$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/D17E9426B24211EFBBDC2164C4F9AE02.roa File: D17E9426B24211EFBBDC2164C4F9AE02.roa (raw, json) Hash identifier: 08uSCXwlwYJnGMem9e+DAMnS4EN8A9/G3dvb9XlzVbk= Subject key identifier: 98:A7:A4:E5:8B:7F:24:24:47:B2:24:17:50:7D:2B:FB:46:5A:CC:DD Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 12AD Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/D17E9426B24211EFBBDC2164C4F9AE02.roa Signing time: Wed 04 Dec 2024 17:25:00 +0000 ROA not before: Wed 04 Dec 2024 17:25:00 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 135134 IP address blocks: 103.131.188.0/24 maxlen: 24 2403:cfc0:1000::/48 maxlen: 48 2403:cfc0:1001::/48 maxlen: 48 2403:cfc0:1002::/48 maxlen: 48 2403:cfc0:1003::/48 maxlen: 48 2403:cfc0:1005::/48 maxlen: 48 2403:cfc0:1009::/48 maxlen: 48 2403:cfc0:100a::/48 maxlen: 48 2403:cfc0:100e::/48 maxlen: 48 2403:cfc0:100f::/48 maxlen: 48 2403:cfc0:1100::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4781 (0x12ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE Validity Not Before: Dec 4 17:25:00 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6750906c-7c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:c9:f0:cf:21:6d:54:60:d9:80:a3:25:6c: ec:9a:fe:d8:80:55:26:af:1a:5f:b7:9e:33:29:3a: 68:22:0a:74:8d:fe:27:52:ac:fd:02:4b:c8:1f:5a: e6:71:34:9e:d4:88:31:b5:9e:4e:db:42:d3:fd:f5: 15:ae:7a:a0:5d:a5:9e:30:0d:f0:93:ca:79:90:4d: 2b:10:d4:f9:a4:50:83:95:40:8d:29:cf:82:30:d0: a8:d4:30:a4:7a:28:42:1a:ad:a1:7e:0e:09:75:9f: 90:0a:03:89:ca:1c:ae:6f:91:68:36:a4:11:33:ea: b2:a2:37:70:85:5e:d0:b3:57:5d:ac:13:34:5e:92: 5f:6d:7e:7d:fe:93:17:7e:b1:00:65:ce:11:45:d0: 0a:3f:fa:41:d3:35:5a:1f:18:04:da:33:9a:17:ee: e5:ca:26:19:47:d6:d5:ef:31:65:7f:c3:15:ef:0a: 76:24:08:67:47:83:3e:64:e8:1b:fd:2c:5a:a9:fa: 59:02:97:c0:8a:78:21:ea:d1:bc:ce:48:56:44:b8: 0e:09:4c:26:66:55:85:eb:fb:e7:73:c0:36:ff:b0: c1:e3:f1:b2:03:37:85:40:3a:ea:da:08:18:66:11: 9f:4e:ee:46:27:9f:dd:ad:4b:b2:8d:0b:b6:3a:a0: 56:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A7:A4:E5:8B:7F:24:24:47:B2:24:17:50:7D:2B:FB:46:5A:CC:DD X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/D17E9426B24211EFBBDC2164C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.188.0/24 IPv6: 2403:cfc0:1000::/46 2403:cfc0:1005::/48 2403:cfc0:1009::-2403:cfc0:100a:ffff:ffff:ffff:ffff:ffff 2403:cfc0:100e::/47 2403:cfc0:1100::/44 Signature Algorithm: sha256WithRSAEncryption 27:41:09:5b:ab:95:75:75:d7:4c:36:8d:05:9b:db:1e:4c:0e: 41:9b:69:bf:99:ed:bc:20:b4:01:0b:e9:56:47:06:af:e7:a6: ca:d9:45:10:df:93:b7:b7:a1:2b:cb:87:b7:fe:da:ae:d1:3c: e9:49:95:28:0e:33:45:78:f0:ce:8d:11:56:df:ab:98:63:55: e9:ba:92:27:f7:93:da:98:97:34:f3:d6:18:44:8d:5e:d3:4e: b0:df:06:50:2b:22:79:e6:58:ef:a6:be:83:37:ef:a2:45:06: fc:75:a7:fb:30:1f:40:d8:02:dc:3c:2e:7d:34:b0:9f:9e:48: 38:53:26:b9:8b:df:12:59:52:f7:1c:6d:54:5a:c3:63:94:4f: a5:52:28:0f:2b:be:59:48:77:e6:14:0d:ae:c7:f8:47:9b:b4: 36:d9:96:97:16:07:69:14:75:75:e1:52:50:4a:10:cf:79:9c: ee:a5:51:89:50:f6:bb:69:aa:61:1e:eb:bb:7f:97:9a:bd:5b: 8a:68:ec:c5:68:37:5b:b0:5d:44:a8:82:67:d9:9c:90:3a:e1: 39:06:c1:10:5c:f7:a3:9e:50:70:38:02:5c:f6:39:cb:72:d3: b2:98:6f:0f:e2:7f:19:39:b6:34:4d:7e:32:db:ed:f9:ae:5c: 5f:da:33:d4 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgICEq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjQxMjA0MTcyNTAwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwOTA2Yy03YzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQnJ8M8hbVRg2YCjJWzsmv7YgFUmrxpft54zKTpoIgp0jf4nUqz9AkvIH1rm cTSe1IgxtZ5O20LT/fUVrnqgXaWeMA3wk8p5kE0rENT5pFCDlUCNKc+CMNCo1DCk eihCGq2hfg4JdZ+QCgOJyhyub5FoNqQRM+qyojdwhV7Qs1ddrBM0XpJfbX59/pMX frEAZc4RRdAKP/pB0zVaHxgE2jOaF+7lyiYZR9bV7zFlf8MV7wp2JAhnR4M+ZOgb /SxaqfpZApfAingh6tG8zkhWRLgOCUwmZlWF6/vnc8A2/7DB4/GyAzeFQDrq2ggY ZhGfTu5GJ5/drUuyjQu2OqBWXQIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFJinpOWL fyQkR7IkF1B9K/tGWszdMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvRDE3RTk0MjZC MjQyMTFFRkJCREMyMTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXwYIKwYBBQUHAQcBAf8E UDBOMAwEAgABMAYDBABng7wwPgQCAAIwOAMHAiQDz8AQAAMHACQDz8AQBTASAwcA JAPPwBAJAwcAJAPPwBAKAwcBJAPPwBAOAwcEJAPPwBEAMA0GCSqGSIb3DQEBCwUA A4IBAQAnQQlbq5V1dddMNo0Fm9seTA5Bm2m/me28ILQBC+lWRwav56bK2UUQ35O3 t6Ery4e3/tqu0TzpSZUoDjNFePDOjRFW36uYY1XpupIn95PamJc089YYRI1e006w 3wZQKyJ55ljvpr6DN++iRQb8daf7MB9A2ALcPC59NLCfnkg4Uya5i98SWVL3HG1U WsNjlE+lUigPK75ZSHfmFA2ux/hHm7Q22ZaXFgdpFHV14VJQShDPeZzupVGJUPa7 aaphHuu7f5eavVuKaOzFaDdbsF1EqIJn2ZyQOuE5BsEQXPejnlBwOAJc9jnLctOy mG8P4n8ZObY0TX4y2+35rlxf2jPU -----END CERTIFICATE-----Generated at Wed Feb 19 22:10:20 2025 by rpki-client