$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/451AF9F2E3DC11ECB9410B43C4F9AE02.roa File: 451AF9F2E3DC11ECB9410B43C4F9AE02.roa (raw, json) Hash identifier: PvyXkvk9rsG65qDLSBUO/zxV1I1w1ViEmt67rzLWH3U= Subject key identifier: CD:5D:CB:E7:BA:6F:0B:14:A1:88:34:AB:9E:B4:AC:AA:1B:6E:B8:32 Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Certificate serial: 041C Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/451AF9F2E3DC11ECB9410B43C4F9AE02.roa Signing time: Sun 15 Dec 2024 00:03:38 +0000 ROA not before: Sun 15 Dec 2024 00:03:38 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 54197 IP address blocks: 103.177.136.0/24 maxlen: 24 103.177.137.0/24 maxlen: 24 2400:3f60::/32 maxlen: 32 2400:3f60:1::/48 maxlen: 48 2400:3f60:2::/48 maxlen: 48 2400:3f60:3::/48 maxlen: 48 2400:3f60:4::/48 maxlen: 48 2400:3f60:10::/44 maxlen: 44 2400:3f60:10::/48 maxlen: 48 2400:3f60:11::/48 maxlen: 48 2400:3f60:12::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E3D Validity Not Before: Dec 15 00:03:38 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=675e1cd9-5361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:85:74:a6:92:86:d7:e6:85:19:0c:41:0a:6c: e0:67:36:e1:7f:1b:4c:d4:09:b6:c4:6f:56:55:08: d6:f3:85:65:08:66:aa:7c:37:e6:58:e5:d1:9a:b6: 1b:c4:91:c5:38:e5:3c:dd:fb:35:28:3f:f9:2d:fc: df:8b:48:31:78:91:3c:49:47:4b:78:a4:f4:77:73: f4:98:81:73:d2:6f:e7:bb:3b:51:96:37:d3:bc:97: c8:7b:4d:d2:de:a0:55:ab:79:50:35:73:ab:d7:2d: 90:a7:e8:25:3e:d2:b8:39:7b:7f:a1:18:80:ee:a6: 86:f4:60:45:a3:92:79:31:39:91:85:2a:7b:45:6d: c7:47:cc:8f:2a:4a:af:ef:a3:0e:33:02:95:32:59: 52:5e:5c:a2:db:7a:b6:00:51:6b:28:2f:aa:ec:20: 07:99:bc:ef:7c:23:f5:f9:f9:17:35:96:97:be:ed: c9:ad:ff:57:e0:89:ec:4b:4f:98:cf:a4:2b:4c:e5: ef:96:0f:71:04:29:a5:25:15:0a:80:f1:1d:d7:71: 4d:cd:e0:e6:96:d6:ba:88:69:e7:ff:33:1a:72:33: f0:70:d4:83:22:90:87:e7:52:fd:ba:78:d6:4f:ae: 30:2d:b1:85:e8:ad:a0:71:de:b3:8d:39:3a:c1:59: 00:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5D:CB:E7:BA:6F:0B:14:A1:88:34:AB:9E:B4:AC:AA:1B:6E:B8:32 X509v3 Authority Key Identifier: keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/451AF9F2E3DC11ECB9410B43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.136.0/23 IPv6: 2400:3f60::/32 Signature Algorithm: sha256WithRSAEncryption a1:79:8a:44:8e:35:77:1e:64:a6:14:95:34:a6:94:26:6c:28: 