$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/4353C2FC0E9A11F0A4CEB90AC4F9AE02.roa File: 4353C2FC0E9A11F0A4CEB90AC4F9AE02.roa (raw, json) Hash identifier: KGX7VkbOcd3qn/15c4+R2RGbCNShZlKh0ZLW1cNHR3Q= Subject key identifier: 1B:1B:D4:75:F5:79:F3:E2:7B:B8:8A:78:88:63:56:8B:A7:0F:F3:AE Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0B9D Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/4353C2FC0E9A11F0A4CEB90AC4F9AE02.roa Signing time: Tue 01 Apr 2025 01:40:17 +0000 ROA not before: Tue 01 Apr 2025 01:40:17 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9311 IP address blocks: 43.246.128.0/24 maxlen: 24 43.246.130.0/24 maxlen: 24 103.15.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2973 (0xb9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Apr 1 01:40:17 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67eb4400-b42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:e6:d1:c4:28:74:2b:c0:62:c6:6e:e9:aa: 99:63:c6:6a:52:db:37:4f:ea:cc:11:ef:32:f8:d9: e0:3a:2a:42:46:70:5b:e2:ef:1e:bb:c1:fe:d3:e8: 0b:b2:ea:e5:ea:f0:2b:f3:35:27:01:19:89:bb:92: 8f:63:f4:bb:1d:00:ca:42:0e:f8:6d:e8:99:b2:66: 8a:26:5e:6a:15:80:93:4b:72:52:ca:d3:d9:84:d0: ee:38:e4:08:eb:dc:02:9a:36:ed:39:27:f3:f4:4e: 9a:10:d4:2f:ad:54:fd:8f:4c:c6:db:d6:a0:4c:a4: 13:57:b7:09:a4:c7:ed:08:2c:5c:1f:fc:af:67:f0: 3b:71:5f:de:2d:0f:75:43:7f:23:f2:73:cf:25:30: b0:7e:cd:1b:d4:6d:9f:05:84:66:fb:d5:76:d2:ee: 9c:ca:d1:b6:07:47:36:ea:8a:ff:09:c7:e2:9b:8c: 35:21:62:17:3b:02:58:3e:c6:5d:7e:7a:58:70:24: d6:c1:4d:f3:42:86:02:ad:76:68:99:5d:4a:3f:48: ce:f2:81:7a:79:50:c1:3d:bf:21:dc:1b:bb:c1:9c: 55:da:9d:bd:88:b1:b7:84:3b:c3:b6:f4:33:8a:ed: 92:9b:4b:75:a9:4e:e1:d1:b4:da:00:5e:de:93:51: 1c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1B:D4:75:F5:79:F3:E2:7B:B8:8A:78:88:63:56:8B:A7:0F:F3:AE X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/4353C2FC0E9A11F0A4CEB90AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.246.128.0/24 43.246.130.0/24 103.15.79.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:f9:13:3e:88:5b:01:c2:a0:42:76:a2:66:ae:97:f1:dd:91: 52:e6:ef:9d:68:f6:ee:44:e0:78:d5:57:f0:f6:59:43:a0:91: 62:39:88:4a:19:2c:03:26:ab:b8:19:8b:9b:88:db:1a:1d:c1: ea:ea:e6:b7:a4:33:e2:b0:05:10:b2:62:49:4f:d2:fa:1f:a5: 1e:52:f8:37:d6:16:f4:bf:0d:f7:be:d0:e8:a8:4d:63:60:8d: 31:f2:7e:d4:b7:4d:b5:35:59:c4:4a:00:c8:d0:a5:ed:af:69: ce:8e:a6:06:31:d7:ae:2e:6d:92:d8:45:14:a5:ff:1e:b4:61: 16:e2:e3:e5:4f:12:5b:f4:b1:bf:9f:53:ec:38:37:84:59:7d: 35:2c:1c:0c:99:6e:d5:15:ac:fb:df:45:94:c8:05:8c:68:06: 2a:01:59:9f:19:fe:98:91:35:75:db:45:41:63:87:53:54:49: 4f:45:e2:8e:92:e6:69:05:02:c2:5e:84:f2:72:9b:ca:6e:ad: db:24:20:19:54:ae:38:67:96:6b:7b:08:85:64:01:55:26:dc: 38:90:65:9d:bf:19:40:67:0f:e8:4d:b6:ba:94:83:db:ef:7d: 46:17:8c:61:3b:7c:88:dc:ba:66:40:0b:f2:eb:1a:96:85:e1: 8f:dd:b4:69 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICC50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwNDAxMDE0MDE3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ViNDQwMC1iNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTbm0cQodCvAYsZu6aqZY8ZqUts3T+rMEe8y+NngOipCRnBb4u8eu8H+0+gL surl6vAr8zUnARmJu5KPY/S7HQDKQg74beiZsmaKJl5qFYCTS3JSytPZhNDuOOQI 69wCmjbtOSfz9E6aENQvrVT9j0zG29agTKQTV7cJpMftCCxcH/yvZ/A7cV/eLQ91 Q38j8nPPJTCwfs0b1G2fBYRm+9V20u6cytG2B0c26or/Ccfim4w1IWIXOwJYPsZd fnpYcCTWwU3zQoYCrXZomV1KP0jO8oF6eVDBPb8h3Bu7wZxV2p29iLG3hDvDtvQz iu2Sm0t1qU7h0bTaAF7ek1Ec7wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFBsb1HX1 efPie7iKeIhjVounD/OuMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvNDM1M0MyRkMw RTlBMTFGMEE0Q0VCOTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAAr9oADBAAr9oIDBABnD08wDQYJKoZIhvcNAQELBQADggEB AF35Ez6IWwHCoEJ2omaul/HdkVLm751o9u5E4HjVV/D2WUOgkWI5iEoZLAMmq7gZ i5uI2xodwerq5rekM+KwBRCyYklP0vofpR5S+DfWFvS/Dfe+0OioTWNgjTHyftS3 TbU1WcRKAMjQpe2vac6OpgYx164ubZLYRRSl/x60YRbi4+VPElv0sb+fU+w4N4RZ fTUsHAyZbtUVrPvfRZTIBYxoBioBWZ8Z/piRNXXbRUFjh1NUSU9F4o6S5mkFAsJe hPJym8purdskIBlUrjhnlmt7CIVkAVUm3DiQZZ2/GUBnD+hNtrqUg9vvfUYXjGE7 fIjcumZAC/LrGpaF4Y/dtGk= -----END CERTIFICATE-----Generated at Sat Apr 26 07:41:18 2025 by rpki-client