$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/4CF19A6EAEDC11EF99753F71C4F9AE02.roa File: 4CF19A6EAEDC11EF99753F71C4F9AE02.roa (raw, json) Hash identifier: Qn6g14AUkLu1btr8Er+hiQxzqayU2xntHB3orOLLw9E= Subject key identifier: C8:B6:4F:6C:3E:7F:4B:DD:40:49:51:E9:60:D9:6D:CD:AC:8D:F4:5B Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 10BA Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/4CF19A6EAEDC11EF99753F71C4F9AE02.roa Signing time: Sat 30 Nov 2024 05:31:08 +0000 ROA not before: Sat 30 Nov 2024 05:31:08 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 0 IP address blocks: 103.140.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4282 (0x10ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Nov 30 05:31:08 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=674aa31c-2cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:71:26:d4:38:4d:03:3a:d0:eb:5a:6a:ed:15: b1:2a:88:d3:96:11:8a:1a:70:da:79:8e:1d:95:92: cb:61:2a:0e:5e:df:32:60:70:93:93:d6:b2:7b:fb: 47:56:02:06:03:3d:fd:78:2b:18:a3:a0:97:a0:0d: 62:9c:23:84:00:86:ae:05:bb:5c:e9:a8:78:4c:67: fd:00:12:d6:f9:10:31:61:68:66:02:7c:68:d6:42: 7b:de:a7:f5:3b:1d:97:eb:8a:fb:b9:6c:3a:96:84: 72:66:37:bf:20:0c:ff:cb:05:b2:50:87:09:c2:d7: 44:63:c2:ba:e1:39:af:0e:a7:47:90:44:28:02:e3: 4a:97:b0:ae:f1:e9:63:e6:b0:f8:06:8f:6f:68:2e: 86:84:a1:58:6f:ca:1c:c7:ee:49:84:bd:4f:44:24: a6:0e:bf:a1:20:b8:1d:72:9e:fe:f2:6a:65:63:41: 4f:9e:b5:35:d2:da:a5:2d:3d:2e:ff:3d:98:14:80: 9a:c3:46:fb:53:82:3e:76:5d:62:96:dd:c0:fe:47: 0f:99:53:aa:20:96:3c:9d:0b:e3:c9:0d:10:c2:d6: 06:b2:8c:a1:5f:57:bf:64:bf:b9:0b:41:b4:f9:fa: 02:1f:32:b6:f8:a2:a1:cc:06:67:d0:d7:f4:d7:7d: 6a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B6:4F:6C:3E:7F:4B:DD:40:49:51:E9:60:D9:6D:CD:AC:8D:F4:5B X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/4CF19A6EAEDC11EF99753F71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.8.0/23 Signature Algorithm: sha256WithRSAEncryption 83:e2:52:0d:7b:a3:1a:ee:1e:59:e3:0b:a0:dd:53:12:0d:b3: fb:73:25:3a:80:eb:52:1a:80:7e:12:b5:62:6e:00:7f:c7:6b: 48:6f:f9:5c:ab:85:8c:05:fe:80:32:55:74:22:5a:17:6a:9c: 49:02:da:4f:ae:ca:ca:89:34:e3:e3:d8:4c:74:fb:63:97:95: 86:76:fc:3e:3a:9a:4f:8a:41:3e:c7:a7:63:a7:fe:6a:9d:d5: 6a:55:e3:a8:be:90:92:63:90:09:45:75:dc:f3:3e:a2:f1:dd: bb:5a:ea:d3:8e:8a:d3:ef:4d:27:79:3a:05:13:bb:84:d9:56: 9d:98:13:7d:b5:35:2f:1c:9d:03:09:7e:ce:af:85:63:47:c0: 9a:9e:41:06:29:a8:65:45:08:06:6d:d0:cd:7c:b5:e8:d8:ec: c8:2b:ae:d3:6a:62:47:a6:f0:4d:32:ff:a2:71:be:fe:d3:72: 3d:37:fd:bd:64:88:61:e1:64:35:46:37:21:92:a6:13:9c:ec: 24:b1:b6:3f:7a:0b:13:73:86:d0:1b:52:51:4c:09:70:45:23: ae:d1:70:ed:27:20:93:f3:1a:f2:66:67:f1:a3:72:97:bc:75: c9:12:8b:d0:d2:d9:c2:6c:2e:da:a9:eb:3f:0a:bb:16:76:3d: 11:b2:9a:10 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICELowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjQxMTMwMDUzMTA4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRhYTMxYy0yY2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA83Em1DhNAzrQ61pq7RWxKojTlhGKGnDaeY4dlZLLYSoOXt8yYHCTk9aye/tH VgIGAz39eCsYo6CXoA1inCOEAIauBbtc6ah4TGf9ABLW+RAxYWhmAnxo1kJ73qf1 Ox2X64r7uWw6loRyZje/IAz/ywWyUIcJwtdEY8K64TmvDqdHkEQoAuNKl7Cu8elj 5rD4Bo9vaC6GhKFYb8ocx+5JhL1PRCSmDr+hILgdcp7+8mplY0FPnrU10tqlLT0u /z2YFICaw0b7U4I+dl1ilt3A/kcPmVOqIJY8nQvjyQ0QwtYGsoyhX1e/ZL+5C0G0 +foCHzK2+KKhzAZn0Nf0131qkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMi2T2w+ f0vdQElR6WDZbc2sjfRbMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvNENGMTlBNkVB RURDMTFFRjk5NzUzRjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjAgwDQYJKoZIhvcNAQELBQADggEBAIPiUg17oxruHlnj C6DdUxINs/tzJTqA61IagH4StWJuAH/Ha0hv+VyrhYwF/oAyVXQiWhdqnEkC2k+u ysqJNOPj2Ex0+2OXlYZ2/D46mk+KQT7Hp2On/mqd1WpV46i+kJJjkAlFddzzPqLx 3bta6tOOitPvTSd5OgUTu4TZVp2YE321NS8cnQMJfs6vhWNHwJqeQQYpqGVFCAZt 0M18tejY7MgrrtNqYkem8E0y/6Jxvv7Tcj03/b1kiGHhZDVGNyGSphOc7CSxtj96 CxNzhtAbUlFMCXBFI67RcO0nIJPzGvJmZ/Gjcpe8dckSi9DS2cJsLtqp6z8KuxZ2 PRGymhA= -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:37 2025 by rpki-client