$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/6ABFAA607C5A11EDB5D8DA67C4F9AE02.roa File: 6ABFAA607C5A11EDB5D8DA67C4F9AE02.roa (raw, json) Hash identifier: UPzNqHZtzAjVZqphmOfv2Hp1UJdFW2/M83hc9R8RBqA= Subject key identifier: 85:C9:41:2F:B6:08:2D:92:77:3E:A0:F7:AA:B2:D4:B2:11:AF:DA:02 Certificate issuer: /CN=A91C8EDF/serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA Certificate serial: 0184 Authority key identifier: 0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/6ABFAA607C5A11EDB5D8DA67C4F9AE02.roa Signing time: Fri 13 Dec 2024 02:36:01 +0000 ROA not before: Fri 13 Dec 2024 02:36:01 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 53766 IP address blocks: 103.48.252.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EDF Validity Not Before: Dec 13 02:36:01 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=675b9d91-816f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:eb:cc:88:5a:aa:3e:55:0b:2e:43:58:71: 9b:b3:89:28:2a:c8:3e:12:ab:0e:c9:b1:98:7f:9b: b1:de:22:23:66:67:da:78:8d:da:6b:63:43:be:61: 7b:c0:e3:c9:0c:22:96:19:54:66:14:22:84:f1:ce: 75:78:39:e3:81:ca:db:05:02:dd:43:29:da:0e:19: 76:2c:54:34:80:18:e4:38:59:a0:e4:0b:58:a9:59: 50:9d:c3:d5:3b:61:92:3f:cf:b0:f0:ec:a3:36:fe: b5:57:bc:96:5d:d8:cb:93:79:c9:5b:29:78:2f:06: 2c:0f:ed:a5:eb:b2:42:ca:6e:34:d9:46:05:03:e9: e3:b6:2e:60:53:07:4a:15:ec:d5:08:05:f4:b9:f5: cb:7a:dc:7a:6f:f0:4c:71:6c:6c:23:5b:17:57:e6: 71:8c:56:0c:53:dc:9e:ee:51:89:33:46:dd:ce:93: af:8c:a4:ef:52:d9:6a:e6:de:5c:9b:d5:32:ed:9c: e5:8c:cd:a1:78:e9:5f:4a:7a:9d:8e:35:35:d4:ff: 8d:4c:4d:ec:18:8f:8c:11:03:f2:a1:54:bc:d8:7c: 0e:a8:68:71:19:43:60:2f:32:b1:06:5c:1e:40:43: 97:ab:85:68:45:a1:b7:d8:c8:26:be:9a:98:5b:33: a9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C9:41:2F:B6:08:2D:92:77:3E:A0:F7:AA:B2:D4:B2:11:AF:DA:02 X509v3 Authority Key Identifier: keyid:0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/6ABFAA607C5A11EDB5D8DA67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.252.0/22 Signature Algorithm: sha256WithRSAEncryption 63:6b:3e:1c:30:c4:50:9a:9a:fe:60:1e:30:68:31:94:84:c4: 53:cc:66:fb:35:c1:c9:15:ad:1a:26:21:2e:ea:1f:ee:c3:30: cb:df:09:4b:59:ff:bc:1f:52:5d:f8:00:56:55:8f:5a:62:cf: e2:4f:4c:8d:14:4f:d8:84:ba:6a:09:be:20:91:fa:b7:a9:16: 79:c4:ef:60:cd:f9:04:60:fd:e2:90:6c:38:c4:e8:ea:cb:c1: e9:0b:10:84:a0:b6:75:e1:cf:dd:34:db:d9:3c:3b:98:24:37: 4d:ac:27:61:9f:57:47:ef:2f:3d:66:a7:4a:82:3e:c1:5b:8d: c1:bd:39:b5:3b:39:a5:48:b5:95:76:31:3e:61:df:32:c9:65: dc:38:2c:48:53:c6:a4:75:dd:8e:72:b3:ab:66:f8:44:e5:7d: c3:f9:74:6b:ef:72:44:db:ed:a9:03:9a:9e:6a:cb:90:70:2d: 2a:d3:b3:f5:5f:3d:a4:55:73:9b:99:bb:9e:a7:d8:1d:2e:99: f4:a7:b2:72:0d:cc:84:71:b7:08:94:a3:52:74:7a:a5:3e:70: 6f:0b:81:d3:d9:02:5e:00:d8:a6:42:fb:d5:34:75:65:c8:7f: ff:c4:84:39:71:71:00:cc:37:fa:e9:ca:99:2d:51:58:e8:db: 34:1d:3b:b7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFREYxMTAvBgNVBAUTKDBBM0NGQzdGMzk1QTM0QkFCRTMxQjhDQTQ2MjNEMzFD NzZBOEQ5RkEwHhcNMjQxMjEzMDIzNjAxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzViOWQ5MS04MTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7XrzIhaqj5VCy5DWHGbs4koKsg+EqsOybGYf5ux3iIjZmfaeI3aa2NDvmF7 wOPJDCKWGVRmFCKE8c51eDnjgcrbBQLdQynaDhl2LFQ0gBjkOFmg5AtYqVlQncPV O2GSP8+w8OyjNv61V7yWXdjLk3nJWyl4LwYsD+2l67JCym402UYFA+njti5gUwdK FezVCAX0ufXLetx6b/BMcWxsI1sXV+ZxjFYMU9ye7lGJM0bdzpOvjKTvUtlq5t5c m9Uy7ZzljM2heOlfSnqdjjU11P+NTE3sGI+MEQPyoVS82HwOqGhxGUNgLzKxBlwe QEOXq4VoRaG32MgmvpqYWzOp1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIXJQS+2 CC2Sdz6g96qy1LIRr9oCMB8GA1UdIwQYMBaAFAo8/H85WjS6vjG4ykYj0xx2qNn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVERi9GNDZBRERFNjdD NTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9Dano4ZnpsYU5McS1NYmpLUmlQVEhIYW8y Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqejhmemxhTkxxLU1iaktSaVBUSEhhbzJmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzhFREYvRjQ2QURERTY3QzU3MTFFREJGMjEzNzY3QzRGOUFFMDIvNkFCRkFBNjA3 QzVBMTFFREI1RDhEQTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnMPwwDQYJKoZIhvcNAQELBQADggEBAGNrPhwwxFCamv5g HjBoMZSExFPMZvs1wckVrRomIS7qH+7DMMvfCUtZ/7wfUl34AFZVj1piz+JPTI0U T9iEumoJviCR+repFnnE72DN+QRg/eKQbDjE6OrLwekLEISgtnXhz90029k8O5gk N02sJ2GfV0fvLz1mp0qCPsFbjcG9ObU7OaVItZV2MT5h3zLJZdw4LEhTxqR13Y5y s6tm+ETlfcP5dGvvckTb7akDmp5qy5BwLSrTs/VfPaRVc5uZu56n2B0umfSnsnIN zIRxtwiUo1J0eqU+cG8LgdPZAl4A2KZC+9U0dWXIf//EhDlxcQDMN/rpypktUVjo 2zQdO7c= -----END CERTIFICATE-----Generated at Sun Feb 16 21:59:21 2025 by rpki-client