$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0FA97166C80411ECBA7BB174C4F9AE02.roa File: 0FA97166C80411ECBA7BB174C4F9AE02.roa (raw, json) Hash identifier: m4xQJUZYqlletUsPZRxHk+Gm5/JsI9i5xKEsy9BARXw= Subject key identifier: E2:EA:E3:50:AE:69:8D:63:35:F8:E9:7B:23:F6:72:88:4E:AF:F8:7D Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Certificate serial: 0278 Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0FA97166C80411ECBA7BB174C4F9AE02.roa Signing time: Mon 13 May 2024 04:08:19 +0000 ROA not before: Mon 13 May 2024 04:08:19 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 36351 IP address blocks: 103.53.196.0/24 maxlen: 24 2402:2f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA44 Validity Not Before: May 13 04:08:19 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66419232-822a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:64:d8:d6:12:9d:39:33:2c:2d:a1:19:17: 49:d3:31:f5:01:1f:d7:4a:ab:0f:6e:b7:e5:d5:d0: 71:84:76:48:97:8a:37:24:82:ae:f5:62:34:fd:4f: 0f:2d:eb:b3:1c:a8:ef:ff:0e:11:98:9f:b8:dc:39: c4:4e:5b:48:15:6c:b8:6c:75:ac:fb:b2:46:c0:77: 1d:07:0b:a7:38:22:92:4e:32:3d:09:be:85:c5:ea: b0:66:98:ae:33:2c:94:7a:2b:2e:f6:e4:2a:3f:47: f2:89:c8:83:55:8f:da:5f:e4:9d:9d:35:48:c2:b5: 67:7a:0a:2c:9e:c6:c0:07:6d:1a:76:58:08:8f:62: 02:9f:c1:b0:6f:01:a6:09:36:1f:65:97:6f:3a:ff: a9:2e:a6:ae:16:96:3d:cd:07:8c:eb:5e:31:c4:56: 5b:c0:78:0d:40:13:7d:51:00:90:f2:5f:05:1a:04: 15:38:8f:b9:a4:47:67:98:de:36:ca:58:b7:df:b0: b0:0a:aa:b0:6c:97:38:d8:44:6a:75:10:c2:ea:01: 46:7a:52:cf:44:0b:01:63:a8:0d:09:6d:7c:47:cc: 1c:17:66:c6:a8:af:11:e8:48:fe:e2:d6:da:9b:4b: ae:96:3f:ca:ca:12:98:60:9b:0e:e3:7b:34:0f:82: be:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EA:E3:50:AE:69:8D:63:35:F8:E9:7B:23:F6:72:88:4E:AF:F8:7D X509v3 Authority Key Identifier: keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0FA97166C80411ECBA7BB174C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.53.196.0/24 IPv6: 2402:2f80::/48 Signature Algorithm: sha256WithRSAEncryption 81:45:62:32:29:88:57:de:ab:f3:f7:80:90:6b:5e:76:21:1e: cd:ac:13:4a:cb:6e:df:53:4b:39:29:10:fa:00:4e:93:49:79: 9e:57:ed:7a:cf:6c:f6:37:f2:a1:fe:3c:38:b4:b8:b4:47:eb: 58:9f:8e:e2:45:eb:88:f1:8f:a4:87:82:cf:6b:d2:67:2b:e5: 09:5d:ed:58:28:5a:29:4f:48:39:12:62:7e:88:9d:4d:11:40: d8:44:63:89:8c:1b:a3:b4:d9:61:25:e8:7a:9e:4f:35:8b:9f: ae:ba:fd:7a:59:da:c0:74:15:57:8b:f2:2d:25:7e:64:b2:ef: cf:f1:b7:c7:d5:5b:50:f9:6d:81:d8:18:b2:79:58:1e:31:5b: c0:19:98:75:d9:ef:31:1a:38:75:41:d7:b7:6d:6a:66:01:9d: 3b:03:2b:31:68:b8:56:b6:ac:52:9c:2c:3a:96:6c:0f:43:39: 80:c5:aa:c5:3f:9f:78:4f:aa:51:11:4a:62:90:51:d6:44:37: 23:9a:4c:0f:83:f1:36:f2:d7:bd:2b:29:ee:97:0c:b5:d0:80: eb:be:52:27:15:57:1c:35:28:fa:d5:29:9e:7c:ba:89:3b:9b: 59:8a:4e:c4:e5:97:66:c0:fa:63:e6:86:05:dc:fa:13:14:b6: 18:84:02:26 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3MkREMDg4NTA1 QUY5QkI2NkQwHhcNMjQwNTEzMDQwODE5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQxOTIzMi04MjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApytk2NYSnTkzLC2hGRdJ0zH1AR/XSqsPbrfl1dBxhHZIl4o3JIKu9WI0/U8P LeuzHKjv/w4RmJ+43DnETltIFWy4bHWs+7JGwHcdBwunOCKSTjI9Cb6FxeqwZpiu MyyUeisu9uQqP0fyiciDVY/aX+SdnTVIwrVnegosnsbAB20adlgIj2ICn8GwbwGm CTYfZZdvOv+pLqauFpY9zQeM614xxFZbwHgNQBN9UQCQ8l8FGgQVOI+5pEdnmN42 yli337CwCqqwbJc42ERqdRDC6gFGelLPRAsBY6gNCW18R8wcF2bGqK8R6Ej+4tba m0uulj/KyhKYYJsO43s0D4K+hQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOLq41Cu aY1jNfjpeyP2cohOr/h9MB8GA1UdIwQYMBaAFCzDP7y4ZAhAIIlKct0IhQWvm7Zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUE0NC85Q0MwMEE5Q0M3 RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NFQWdpVXB5M1FpRkJhLWJ0 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNTV92TGhrQ0VBZ2lVcHkzUWlGQmEtYnRtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFBNDQvOUNDMDBBOUNDN0ZGMTFFQzlCREJGRTRCQzRGOUFFMDIvMEZBOTcxNjZD ODA0MTFFQ0JBN0JCMTc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnNcQwDwQCAAIwCQMHACQCL4AAADANBgkqhkiG9w0BAQsF AAOCAQEAgUViMimIV96r8/eAkGtediEezawTSstu31NLOSkQ+gBOk0l5nlftes9s 9jfyof48OLS4tEfrWJ+O4kXriPGPpIeCz2vSZyvlCV3tWChaKU9IORJifoidTRFA 2ERjiYwbo7TZYSXoep5PNYufrrr9elnawHQVV4vyLSV+ZLLvz/G3x9VbUPltgdgY snlYHjFbwBmYddnvMRo4dUHXt21qZgGdOwMrMWi4VrasUpwsOpZsD0M5gMWqxT+f eE+qURFKYpBR1kQ3I5pMD4PxNvLXvSsp7pcMtdCA675SJxVXHDUo+tUpnny6iTub WYpOxOWXZsD6Y+aGBdz6ExS2GIQCJg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:49 2025 by rpki-client