$ rpki-client -vvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/5A48B534C6C811ECA5A9AB33C4F9AE02.roa File: 5A48B534C6C811ECA5A9AB33C4F9AE02.roa (raw, json) Hash identifier: 7Gmx6aG6mVa6tW4ZmRdx25+Dm056uxm4nK4BIHzJbm8= Subject key identifier: A4:56:0D:9D:6C:46:F3:7D:D8:9F:F2:2F:DE:DA:9F:A8:C9:5B:E3:C2 Certificate issuer: /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Certificate serial: 02D6 Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/5A48B534C6C811ECA5A9AB33C4F9AE02.roa Signing time: Fri 29 Nov 2024 01:14:55 +0000 ROA not before: Fri 29 Nov 2024 01:14:55 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 132742 IP address blocks: 43.250.188.0/22 maxlen: 24 103.42.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 726 (0x2d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Validity Not Before: Nov 29 01:14:55 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6749158f-596d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:93:b2:c7:0d:2c:18:a4:10:78:09:90:bf: d8:0e:24:94:a1:92:95:46:b6:1b:cd:73:38:eb:61: ac:4f:ec:11:20:71:73:31:6a:fc:9f:3d:b1:be:f4: ea:ad:0b:e0:68:50:d4:dd:ff:96:15:38:c0:b5:bb: ec:2a:14:38:7f:fe:4e:bf:f6:31:c4:1f:a2:8a:f8: 30:a0:2f:c2:bf:15:ab:7e:bc:f5:e0:86:25:2d:71: b1:e2:85:ff:77:60:7e:64:fc:27:ee:39:b1:ed:9d: 0d:0d:e1:52:b8:70:f8:2f:13:f0:8a:78:bb:26:32: d9:c7:3e:a2:9e:a2:7f:00:1b:87:70:4e:bf:55:91: f0:94:3c:dd:40:7d:98:2b:49:c4:cb:ac:a2:5a:02: f7:5a:08:5b:f2:20:3f:a5:4c:63:44:b4:14:90:51: 3b:5f:fa:4f:4a:51:29:8c:03:01:34:84:05:68:88: 05:51:2a:b8:53:f5:1d:f1:5b:33:6d:f6:41:f6:d2: e1:9f:b0:5e:cc:54:50:21:cc:f2:ea:c2:15:a8:e3: 81:d2:01:a4:38:0d:4e:94:4e:1a:40:18:10:90:62: 55:cc:50:f6:c0:83:81:91:8f:7e:eb:c7:ff:45:78: 08:9a:1d:cb:61:0c:0f:86:d9:12:89:e8:ce:8c:e9: 67:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:56:0D:9D:6C:46:F3:7D:D8:9F:F2:2F:DE:DA:9F:A8:C9:5B:E3:C2 X509v3 Authority Key Identifier: keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/5A48B534C6C811ECA5A9AB33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.188.0/22 103.42.36.0/22 Signature Algorithm: sha256WithRSAEncryption 28:2d:5d:70:7d:db:56:21:c1:26:b0:29:0c:7a:1c:ef:47:72: 55:ef:cb:65:3b:67:d7:45:5c:e5:b6:9d:3c:7b:07:6a:49:15: f6:1f:22:89:3d:d9:d6:63:0b:93:20:d8:95:9b:74:94:fb:11: d7:93:22:fb:af:38:9a:a2:10:77:f0:41:3a:df:90:eb:b5:cb: 9e:c0:81:38:25:89:99:fc:bf:42:d6:a0:bb:da:2e:2f:2b:43: ba:0b:7e:9e:fb:95:90:6c:08:7d:af:64:91:f7:e9:ed:b8:f3: b6:24:22:5d:26:4f:5d:17:3e:61:3c:fa:e6:2c:f0:18:92:9c: 40:be:5b:6e:bc:a2:a8:2e:82:7d:9b:a5:3a:66:e6:5a:65:7c: 9f:b6:92:46:aa:47:47:bd:fa:cd:3b:b6:d8:94:03:87:21:09: 30:65:7c:27:bb:f7:98:74:4c:97:1f:be:55:2b:f9:53:30:ff: 47:a3:cb:62:49:e3:38:c5:d7:0a:ee:1a:36:e1:3d:6f:5a:b3: df:76:05:ed:35:f8:6f:f6:b2:65:2a:51:ef:a5:a4:14:b9:4b: 1a:29:43:99:94:e4:2f:e1:22:42:90:09:98:72:0e:98:bd:c7: 08:27:3e:46:49:d4:7e:dc:0b:d3:0c:2c:17:01:62:b3:f9:fb: 07:11:df:e6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCNzExMTAvBgNVBAUTKDRCRjNFODdDQTJCOUFCNTk1OTc2MjBEMDRGQzA1NDEx OEQ3RUQzRDkwHhcNMjQxMTI5MDExNDU1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ5MTU4Zi01OTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAva+TsscNLBikEHgJkL/YDiSUoZKVRrYbzXM462GsT+wRIHFzMWr8nz2xvvTq rQvgaFDU3f+WFTjAtbvsKhQ4f/5Ov/YxxB+iivgwoC/CvxWrfrz14IYlLXGx4oX/ d2B+ZPwn7jmx7Z0NDeFSuHD4LxPwini7JjLZxz6inqJ/ABuHcE6/VZHwlDzdQH2Y K0nEy6yiWgL3Wghb8iA/pUxjRLQUkFE7X/pPSlEpjAMBNIQFaIgFUSq4U/Ud8Vsz bfZB9tLhn7BezFRQIczy6sIVqOOB0gGkOA1OlE4aQBgQkGJVzFD2wIOBkY9+68f/ RXgImh3LYQwPhtkSiejOjOln1wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKRWDZ1s RvN92J/yL97an6jJW+PCMB8GA1UdIwQYMBaAFEvz6HyiuatZWXYg0E/AVBGNftPZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUI3MS9CODQ5QkExMkM2 MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXExbFpkaURRVDhCVUVZMS0w OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NfUG9mS0s1cTFsWmRpRFFUOEJVRVkxLTA5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFCNzEvQjg0OUJBMTJDNjA0MTFFQ0I5MDY5MTVDQzRGOUFFMDIvNUE0OEI1MzRD NkM4MTFFQ0E1QTlBQjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+rwDBAJnKiQwDQYJKoZIhvcNAQELBQADggEBACgtXXB9 21YhwSawKQx6HO9HclXvy2U7Z9dFXOW2nTx7B2pJFfYfIok92dZjC5Mg2JWbdJT7 EdeTIvuvOJqiEHfwQTrfkOu1y57AgTgliZn8v0LWoLvaLi8rQ7oLfp77lZBsCH2v ZJH36e2487YkIl0mT10XPmE8+uYs8BiSnEC+W268oqgugn2bpTpm5lplfJ+2kkaq R0e9+s07ttiUA4chCTBlfCe795h0TJcfvlUr+VMw/0ejy2JJ4zjF1wruGjbhPW9a s992Be01+G/2smUqUe+lpBS5SxopQ5mU5C/hIkKQCZhyDpi9xwgnPkZJ1H7cC9MM LBcBYrP5+wcR3+Y= -----END CERTIFICATE-----Generated at Sat Apr 26 08:06:30 2025 by rpki-client