$ rpki-client -vvf rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/6458CE6420F711EC896F8D43C4F9AE02.roa File: 6458CE6420F711EC896F8D43C4F9AE02.roa (raw, json) Hash identifier: 40Tp9vYlwNjlXHzULzghK25QKYAH3IMjVH7JAvH5N/8= Subject key identifier: 09:F2:15:84:A6:88:A1:69:4D:89:60:CC:0C:17:44:9C:F9:1E:9F:F9 Certificate issuer: /CN=A91944F8/serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83 Certificate serial: 048D Authority key identifier: 1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/6458CE6420F711EC896F8D43C4F9AE02.roa Signing time: Fri 10 Jan 2025 23:52:45 +0000 ROA not before: Fri 10 Jan 2025 23:52:45 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 132819 IP address blocks: 103.28.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1165 (0x48d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91944F8, serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83 Validity Not Before: Jan 10 23:52:45 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6781b2cd-58aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:b2:4a:ef:04:77:d5:28:c0:e3:fb:cb:20: fb:06:e5:01:34:b6:e6:88:20:42:0d:de:26:c3:7c: ec:56:c8:fa:c3:50:74:af:d2:1b:7f:40:18:18:ab: 7f:c8:81:17:15:8d:48:1c:80:36:d3:62:75:de:d4: 5a:fb:5a:53:f9:ae:97:eb:42:ef:8a:52:58:58:10: 98:d4:b1:28:41:46:60:c6:ed:dd:e1:41:0f:1b:42: e5:f8:fe:91:07:df:05:83:01:fe:c4:28:cb:8e:2b: ec:4d:fe:5d:14:26:57:bf:37:fb:fb:8c:8a:59:49: fb:cf:ee:df:fc:ee:35:0c:c7:8c:fc:36:a4:f6:e7: 5e:09:f3:6e:78:b3:4f:01:5a:0f:61:44:1a:be:07: 5d:c7:ec:2f:7f:08:61:88:3c:60:51:27:a9:8e:23: 64:d6:23:c7:29:55:24:71:c6:4e:24:43:22:b4:90: 36:f7:c1:da:5b:18:0c:a4:8c:a8:41:54:52:df:5c: c1:81:ca:d2:d7:c1:26:2e:2c:4a:71:2d:1d:a4:c6: 3b:9a:5d:dc:cd:6a:15:c2:57:9a:84:22:31:0d:9c: 30:54:ca:5b:90:39:29:d7:ce:ea:02:96:29:56:6a: db:e4:1e:73:d3:01:fd:cc:f8:b3:22:b0:9f:77:5d: 62:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F2:15:84:A6:88:A1:69:4D:89:60:CC:0C:17:44:9C:F9:1E:9F:F9 X509v3 Authority Key Identifier: keyid:1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/6458CE6420F711EC896F8D43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.28.201.0/24 Signature Algorithm: sha256WithRSAEncryption 74:a7:41:c5:c4:5d:21:b7:d7:09:fd:df:be:ca:42:01:67:52: 31:ec:07:eb:0f:84:bd:2e:85:1d:98:0e:f8:0f:8f:4d:f3:37: af:ce:36:a4:a6:e4:35:16:3c:58:12:dc:14:f2:ce:b2:0d:18: a2:d4:fd:3a:be:10:63:1b:56:09:fe:0b:2b:8d:08:b2:b0:9a: a9:55:a0:22:8b:cb:8a:8c:e1:8e:ef:16:20:eb:81:d0:bd:63: ce:89:8d:6e:59:c5:09:26:31:68:ab:dd:59:89:65:40:7e:d5: 29:bc:14:4b:85:d6:56:e8:3c:0c:76:d6:68:6e:bc:29:65:2f: b5:85:65:1b:a1:d1:5b:09:a8:09:1a:db:60:cd:cf:fd:37:6d: 6c:96:86:a5:a3:1c:b5:9d:0d:fa:c3:c1:08:ed:33:3b:60:ab: 92:4e:97:4b:7e:bc:07:56:28:0d:06:37:39:56:45:99:1a:39: 82:d2:9f:3c:ad:d3:53:9d:82:7e:b0:2b:e7:d0:3e:98:5d:e7: 1d:f4:4e:e1:59:5d:91:b3:5e:cf:88:79:bf:39:ed:59:65:38: fc:f2:87:d8:20:b5:93:dc:0b:a9:b3:d5:bc:b0:8b:52:09:42: 7b:bc:b8:8f:91:42:09:ad:73:b1:48:8b:13:ac:fe:05:6d:fd: 9f:f0:73:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ0RjgxMTAvBgNVBAUTKDFBN0E1MEQ1MjE1QTkyNTkxMTA0MDZCMEI2OTM2RkFF MTRFQTdEODMwHhcNMjUwMTEwMjM1MjQ1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzgxYjJjZC01OGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4GySu8Ed9UowOP7yyD7BuUBNLbmiCBCDd4mw3zsVsj6w1B0r9Ibf0AYGKt/ yIEXFY1IHIA202J13tRa+1pT+a6X60LvilJYWBCY1LEoQUZgxu3d4UEPG0Ll+P6R B98FgwH+xCjLjivsTf5dFCZXvzf7+4yKWUn7z+7f/O41DMeM/Dak9udeCfNueLNP AVoPYUQavgddx+wvfwhhiDxgUSepjiNk1iPHKVUkccZOJEMitJA298HaWxgMpIyo QVRS31zBgcrS18EmLixKcS0dpMY7ml3czWoVwleahCIxDZwwVMpbkDkp187qApYp Vmrb5B5z0wH9zPizIrCfd11iEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAnyFYSm iKFpTYlgzAwXRJz5Hp/5MB8GA1UdIwQYMBaAFBp6UNUhWpJZEQQGsLaTb64U6n2D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDRGOC82NTQ4NjFEODIw RjUxMUVDQTY3NUM0NDJDNEY5QUUwMi9HbnBRMVNGYWtsa1JCQWF3dHBOdnJoVHFm WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ducFExU0Zha2xrUkJBYXd0cE52cmhUcWZZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTQ0RjgvNjU0ODYxRDgyMEY1MTFFQ0E2NzVDNDQyQzRGOUFFMDIvNjQ1OENFNjQy MEY3MTFFQzg5NkY4RDQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnHMkwDQYJKoZIhvcNAQELBQADggEBAHSnQcXEXSG31wn9 377KQgFnUjHsB+sPhL0uhR2YDvgPj03zN6/ONqSm5DUWPFgS3BTyzrINGKLU/Tq+ EGMbVgn+CyuNCLKwmqlVoCKLy4qM4Y7vFiDrgdC9Y86JjW5ZxQkmMWir3VmJZUB+ 1Sm8FEuF1lboPAx21mhuvCllL7WFZRuh0VsJqAka22DNz/03bWyWhqWjHLWdDfrD wQjtMztgq5JOl0t+vAdWKA0GNzlWRZkaOYLSnzyt01Odgn6wK+fQPphd5x30TuFZ XZGzXs+Ieb857VllOPzyh9ggtZPcC6mz1bywi1IJQnu8uI+RQgmtc7FIixOs/gVt /Z/wc10= -----END CERTIFICATE-----Generated at Sat Apr 26 08:11:26 2025 by rpki-client