$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/586B33AEF44611EBA78C117AC4F9AE02.roa File: 586B33AEF44611EBA78C117AC4F9AE02.roa (raw, json) Hash identifier: xubGUlPUlNCBLJe5+NADMrf4YV/wbfCmoqj7rhjCN20= Subject key identifier: 95:4A:4E:5D:A8:2E:B9:FA:50:94:64:71:59:B1:B0:6B:D2:1E:86:8E Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 2160 Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/586B33AEF44611EBA78C117AC4F9AE02.roa Signing time: Thu 10 Oct 2024 16:23:27 +0000 ROA not before: Thu 10 Oct 2024 16:23:27 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 58436 IP address blocks: 43.230.24.0/24 maxlen: 24 43.230.25.0/24 maxlen: 24 43.255.124.0/22 maxlen: 24 45.125.196.0/22 maxlen: 22 103.5.151.0/24 maxlen: 24 103.11.143.0/24 maxlen: 24 103.11.150.0/24 maxlen: 24 103.11.151.0/24 maxlen: 24 103.16.16.0/24 maxlen: 24 103.16.17.0/24 maxlen: 24 103.16.18.0/24 maxlen: 24 103.16.19.0/24 maxlen: 24 103.194.76.0/22 maxlen: 24 124.6.56.0/22 maxlen: 24 2001:df0:24f::/48 maxlen: 48 2407:8100:1::/48 maxlen: 48 2407:8100:3::/48 maxlen: 48 2407:8100:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8544 (0x2160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF Validity Not Before: Oct 10 16:23:27 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6707ff7f-d49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:94:07:25:8c:61:5f:46:5d:91:35:d2:bd: 16:2d:47:2e:69:36:15:50:61:a5:11:31:40:e4:f4: 27:08:4f:c3:8a:0d:86:8e:d1:11:b6:db:47:80:1d: 4d:fe:8d:30:72:4a:f8:cf:ad:05:45:6f:ff:dc:71: ff:c7:df:3f:d7:db:e1:a6:4b:7f:2e:be:14:3b:5a: 79:4b:2a:aa:84:04:c4:c2:c9:cd:50:b5:94:e2:a5: ba:92:4f:6c:0e:15:82:21:e0:b4:73:c2:7f:a1:6f: 95:5a:5b:ba:57:50:9f:3e:04:15:ff:1b:02:ff:d5: 28:2a:e4:30:b6:20:98:50:7f:6e:78:2c:43:34:df: 92:bf:44:39:a5:af:e7:9a:6d:4f:4b:b7:22:4a:7f: 2d:fb:36:7f:b5:40:6f:43:45:65:80:ed:53:7d:4c: 01:7d:b3:52:95:8e:9f:54:9e:1f:5b:67:f8:b1:92: 8d:07:16:a6:4f:e1:f8:a2:f8:ad:88:c2:22:12:1d: b8:c3:9f:47:5a:30:7e:a8:ce:9b:a7:8c:0a:49:bb: 74:bd:e9:fe:b9:24:87:85:05:c2:61:1c:40:8a:14: f7:f5:6b:6e:65:88:2b:98:3d:98:de:ea:42:85:36: dc:95:6c:c8:bc:e1:2e:26:53:bb:11:28:1e:04:fa: aa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4A:4E:5D:A8:2E:B9:FA:50:94:64:71:59:B1:B0:6B:D2:1E:86:8E X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/586B33AEF44611EBA78C117AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.24.0/23 43.255.124.0/22 45.125.196.0/22 103.5.151.0/24 103.11.143.0/24 