$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/685DC124EC7B11EFAF014776C4F9AE02.roa File: 685DC124EC7B11EFAF014776C4F9AE02.roa (raw, json) Hash identifier: HNlIYD/ULKjSdzSST5l7khzVoaw7HPjUFT3q9CFffJQ= Subject key identifier: 39:07:DE:C2:3A:1D:EB:03:9B:E3:69:C5:73:DA:22:20:69:77:38:39 Certificate issuer: /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838 Certificate serial: 35 Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/685DC124EC7B11EFAF014776C4F9AE02.roa Signing time: Sun 16 Feb 2025 15:33:45 +0000 ROA not before: Sun 16 Feb 2025 15:33:45 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 3356 IP address blocks: 103.129.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 09:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6F21 Validity Not Before: Feb 16 15:33:45 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67b20559-fb29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:97:84:1e:dd:d8:fa:4d:80:d5:3e:38:0c:58: ff:71:61:93:18:f7:30:79:8e:7e:ef:aa:45:e9:09: d6:0a:0b:d9:67:1d:26:43:1e:31:b8:07:1f:92:95: ee:32:18:27:4c:5c:06:31:08:7d:44:48:90:50:6f: 14:8a:ff:ab:a2:c3:f1:1e:10:42:6f:40:1a:db:05: 87:1a:bc:dc:8c:3f:2c:6d:92:d8:71:a8:cd:de:b7: cf:e0:6d:79:df:22:d5:8e:3f:67:7e:8d:19:4b:92: 9d:7c:1b:8d:96:c2:bc:50:8b:eb:99:31:2f:b4:70: 7c:a5:e0:fe:fb:10:8a:f7:7f:5a:53:a9:f1:58:9c: be:fa:ac:6e:5c:bd:07:06:d7:77:f8:10:3a:40:25: ee:37:50:6b:ce:5f:ab:97:52:b3:e0:44:ba:db:b5: 29:12:f5:28:ff:8a:ce:41:85:b8:4d:54:78:46:28: d6:39:8c:4e:fa:86:77:61:db:78:e6:23:c1:bf:48: e6:9c:43:98:ee:3a:47:bf:49:8f:5a:b9:a3:71:7b: b7:79:c3:2a:b1:af:cc:ed:c3:a0:a1:79:80:77:3e: ae:e3:00:8b:8d:b1:de:8c:a0:b9:d1:59:7e:2f:c1: 1f:3f:73:2f:f4:00:0b:73:15:eb:25:2e:ba:a0:8d: 7e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:07:DE:C2:3A:1D:EB:03:9B:E3:69:C5:73:DA:22:20:69:77:38:39 X509v3 Authority Key Identifier: keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/685DC124EC7B11EFAF014776C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.129.116.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:ae:18:ac:57:2b:8a:de:0d:a9:82:44:40:74:3e:bf:79:38: 61:28:3d:9f:b9:70:ac:06:b3:89:1c:0c:75:1c:61:b1:63:7f: bd:70:df:1d:83:10:7f:aa:67:d2:93:d3:0a:e1:2d:fa:4f:e0: 2e:ac:da:e6:7b:a1:4b:97:21:32:60:e8:c7:ba:44:f6:6d:e1: 1e:80:ad:4e:c2:6d:98:64:6c:d3:e0:d3:57:5b:e0:61:a2:20: 41:13:38:46:4e:f0:2c:3d:c2:14:c5:ae:2c:1e:34:e4:0b:35: 9f:4d:3c:9f:ad:a9:99:c7:2f:3c:06:45:41:8f:79:ca:14:06: cb:5e:80:32:d4:0c:82:b7:4c:40:0b:cd:f3:97:7a:fa:90:fd: 29:64:9a:b1:c0:6e:ca:7a:2e:9c:5f:a5:6e:e5:28:e9:a5:b8: f6:d7:49:b8:e6:91:45:83:e6:79:aa:1d:35:81:4a:03:e2:09: dc:bc:59:5f:51:7d:04:40:f9:40:36:53:e6:ae:18:66:e6:64: cf:fa:a0:a8:82:82:52:e7:24:ef:fb:e5:1a:56:f8:7c:13:ff: 23:d9:a1:07:1b:42:dc:82:21:39:fd:2a:bd:8d:63:b7:bf:bb: df:37:db:45:60:4b:07:95:00:2a:c5:b9:e0:29:bb:78:5d:20: 6f:31:9d:b2 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkYyMTExMC8GA1UEBRMoOUNEREZBRUFCQzY0QkNDRDc4ODgyOTYyOTEwRUMxOTJB MkQyMjgzODAeFw0yNTAyMTYxNTMzNDVaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YjIwNTU5LWZiMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpl4Qe3dj6TYDVPjgMWP9xYZMY9zB5jn7vqkXpCdYKC9lnHSZDHjG4Bx+Sle4y GCdMXAYxCH1ESJBQbxSK/6uiw/EeEEJvQBrbBYcavNyMPyxtkthxqM3et8/gbXnf ItWOP2d+jRlLkp18G42WwrxQi+uZMS+0cHyl4P77EIr3f1pTqfFYnL76rG5cvQcG 13f4EDpAJe43UGvOX6uXUrPgRLrbtSkS9Sj/is5BhbhNVHhGKNY5jE76hndh23jm I8G/SOacQ5juOke/SY9auaNxe7d5wyqxr8ztw6CheYB3Pq7jAIuNsd6MoLnRWX4v wR8/cy/0AAtzFeslLrqgjX4vAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUOQfewjod 6wOb42nFc9oiIGl3ODkwHwYDVR0jBBgwFoAUnN366rxkvM14iClikQ7BkqLSKDgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2RjIxL0ZFMzdFM0VDQTFB QzExRUZCNjc1ODU0OEM0RjlBRTAyL25OMzY2cnhrdk0xNGlDbGlrUTdCa3FMU0tE Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbk4zNjZyeGt2TTE0aUNsaWtRN0JrcUxTS0RnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkYyMS9GRTM3RTNFQ0ExQUMxMUVGQjY3NTg1NDhDNEY5QUUwMi82ODVEQzEyNEVD N0IxMUVGQUYwMTQ3NzZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeBdDANBgkqhkiG9w0BAQsFAAOCAQEAnq4YrFcrit4NqYJE QHQ+v3k4YSg9n7lwrAaziRwMdRxhsWN/vXDfHYMQf6pn0pPTCuEt+k/gLqza5nuh S5chMmDox7pE9m3hHoCtTsJtmGRs0+DTV1vgYaIgQRM4Rk7wLD3CFMWuLB405As1 n008n62pmccvPAZFQY95yhQGy16AMtQMgrdMQAvN85d6+pD9KWSascBuynounF+l buUo6aW49tdJuOaRRYPmeaodNYFKA+IJ3LxZX1F9BED5QDZT5q4YZuZkz/qgqIKC Uuck7/vlGlb4fBP/I9mhBxtC3IIhOf0qvY1jt7+73zfbRWBLB5UAKsW54Cm7eF0g bzGdsg== -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:50 2025 by rpki-client