa:b1:af:9a: 4f:04:f0:07:0a:9d:e8:bb:5d:21:90:d5:38:23:ee: 82:a5:a8:8d:7d:f8:69:d9:cd:fd:9c:af:eb:73:d0: 1d:d6:cb:cf:0f:a1:76:53:9a:98:97:98:58:a4:16: 5d:34:6c:4a:ef:dc:91:e3:33:2e:32:db:b5:30:af: c9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:43:94:06:B0:A1:B6:65:08:C4:F2:92:39:9B:1C:47:06:9C:E5:80 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/36020660DD2411EF9F4FB925C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.240.5.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:b9:c3:57:3e:4b:9f:68:3e:cc:a7:82:3b:f9:59:8e:86:05: 7a:8d:f0:36:b9:db:36:18:6a:c5:8b:92:3b:76:53:8f:6a:05: a2:e2:ce:f6:c2:be:1d:d9:bf:42:95:7a:ed:a1:f6:0f:c1:02: 11:ce:0c:cf:a6:12:07:cc:bb:f3:5b:d7:a7:7b:8e:0b:b5:96: b3:5a:18:fc:f9:43:b6:06:66:7b:d9:96:81:ad:e2:e2:87:fc: 12:dc:c9:ce:58:17:3e:91:1b:58:5e:c7:44:0e:54:73:22:a6: b4:12:2e:20:d3:63:b3:07:59:2e:fa:d7:06:48:6d:46:67:17: 8c:fa:93:97:20:e7:4e:7c:6b:01:4d:8e:e0:6d:5b:43:71:b0: a1:64:51:5f:b0:a9:cb:9e:06:88:52:22:7d:f5:60:69:2c:c9: 09:fd:93:68:b7:9c:f8:54:b9:bf:99:2b:71:b4:16:aa:e1:38: b4:29:53:cf:2e:35:a0:64:80:af:79:78:de:3b:dc:c6:ad:74: 31:1e:82:c9:9e:89:dc:cb:da:74:10:ee:e7:f5:87:53:ef:3b: b3:58:fd:ec:a2:4b:9f:18:02:5c:f7:e5:db:8b:d7:4a:64:b4: 09:55:e0:2b:8f:16:bf:a7:f4:a3:51:2b:a6:12:5c:5a:61:1b: d8:d8:b1:2d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjUwMTI4MDMwMTQ2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk4NDg5YS05YTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJFmLDamPomL2ZipSxV5A85UbZWyIsktnyB33uLdayitWIFmToao6xQi33vt 7EibDnZ8lNo2dwEmGPVt8jXF141YFnAc/tMkmtWoJZmOAPB0nhXxcf4q303cfNV3 3uPO989vFRaeGgUei1UWiBtjUvBow7pTswdyWk6WFqZXEI/R3nNMXDWaD337tuL5 vwcQKKcZdaTMiG601z/ml9Nh9lhV99SY8+lEN1T0GkfSFV2o8RWoTpMHs6i/lo+r Sqqxr5pPBPAHCp3ou10hkNU4I+6CpaiNffhp2c39nK/rc9Ad1svPD6F2U5qYl5hY pBZdNGxK79yR4zMuMtu1MK/JWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFINDlAaw obZlCMTykjmbHEcGnOWAMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjM4RkQvQTVBNkYzN0E2MUY4MTFFRTlGNzk0MDFBQzRGOUFFMDIvMzYwMjA2NjBE RDI0MTFFRjlGNEZCOTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn8AUwDQYJKoZIhvcNAQELBQADggEBAD25w1c+S59oPsyn gjv5WY6GBXqN8Da52zYYasWLkjt2U49qBaLizvbCvh3Zv0KVeu2h9g/BAhHODM+m EgfMu/Nb16d7jgu1lrNaGPz5Q7YGZnvZloGt4uKH/BLcyc5YFz6RG1hex0QOVHMi prQSLiDTY7MHWS761wZIbUZnF4z6k5cg5058awFNjuBtW0NxsKFkUV+wqcueBohS In31YGksyQn9k2i3nPhUub+ZK3G0FqrhOLQpU88uNaBkgK95eN473MatdDEegsme idzL2nQQ7uf1h1PvO7NY/eyiS58YAlz35duL10pktAlV4CuPFr+n9KNRK6YSXFph G9jYsS0= -----END CERTIFICATE-----Generated at Sat Apr 5 02:18:07 2025 by rpki-client