$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F559B7E2CD8411EF88CD1464C4F9AE02.roa File: F559B7E2CD8411EF88CD1464C4F9AE02.roa (raw, json) Hash identifier: jc65tVH8VKeTvFl9hbBbitAygl32MCK4pl0R8W9pDPs= Subject key identifier: C0:69:06:BD:60:BF:0E:7C:7E:67:8D:FA:6A:45:DC:E2:16:D0:36:A1 Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Certificate serial: 05AA Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F559B7E2CD8411EF88CD1464C4F9AE02.roa Signing time: Wed 08 Jan 2025 05:54:01 +0000 ROA not before: Wed 08 Jan 2025 05:54:01 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 23532 IP address blocks: 103.97.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Feb 2025 22:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1450 (0x5aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7761 Validity Not Before: Jan 8 05:54:01 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=677e12f8-697f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:18:63:9a:56:e5:9f:ee:19:cd:4d:e9:d2: 72:fc:a4:2b:b8:33:67:8c:1c:a3:df:bb:47:4c:b4: 54:d8:2e:e9:82:d7:b6:ce:d0:c1:5c:81:f2:7b:4a: 8a:a6:37:9c:05:9d:ff:3d:36:f9:a8:7c:d7:72:fc: 7c:7b:ee:36:cf:05:b8:e5:6e:f2:00:6d:7c:0b:e4: ea:3a:d8:cc:a6:71:74:d0:cb:e5:e9:55:2e:d7:b4: a0:eb:c3:3d:0c:9e:12:e1:4b:06:fb:cd:4d:91:e9: d9:a7:7d:ff:a2:46:de:e7:37:a2:f4:fd:db:68:29: cf:34:f2:56:f8:ae:fe:69:b4:45:1f:05:7e:e7:24: be:28:d2:fa:e3:a4:9b:e5:1d:85:bd:c8:a4:76:19: 90:0b:ea:9f:39:59:48:9a:41:59:9f:81:95:bf:4c: cb:80:e0:63:23:81:2e:1a:f8:f2:ee:a7:93:98:21: 70:2e:a5:02:5c:7b:ab:6a:fe:18:b7:aa:0c:d2:0e: dd:d0:e9:62:92:d9:f8:6e:ae:10:d0:bf:0c:b6:69: 42:5c:86:4d:95:0a:b9:f1:46:0b:d4:ca:aa:0f:c1: 12:9b:1a:f5:b0:6d:27:ed:c2:ca:25:a8:a0:77:8d: 0a:86:a9:d8:56:bd:ce:f8:f8:0e:1d:45:1e:74:6a: b8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:69:06:BD:60:BF:0E:7C:7E:67:8D:FA:6A:45:DC:E2:16:D0:36:A1 X509v3 Authority Key Identifier: keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F559B7E2CD8411EF88CD1464C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.97.175.0/24 Signature Algorithm: sha256WithRSAEncryption 81:4d:55:32:3d:e0:96:96:bb:81:fc:2d:55:22:9d:8c:e0:3f: 64:dc:ea:3b:72:da:8f:79:66:47:d3:eb:0a:c4:c9:a5:1e:98: 9f:58:10:69:8e:28:87:a3:dc:f7:87:33:82:a7:c0:29:79:3e: e0:99:a4:ee:5a:cc:7b:96:9e:c5:9b:6d:29:16:23:bc:20:1d: e4:50:8e:cf:94:59:bb:b6:61:7c:76:4c:a0:7f:cd:69:69:c8: 4a:a7:92:1c:6e:d5:a4:f3:b8:d5:ff:4d:d0:11:ca:0f:d1:42: 46:28:92:52:5c:35:47:32:12:d5:21:cd:2b:c8:a7:44:a8:e1: 58:0d:e5:cb:35:eb:9c:c7:66:9a:09:0c:2b:8f:ce:cd:48:f2: 7f:2e:c5:82:25:db:47:a8:30:4c:95:57:20:85:30:3c:6a:1f: 3e:ba:5f:81:c1:23:85:eb:c8:8e:1e:d3:6d:04:ac:a0:3f:c0: 20:22:c2:1b:53:70:93:b2:68:04:06:7c:ef:39:a1:99:8a:05: e9:91:6c:ea:a5:84:9d:9f:f4:f1:b2:07:94:3f:9f:e3:37:7a: de:5e:87:6f:63:f9:65:75:b4:b3:20:75:c5:52:e2:82:77:d0: 89:dd:b6:98:f7:b1:69:ce:3c:26:72:5c:7d:ea:8b:58:8d:0f: 56:78:a3:a0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG MDVCQUYyMTEwHhcNMjUwMTA4MDU1NDAxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdlMTJmOC02OTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRoYY5pW5Z/uGc1N6dJy/KQruDNnjByj37tHTLRU2C7pgte2ztDBXIHye0qK pjecBZ3/PTb5qHzXcvx8e+42zwW45W7yAG18C+TqOtjMpnF00Mvl6VUu17Sg68M9 DJ4S4UsG+81NkenZp33/okbe5zei9P3baCnPNPJW+K7+abRFHwV+5yS+KNL646Sb 5R2FvcikdhmQC+qfOVlImkFZn4GVv0zLgOBjI4EuGvjy7qeTmCFwLqUCXHurav4Y t6oM0g7d0Oliktn4bq4Q0L8MtmlCXIZNlQq58UYL1MqqD8ESmxr1sG0n7cLKJaig d40KhqnYVr3O+PgOHUUedGq4uwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMBpBr1g vw58fmeN+mpF3OIW0DahMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTc3NjEvMEU0QjkxNjhCRDM0MTFFQjkwRTU1NDI4QzRGOUFFMDIvRjU1OUI3RTJD RDg0MTFFRjg4Q0QxNDY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnYa8wDQYJKoZIhvcNAQELBQADggEBAIFNVTI94JaWu4H8 LVUinYzgP2Tc6jty2o95ZkfT6wrEyaUemJ9YEGmOKIej3PeHM4KnwCl5PuCZpO5a zHuWnsWbbSkWI7wgHeRQjs+UWbu2YXx2TKB/zWlpyEqnkhxu1aTzuNX/TdARyg/R QkYoklJcNUcyEtUhzSvIp0So4VgN5cs165zHZpoJDCuPzs1I8n8uxYIl20eoMEyV VyCFMDxqHz66X4HBI4XryI4e020ErKA/wCAiwhtTcJOyaAQGfO85oZmKBemRbOql hJ2f9PGyB5Q/n+M3et5eh29j+WV1tLMgdcVS4oJ30Indtpj3sWnOPCZyXH3qi1iN D1Z4o6A= -----END CERTIFICATE-----Generated at Wed Feb 5 09:46:01 2025 by rpki-client