$ rpki-client -vvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/1D526B2E5DB311EEA8990E1BC4F9AE02.roa File: 1D526B2E5DB311EEA8990E1BC4F9AE02.roa (raw, json) Hash identifier: SXTVWJ2PMrAIqDEbXazZSPAGB7rgkYD55HYA8ZjO4Yw= Subject key identifier: 88:32:EB:61:0C:13:1D:6C:AC:56:62:F0:05:1D:7D:81:55:A0:23:CC Certificate issuer: /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0 Certificate serial: 0605 Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/1D526B2E5DB311EEA8990E1BC4F9AE02.roa Signing time: Thu 14 Nov 2024 22:41:43 +0000 ROA not before: Thu 14 Nov 2024 22:41:43 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 32787 IP address blocks: 103.198.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91854B7 Validity Not Before: Nov 14 22:41:43 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67367ca6-126b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:cf:f6:05:86:64:8b:7d:7e:cf:b0:93:b5:14: d4:f9:73:0a:9a:83:df:5b:c5:16:77:3b:6b:74:31: 5a:e5:7d:df:59:fc:31:d5:b8:e4:9d:92:4e:75:1f: 7e:92:b5:57:48:2a:c3:50:7b:3f:5f:ea:a2:b0:1e: 05:0a:d8:a6:53:9e:3c:29:9c:dc:b6:94:43:8a:8e: 52:01:b5:a5:e1:78:8e:ba:d9:b7:a9:ed:f6:bc:03: d2:6c:2f:ed:7a:2b:d0:56:01:b1:34:88:6e:1b:5d: ac:2a:76:55:d1:5b:54:89:f2:fa:13:92:f4:0d:97: 08:d7:a0:3c:34:e5:9d:f4:a7:ab:bd:08:3e:e5:f2: 92:20:be:f3:e2:5e:0b:be:36:10:2e:07:82:7a:0c: ec:1d:fa:7d:43:a3:e3:b8:1b:c1:d2:20:57:8d:1e: 92:4d:63:7b:19:16:af:b6:a7:3a:c8:3d:54:68:1c: 49:d0:67:6e:af:68:ee:fe:02:10:f4:dd:23:9a:38: 14:fb:fe:8e:14:8d:14:af:f1:b1:26:b9:8c:93:98: 06:00:13:c9:5f:7f:8c:3d:4e:bf:6c:19:5c:d9:58: 18:37:cd:f6:31:2b:29:7c:ed:09:0f:69:e9:f2:ce: 20:a6:b0:eb:ba:68:a1:65:10:b0:6f:25:6a:f2:3f: 41:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:32:EB:61:0C:13:1D:6C:AC:56:62:F0:05:1D:7D:81:55:A0:23:CC X509v3 Authority Key Identifier: keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/1D526B2E5DB311EEA8990E1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.198.92.0/24 Signature Algorithm: sha256WithRSAEncryption 30:c5:7b:69:f5:73:87:44:95:46:b1:b8:61:16:eb:ac:60:d5: d0:b5:bb:a0:4f:4a:ef:81:b4:86:81:f0:aa:51:d0:8f:6e:a2: 68:00:d0:db:c4:8d:16:94:3e:48:3a:49:bf:e2:9d:ca:f3:06: a6:d7:e0:fc:61:7d:df:ba:d8:f0:b4:e9:6b:20:4b:4d:f2:96: 4b:ba:4e:ba:9d:3c:30:3e:f1:6e:43:a6:05:80:b1:7c:39:73: bf:5d:25:d8:44:b0:15:55:44:c5:ac:1a:88:27:4b:1c:38:ae: 36:d6:06:85:a3:1b:06:74:2a:2c:52:6b:2f:0e:3f:8e:08:7e: aa:d4:e7:41:0d:04:a9:23:f6:5c:55:86:9f:68:dc:b8:d5:5a: db:1d:fd:e9:d5:57:53:2d:01:a4:76:7f:c7:00:cf:be:d1:e6: 39:f1:11:39:8d:3c:38:b4:b9:11:71:fb:63:64:17:bb:b8:b0: da:de:ae:97:50:c4:a8:bc:da:39:de:42:34:c1:41:42:ad:12: 58:c1:57:e1:2c:3c:bf:a8:db:76:71:fb:8e:57:73:65:e3:6e: e9:bb:dd:e8:57:da:44:d4:da:fb:b3:37:c5:09:9e:83:81:15: 14:21:f0:ce:fd:5e:06:2d:63:6b:c7:fe:49:c5:c4:15:d1:14: 49:8a:5a:ca -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0QjcxMTAvBgNVBAUTKEY4OEI5NzQwNEY5REMxMEY1QUFCMDJGNzRFQzQ5MEY5 OEFEMEQzQjAwHhcNMjQxMTE0MjI0MTQzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM2N2NhNi0xMjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+s/2BYZki31+z7CTtRTU+XMKmoPfW8UWdztrdDFa5X3fWfwx1bjknZJOdR9+ krVXSCrDUHs/X+qisB4FCtimU548KZzctpRDio5SAbWl4XiOutm3qe32vAPSbC/t eivQVgGxNIhuG12sKnZV0VtUifL6E5L0DZcI16A8NOWd9KervQg+5fKSIL7z4l4L vjYQLgeCegzsHfp9Q6PjuBvB0iBXjR6STWN7GRavtqc6yD1UaBxJ0Gdur2ju/gIQ 9N0jmjgU+/6OFI0Ur/GxJrmMk5gGABPJX3+MPU6/bBlc2VgYN832MSspfO0JD2np 8s4gprDrumihZRCwbyVq8j9BdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIgy62EM Ex1srFZi8AUdfYFVoCPMMB8GA1UdIwQYMBaAFPiLl0BPncEPWqsC907EkPmK0NOw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTRCNy9FMTgwQ0U3QTg1 MUUxMUVCODQxOUIzMjdDNEY5QUUwMi8tSXVYUUUtZHdROWFxd0wzVHNTUS1ZclEw N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1JdVhRRS1kd1E5YXF3TDNUc1NRLVlyUTA3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODU0QjcvRTE4MENFN0E4NTFFMTFFQjg0MTlCMzI3QzRGOUFFMDIvMUQ1MjZCMkU1 REIzMTFFRUE4OTkwRTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnxlwwDQYJKoZIhvcNAQELBQADggEBADDFe2n1c4dElUax uGEW66xg1dC1u6BPSu+BtIaB8KpR0I9uomgA0NvEjRaUPkg6Sb/incrzBqbX4Pxh fd+62PC06WsgS03ylku6TrqdPDA+8W5DpgWAsXw5c79dJdhEsBVVRMWsGognSxw4 rjbWBoWjGwZ0KixSay8OP44IfqrU50ENBKkj9lxVhp9o3LjVWtsd/enVV1MtAaR2 f8cAz77R5jnxETmNPDi0uRFx+2NkF7u4sNrerpdQxKi82jneQjTBQUKtEljBV+Es PL+o23Zx+45Xc2Xjbum73ehX2kTU2vuzN8UJnoOBFRQh8M79XgYtY2vH/knFxBXR FEmKWso= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:32 2025 by rpki-client