$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/001209082A2111EAB1BF9C2EC4F9AE02.roa File: 001209082A2111EAB1BF9C2EC4F9AE02.roa (raw, json) Hash identifier: vpJeDwiHWNxR3ZSraALkWmUoFKXJKlqfWZWB6I2fGis= Subject key identifier: 4D:13:77:13:32:29:3C:73:69:5C:DA:1E:78:69:E9:AF:FD:C6:22:7A Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Certificate serial: 0B39 Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/001209082A2111EAB1BF9C2EC4F9AE02.roa Signing time: Sat 28 Dec 2024 19:07:37 +0000 ROA not before: Sat 28 Dec 2024 19:07:37 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 139885 IP address blocks: 103.146.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2873 (0xb39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9F87 Validity Not Before: Dec 28 19:07:37 2024 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67704c78-aebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:7a:64:2e:a9:34:e5:ed:32:2c:c3:9b:2b: c8:db:b8:54:e2:ba:97:c9:aa:6c:66:32:5e:3c:1e: 5e:bd:95:dd:93:97:4e:6d:1a:a7:1e:c9:37:5e:36: 02:0e:80:70:48:7b:b3:6a:3d:f6:02:c2:0b:af:67: 27:d1:d0:22:ed:6b:6d:65:4d:85:c6:93:72:af:cb: 80:e8:22:32:76:51:88:13:e9:f5:c4:9e:a5:45:23: ba:e4:ba:9e:3b:7e:0a:f1:ab:66:7c:4b:89:9c:f9: ea:35:39:3d:e2:5d:07:75:1d:4d:11:28:28:2a:79: 17:3c:2d:30:41:fb:31:6f:c4:a6:7a:d2:2b:8c:05: b3:81:0f:94:df:3c:3f:73:7c:4d:54:e8:b7:ec:bb: 23:2b:47:f5:ba:a3:ef:e0:36:20:30:1e:c2:82:86: 55:0d:fb:ea:f0:4e:d5:7b:5a:97:df:71:ff:03:44: f4:28:de:d0:c5:74:1f:8d:d5:72:fb:c8:f4:eb:1c: f9:55:7d:b0:37:af:c5:79:6b:07:1f:96:44:dc:95: 29:37:37:a1:c3:16:0e:5d:78:e3:0b:ad:3a:a1:5b: 68:e3:85:9c:ec:a1:53:c8:c6:f3:e0:93:d6:63:7b: 28:19:a7:02:8a:09:d0:17:d9:e6:33:c7:5a:4f:dd: 3a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:13:77:13:32:29:3C:73:69:5C:DA:1E:78:69:E9:AF:FD:C6:22:7A X509v3 Authority Key Identifier: keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/001209082A2111EAB1BF9C2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.146.0/24 Signature Algorithm: sha256WithRSAEncryption 82:54:3c:97:ea:39:3a:04:da:73:6b:e5:b7:ee:d8:6c:4e:55: 51:a3:34:70:22:be:6f:39:86:2f:c9:20:83:99:b9:26:5b:5c: 2d:a2:05:52:ec:2f:34:2b:2a:18:15:9b:5a:96:d7:b2:e3:ce: 95:c7:26:13:a6:b5:56:b3:ca:85:f3:bb:c8:15:07:e7:04:38: 8d:2a:c0:94:2b:3e:23:05:7a:f1:64:c6:59:11:01:c9:69:bd: c0:a6:e3:6c:40:36:52:1b:69:a3:6c:ff:58:b5:51:34:f4:6b: 24:cd:46:66:bf:c5:be:99:d9:94:0e:8e:e2:4d:fc:57:54:57: b8:d8:36:eb:63:db:1c:10:e6:a7:83:39:91:84:ac:dd:29:0a: 1f:01:ca:7c:4b:be:ef:3f:30:6e:6e:ab:ce:2a:ac:ab:a2:cc: 1d:aa:62:7b:d8:9e:b3:4b:a7:83:ac:92:32:da:dc:00:36:89: 2f:eb:82:ec:33:15:02:f0:2b:3c:b3:f1:5c:4f:61:66:b8:2b: 34:ea:6e:2c:45:65:ea:66:a9:e0:b7:6d:37:88:b0:02:6f:09: b5:7f:ba:b5:21:d8:df:52:02:c1:93:e0:a9:14:5d:f8:64:19: 57:71:a5:05:ca:89:24:f2:1b:b2:fb:40:5d:a0:fb:79:de:e6: 97:25:ef:e7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGODcxMTAvBgNVBAUTKEVDQzFEQzgyODhGODQ1QTkxQzlGNkNDMTg3QTk5Qzk5 RDkwOThDMUMwHhcNMjQxMjI4MTkwNzM3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzcwNGM3OC1hZWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmp6ZC6pNOXtMizDmyvI27hU4rqXyapsZjJePB5evZXdk5dObRqnHsk3XjYC DoBwSHuzaj32AsILr2cn0dAi7WttZU2FxpNyr8uA6CIydlGIE+n1xJ6lRSO65Lqe O34K8atmfEuJnPnqNTk94l0HdR1NESgoKnkXPC0wQfsxb8SmetIrjAWzgQ+U3zw/ c3xNVOi37LsjK0f1uqPv4DYgMB7CgoZVDfvq8E7Ve1qX33H/A0T0KN7QxXQfjdVy +8j06xz5VX2wN6/FeWsHH5ZE3JUpNzehwxYOXXjjC606oVto44Wc7KFTyMbz4JPW Y3soGacCignQF9nmM8daT9062QIDAQABo4IClTCCApEwHQYDVR0OBBYEFE0TdxMy KTxzaVzaHnhp6a/9xiJ6MB8GA1UdIwQYMBaAFOzB3IKI+EWpHJ9swYepnJnZCYwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUY4Ny83MDI3QzI5QzJB MjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJha2NuMnpCaDZtY21ka0pq QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNSGNnb2o0UmFrY24yekJoNm1jbWRrSmpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjlGODcvNzAyN0MyOUMyQTIwMTFFQUExMTUyQzJFQzRGOUFFMDIvMDAxMjA5MDgy QTIxMTFFQUIxQkY5QzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkpIwDQYJKoZIhvcNAQELBQADggEBAIJUPJfqOToE2nNr 5bfu2GxOVVGjNHAivm85hi/JIIOZuSZbXC2iBVLsLzQrKhgVm1qW17LjzpXHJhOm tVazyoXzu8gVB+cEOI0qwJQrPiMFevFkxlkRAclpvcCm42xANlIbaaNs/1i1UTT0 ayTNRma/xb6Z2ZQOjuJN/FdUV7jYNutj2xwQ5qeDOZGErN0pCh8BynxLvu8/MG5u q84qrKuizB2qYnvYnrNLp4OskjLa3AA2iS/rguwzFQLwKzyz8VxPYWa4KzTqbixF ZepmqeC3bTeIsAJvCbV/urUh2N9SAsGT4KkUXfhkGVdxpQXKiSTyG7L7QF2g+3ne 5pcl7+c= -----END CERTIFICATE-----Generated at Sun Apr 6 17:58:31 2025 by rpki-client