$ rpki-client -vvf rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/2D613294CD7611EC83259862C4F9AE02.roa File: 2D613294CD7611EC83259862C4F9AE02.roa (raw, json) Hash identifier: eiU7ZSeORX7Nfv/I101YymEKed9tnUaeLJmxcj6rlLI= Subject key identifier: FB:F8:14:38:19:F1:4C:B7:65:5B:BF:35:45:CF:88:B1:F2:04:B2:3A Certificate issuer: /CN=A91772FA/serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522 Certificate serial: 0274 Authority key identifier: 3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/2D613294CD7611EC83259862C4F9AE02.roa Signing time: Thu 27 Jun 2024 03:04:00 +0000 ROA not before: Thu 27 Jun 2024 03:04:00 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 16509 IP address blocks: 103.186.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91772FA Validity Not Before: Jun 27 03:04:00 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=667cd6a0-aa53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a1:3d:bf:09:fe:de:38:96:87:ce:62:ba:8e: 61:94:38:95:cd:13:62:4c:8b:ae:9e:65:fc:d1:c2: f7:e1:56:1a:a7:e6:23:f2:04:cd:45:e9:41:d1:66: 2e:79:52:78:50:c5:7e:78:b1:22:ef:1e:11:fe:3f: 40:f9:05:5c:fb:64:a4:d5:f1:1f:5b:50:6b:de:da: 69:25:42:1a:2e:98:15:76:81:a5:3c:33:f2:36:24: 6e:e3:97:38:c7:f8:2b:b4:78:d4:a0:88:75:2d:af: d1:d3:75:85:8d:01:91:29:d6:1d:16:1e:6f:be:da: a2:29:43:cb:ff:68:33:22:b9:09:a1:a7:46:0e:7f: 2e:87:cc:f1:cf:4e:11:6a:bc:0a:98:a5:21:8c:e9: 91:51:4c:63:ae:2b:7d:04:bf:ae:9a:7a:81:6a:ec: 79:b6:05:10:a1:1a:25:e2:a9:0a:a9:1a:fc:1c:cd: de:98:8a:16:65:6d:54:0a:e5:35:54:61:f2:6e:8a: fa:1a:14:85:01:a9:d8:a3:c6:bf:b2:2e:5c:c3:6b: 14:71:db:c5:c0:50:55:45:39:38:b0:3d:5b:97:85: 83:1e:64:6f:91:51:86:d8:ca:93:bc:49:05:1c:b6: 2d:ee:85:48:d2:bf:9a:00:cf:eb:13:6e:30:5b:d0: dc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F8:14:38:19:F1:4C:B7:65:5B:BF:35:45:CF:88:B1:F2:04:B2:3A X509v3 Authority Key Identifier: keyid:3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/2D613294CD7611EC83259862C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.205.0/24 Signature Algorithm: sha256WithRSAEncryption 99:27:82:b2:e3:33:f2:3b:31:db:ad:4a:6c:da:8a:e4:1e:e0: 48:6a:1d:cd:89:c4:bb:b8:0e:cb:d1:b5:2a:1d:8e:5e:f3:be: 7f:31:b1:57:d5:f0:a1:b8:2b:23:f7:ee:10:58:3b:71:5b:2a: d4:39:46:8a:00:d1:9b:e6:4b:a7:4e:0d:4f:6f:17:c3:07:68: 56:5c:de:95:a5:98:82:6e:8a:fb:8e:ca:a3:14:15:72:b6:b2: f8:ea:5e:64:5c:18:9c:44:8b:48:40:ce:02:7d:68:af:46:f9: 56:c9:7b:19:be:ed:45:e7:65:2d:fa:b2:1d:54:28:2f:78:ea: 8f:23:24:a4:5a:b6:ba:69:28:d3:7f:ed:64:bc:24:a0:44:23: 32:25:51:d7:40:54:08:cb:cc:6b:28:d3:ad:46:0f:3c:ba:97: a3:15:57:47:ca:9d:93:d8:06:33:1c:70:9b:7d:73:27:e0:6d: b5:78:82:a9:15:91:e6:8b:0c:be:3c:da:5f:ae:ac:8f:54:19: 67:9c:68:9c:9b:26:9d:a6:5c:9e:b3:97:de:d1:49:90:57:40: 1b:bc:5a:40:00:1c:19:10:3f:52:1c:ef:38:fb:f6:39:5e:df: e4:cc:46:82:ee:19:c8:82:7c:fa:93:87:8f:6c:e9:a1:da:7f: 6a:bb:ba:69 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcyRkExMTAvBgNVBAUTKDNCMTY4OEE1RjdCNzI0QUFGQkU3ODIwQTJDNjNEOTdC MkVBOEU1MjIwHhcNMjQwNjI3MDMwNDAwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdjZDZhMC1hYTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaE9vwn+3jiWh85iuo5hlDiVzRNiTIuunmX80cL34VYap+Yj8gTNRelB0WYu eVJ4UMV+eLEi7x4R/j9A+QVc+2Sk1fEfW1Br3tppJUIaLpgVdoGlPDPyNiRu45c4 x/grtHjUoIh1La/R03WFjQGRKdYdFh5vvtqiKUPL/2gzIrkJoadGDn8uh8zxz04R arwKmKUhjOmRUUxjrit9BL+umnqBaux5tgUQoRol4qkKqRr8HM3emIoWZW1UCuU1 VGHybor6GhSFAanYo8a/si5cw2sUcdvFwFBVRTk4sD1bl4WDHmRvkVGG2MqTvEkF HLYt7oVI0r+aAM/rE24wW9DcEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPv4FDgZ 8Uy3ZVu/NUXPiLHyBLI6MB8GA1UdIwQYMBaAFDsWiKX3tySq++eCCixj2XsuqOUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzJGQS9ENzI0NDU2MkNE NzMxMUVDQTBBQTgwNjFDNEY5QUUwMi9PeGFJcGZlM0pLcjc1NElLTEdQWmV5Nm81 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL094YUlwZmUzSktyNzU0SUtMR1BaZXk2bzVTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzcyRkEvRDcyNDQ1NjJDRDczMTFFQ0EwQUE4MDYxQzRGOUFFMDIvMkQ2MTMyOTRD RDc2MTFFQzgzMjU5ODYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnus0wDQYJKoZIhvcNAQELBQADggEBAJkngrLjM/I7Mdut SmzaiuQe4EhqHc2JxLu4DsvRtSodjl7zvn8xsVfV8KG4KyP37hBYO3FbKtQ5RooA 0ZvmS6dODU9vF8MHaFZc3pWlmIJuivuOyqMUFXK2svjqXmRcGJxEi0hAzgJ9aK9G +VbJexm+7UXnZS36sh1UKC946o8jJKRatrppKNN/7WS8JKBEIzIlUddAVAjLzGso 061GDzy6l6MVV0fKnZPYBjMccJt9cyfgbbV4gqkVkeaLDL482l+urI9UGWecaJyb Jp2mXJ6zl97RSZBXQBu8WkAAHBkQP1Ic7zj79jle3+TMRoLuGciCfPqTh49s6aHa f2q7umk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:15 2025 by rpki-client