$ rpki-client -vvf rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/F2C774B2AEF611EFB2FDA54AC4F9AE02.roa File: F2C774B2AEF611EFB2FDA54AC4F9AE02.roa (raw, json) Hash identifier: 73mxOiXxkYB9JcrACnIfdv+hdlQaxJ52RkERiM/ETEs= Subject key identifier: 79:44:63:51:9D:FE:3B:05:DA:A5:D5:C4:76:A0:28:66:50:6C:44:20 Certificate issuer: /CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Certificate serial: 0234 Authority key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/F2C774B2AEF611EFB2FDA54AC4F9AE02.roa Signing time: Sat 30 Nov 2024 08:41:53 +0000 ROA not before: Sat 30 Nov 2024 08:41:53 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 139016 IP address blocks: 103.159.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 03:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E29CB Validity Not Before: Nov 30 08:41:53 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=674acfd1-de2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:d5:40:62:dd:0f:9a:d4:9b:36:ca:8d:89: ab:2f:b6:0a:31:6d:c0:ab:92:6d:d1:6f:99:e0:db: 26:c1:6e:78:8f:5d:2e:a4:bb:9d:06:55:89:ea:7c: 32:9d:94:d7:ce:59:76:8b:70:79:4e:c1:d6:d0:9e: f8:7c:9e:6e:4d:33:c7:f7:ab:df:13:76:59:5f:7e: 4e:fa:c9:bc:88:61:e3:17:b3:0b:65:fa:94:94:07: de:e7:dc:a0:b1:45:d2:df:50:24:ea:1b:c2:bb:f9: 1c:e6:80:ac:d0:af:d4:7a:e3:c0:76:fb:b4:04:bc: 35:48:dc:55:b0:a8:dc:f5:b5:b7:68:85:31:41:ef: 1c:54:e5:f9:2b:45:f0:b3:bb:35:2f:ce:20:2c:79: ca:ef:5d:a6:8a:7b:47:7c:f3:e6:44:0f:61:61:dc: 68:a1:60:6c:f7:ab:ff:d2:5c:ee:f3:fa:0c:24:1c: aa:1f:f6:34:4f:57:d9:cb:63:fc:36:57:4e:ad:26: 49:7c:22:3e:6b:ea:47:42:32:d5:95:7a:33:c2:80: b9:22:5e:25:4b:52:e1:71:77:6c:f4:2b:b9:86:2e: 17:24:68:67:8d:53:40:8f:36:a1:5e:6c:69:9e:34: 70:06:d2:0f:11:d5:e9:a0:e4:7d:6e:e9:d5:01:ee: 28:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:44:63:51:9D:FE:3B:05:DA:A5:D5:C4:76:A0:28:66:50:6C:44:20 X509v3 Authority Key Identifier: keyid:A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/F2C774B2AEF611EFB2FDA54AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.37.0/24 Signature Algorithm: sha256WithRSAEncryption 99:4c:ae:7f:81:a4:c7:80:53:18:87:2a:9b:d0:3e:93:9b:00: d0:39:1f:60:c0:8e:6b:99:4f:63:12:28:0c:53:bc:01:b5:53: 29:80:98:e8:d1:99:ab:48:21:00:06:2f:48:54:e1:cd:91:5e: 07:d6:ae:56:81:13:ea:78:a7:20:d3:28:83:fc:e7:11:3c:86: 9b:1a:7e:e5:a5:1c:ad:cb:b6:7f:b9:36:26:ed:e2:c4:90:ed: cb:d7:ac:d6:fc:fc:4f:0d:d3:28:a7:73:be:fd:be:2b:03:15: 1d:e4:1d:bb:a8:42:ea:0c:7a:6c:1b:5a:17:35:92:e6:18:d6: ac:b6:10:df:0a:f5:fe:03:43:8e:f5:96:04:ed:fe:01:95:b6: 9b:83:4e:aa:75:27:b6:8a:42:d5:e4:4a:16:27:00:a8:cb:f6: 81:78:73:99:b1:8b:68:f8:62:57:44:3a:cf:65:55:35:d3:cf: 02:40:21:d4:7b:cc:ed:e0:34:07:09:fa:68:f3:dd:02:3e:5b: 78:c3:02:75:19:4b:ad:70:43:78:8e:51:39:86:5d:20:a9:6b: a1:0b:97:83:ed:7f:78:8c:12:0c:c1:3c:08:02:0c:3e:39:b4: f1:2a:c2:f1:1d:41:b8:77:bd:8d:17:f2:fd:ce:3b:e4:db:56: 39:20:0f:56 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI5Q0IxMTAvBgNVBAUTKEEwN0FGMENDQjI5ODM1Q0M3NjQyOTc0QkFDOUUxNTAy QjlDRjgyRDAwHhcNMjQxMTMwMDg0MTUzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRhY2ZkMS1kZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBvVQGLdD5rUmzbKjYmrL7YKMW3Aq5Jt0W+Z4NsmwW54j10upLudBlWJ6nwy nZTXzll2i3B5TsHW0J74fJ5uTTPH96vfE3ZZX35O+sm8iGHjF7MLZfqUlAfe59yg sUXS31Ak6hvCu/kc5oCs0K/UeuPAdvu0BLw1SNxVsKjc9bW3aIUxQe8cVOX5K0Xw s7s1L84gLHnK712mintHfPPmRA9hYdxooWBs96v/0lzu8/oMJByqH/Y0T1fZy2P8 NldOrSZJfCI+a+pHQjLVlXozwoC5Il4lS1LhcXds9Cu5hi4XJGhnjVNAjzahXmxp njRwBtIPEdXpoOR9bunVAe4opwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHlEY1Gd /jsF2qXVxHagKGZQbEQgMB8GA1UdIwQYMBaAFKB68MyymDXMdkKXS6yeFQK5z4LQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjlDQi8xRjkwMkIwRTA1 QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5jeDJRcGRMcko0VkFyblBn dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Icnd6TEtZTmN4MlFwZExySjRWQXJuUGd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI5Q0IvMUY5MDJCMEUwNUFGMTFFREE3MTc2NDJCQzRGOUFFMDIvRjJDNzc0QjJB RUY2MTFFRkIyRkRBNTRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnnyUwDQYJKoZIhvcNAQELBQADggEBAJlMrn+BpMeAUxiH KpvQPpObANA5H2DAjmuZT2MSKAxTvAG1UymAmOjRmatIIQAGL0hU4c2RXgfWrlaB E+p4pyDTKIP85xE8hpsafuWlHK3Ltn+5Nibt4sSQ7cvXrNb8/E8N0yinc779visD FR3kHbuoQuoMemwbWhc1kuYY1qy2EN8K9f4DQ471lgTt/gGVtpuDTqp1J7aKQtXk ShYnAKjL9oF4c5mxi2j4YldEOs9lVTXTzwJAIdR7zO3gNAcJ+mjz3QI+W3jDAnUZ S61wQ3iOUTmGXSCpa6ELl4Ptf3iMEgzBPAgCDD45tPEqwvEdQbh3vY0X8v3OO+Tb VjkgD1Y= -----END CERTIFICATE-----Generated at Thu Feb 20 02:49:31 2025 by rpki-client