68:58:d3:f8:eb:d3:0e:ed:80:a6:16:55:2e:97:a6:f8:02:6c: ea:ac:65:92:67:47:f7:99:33:ed:9b:b7:d9:8f:30:2d:b9:0a: 3a:20:90:54:1a:4d:72:5b:30:b3:93:7d:83:8a:fc:7e:f7:26: b7:65:5f:cb:db:6f:77:d4:bd:0a:ef:84:81:bd:02:e3:b4:39: 27:67:52:84:2b:6b:ac:4c:74:74:f3:64:1a:b4:d1:53:bf:4d: d5:75:67:8f:4b:d4:be:37:93:51:c7:4f:fc:07:21:f8:34:ee: 0a:86:90:1b:83:de:3b:44:b9:e5:6c:30:68:c8:3f:c8:7a:97: 49:f6:cf:08:f5:00:38:46:f1:5e:27:30:b7:23:93:5c:4d:dd: 77:bc:d4:55:a1:c0:d1:de:62:90:fc:e0:95:e1:88:32:00:c2: 91:f4:80:50:7c:94:29:8a:cd:fe:87:87:c6:b4:c9:e0:e2:25: 87:d2:f4:d6:d4:73:66:fa:1e:f2:eb:50:0a:7c:99:87:c9:43: d4:1f:f6:33:9e:d5:ef:93:46:44:05:ce:c2:ba:ec:dc:ef:bb: e7:91:c2:44:50:ff:0b:06:b1:cc:0c:a5:8e:a3:80:ec:0b:45: 50:4b:22:e1 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFM0QxMTAvBgNVBAUTKDNBQUZGQkI3RUE0QTYwRDc3QkI0NDI4NEFDQkYyNUMz OThCQTlBNkQwHhcNMjQxMjE1MDAwMzM4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzVlMWNkOS01MzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIV0ppKG1+aFGQxBCmzgZzbhfxtM1Am2xG9WVQjW84VlCGaqfDfmWOXRmrYb xJHFOOU83fs1KD/5Lfzfi0gxeJE8SUdLeKT0d3P0mIFz0m/nuztRljfTvJfIe03S 3qBVq3lQNXOr1y2Qp+glPtK4OXt/oRiA7qaG9GBFo5J5MTmRhSp7RW3HR8yPKkqv 76MOMwKVMllSXlyi23q2AFFrKC+q7CAHmbzvfCP1+fkXNZaXvu3Jrf9X4InsS0+Y z6QrTOXvlg9xBCmlJRUKgPEd13FNzeDmlta6iGnn/zMacjPwcNSDIpCH51L9unjW T64wLbGF6K2gcd6zjTk6wVkAzwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFM1dy+e6 bwsUoYg0q560rKobbrgyMB8GA1UdIwQYMBaAFDqv+7fqSmDXe7RChKy/JcOYuppt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUzRC8wQUI0Mzg2QTU4 NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lOZDd0RUtFckw4bHc1aTZt bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xXzd0LXBLWU5kN3RFS0VyTDhsdzVpNm1tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhFM0QvMEFCNDM4NkE1ODRFMTFFQzlGQ0YxNzc5QzRGOUFFMDIvNDUxQUY5RjJF M0RDMTFFQ0I5NDEwQjQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnsYgwDQQCAAIwBwMFACQAP2AwDQYJKoZIhvcNAQELBQAD ggEBAKF5ikSONXceZKYUlTSmlCZsKGhY0/jr0w7tgKYWVS6XpvgCbOqsZZJnR/eZ M+2bt9mPMC25CjogkFQaTXJbMLOTfYOK/H73JrdlX8vbb3fUvQrvhIG9AuO0OSdn UoQra6xMdHTzZBq00VO/TdV1Z49L1L43k1HHT/wHIfg07gqGkBuD3jtEueVsMGjI P8h6l0n2zwj1ADhG8V4nMLcjk1xN3Xe81FWhwNHeYpD84JXhiDIAwpH0gFB8lCmK zf6Hh8a0yeDiJYfS9NbUc2b6HvLrUAp8mYfJQ9Qf9jOe1e+TRkQFzsK67Nzvu+eR wkRQ/wsGscwMpY6jgOwLRVBLIuE= -----END CERTIFICATE-----Generated at Sat Apr 5 03:25:41 2025 by rpki-client