$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/CC863C00AAC011EF8A637D09C4F9AE02.roa File: CC863C00AAC011EF8A637D09C4F9AE02.roa (raw, json) Hash identifier: 0d8EDj7p85g61PO4rxhm2YW85ofVuKXgCa1+1ENa/7s= Subject key identifier: D6:73:1E:D3:81:36:30:13:63:8F:FE:31:49:6B:28:84:8E:1B:68:94 Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 01A3 Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/CC863C00AAC011EF8A637D09C4F9AE02.roa Signing time: Tue 07 Jan 2025 02:36:20 +0000 ROA not before: Tue 07 Jan 2025 02:36:20 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 147020 IP address blocks: 103.48.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8 Validity Not Before: Jan 7 02:36:20 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=677c9323-07fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0e:a1:a8:9e:53:e5:be:c6:28:07:72:df:da: 4e:6b:e9:b1:bc:34:72:f3:33:81:b5:e0:9a:74:6c: a7:25:ca:da:ef:78:ea:51:9f:69:a7:5f:82:bb:51: e2:c7:28:59:f7:a9:be:2c:91:63:26:8c:b1:99:a7: 6f:77:98:26:76:e2:31:02:24:53:08:97:9d:6e:21: 48:9c:0e:06:b7:51:2a:02:41:1f:eb:c5:30:77:aa: f7:c4:5f:17:82:e5:73:fd:49:5e:98:19:e5:33:a5: 5d:ae:5c:a8:d9:e4:1e:27:f2:4e:f0:19:59:23:f0: 4d:77:2e:c8:d9:3c:09:1d:c0:8f:5d:3a:2d:10:bf: 5f:2f:18:fb:29:2a:14:23:b6:b1:01:ac:6a:6b:ef: c9:30:54:95:80:86:d6:b3:d0:47:62:b5:3d:ac:5d: b4:0d:8e:90:7f:76:69:66:35:67:a0:20:c1:5f:a7: 0c:0e:1c:84:d7:b6:b8:a1:f5:b9:7c:37:a4:26:a1: 0c:bd:42:b5:8b:f6:3a:60:ec:58:e8:3d:bb:b6:61: d0:43:d7:aa:19:1b:19:ab:ea:e5:65:36:39:38:ad: 8f:36:d7:59:1a:7f:9b:d7:44:d3:09:c5:4d:96:4a: 10:a7:1a:2c:f1:25:36:7a:e3:d0:b6:f8:28:67:5b: 8c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:73:1E:D3:81:36:30:13:63:8F:FE:31:49:6B:28:84:8E:1B:68:94 X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/CC863C00AAC011EF8A637D09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.21.0/24 Signature Algorithm: sha256WithRSAEncryption 96:0d:b7:e2:7c:fe:19:28:40:ea:3a:27:b7:94:69:d9:50:4c: 34:ff:59:6b:c1:56:f7:26:9f:92:e7:37:76:76:cb:6e:33:a8: 26:fa:92:f1:eb:71:c7:96:19:41:f1:0d:de:76:71:9f:dd:ac: 94:b7:25:6e:70:82:54:ea:be:51:91:06:e8:0a:64:ab:27:a8: 77:c8:2c:c1:7e:c2:95:53:0f:28:61:01:73:a7:df:c8:74:6b: bc:6d:16:f6:fc:72:cb:f2:76:f6:0d:83:19:e1:ce:e2:95:3e: 69:1c:ee:6d:bb:4a:57:0b:e8:12:14:03:f8:b5:54:60:e9:8f: de:88:ff:c7:05:4f:37:dd:90:11:a0:9d:67:51:c9:15:b3:f8: f5:01:2f:2a:ef:39:03:ce:92:0b:0d:d1:e5:c5:c2:6f:22:ed: 1f:e2:a0:47:d2:6a:07:28:d2:ce:d0:ec:08:c9:b3:bc:34:97: 4b:cd:a8:a3:34:c7:54:e9:2a:a1:a8:5a:fb:f8:d9:79:ac:b4: 1e:72:64:48:ff:8d:30:c5:45:bf:cf:d9:8e:bf:9e:0a:ca:0f: 9e:6d:b7:87:59:99:e7:81:83:ac:3f:0f:25:2f:82:78:df:96: df:d1:11:cf:9e:f3:29:ef:82:02:08:3e:a1:dc:e8:bc:ce:ce: e6:af:69:83 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjUwMTA3MDIzNjIwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdjOTMyMy0wN2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAow6hqJ5T5b7GKAdy39pOa+mxvDRy8zOBteCadGynJcra73jqUZ9pp1+Cu1Hi xyhZ96m+LJFjJoyxmadvd5gmduIxAiRTCJedbiFInA4Gt1EqAkEf68Uwd6r3xF8X guVz/UlemBnlM6Vdrlyo2eQeJ/JO8BlZI/BNdy7I2TwJHcCPXTotEL9fLxj7KSoU I7axAaxqa+/JMFSVgIbWs9BHYrU9rF20DY6Qf3ZpZjVnoCDBX6cMDhyE17a4ofW5 fDekJqEMvUK1i/Y6YOxY6D27tmHQQ9eqGRsZq+rlZTY5OK2PNtdZGn+b10TTCcVN lkoQpxos8SU2euPQtvgoZ1uMGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNZzHtOB NjATY4/+MUlrKISOG2iUMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI2RjgvNTYyQzNDQjQ3MjRFMTFFRDhFMjA2NzNFQzRGOUFFMDIvQ0M4NjNDMDBB QUMwMTFFRjhBNjM3RDA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnMBUwDQYJKoZIhvcNAQELBQADggEBAJYNt+J8/hkoQOo6 J7eUadlQTDT/WWvBVvcmn5LnN3Z2y24zqCb6kvHrcceWGUHxDd52cZ/drJS3JW5w glTqvlGRBugKZKsnqHfILMF+wpVTDyhhAXOn38h0a7xtFvb8csvydvYNgxnhzuKV Pmkc7m27SlcL6BIUA/i1VGDpj96I/8cFTzfdkBGgnWdRyRWz+PUBLyrvOQPOkgsN 0eXFwm8i7R/ioEfSagco0s7Q7AjJs7w0l0vNqKM0x1TpKqGoWvv42XmstB5yZEj/ jTDFRb/P2Y6/ngrKD55tt4dZmeeBg6w/DyUvgnjflt/REc+e8ynvggIIPqHc6LzO zuavaYM= -----END CERTIFICATE-----Generated at Wed Feb 19 20:35:00 2025 by rpki-client