$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/11328E82645511EBAE4A4633C4F9AE02.roa File: 11328E82645511EBAE4A4633C4F9AE02.roa (raw, json) Hash identifier: uz2dLcbiKvalhoEeN26Zq73ncIHuh+XFmtnGJAva9tc= Subject key identifier: BB:50:CB:FE:70:3C:EF:59:D8:1E:2C:51:6C:72:6C:E6:0C:AC:21:77 Certificate issuer: /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Certificate serial: 0683 Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/11328E82645511EBAE4A4633C4F9AE02.roa Signing time: Fri 14 Feb 2025 23:40:43 +0000 ROA not before: Fri 14 Feb 2025 23:40:43 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 141689 IP address blocks: 103.162.6.0/24 maxlen: 24 103.165.242.0/24 maxlen: 24 2001:df5:dc80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDB80 Validity Not Before: Feb 14 23:40:43 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67afd47b-16db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:37:9b:94:99:6d:f7:1d:d8:12:81:b9:7d:ac: b9:98:bb:ed:a4:ea:57:97:17:3c:af:e1:df:a2:bc: 60:2c:d0:8d:1d:47:79:f4:bc:81:bc:8b:be:ee:00: 9e:5d:ea:b0:a4:74:ea:7c:b8:99:35:9b:24:03:cc: 24:44:7a:50:a8:11:02:63:09:3d:a8:23:2a:cc:bd: c8:a3:8a:51:ed:a6:8d:64:7e:0e:6a:d6:23:0a:ac: 2f:7f:2d:57:4f:07:1e:c0:06:d8:18:ce:41:55:16: 2e:a2:18:e6:06:be:a4:09:87:cf:91:71:13:18:81: 5a:b5:c0:82:a5:36:1d:a3:71:6b:3f:ce:d6:55:34: 0a:ff:c2:1d:7d:9c:92:ad:ac:b2:b5:0b:26:8d:99: 16:a6:58:60:45:de:94:73:82:2b:27:13:e1:f5:c6: bf:17:4f:53:b6:b2:35:48:bd:24:7e:03:a0:12:0c: 4d:58:f4:25:e3:17:9d:a6:93:f4:09:2c:53:b7:2d: 6d:1b:03:ce:5e:ba:5e:f6:0c:a5:cc:f6:fb:5f:af: 7b:bb:77:f8:88:bf:4f:82:37:0a:19:c5:9c:e1:5a: 3e:8f:03:cb:8b:c5:c7:01:c2:fd:fb:f0:6d:2d:aa: 1d:e3:ab:52:18:b9:d1:04:e1:a5:8a:40:e9:57:20: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:50:CB:FE:70:3C:EF:59:D8:1E:2C:51:6C:72:6C:E6:0C:AC:21:77 X509v3 Authority Key Identifier: keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/11328E82645511EBAE4A4633C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.6.0/24 103.165.242.0/24 IPv6: 2001:df5:dc80::/48 Signature Algorithm: sha256WithRSAEncryption 71:86:14:c7:79:d1:e4:92:19:c4:40:ea:f3:5e:11:00:00:db: c7:bb:20:61:66:59:b3:6d:9b:95:ed:28:08:8a:1e:e6:c7:78: 43:77:3a:89:00:48:ed:68:cc:37:f3:7e:a9:bc:a5:97:1e:c4: c2:0f:23:fb:a6:89:cf:30:0b:0d:12:1f:e7:4b:2c:e6:4f:16: 0a:1d:e8:b5:6b:0c:1c:b8:45:c6:b2:5c:1a:bd:4a:a5:31:96: bc:e4:7c:ca:46:03:55:36:ef:d5:59:66:e8:e1:82:2b:03:54: 52:5b:d0:73:eb:ad:0d:0e:b4:de:e4:3f:14:53:d2:d5:a0:33: b3:da:69:cc:51:7c:ef:58:71:0b:31:5a:a6:1b:f5:01:8b:41: 59:ab:57:cd:d5:02:05:c7:21:c6:f3:db:b2:db:4c:9e:4d:d3: 35:d2:be:90:74:e1:cd:ad:aa:61:03:7d:57:b9:11:81:96:19: b5:86:83:11:49:3f:c1:fa:1e:e7:06:4e:fb:17:bc:9e:0e:33: f5:5e:09:c6:d8:ce:01:ae:4b:98:09:36:be:d3:b7:1a:4c:94: 66:d1:d3:01:83:b5:a4:ae:c1:08:00:ef:a4:a2:ed:30:89:ae: 71:de:9a:c9:fb:8b:8e:46:4e:3e:c2:d1:30:e4:d3:3e:bc:c8: 3f:a3:3f:c7 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCODAxMTAvBgNVBAUTKDhENjY4QUZEM0UwM0U3MEI4NDQ5ODgxRkEzNTAxMzFC QUNBQzQ4NTYwHhcNMjUwMjE0MjM0MDQzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FmZDQ3Yi0xNmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjeblJlt9x3YEoG5fay5mLvtpOpXlxc8r+HforxgLNCNHUd59LyBvIu+7gCe XeqwpHTqfLiZNZskA8wkRHpQqBECYwk9qCMqzL3Io4pR7aaNZH4OatYjCqwvfy1X TwcewAbYGM5BVRYuohjmBr6kCYfPkXETGIFatcCCpTYdo3FrP87WVTQK/8IdfZyS rayytQsmjZkWplhgRd6Uc4IrJxPh9ca/F09TtrI1SL0kfgOgEgxNWPQl4xedppP0 CSxTty1tGwPOXrpe9gylzPb7X697u3f4iL9PgjcKGcWc4Vo+jwPLi8XHAcL9+/Bt Laod46tSGLnRBOGlikDpVyD32QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFLtQy/5w PO9Z2B4sUWxybOYMrCF3MB8GA1UdIwQYMBaAFI1miv0+A+cLhEmIH6NQExusrEhW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREI4MC9CRTlGNjFBMDY0 NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3dUVTWWdmbzFBVEc2eXNT RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pXYUtfVDRENXd1RVNZZ2ZvMUFURzZ5c1NGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRCODAvQkU5RjYxQTA2NDUzMTFFQkFGNzc0RDMyQzRGOUFFMDIvMTEzMjhFODI2 NDU1MTFFQkFFNEE0NjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnogYDBABnpfIwDwQCAAIwCQMHACABDfXcgDANBgkqhkiG 9w0BAQsFAAOCAQEAcYYUx3nR5JIZxEDq814RAADbx7sgYWZZs22ble0oCIoe5sd4 Q3c6iQBI7WjMN/N+qbyllx7Ewg8j+6aJzzALDRIf50ss5k8WCh3otWsMHLhFxrJc Gr1KpTGWvOR8ykYDVTbv1Vlm6OGCKwNUUlvQc+utDQ603uQ/FFPS1aAzs9ppzFF8 71hxCzFaphv1AYtBWatXzdUCBcchxvPbsttMnk3TNdK+kHThza2qYQN9V7kRgZYZ tYaDEUk/wfoe5wZO+xe8ng4z9V4JxtjOAa5LmAk2vtO3GkyUZtHTAYO1pK7BCADv pKLtMImucd6ayfuLjkZOPsLRMOTTPrzIP6M/xw== -----END CERTIFICATE-----Generated at Sun Apr 6 10:10:56 2025 by rpki-client