$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/D0104354BCED11EF9C3A7983C4F9AE02.roa File: D0104354BCED11EF9C3A7983C4F9AE02.roa (raw, json) Hash identifier: 4Ah6T7xaUSGUhVoEQJzj4OxmJ0pIH3pkVlB9pwmr0jI= Subject key identifier: 29:A9:87:20:C3:1D:DB:1A:F7:F9:71:E5:21:5F:BA:83:D3:3C:22:42 Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83 Certificate serial: 016D Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/D0104354BCED11EF9C3A7983C4F9AE02.roa Signing time: Wed 18 Dec 2024 03:11:45 +0000 ROA not before: Wed 18 Dec 2024 03:11:45 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 26548 IP address blocks: 103.58.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B59E5 Validity Not Before: Dec 18 03:11:45 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67623d71-ba62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:00:ad:17:a8:6d:18:e9:b4:36:43:9d:c7: 4f:86:ff:b7:c5:fe:b0:1f:50:99:62:0c:5c:ac:e0: 56:cb:64:eb:6a:10:2e:4b:ff:fd:94:ed:7d:36:48: 41:1c:84:b0:bf:cb:8a:1c:20:22:64:45:ba:82:dc: dd:db:42:95:97:2e:d7:73:b5:1a:ec:35:a1:9c:b5: e6:52:3f:c4:a5:b9:50:d5:93:d5:98:65:60:80:c1: 27:1e:c4:e8:ee:a8:f4:20:e2:5c:95:79:b2:75:f6: ca:e5:20:ba:e6:93:71:f6:39:5b:00:b6:90:f8:a2: b0:f7:1a:82:66:3d:ff:59:11:73:bd:5d:50:e5:29: 12:a2:21:a8:c9:c8:fd:ec:a7:a1:78:10:dd:a6:2e: 53:52:fd:47:15:11:06:79:a2:13:75:0f:b1:37:10: d3:c2:f2:e2:e4:94:42:1d:4e:68:a7:a3:e4:66:e6: e3:ef:27:02:6b:2c:eb:7b:11:5d:1c:da:44:2c:3f: 1d:23:13:e5:0b:2f:12:ab:b3:cf:41:4d:13:d3:5c: f8:2d:d1:92:d9:25:98:fc:9d:df:5a:60:9e:0b:39: ae:29:86:24:4c:94:a5:ec:6d:40:27:62:ce:9f:a0: 64:ce:13:3c:d1:66:84:07:7e:62:8e:81:d6:1c:8d: 76:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A9:87:20:C3:1D:DB:1A:F7:F9:71:E5:21:5F:BA:83:D3:3C:22:42 X509v3 Authority Key Identifier: keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/D0104354BCED11EF9C3A7983C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.58.41.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:32:c6:0b:75:65:23:7e:8c:cb:14:bb:ea:6f:7a:03:c7:de: 04:0c:5a:fe:0f:6c:49:60:90:3d:85:2f:38:29:37:c5:07:6b: a5:3c:0b:4d:24:ef:e1:36:1f:78:66:e6:db:5f:91:a3:0b:ff: 6a:f5:52:cb:fa:36:b1:5a:0a:fb:6f:25:88:b0:4e:6f:af:7e: 13:95:4d:c6:2b:ba:4d:57:e1:89:5b:8a:ee:e2:76:0a:8e:bf: 6d:32:3b:43:11:cb:a5:b3:48:dd:5d:3f:ac:ec:56:4b:3f:cd: 17:1b:ae:22:a7:7c:a4:fc:fd:ea:dc:fd:22:18:bc:ed:1e:64: 2a:ec:72:5e:eb:32:fd:34:89:cf:16:c1:73:2c:c4:1b:dd:04: 86:7d:89:eb:23:0b:50:72:69:95:c7:51:9f:11:1c:e0:8c:e3: 11:6c:a6:db:d3:a3:ea:91:8a:74:e2:e5:bd:ab:3b:a1:b7:9b: a5:f9:df:b1:e8:26:d2:4f:7c:b6:8e:d0:01:d1:47:6d:78:b8: 98:1f:e7:ba:b4:ce:8d:c9:1a:4e:1e:4b:fc:cf:1c:35:c5:33: f6:a2:38:92:0e:97:e8:93:59:53:c9:5c:b3:d5:7a:9d:f7:f3: 58:0f:a4:a1:97:35:32:2d:93:9f:11:b4:c9:f9:3e:19:32:8c: 5e:d1:e8:ce -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU5RTUxMTAvBgNVBAUTKEU0N0JGNzAyNTQ1MzI2OTdEMjBEMEQzMTEwRjYyNTM3 MEQ2NUZBODMwHhcNMjQxMjE4MDMxMTQ1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYyM2Q3MS1iYTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAIArReobRjptDZDncdPhv+3xf6wH1CZYgxcrOBWy2TrahAuS//9lO19NkhB HISwv8uKHCAiZEW6gtzd20KVly7Xc7Ua7DWhnLXmUj/EpblQ1ZPVmGVggMEnHsTo 7qj0IOJclXmydfbK5SC65pNx9jlbALaQ+KKw9xqCZj3/WRFzvV1Q5SkSoiGoycj9 7KeheBDdpi5TUv1HFREGeaITdQ+xNxDTwvLi5JRCHU5op6PkZubj7ycCayzrexFd HNpELD8dIxPlCy8Sq7PPQU0T01z4LdGS2SWY/J3fWmCeCzmuKYYkTJSl7G1AJ2LO n6BkzhM80WaEB35ijoHWHI12lwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCmphyDD Hdsa9/lx5SFfuoPTPCJCMB8GA1UdIwQYMBaAFOR79wJUUyaX0g0NMRD2JTcNZfqD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTlFNS9ERDlGMUY3QzND MDExMUVFOTFDQkUxNTdDNEY5QUUwMi81SHYzQWxSVEpwZlNEUTB4RVBZbE53MWwt b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIdjNBbFJUSnBmU0RRMHhFUFlsTncxbC1vTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU5RTUvREQ5RjFGN0MzQzAxMTFFRTkxQ0JFMTU3QzRGOUFFMDIvRDAxMDQzNTRC Q0VEMTFFRjlDM0E3OTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnOikwDQYJKoZIhvcNAQELBQADggEBAI0yxgt1ZSN+jMsU u+pvegPH3gQMWv4PbElgkD2FLzgpN8UHa6U8C00k7+E2H3hm5ttfkaML/2r1Usv6 NrFaCvtvJYiwTm+vfhOVTcYruk1X4Ylbiu7idgqOv20yO0MRy6WzSN1dP6zsVks/ zRcbriKnfKT8/erc/SIYvO0eZCrscl7rMv00ic8WwXMsxBvdBIZ9iesjC1ByaZXH UZ8RHOCM4xFsptvTo+qRinTi5b2rO6G3m6X537HoJtJPfLaO0AHRR214uJgf57q0 zo3JGk4eS/zPHDXFM/aiOJIOl+iTWVPJXLPVep3381gPpKGXNTItk58RtMn5Phky jF7R6M4= -----END CERTIFICATE-----Generated at Sat Apr 5 03:56:41 2025 by rpki-client