$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/1F3782EE5AE211EF8E82D12DC4F9AE02.roa File: 1F3782EE5AE211EF8E82D12DC4F9AE02.roa (raw, json) Hash identifier: u07sFp3Yqjqw6LAiuoDt1givQlP2Rg/DNRW12Og3/70= Subject key identifier: 0A:A3:F1:EA:CE:8B:9A:1C:FE:AB:65:73:11:FA:81:DB:98:9A:25:BC Certificate issuer: /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Certificate serial: 3B Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/1F3782EE5AE211EF8E82D12DC4F9AE02.roa Signing time: Fri 29 Nov 2024 05:50:06 +0000 ROA not before: Fri 29 Nov 2024 05:50:06 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 26658 IP address blocks: 103.4.24.0/22 maxlen: 22 202.14.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5786 Validity Not Before: Nov 29 05:50:06 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6749560e-d184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e8:62:4a:65:0d:67:f1:04:a5:50:60:f3:25: b8:3a:ca:77:08:18:fd:41:bf:af:3a:f5:45:97:91: 59:80:96:aa:10:6d:86:c1:f2:ef:f8:fe:ea:2a:80: 11:a3:40:7b:e5:d0:6f:8e:03:57:a0:b2:1b:23:f0: 3c:e4:8d:67:80:b6:fe:d1:41:7d:b9:e4:df:6e:f0: ca:fc:55:74:7d:f5:7f:2f:b7:cf:ad:3c:31:85:86: 44:ae:78:70:c0:d4:e0:c7:c7:40:83:2a:96:78:c4: da:07:e3:b6:ed:44:5a:2c:16:5f:9f:ff:8e:ea:e5: a0:3e:dd:64:20:e9:02:24:39:bf:6f:e4:80:f4:33: 8e:d4:f2:3a:70:cf:dd:e6:8e:8f:8c:7d:24:51:02: 2a:4d:7e:e1:6a:e5:2e:97:0c:18:2d:c7:70:31:69: 6c:17:7e:94:37:6a:44:0c:9f:30:c4:ac:16:d4:e7: f3:e7:9c:ac:c7:22:db:da:aa:a5:2a:05:74:3f:58: e8:f8:12:66:e2:a7:07:46:97:89:78:80:85:34:7c: 7e:16:9f:db:59:6e:c1:56:6e:d7:1f:6c:6d:5d:16: 69:b7:61:7c:76:c7:54:ef:a2:e6:69:0b:ae:17:45: 95:03:36:d9:19:be:c6:db:59:76:8d:e8:e9:8e:bf: 1f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A3:F1:EA:CE:8B:9A:1C:FE:AB:65:73:11:FA:81:DB:98:9A:25:BC X509v3 Authority Key Identifier: keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/1F3782EE5AE211EF8E82D12DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.4.24.0/22 202.14.4.0/22 Signature Algorithm: sha256WithRSAEncryption ce:50:6f:82:3d:03:b6:e3:02:7a:80:ba:50:7f:37:f6:2a:0a: b7:4d:b1:52:c8:1e:ae:13:b6:0d:15:16:73:96:cb:09:74:63: 36:59:0d:45:45:b0:25:30:8a:82:a7:b9:1c:d9:b2:b7:a3:a3: 8d:0e:e4:13:d8:cf:11:bc:26:71:6e:61:24:90:f9:36:b1:13: 83:8b:0a:53:8c:86:c0:23:6d:a6:ae:47:67:5a:d4:6c:55:ef: 14:14:c6:b2:ae:ad:cd:11:78:88:89:2d:03:a4:15:3d:ff:76: 4c:19:b2:8f:96:0e:23:2a:95:5a:3d:21:3b:b9:47:49:7c:36: 58:b8:35:7b:d8:cc:8c:08:e7:b7:09:9e:ba:a5:9e:aa:61:b4: d2:05:ad:35:8c:07:1b:23:31:fc:8b:33:ac:19:c1:0d:9a:64: 2f:b2:c6:00:f7:98:b0:75:22:d7:74:6b:fe:ed:7f:52:9e:0d: 64:94:c6:3f:21:9c:0f:37:f3:ef:63:36:2b:a2:4c:76:32:64: d4:73:d0:60:15:9d:c3:3b:fd:52:17:04:d3:c6:c4:6e:e2:c5: 95:c4:e8:32:9f:16:94:38:0e:55:f1:47:23:64:df:59:e5:03: a0:3a:11:63:9c:01:88:f8:ef:7d:c5:33:99:55:eb:fa:ad:d7: 51:fa:90:df -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc4NjExMC8GA1UEBRMoQjI1NTJCMzhCOEM1Q0IwOTM1Qzk0MEZBNjA5ODBFQTZG NTEwQ0Y4NjAeFw0yNDExMjkwNTUwMDZaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NDk1NjBlLWQxODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD6GJKZQ1n8QSlUGDzJbg6yncIGP1Bv6869UWXkVmAlqoQbYbB8u/4/uoqgBGj QHvl0G+OA1egshsj8DzkjWeAtv7RQX255N9u8Mr8VXR99X8vt8+tPDGFhkSueHDA 1ODHx0CDKpZ4xNoH47btRFosFl+f/47q5aA+3WQg6QIkOb9v5ID0M47U8jpwz93m jo+MfSRRAipNfuFq5S6XDBgtx3AxaWwXfpQ3akQMnzDErBbU5/PnnKzHItvaqqUq BXQ/WOj4EmbipwdGl4l4gIU0fH4Wn9tZbsFWbtcfbG1dFmm3YXx2x1TvouZpC64X RZUDNtkZvsbbWXaN6OmOvx8tAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUCqPx6s6L mhz+q2VzEfqB25iaJbwwHwYDVR0jBBgwFoAUslUrOLjFywk1yUD6YJgOpvUQz4Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1Nzg2L0U1NzcxMzgwNUFF MTExRUZCQjVDNTcyREM0RjlBRTAyL3NsVXJPTGpGeXdrMXlVRDZZSmdPcHZVUXo0 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2xVck9MakZ5d2sxeVVENllKZ09wdlVRejRZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTc4Ni9FNTc3MTM4MDVBRTExMUVGQkI1QzU3MkRDNEY5QUUwMi8xRjM3ODJFRTVB RTIxMUVGOEU4MkQxMkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmcEGAMEAsoOBDANBgkqhkiG9w0BAQsFAAOCAQEAzlBvgj0D tuMCeoC6UH839ioKt02xUsgerhO2DRUWc5bLCXRjNlkNRUWwJTCKgqe5HNmyt6Oj jQ7kE9jPEbwmcW5hJJD5NrETg4sKU4yGwCNtpq5HZ1rUbFXvFBTGsq6tzRF4iIkt A6QVPf92TBmyj5YOIyqVWj0hO7lHSXw2WLg1e9jMjAjntwmeuqWeqmG00gWtNYwH GyMx/IszrBnBDZpkL7LGAPeYsHUi13Rr/u1/Up4NZJTGPyGcDzfz72M2K6JMdjJk 1HPQYBWdwzv9UhcE08bEbuLFlcToMp8WlDgOVfFHI2TfWeUDoDoRY5wBiPjvfcUz mVXr+q3XUfqQ3w== -----END CERTIFICATE-----Generated at Sat Apr 5 02:18:17 2025 by rpki-client