$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/29D6DCB2849211EE8F9C5870C4F9AE02.roa File: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (raw, json) Hash identifier: uenMBzygNtm8pOViOrVCvIQk55vDxQTLDfSdNpW+OjU= Subject key identifier: B8:3E:77:7A:C4:F9:64:1F:BA:1F:D8:D5:B3:4A:C2:F2:73:DF:B4:3C Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 0718 Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/29D6DCB2849211EE8F9C5870C4F9AE02.roa Signing time: Tue 02 Jul 2024 22:30:02 +0000 ROA not before: Tue 02 Jul 2024 22:30:02 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 20473 IP address blocks: 103.100.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1816 (0x718) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E Validity Not Before: Jul 2 22:30:02 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66847f69-b116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9f:fb:aa:2b:4b:bd:91:56:89:cb:02:1d:31: 19:64:67:1b:b8:48:24:68:cd:5a:c6:52:19:07:51: f6:33:58:0a:55:2c:4f:7b:9c:4e:c9:91:b9:13:38: 85:de:24:e7:f9:5c:53:8b:3c:01:89:fb:ad:3c:85: a9:74:dd:fc:77:3a:61:6d:55:ea:74:47:98:25:f0: 34:b9:3d:94:6c:aa:49:02:0a:e0:94:ad:e1:95:8a: 5a:72:d4:60:2d:96:ef:b3:8b:29:57:7b:a6:a6:81: 2f:d2:32:44:70:f2:55:9f:6e:33:79:a5:9d:be:90: a7:cc:b2:29:1b:d1:5b:cb:a1:af:64:cc:52:56:11: 93:d8:bd:77:14:12:ad:9e:06:3c:98:cd:72:6c:af: 4a:2a:1c:a7:07:b8:e9:76:0d:1d:40:cb:21:8b:67: a4:25:04:8a:e1:4b:69:5f:a1:86:cc:d9:09:0b:e7: 40:0a:ee:8c:5b:27:45:3a:9c:90:fd:24:8f:23:55: 17:b1:a1:2a:0a:38:49:52:0e:18:d9:4b:b7:12:f7: 50:1a:4b:d1:0c:4d:38:c5:36:38:ed:49:b6:17:bf: 01:1d:85:d0:ce:16:19:b9:5b:d0:77:a0:78:df:9d: 23:34:72:85:63:60:95:02:87:43:2d:f9:5c:62:08: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3E:77:7A:C4:F9:64:1F:BA:1F:D8:D5:B3:4A:C2:F2:73:DF:B4:3C X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/29D6DCB2849211EE8F9C5870C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.100.154.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:50:d4:b9:9f:93:8c:0b:aa:83:ae:f5:04:42:f4:b4:0a:e5: f9:a8:a4:4b:d4:47:7a:12:12:3b:3e:92:d4:52:43:b4:87:e4: 18:79:a5:cb:1b:16:22:1f:1b:fc:d8:80:f5:ba:f1:41:54:24: f2:71:5e:0f:67:11:e8:7a:6a:70:23:a5:07:6b:24:33:eb:36: 51:05:d0:7c:b6:e5:12:f5:81:a5:17:49:81:b3:f3:49:c0:90: b7:87:74:db:e6:da:ab:db:c9:3c:3e:89:5a:71:d1:e1:d0:c7: b7:08:31:eb:3a:f6:a9:84:00:89:3c:9e:6a:01:f3:ec:2e:e4: 67:a1:f9:73:92:e4:e6:e7:61:4d:ec:92:5c:d6:09:21:97:f8: 2d:9a:37:4d:d3:c7:8f:20:19:9a:a7:a3:59:d8:c5:2b:4d:4b: e9:1e:00:c4:ac:6b:70:d4:13:68:8f:45:a3:45:d7:b6:2d:e6: ac:d5:74:df:f6:83:29:d6:d5:4e:e0:3d:8a:d2:77:2e:90:e8: 0d:4d:16:f8:ef:2e:c2:7e:b6:cd:e6:33:3f:f2:db:37:a3:dc: 71:c3:6c:93:ad:5c:25:60:a5:11:74:d8:ca:5a:06:44:ad:51: 1a:97:b1:3b:c4:5b:64:13:b3:dc:4a:bd:ae:86:2a:b3:d6:c4: 88:62:dd:a3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjQwNzAyMjIzMDAyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg0N2Y2OS1iMTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZ/7qitLvZFWicsCHTEZZGcbuEgkaM1axlIZB1H2M1gKVSxPe5xOyZG5EziF 3iTn+VxTizwBifutPIWpdN38dzphbVXqdEeYJfA0uT2UbKpJAgrglK3hlYpactRg LZbvs4spV3umpoEv0jJEcPJVn24zeaWdvpCnzLIpG9Fby6GvZMxSVhGT2L13FBKt ngY8mM1ybK9KKhynB7jpdg0dQMshi2ekJQSK4UtpX6GGzNkJC+dACu6MWydFOpyQ /SSPI1UXsaEqCjhJUg4Y2Uu3EvdQGkvRDE04xTY47Um2F78BHYXQzhYZuVvQd6B4 350jNHKFY2CVAodDLflcYgiipwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLg+d3rE +WQfuh/Y1bNKwvJz37Q8MB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REExM0UvNTRENkE1MEUwNkI1MTFFQjkzNzJEMzJCQzRGOUFFMDIvMjlENkRDQjI4 NDkyMTFFRThGOUM1ODcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnZJowDQYJKoZIhvcNAQELBQADggEBAC5Q1Lmfk4wLqoOu 9QRC9LQK5fmopEvUR3oSEjs+ktRSQ7SH5Bh5pcsbFiIfG/zYgPW68UFUJPJxXg9n Eeh6anAjpQdrJDPrNlEF0Hy25RL1gaUXSYGz80nAkLeHdNvm2qvbyTw+iVpx0eHQ x7cIMes69qmEAIk8nmoB8+wu5Geh+XOS5ObnYU3sklzWCSGX+C2aN03Tx48gGZqn o1nYxStNS+keAMSsa3DUE2iPRaNF17Yt5qzVdN/2gynW1U7gPYrSdy6Q6A1NFvjv LsJ+ts3mMz/y2zej3HHDbJOtXCVgpRF02MpaBkStURqXsTvEW2QTs9xKva6GKrPW xIhi3aM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:08 2025 by rpki-client