$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/337DA192C3FC11EF8C3B0B5DC4F9AE02.roa File: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (raw, json) Hash identifier: +y+hJ5qJjcNTcDHQRQUIm9QSLwoFCs3tpko5IxlscxY= Subject key identifier: 77:11:A5:B9:EA:8B:6C:CD:C1:4C:F5:7B:77:91:E1:A5:82:3F:B2:40 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 06C2 Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/337DA192C3FC11EF8C3B0B5DC4F9AE02.roa Signing time: Fri 27 Dec 2024 02:42:23 +0000 ROA not before: Fri 27 Dec 2024 02:42:23 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 131467 IP address blocks: 103.4.188.0/22 maxlen: 22 103.4.188.0/24 maxlen: 24 103.4.189.0/24 maxlen: 24 103.4.190.0/24 maxlen: 24 103.4.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 22:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1730 (0x6c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Dec 27 02:42:23 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=676e140f-1632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:24:14:f4:12:8d:6e:d6:d9:10:05:00:0e:b7: 8a:60:d7:01:6a:30:ad:e9:71:6b:ea:fb:41:b6:17: 10:47:3c:dd:4e:a5:a9:bc:76:e6:06:04:87:65:3d: 5a:95:41:ee:47:fb:03:4f:26:ad:6b:5d:a2:36:7f: 21:42:2c:44:cf:98:39:d9:0f:4e:ff:65:cc:e8:24: b9:4f:16:f8:df:c3:97:fe:12:ed:90:c0:15:9c:b0: 30:5c:ba:50:c4:c5:e6:19:55:d1:1e:c5:36:8a:08: 20:c9:b8:2c:c8:dc:65:ff:97:cd:28:f9:91:24:d2: 86:a0:0b:e4:6d:98:4a:0b:50:b5:f0:13:e3:31:4b: d6:a8:c6:7d:b5:22:3d:a9:88:72:b8:95:fd:e7:b4: cd:26:b4:ab:c9:98:74:ed:25:bf:9d:95:94:87:e1: b0:00:d9:9e:a0:ae:95:80:50:0e:bc:a9:0b:d8:68: 0d:b4:df:1a:83:c9:61:9a:1f:69:a8:6d:a6:17:96: 98:b9:29:c7:09:39:b9:4b:d6:3c:a8:e5:9a:fb:cd: 50:b5:5c:26:ef:47:92:a1:a0:68:0a:06:e6:7d:2f: e3:f5:ab:a1:00:9a:3f:cd:9d:d7:07:9f:23:22:30: 4b:db:87:4c:77:dd:43:f2:24:de:ad:55:87:99:c6: 00:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:11:A5:B9:EA:8B:6C:CD:C1:4C:F5:7B:77:91:E1:A5:82:3F:B2:40 X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/337DA192C3FC11EF8C3B0B5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.4.188.0/22 Signature Algorithm: sha256WithRSAEncryption 66:c8:7d:ab:92:ee:d7:67:da:8f:5f:02:d6:07:84:4c:c1:f2: c3:65:e8:18:a1:25:fe:20:5c:9e:7f:3a:b5:6e:20:15:bf:1a: b1:ac:a1:3a:d5:56:6c:52:f7:9d:e8:c4:a1:51:41:67:11:31: 34:00:63:5f:5d:ad:37:de:93:7d:de:fb:2e:d8:01:e8:fc:b6: f4:7b:fe:fe:52:52:72:74:37:64:f7:b6:c3:c8:31:69:5c:60: 75:c5:1f:58:4b:18:6b:8b:80:e4:c0:16:b6:54:6a:07:8d:41: 1b:d3:08:1d:f9:7f:46:28:d0:50:d0:9a:ef:37:b6:37:08:c8: 6e:bb:db:c5:3a:53:31:aa:82:8a:be:3f:95:35:68:03:9b:74: 66:aa:a9:16:34:5f:b2:99:7e:9f:3c:b8:e2:cf:dd:66:5e:05: ff:56:ae:48:2a:69:ce:be:42:67:34:68:37:2e:41:33:1f:29: 1a:40:37:9b:27:86:d7:8b:a9:d9:ee:a9:93:3e:c0:a6:15:d5: 13:68:2a:6e:6d:d7:9c:c2:22:f0:2c:61:5d:9f:31:e0:e4:47: 00:55:c6:d7:05:6d:c1:61:be:ed:79:d7:8e:5c:3f:24:3e:0c: 82:a3:76:c7:ec:9b:9a:c3:f6:32:aa:40:a7:7c:0d:fa:11:fd: b7:93:7b:10 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjQxMjI3MDI0MjIzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZlMTQwZi0xNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CQU9BKNbtbZEAUADreKYNcBajCt6XFr6vtBthcQRzzdTqWpvHbmBgSHZT1a lUHuR/sDTyata12iNn8hQixEz5g52Q9O/2XM6CS5Txb438OX/hLtkMAVnLAwXLpQ xMXmGVXRHsU2igggybgsyNxl/5fNKPmRJNKGoAvkbZhKC1C18BPjMUvWqMZ9tSI9 qYhyuJX957TNJrSryZh07SW/nZWUh+GwANmeoK6VgFAOvKkL2GgNtN8ag8lhmh9p qG2mF5aYuSnHCTm5S9Y8qOWa+81QtVwm70eSoaBoCgbmfS/j9auhAJo/zZ3XB58j IjBL24dMd91D8iTerVWHmcYAfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHcRpbnq i2zNwUz1e3eR4aWCP7JAMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhBNDEvNTU0MTQwREU4N0JDMTFFQkIzQzA4MjcyQzRGOUFFMDIvMzM3REExOTJD M0ZDMTFFRjhDM0IwQjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnBLwwDQYJKoZIhvcNAQELBQADggEBAGbIfauS7tdn2o9f AtYHhEzB8sNl6BihJf4gXJ5/OrVuIBW/GrGsoTrVVmxS953oxKFRQWcRMTQAY19d rTfek33e+y7YAej8tvR7/v5SUnJ0N2T3tsPIMWlcYHXFH1hLGGuLgOTAFrZUageN QRvTCB35f0Yo0FDQmu83tjcIyG6728U6UzGqgoq+P5U1aAObdGaqqRY0X7KZfp88 uOLP3WZeBf9Wrkgqac6+Qmc0aDcuQTMfKRpAN5snhteLqdnuqZM+wKYV1RNoKm5t 15zCIvAsYV2fMeDkRwBVxtcFbcFhvu15145cPyQ+DIKjdsfsm5rD9jKqQKd8DfoR /beTexA= -----END CERTIFICATE-----Generated at Sat Apr 19 04:51:00 2025 by rpki-client