103.11.150.0/23 103.16.16.0/22 103.194.76.0/22 124.6.56.0/22 IPv6: 2001:df0:24f::/48 2407:8100:1::/48 2407:8100:3::/48 2407:8100:6::/48 Signature Algorithm: sha256WithRSAEncryption 7b:61:d2:1d:1c:dc:bf:88:63:fc:37:99:c1:f4:d8:f1:db:86: e1:3c:77:3f:9d:15:ec:18:fa:17:43:ba:9c:21:f9:ef:ef:21: 10:f8:cb:c4:c9:ca:32:23:cd:71:dd:50:06:ad:85:12:14:9d: 82:10:c2:a0:e4:98:cd:20:1c:43:d9:19:be:37:3b:e4:f9:7f: 7d:9b:7d:e8:b5:06:ac:1c:3b:6b:5c:6d:84:ec:a6:da:31:4c: 70:79:bd:a3:f0:d5:19:82:56:7e:ed:67:85:54:0d:a4:d1:cd: 80:4d:d3:75:83:ec:13:f6:b1:c8:87:a1:67:e9:a7:5e:a6:48: a8:3b:b6:27:8a:16:d7:0f:5e:60:3d:57:a1:3b:d7:38:9c:6b: 99:11:9b:c4:47:59:e0:10:ba:63:04:3e:08:67:fb:2d:ab:8d: 4f:b3:3f:b1:9f:9c:07:a1:8d:76:d4:00:b3:85:01:2d:e9:e8: 05:84:50:51:d7:09:42:91:91:f8:44:cd:94:bf:28:92:c9:45: a5:5b:a3:ce:de:d1:2b:98:5a:f7:e5:5b:61:06:39:f7:ba:1d: 5d:ee:33:40:39:2a:29:e6:ec:24:09:2c:30:0a:a2:76:7d:29: a2:a4:84:bf:e0:ee:ae:92:b2:e9:c2:63:93:09:a5:35:2c:f5: 70:a1:02:9f -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgICIWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjQxMDEwMTYyMzI3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA3ZmY3Zi1kNDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvR+UByWMYV9GXZE10r0WLUcuaTYVUGGlETFA5PQnCE/Dig2GjtERtttHgB1N /o0wckr4z60FRW//3HH/x98/19vhpkt/Lr4UO1p5SyqqhATEwsnNULWU4qW6kk9s DhWCIeC0c8J/oW+VWlu6V1CfPgQV/xsC/9UoKuQwtiCYUH9ueCxDNN+Sv0Q5pa/n mm1PS7ciSn8t+zZ/tUBvQ0VlgO1TfUwBfbNSlY6fVJ4fW2f4sZKNBxamT+H4ovit iMIiEh24w59HWjB+qM6bp4wKSbt0ven+uSSHhQXCYRxAihT39WtuZYgrmD2Y3upC hTbclWzIvOEuJlO7ESgeBPqqQQIDAQABo4IC8TCCAu0wHQYDVR0OBBYEFJVKTl2o Lrn6UJRkcVmxsGvSHoaOMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBFQkYvNUY4NEQ3RDhEQjgwMTFFNTlBQjdFRDFFQzRGOUFFMDIvNTg2QjMzQUVG NDQ2MTFFQkE3OEMxMTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwewYIKwYBBQUHAQcBAf8E bDBqMDwEAgABMDYDBAEr5hgDBAIr/3wDBAItfcQDBABnBZcDBABnC48DBAFnC5YD BAJnEBADBAJnwkwDBAJ8BjgwKgQCAAIwJAMHACABDfACTwMHACQHgQAAAQMHACQH gQAAAwMHACQHgQAABjANBgkqhkiG9w0BAQsFAAOCAQEAe2HSHRzcv4hj/DeZwfTY 8duG4Tx3P50V7Bj6F0O6nCH57+8hEPjLxMnKMiPNcd1QBq2FEhSdghDCoOSYzSAc Q9kZvjc75Pl/fZt96LUGrBw7a1xthOym2jFMcHm9o/DVGYJWfu1nhVQNpNHNgE3T dYPsE/axyIehZ+mnXqZIqDu2J4oW1w9eYD1XoTvXOJxrmRGbxEdZ4BC6YwQ+CGf7 LauNT7M/sZ+cB6GNdtQAs4UBLenoBYRQUdcJQpGR+ETNlL8okslFpVujzt7RK5ha 9+VbYQY597odXe4zQDkqKebsJAksMAqidn0poqSEv+DurpKy6cJjkwmlNSz1cKEC nw== -----END CERTIFICATE-----Generated at Sun Feb 16 20:49:39 2025 by rpki-client