$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/8DD1E6B6E6FE11EE90BD3C1FC4F9AE02.roa File: 8DD1E6B6E6FE11EE90BD3C1FC4F9AE02.roa (raw, json) Hash identifier: VdJNFDaYIS+GL9qtkVFNMbcche+I8od1o1L3BRBSv5A= Subject key identifier: BF:3B:BF:39:02:FC:2E:EF:6C:C8:17:98:5E:13:91:0A:BD:79:A8:57 Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Certificate serial: 0D37 Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/8DD1E6B6E6FE11EE90BD3C1FC4F9AE02.roa Signing time: Mon 16 Dec 2024 17:55:47 +0000 ROA not before: Mon 16 Dec 2024 17:55:47 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 152479 IP address blocks: 103.124.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3383 (0xd37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DF Validity Not Before: Dec 16 17:55:47 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=676069a3-7d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:3f:97:ee:7a:19:04:11:bd:05:b4:fe:7b: 5f:ff:f8:2d:8b:57:9a:1d:cd:29:4e:0e:07:3e:4e: a4:33:b0:86:64:d8:d0:8b:d9:59:33:e8:d3:b1:87: 18:f5:6f:34:3d:1f:b7:38:3b:ad:0e:2d:12:af:64: ba:69:c7:32:e9:f2:36:23:93:d1:7b:ef:35:64:f7: 05:47:b3:f4:94:82:08:7b:1d:17:f1:cc:65:24:45: 94:08:28:f2:36:b9:94:55:d4:cb:c9:bd:d5:5e:39: 51:dc:c5:27:8f:e4:05:8f:1b:c3:6e:12:68:99:cd: d7:e7:c3:40:58:92:95:0b:76:fe:1f:d6:5f:0e:3f: 88:3b:c9:4b:9f:2a:58:b2:f8:72:6d:82:4e:56:10: d5:4c:47:04:0d:f9:92:29:34:f0:ed:56:b7:1b:16: 81:26:07:2e:a0:96:5a:f3:50:c3:c1:73:14:ba:41: e2:5d:e0:6a:bd:23:6b:2e:b0:1c:0f:cc:ea:e1:00: f1:75:ce:da:4a:da:1d:0c:98:ea:67:ef:b8:c1:23: 3a:90:1d:f6:f5:a3:59:ce:e2:aa:5d:74:db:99:77: bd:da:18:bb:e2:d2:92:2b:cf:cc:c0:7e:9c:3c:21: d0:1e:45:1f:98:c1:7f:5f:0a:55:b8:21:8b:71:ef: 92:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3B:BF:39:02:FC:2E:EF:6C:C8:17:98:5E:13:91:0A:BD:79:A8:57 X509v3 Authority Key Identifier: keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/8DD1E6B6E6FE11EE90BD3C1FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.110.0/24 Signature Algorithm: sha256WithRSAEncryption bc:b5:55:d7:78:dc:f8:6d:e8:8f:24:c0:1d:12:15:87:ed:30: 4b:4f:41:77:5c:6b:7d:2b:b0:80:b9:17:0f:11:d6:4d:a7:f6: d9:67:b7:49:71:8b:2b:8b:86:ba:84:a4:77:d4:14:aa:25:40: 17:07:10:0d:c8:cf:1e:fe:5b:40:80:0c:72:01:28:a1:e2:02: 68:1d:fb:b3:c7:50:ca:ed:00:76:b2:c1:4e:fc:d5:33:79:b4: f2:5c:c6:f9:7f:c5:63:eb:e4:8c:01:8d:f9:3c:22:81:01:0c: 6a:30:09:ff:6f:54:4e:3d:3a:d7:78:a8:08:69:47:2a:0c:82: b4:59:2e:39:30:2b:43:d0:fa:3e:be:eb:55:16:4f:47:ef:1a: 5f:0c:fd:62:b9:2b:c2:4c:b3:f2:00:6e:b5:71:62:76:6d:05: d4:82:92:e6:d8:f2:df:7b:7b:01:91:d0:b2:4e:ba:3d:e7:c8: 84:68:1f:57:99:b6:25:96:f9:16:9e:9d:f5:90:ab:0d:47:8e: 5c:4e:e9:47:4b:b2:84:ae:3d:42:f1:13:ed:f3:e9:31:1a:a0: d5:86:c2:61:5a:33:e4:bd:b1:d0:f4:bf:9b:87:44:17:57:bf: fb:95:2e:bf:06:15:d0:d5:fe:df:7d:78:ce:ee:2f:8f:79:53: b4:6c:e9:73 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREYxMTAvBgNVBAUTKDU2NzkwQjhDOTUwN0Q5RDRGMzkwMDk1MEQzMjlFMjc1 NzQ3NzY3QUMwHhcNMjQxMjE2MTc1NTQ3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYwNjlhMy03ZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAo/l+56GQQRvQW0/ntf//gti1eaHc0pTg4HPk6kM7CGZNjQi9lZM+jTsYcY 9W80PR+3ODutDi0Sr2S6accy6fI2I5PRe+81ZPcFR7P0lIIIex0X8cxlJEWUCCjy NrmUVdTLyb3VXjlR3MUnj+QFjxvDbhJomc3X58NAWJKVC3b+H9ZfDj+IO8lLnypY svhybYJOVhDVTEcEDfmSKTTw7Va3GxaBJgcuoJZa81DDwXMUukHiXeBqvSNrLrAc D8zq4QDxdc7aStodDJjqZ++4wSM6kB329aNZzuKqXXTbmXe92hi74tKSK8/MwH6c PCHQHkUfmMF/XwpVuCGLce+SVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL87vzkC /C7vbMgXmF4TkQq9eahXMB8GA1UdIwQYMBaAFFZ5C4yVB9nU85AJUNMp4nV0d2es MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNERi85MjczOTdCNENB MzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJkVHprQWxRMHluaWRYUjNa NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Zua0xqSlVIMmRUemtBbFEweW5pZFhSM1o2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjAzREYvOTI3Mzk3QjRDQTM0MTFFOTk2ODM3RTU2QzRGOUFFMDIvOEREMUU2QjZF NkZFMTFFRTkwQkQzQzFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnfG4wDQYJKoZIhvcNAQELBQADggEBALy1Vdd43Pht6I8k wB0SFYftMEtPQXdca30rsIC5Fw8R1k2n9tlnt0lxiyuLhrqEpHfUFKolQBcHEA3I zx7+W0CADHIBKKHiAmgd+7PHUMrtAHaywU781TN5tPJcxvl/xWPr5IwBjfk8IoEB DGowCf9vVE49Otd4qAhpRyoMgrRZLjkwK0PQ+j6+61UWT0fvGl8M/WK5K8JMs/IA brVxYnZtBdSCkubY8t97ewGR0LJOuj3nyIRoH1eZtiWW+RaenfWQqw1HjlxO6UdL soSuPULxE+3z6TEaoNWGwmFaM+S9sdD0v5uHRBdXv/uVLr8GFdDV/t99eM7uL495 U7Rs6XM= -----END CERTIFICATE-----Generated at Mon Feb 17 08:02:07 2025 by rpki-client