$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/E1FC5A5E303311EA8796D584C4F9AE02.roa File: E1FC5A5E303311EA8796D584C4F9AE02.roa (raw, json) Hash identifier: DlWNPzEgwL6rY9jLVqQ4BkKSA+pMzEb7rL1OQsFzSd4= Subject key identifier: 43:0A:7E:F5:6A:EA:72:8A:77:41:10:DC:94:1F:6A:90:6C:C8:C4:F8 Certificate issuer: /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Certificate serial: 0B36 Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/E1FC5A5E303311EA8796D584C4F9AE02.roa Signing time: Thu 06 Feb 2025 18:57:36 +0000 ROA not before: Thu 06 Feb 2025 18:57:36 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.147.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2870 (0xb36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91384FB Validity Not Before: Feb 6 18:57:36 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a5061f-aa12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ee:2b:b9:19:ba:f3:7e:46:8a:4f:50:fd:c2: 59:00:86:82:d0:9d:a6:54:3b:1e:2b:4e:13:4a:e0: 99:dc:b8:e1:7e:48:2c:a6:5e:d7:cd:91:78:81:0f: 3c:85:99:30:97:67:9f:aa:a0:73:80:0a:08:ec:4f: 96:15:d5:62:48:97:1e:a1:1b:ae:5b:1d:34:76:c2: d9:72:94:e0:86:67:07:02:1f:c3:4c:64:4e:99:75: 79:a3:f2:f4:d7:a9:8f:9d:04:7e:8a:87:e7:5c:b9: ee:9a:d9:5a:00:9a:3f:3d:e1:10:9c:7c:a8:e4:8d: cb:65:b2:d5:02:a8:4d:8f:86:9b:39:11:dd:61:27: a8:a8:3c:aa:4e:8a:87:b0:05:55:d4:79:85:3e:32: e1:b5:54:7b:af:20:a5:52:b1:7b:b5:62:57:8b:9f: 93:71:e2:68:e7:99:26:da:d9:0a:4e:4d:00:a5:23: 79:5b:78:77:52:1a:2d:13:6f:cc:8e:71:3a:04:b1: 9e:f4:a4:d8:aa:a8:af:42:2f:43:9a:f7:0d:bd:8f: 44:21:ab:a5:02:b8:37:6c:33:51:2e:3b:22:80:b7: 42:a8:a3:00:33:32:2a:44:ea:58:f7:62:3b:f0:67: 2c:16:0c:93:d7:6b:7a:f4:52:3a:9d:c5:ca:6d:74: 94:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0A:7E:F5:6A:EA:72:8A:77:41:10:DC:94:1F:6A:90:6C:C8:C4:F8 X509v3 Authority Key Identifier: keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/E1FC5A5E303311EA8796D584C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.71.0/24 Signature Algorithm: sha256WithRSAEncryption 54:be:17:12:4a:b9:96:d3:d4:ac:08:54:53:95:e6:6f:bb:21: da:4f:e2:ae:c1:1a:ac:d8:9b:16:60:41:25:c6:e7:9c:ea:e6: d8:db:9f:a7:0b:e0:40:7c:bf:24:68:80:bc:63:ac:b9:18:dd: 07:57:7d:60:67:04:ad:3f:82:b9:70:6d:57:32:b7:7e:53:3c: 4c:ae:40:26:39:08:52:aa:a4:c2:25:22:26:fe:92:a3:86:c5: 8f:f0:2c:3b:c8:0c:86:b8:69:53:5b:1f:52:37:b0:cb:88:53: 75:14:a8:a1:06:07:b5:2b:95:e2:bf:92:53:84:a8:e0:50:23: b8:ec:64:27:ea:d1:6a:91:96:d9:d4:34:7f:03:8f:d7:6b:ad: e1:39:df:80:ac:7f:7a:71:94:2e:e7:a0:cb:40:b1:18:76:20: 50:84:4b:87:88:90:28:e4:30:28:bb:d6:a6:1a:0b:63:24:d4: 18:40:fb:17:2c:d8:e5:04:81:ec:8d:3e:0d:4c:5f:43:13:39: dc:be:97:41:76:27:6b:df:fa:89:ce:37:82:7c:b7:6d:d1:6e: c1:0b:ff:61:92:5f:4a:75:45:ef:32:08:c5:16:a6:74:47:08: 90:17:c0:de:6e:46:21:02:0e:ba:e7:50:b1:80:61:b4:49:c2: ff:d5:89:e0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0RkIxMTAvBgNVBAUTKDI3NEUwM0I2N0IzMTEzM0RFN0MwQUFFOTlFMjlDMTk5 NTk1MkI1QUQwHhcNMjUwMjA2MTg1NzM2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E1MDYxZi1hYTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsu4ruRm6835Gik9Q/cJZAIaC0J2mVDseK04TSuCZ3Ljhfkgspl7XzZF4gQ88 hZkwl2efqqBzgAoI7E+WFdViSJceoRuuWx00dsLZcpTghmcHAh/DTGROmXV5o/L0 16mPnQR+iofnXLnumtlaAJo/PeEQnHyo5I3LZbLVAqhNj4abORHdYSeoqDyqToqH sAVV1HmFPjLhtVR7ryClUrF7tWJXi5+TceJo55km2tkKTk0ApSN5W3h3UhotE2/M jnE6BLGe9KTYqqivQi9DmvcNvY9EIaulArg3bDNRLjsigLdCqKMAMzIqROpY92I7 8GcsFgyT12t69FI6ncXKbXSUDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEMKfvVq 6nKKd0EQ3JQfapBsyMT4MB8GA1UdIwQYMBaAFCdOA7Z7MRM958Cq6Z4pwZlZUrWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRGQi8yREQ5MEYyQzMw MzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6M253S3JwbmluQm1WbFN0 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0owNER0bnN4RXozbndLcnBuaW5CbVZsU3RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzg0RkIvMkREOTBGMkMzMDMzMTFFQThENjYyQzg0QzRGOUFFMDIvRTFGQzVBNUUz MDMzMTFFQTg3OTZENTg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnk0cwDQYJKoZIhvcNAQELBQADggEBAFS+FxJKuZbT1KwI VFOV5m+7IdpP4q7BGqzYmxZgQSXG55zq5tjbn6cL4EB8vyRogLxjrLkY3QdXfWBn BK0/grlwbVcyt35TPEyuQCY5CFKqpMIlIib+kqOGxY/wLDvIDIa4aVNbH1I3sMuI U3UUqKEGB7UrleK/klOEqOBQI7jsZCfq0WqRltnUNH8Dj9drreE534Csf3pxlC7n oMtAsRh2IFCES4eIkCjkMCi71qYaC2Mk1BhA+xcs2OUEgeyNPg1MX0MTOdy+l0F2 J2vf+onON4J8t23RbsEL/2GSX0p1Re8yCMUWpnRHCJAXwN5uRiECDrrnULGAYbRJ wv/VieA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:46 2025 by rpki-client