$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/881C3F9CABD311EFBFED7130C4F9AE02.roa File: 881C3F9CABD311EFBFED7130C4F9AE02.roa (raw, json) Hash identifier: zPUrUv1ZIaP+6eaUv+2E/NI861UxRFU1+jsH4LfcFNQ= Subject key identifier: 1E:ED:C0:75:5E:BB:C3:A0:80:37:91:F2:AC:00:A5:74:31:95:78:DF Certificate issuer: /CN=A91FEFBB/serialNumber=DA75AB0FB3AA875AFADF5A38F852BDCC1DD826F7 Certificate serial: 012E Authority key identifier: DA:75:AB:0F:B3:AA:87:5A:FA:DF:5A:38:F8:52:BD:CC:1D:D8:26:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/881C3F9CABD311EFBFED7130C4F9AE02.roa Signing time: Tue 26 Nov 2024 08:50:48 +0000 ROA not before: Tue 26 Nov 2024 08:50:48 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 139820 IP address blocks: 103.158.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.crl rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEFBB Validity Not Before: Nov 26 08:50:48 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67458be8-43a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:44:57:da:65:6a:5b:7f:2e:78:e8:cb:17:75: cc:33:bd:2a:98:f0:09:7a:5f:ad:9a:22:a0:41:3e: 1e:ee:85:24:59:76:fd:65:25:7b:24:e3:df:0f:cb: 38:33:4b:c5:6c:44:93:1c:b9:c4:f2:67:a2:68:08: 29:91:dc:ee:57:ff:b6:63:20:fb:c8:c5:91:08:9d: fb:64:4b:bd:78:09:1f:4b:ba:2c:6c:14:ad:a9:d9: a6:6c:cb:7a:7d:98:aa:14:5e:25:5c:94:be:2f:65: cb:63:58:f3:75:d9:6d:15:22:91:3f:4f:fb:4e:0f: f4:1c:d2:42:fc:67:b9:70:7f:cd:0c:73:5b:eb:26: 24:c2:97:50:71:de:b6:7f:8c:1c:7b:4e:9d:2c:10: e9:3a:67:52:03:f8:39:2a:c5:90:aa:09:65:88:82: 5b:ed:1c:f9:72:89:6f:e0:d0:a5:30:5e:4b:69:40: 39:f5:af:5b:78:c6:84:d7:78:fc:66:1a:99:3d:2a: ac:22:d5:69:61:fc:95:90:bd:91:6c:8b:45:a7:65: 7f:07:91:d8:92:96:d2:d9:3b:40:9a:66:b2:88:77: 85:f6:fe:13:62:d7:a1:f0:73:61:9c:53:06:7e:62: d5:0d:00:b4:d1:68:b3:34:a0:67:0e:cd:af:0a:ac: 4e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:ED:C0:75:5E:BB:C3:A0:80:37:91:F2:AC:00:A5:74:31:95:78:DF X509v3 Authority Key Identifier: keyid:DA:75:AB:0F:B3:AA:87:5A:FA:DF:5A:38:F8:52:BD:CC:1D:D8:26:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/881C3F9CABD311EFBFED7130C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.236.0/24 Signature Algorithm: sha256WithRSAEncryption 95:4b:3d:96:1d:ff:69:96:71:e1:b2:60:24:68:dd:04:a8:5c: 63:3e:5f:e9:b3:0a:2a:fe:99:9c:f4:61:8f:e3:cd:23:8a:9e: 22:39:7e:c8:bb:b4:ef:ae:8c:72:27:1b:5b:3a:bf:36:14:43: 3f:7a:60:0e:af:35:75:c0:44:e7:75:91:25:92:1f:dc:53:ae: 8c:65:81:2d:02:1c:c4:8e:a6:88:63:7f:76:5b:4e:a7:f5:52: 07:f0:29:50:e9:7a:85:09:b9:63:4f:21:0a:bd:fe:be:f0:b8: e5:5c:d8:3c:05:a6:4f:f4:b2:0e:1c:30:ac:3d:a7:b6:99:20: 98:85:81:d5:9c:07:b2:bc:db:c6:8a:6b:6a:48:96:6b:12:bc: 2b:d9:2b:dd:46:f0:db:ee:86:8f:99:ac:c5:e9:1a:2e:00:63: d0:32:37:5a:f3:38:55:95:a6:e6:8d:a8:30:02:4a:cb:d3:9d: 88:69:e6:89:6e:b5:65:31:a5:ad:74:7e:48:19:9f:ba:31:5a: 4a:38:78:36:f6:5c:42:15:67:c7:24:56:a0:dd:3c:ca:fc:cb: e7:47:53:12:6b:1b:fe:ac:a4:3f:e6:e2:ea:e3:29:89:87:60: b4:5e:aa:a1:42:78:e2:0e:d8:de:c9:6a:8a:36:8f:97:c6:00: 29:58:10:77 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVGQkIxMTAvBgNVBAUTKERBNzVBQjBGQjNBQTg3NUFGQURGNUEzOEY4NTJCREND MUREODI2RjcwHhcNMjQxMTI2MDg1MDQ4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ1OGJlOC00M2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2URX2mVqW38ueOjLF3XMM70qmPAJel+tmiKgQT4e7oUkWXb9ZSV7JOPfD8s4 M0vFbESTHLnE8meiaAgpkdzuV/+2YyD7yMWRCJ37ZEu9eAkfS7osbBStqdmmbMt6 fZiqFF4lXJS+L2XLY1jzddltFSKRP0/7Tg/0HNJC/Ge5cH/NDHNb6yYkwpdQcd62 f4wce06dLBDpOmdSA/g5KsWQqglliIJb7Rz5colv4NClMF5LaUA59a9beMaE13j8 ZhqZPSqsItVpYfyVkL2RbItFp2V/B5HYkpbS2TtAmmayiHeF9v4TYteh8HNhnFMG fmLVDQC00WizNKBnDs2vCqxOHwIDAQABo4IClTCCApEwHQYDVR0OBBYEFB7twHVe u8OggDeR8qwApXQxlXjfMB8GA1UdIwQYMBaAFNp1qw+zqoda+t9aOPhSvcwd2Cb3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUZCQi9EODk2QjVDOEVB NkExMUVEQjVCNkI1NUVDNEY5QUUwMi8ybldyRDdPcWgxcjYzMW80LUZLOXpCM1lK dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJuV3JEN09xaDFyNjMxbzQtRks5ekIzWUp2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkVGQkIvRDg5NkI1QzhFQTZBMTFFREI1QjZCNTVFQzRGOUFFMDIvODgxQzNGOUNB QkQzMTFFRkJGRUQ3MTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnnuwwDQYJKoZIhvcNAQELBQADggEBAJVLPZYd/2mWceGy YCRo3QSoXGM+X+mzCir+mZz0YY/jzSOKniI5fsi7tO+ujHInG1s6vzYUQz96YA6v NXXAROd1kSWSH9xTroxlgS0CHMSOpohjf3ZbTqf1UgfwKVDpeoUJuWNPIQq9/r7w uOVc2DwFpk/0sg4cMKw9p7aZIJiFgdWcB7K828aKa2pIlmsSvCvZK91G8Nvuho+Z rMXpGi4AY9AyN1rzOFWVpuaNqDACSsvTnYhp5olutWUxpa10fkgZn7oxWko4eDb2 XEIVZ8ckVqDdPMr8y+dHUxJrG/6spD/m4urjKYmHYLReqqFCeOIO2N7Jaoo2j5fG AClYEHc= -----END CERTIFICATE-----Generated at Sat Apr 5 03:54:08 2025 by rpki-client