$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/8C4BB9AED9DB11EF9AE05220C4F9AE02.roa File: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (raw, json) Hash identifier: zsrAxxFfRp403bl7GSNrqmEpDz70fh0k4+NlvivXGV8= Subject key identifier: 1F:F8:CE:0C:63:72:4B:3B:42:90:1B:1C:30:7D:32:2B:25:29:5E:32 Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Certificate serial: 0597 Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/8C4BB9AED9DB11EF9AE05220C4F9AE02.roa Signing time: Thu 23 Jan 2025 22:44:05 +0000 ROA not before: Thu 23 Jan 2025 22:44:05 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 6134 IP address blocks: 103.158.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1431 (0x597) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4EDE Validity Not Before: Jan 23 22:44:05 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6792c634-be90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:c2:34:ae:ac:14:11:34:54:bd:44:7e:ec: 22:ea:7a:58:ba:39:38:fe:c7:9b:fd:f5:0b:a9:55: 85:b4:49:57:69:d1:03:27:ba:35:40:08:de:61:e3: b8:81:0a:5b:bd:b8:bf:11:9a:2e:4f:f6:d0:75:7b: a3:00:e7:4c:40:e0:d6:0e:17:da:63:eb:be:59:5f: d7:ed:b9:54:03:a5:80:36:47:1c:ed:0f:a6:fd:82: 40:8e:22:73:2f:79:14:53:1d:14:c8:da:81:d4:ea: 9c:20:b7:5c:f7:5c:3c:37:ad:1c:65:be:ba:01:ce: 7a:78:c7:45:0c:e3:47:3a:8d:c2:9b:79:f6:c1:65: 70:f1:14:6c:7a:c3:76:b6:5b:e4:93:32:da:11:3b: 93:25:9f:28:fc:43:54:e3:7e:78:d8:0a:e4:2d:fc: 28:ca:b5:33:9b:f5:9b:7b:96:63:af:0c:d0:20:04: 34:9f:42:70:78:35:19:55:32:c5:c6:88:00:26:80: 0c:0c:13:ca:51:ad:af:10:0f:44:50:8f:48:b7:fa: e7:ca:b0:3c:d7:c9:06:a0:f4:b9:5f:80:51:24:bf: d9:ac:41:8d:02:9a:44:56:5e:03:eb:5e:7d:c9:46: e5:54:ff:5a:77:30:4f:5e:cd:91:87:93:88:14:6f: f5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F8:CE:0C:63:72:4B:3B:42:90:1B:1C:30:7D:32:2B:25:29:5E:32 X509v3 Authority Key Identifier: keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/8C4BB9AED9DB11EF9AE05220C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.190.0/23 Signature Algorithm: sha256WithRSAEncryption 51:79:06:91:15:38:15:41:8e:32:f2:a4:31:b4:2a:29:57:64: 4f:f1:ce:a4:bd:ba:64:c4:42:48:a7:13:99:3a:7c:4b:28:f8: 09:3a:9c:f1:32:af:8b:85:25:da:13:52:80:29:b6:85:6e:00: 7b:ab:a0:20:bf:20:1f:0e:6f:6d:10:35:82:7b:d6:85:87:02: bd:18:31:c5:a9:86:b4:eb:59:66:98:c6:8e:1f:f0:6d:ce:90: 3a:f1:7d:45:e2:e0:00:0d:c5:0b:19:a0:38:2d:8e:b8:df:3d: ae:9d:58:1a:39:90:fb:06:85:b9:e5:d2:07:0a:8a:f6:ce:ec: 61:d3:17:10:50:bd:67:91:42:0c:74:45:fb:f2:76:d6:1f:52: 20:bd:08:68:dc:3e:f9:33:31:4b:6f:7b:df:0b:8b:4b:f7:48: 96:57:56:cf:c6:06:7c:53:d3:eb:09:8e:e9:20:a5:4e:ff:1f: 69:a6:75:f0:66:6a:66:50:20:e9:dc:8e:96:be:5b:d6:d8:3c: 5d:8a:5d:55:5a:c9:31:62:50:8d:26:10:c6:ec:77:63:5b:ce: 47:fb:e1:22:7d:fe:25:1f:4b:5c:22:7a:1c:4f:33:74:cf:8c: 03:1c:d3:91:d6:95:78:d3:4d:50:ee:3c:2b:57:39:7d:89:f1: 35:cd:c0:d7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF NDZDRTBGN0YwHhcNMjUwMTIzMjI0NDA1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkyYzYzNC1iZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7zCNK6sFBE0VL1Efuwi6npYujk4/seb/fULqVWFtElXadEDJ7o1QAjeYeO4 gQpbvbi/EZouT/bQdXujAOdMQODWDhfaY+u+WV/X7blUA6WANkcc7Q+m/YJAjiJz L3kUUx0UyNqB1OqcILdc91w8N60cZb66Ac56eMdFDONHOo3Cm3n2wWVw8RRsesN2 tlvkkzLaETuTJZ8o/ENU43542ArkLfwoyrUzm/Wbe5ZjrwzQIAQ0n0JweDUZVTLF xogAJoAMDBPKUa2vEA9EUI9It/rnyrA818kGoPS5X4BRJL/ZrEGNAppEVl4D6159 yUblVP9adzBPXs2Rh5OIFG/1tQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB/4zgxj cks7QpAbHDB9MislKV4yMB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjRFREUvMkNCMDMyNThCRTc5MTFFQjk1MTE4QjE5QzRGOUFFMDIvOEM0QkI5QUVE OURCMTFFRjlBRTA1MjIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnr4wDQYJKoZIhvcNAQELBQADggEBAFF5BpEVOBVBjjLy pDG0KilXZE/xzqS9umTEQkinE5k6fEso+Ak6nPEyr4uFJdoTUoAptoVuAHuroCC/ IB8Ob20QNYJ71oWHAr0YMcWphrTrWWaYxo4f8G3OkDrxfUXi4AANxQsZoDgtjrjf Pa6dWBo5kPsGhbnl0gcKivbO7GHTFxBQvWeRQgx0RfvydtYfUiC9CGjcPvkzMUtv e98Li0v3SJZXVs/GBnxT0+sJjukgpU7/H2mmdfBmamZQIOncjpa+W9bYPF2KXVVa yTFiUI0mEMbsd2Nbzkf74SJ9/iUfS1wiehxPM3TPjAMc05HWlXjTTVDuPCtXOX2J 8TXNwNc= -----END CERTIFICATE-----Generated at Sat Apr 5 02:07:50 2025 by rpki-client