$ rpki-client -vvf rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/659F6E188F2211E98AC7590DC4F9AE02.roa File: 659F6E188F2211E98AC7590DC4F9AE02.roa (raw, json) Hash identifier: NX0Uu06g9kaFwSmmKkUW0sgMJpCNI4RFhei0HlK1wt8= Subject key identifier: 58:9F:9D:F3:2E:08:11:10:EC:E7:DA:28:E9:ED:5D:26:71:43:95:E7 Certificate issuer: /CN=A91833FF/serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E Certificate serial: 11C7 Authority key identifier: 12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/659F6E188F2211E98AC7590DC4F9AE02.roa Signing time: Fri 06 Dec 2024 17:35:26 +0000 ROA not before: Fri 06 Dec 2024 17:35:26 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 138156 IP address blocks: 103.131.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4551 (0x11c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91833FF, serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E Validity Not Before: Dec 6 17:35:26 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=675335de-0234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:80:81:fb:fb:9e:76:fe:12:80:33:9a:aa: 81:4e:28:27:ad:ab:a4:83:94:22:60:75:03:d8:3e: 24:db:97:76:89:04:78:e2:38:d7:7e:08:b3:50:ae: 0b:aa:ea:54:c1:58:89:bb:57:26:2d:89:ed:7d:24: 97:86:34:28:5b:8f:a8:df:58:40:c3:70:d1:98:19: b5:30:cb:6d:e1:88:0f:c8:57:d5:b6:2c:d6:13:11: 7a:fb:37:66:1f:5a:c6:67:8d:3c:b1:a4:83:df:56: 2c:93:db:7d:a4:81:24:df:cc:8f:56:93:76:52:dc: 4f:9c:16:67:d5:57:fc:e7:85:81:9a:b3:c1:fc:0f: fd:36:26:1a:1b:c3:c8:7e:65:a4:e2:3e:97:86:fd: 14:c3:d5:cb:c1:9c:96:e8:48:ff:30:5b:ab:80:8c: 75:8f:5f:25:72:ea:3a:fe:4f:53:11:57:89:7d:96: 1f:8f:11:94:ea:1a:70:c1:50:93:07:a5:92:ba:7c: 2f:c0:c8:59:08:c8:ec:f9:4e:01:fa:2c:b0:48:56: bb:b3:9d:83:8b:f4:1a:a8:66:9b:25:98:3d:a6:8e: 97:64:d0:b9:0b:a3:3c:eb:f3:ea:68:b5:18:79:54: 81:0e:6b:37:2a:2b:a0:5d:10:b0:24:43:1c:6b:8c: 73:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9F:9D:F3:2E:08:11:10:EC:E7:DA:28:E9:ED:5D:26:71:43:95:E7 X509v3 Authority Key Identifier: keyid:12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/659F6E188F2211E98AC7590DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.200.0/24 Signature Algorithm: sha256WithRSAEncryption b4:5f:6f:3a:c6:bb:48:e5:70:bf:a3:98:bf:c2:72:cf:c9:45: cb:15:c1:91:c3:4f:37:af:40:bf:a4:a2:28:dd:ba:1f:17:ad: 1b:13:69:12:60:4e:9d:13:45:db:d3:a7:c2:2b:08:d8:cd:38: 38:d8:93:35:dd:17:38:ea:37:e6:b2:28:87:8f:fb:11:9e:c9: 7c:7a:46:08:3a:21:51:55:e6:b4:3a:75:30:ce:27:6c:e0:aa: 4f:61:a6:a5:9b:3f:de:f8:85:f1:a7:c9:99:01:f3:f4:ca:1f: 4e:60:1b:c2:ba:ac:b4:7d:7d:44:8e:bb:7d:b0:9c:4b:06:53: 10:8b:a4:95:d1:18:d4:f1:fa:44:b6:33:ec:eb:78:16:f7:22: 14:9c:83:a8:13:3c:1c:c5:f7:8a:94:cb:9c:da:c0:8d:ff:e3: 99:64:13:fc:e6:87:a3:a9:8d:5d:bf:1c:14:a3:2a:d0:35:87: f0:ca:95:a4:fa:3e:8f:8a:df:cc:0a:91:61:2c:d4:e8:5f:fc: ea:e0:7f:2e:02:48:ef:9c:88:11:d7:c4:3e:a0:62:11:60:6a: f7:c9:d2:f5:27:a5:50:a6:81:3d:b3:0e:b8:49:1b:f1:ac:d5: be:e4:f4:ce:e6:5e:fd:fe:45:97:16:bd:22:fe:54:db:46:53: d6:3f:2c:01 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMzRkYxMTAvBgNVBAUTKDEyMzI3REZDOUU4ODgzQ0RCQjZDNkVFRUIzOTI1RjJD OEMwRjdFNUUwHhcNMjQxMjA2MTczNTI2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUzMzVkZS0wMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTWAgfv7nnb+EoAzmqqBTignraukg5QiYHUD2D4k25d2iQR44jjXfgizUK4L qupUwViJu1cmLYntfSSXhjQoW4+o31hAw3DRmBm1MMtt4YgPyFfVtizWExF6+zdm H1rGZ408saSD31Ysk9t9pIEk38yPVpN2UtxPnBZn1Vf854WBmrPB/A/9NiYaG8PI fmWk4j6Xhv0Uw9XLwZyW6Ej/MFurgIx1j18lcuo6/k9TEVeJfZYfjxGU6hpwwVCT B6WSunwvwMhZCMjs+U4B+iywSFa7s52Di/QaqGabJZg9po6XZNC5C6M86/PqaLUY eVSBDms3KiugXRCwJEMca4xzAQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFifnfMu CBEQ7OfaKOntXSZxQ5XnMB8GA1UdIwQYMBaAFBIyffyeiIPNu2xu7rOSXyyMD35e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzNGRi8xNEVGRTdFNEUw N0QxMUU4QTVGMEZCMzVDNEY5QUUwMi9Fako5X0o2SWc4MjdiRzd1czVKZkxJd1Bm bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VqSjlfSjZJZzgyN2JHN3VzNUpmTEl3UGZsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODMzRkYvMTRFRkU3RTRFMDdEMTFFOEE1RjBGQjM1QzRGOUFFMDIvNjU5RjZFMTg4 RjIyMTFFOThBQzc1OTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABng8gwDQYJKoZIhvcNAQELBQADggEBALRfbzrGu0jlcL+j mL/Ccs/JRcsVwZHDTzevQL+koijduh8XrRsTaRJgTp0TRdvTp8IrCNjNODjYkzXd FzjqN+ayKIeP+xGeyXx6Rgg6IVFV5rQ6dTDOJ2zgqk9hpqWbP974hfGnyZkB8/TK H05gG8K6rLR9fUSOu32wnEsGUxCLpJXRGNTx+kS2M+zreBb3IhScg6gTPBzF94qU y5zawI3/45lkE/zmh6OpjV2/HBSjKtA1h/DKlaT6Po+K38wKkWEs1Ohf/Orgfy4C SO+ciBHXxD6gYhFgavfJ0vUnpVCmgT2zDrhJG/Gs1b7k9M7mXv3+RZcWvSL+VNtG U9Y/LAE= -----END CERTIFICATE-----Generated at Sat Apr 26 08:21:21 2025 by rpki-client