$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/51FD604CE08711EFA06D6434C4F9AE02.roa File: 51FD604CE08711EFA06D6434C4F9AE02.roa (raw, json) Hash identifier: doR4Y7/9fJwk4I8rzXTdhySC0dSmOygHgP5L2cehpw4= Subject key identifier: 32:70:10:FC:ED:DE:99:EA:2C:4B:D7:99:56:E1:1B:BF:69:E3:D7:2E Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Certificate serial: 0472 Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/51FD604CE08711EFA06D6434C4F9AE02.roa Signing time: Sat 01 Feb 2025 10:28:47 +0000 ROA not before: Sat 01 Feb 2025 10:28:47 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 135341 IP address blocks: 103.176.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1138 (0x472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Validity Not Before: Feb 1 10:28:47 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=679df75f-af04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:ff:a3:21:18:46:42:78:50:aa:75:a9:99: 2b:d1:f5:87:42:21:0c:72:1a:e2:7f:1f:65:6c:b7: 3e:86:89:38:2c:9f:7c:8e:d6:b1:b1:dd:ba:9a:2e: ff:24:85:83:3d:9f:64:ad:22:a5:b4:4f:2c:ee:37: 61:52:4c:75:21:12:a3:e8:f0:6e:be:e9:a6:a0:44: 83:41:bb:db:fc:df:03:09:6b:63:eb:6d:c1:35:fb: 65:cb:3b:02:bc:e7:76:83:34:88:ca:42:bb:4e:04: 1d:fb:82:36:86:ee:4e:aa:af:98:13:3a:cc:d6:88: 2e:cc:be:7e:4b:b3:d0:7d:92:87:70:55:e0:f1:d0: 0d:f0:d8:c8:ea:54:7f:9a:43:9a:b4:8e:58:32:49: 74:9a:33:9c:01:c9:b1:e2:06:42:eb:86:2a:8e:79: fc:bc:e8:7e:b1:76:c2:c9:4d:e9:db:e4:1b:2a:1f: 80:3f:0f:48:e3:a5:fe:25:f9:89:73:94:07:9b:6f: b2:30:c9:d3:13:07:98:1e:ea:13:38:e6:8b:cf:fd: 80:aa:fa:cd:48:fb:f0:55:53:83:39:10:67:52:10: 84:c6:86:b0:45:fc:5c:3a:1a:b0:27:29:56:f7:c4: 30:ef:be:88:a3:c3:de:3c:1d:4c:6c:36:9b:9f:e2: 11:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:70:10:FC:ED:DE:99:EA:2C:4B:D7:99:56:E1:1B:BF:69:E3:D7:2E X509v3 Authority Key Identifier: keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/51FD604CE08711EFA06D6434C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.3.0/24 Signature Algorithm: sha256WithRSAEncryption 93:80:df:a2:6c:14:71:18:05:c7:6d:6f:b4:05:c4:be:07:ae: 0e:82:20:35:50:07:10:e7:bf:01:99:b8:fa:d8:61:2e:45:eb: 4c:c7:e5:6d:90:b6:7f:0c:1b:11:4c:d0:8b:56:c0:15:9e:8a: 81:ba:3f:5e:3d:6b:85:a9:dd:21:a3:e5:64:49:35:d5:bc:8c: 9b:22:66:59:d2:08:08:a0:8a:3c:c0:39:d3:fb:7c:02:f9:5e: 0d:f9:18:d6:c5:f7:e1:73:ce:7d:d0:ac:fc:57:68:0f:5d:90: b5:9a:f6:c7:90:d1:00:1f:07:d1:25:2e:6d:69:73:94:69:71: d8:3a:a5:aa:70:7d:bb:54:50:84:d4:16:47:72:88:6d:0b:20: e5:7f:0a:cd:a1:a4:d0:cf:c5:3f:44:c2:d4:0e:d8:48:5f:20: 12:3b:58:5e:cb:47:1d:f8:ee:3b:f2:7d:44:b9:4e:52:30:ee: d5:ec:c5:4f:9e:d3:db:f8:e8:26:f6:a9:60:bd:2f:be:d9:c9: a3:f0:96:c5:10:51:c7:96:ed:da:3e:3c:3d:06:a4:a2:26:b9: 55:32:a9:ec:91:84:84:65:3d:e7:c7:71:ee:c2:32:4b:5d:36: 2b:06:a9:bc:0d:3c:27:7a:2d:8c:a3:9c:49:5e:79:e3:5d:ca: db:0e:8f:aa -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc0RTgxMTAvBgNVBAUTKDZDMDgwQTJCQTdEQUFDOTVENEQ5MzQ4OEE5MDAxNTFB RTNBNTlERjgwHhcNMjUwMjAxMTAyODQ3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzlkZjc1Zi1hZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArA7/oyEYRkJ4UKp1qZkr0fWHQiEMchrifx9lbLc+hok4LJ98jtaxsd26mi7/ JIWDPZ9krSKltE8s7jdhUkx1IRKj6PBuvummoESDQbvb/N8DCWtj623BNftlyzsC vOd2gzSIykK7TgQd+4I2hu5Oqq+YEzrM1oguzL5+S7PQfZKHcFXg8dAN8NjI6lR/ mkOatI5YMkl0mjOcAcmx4gZC64Yqjnn8vOh+sXbCyU3p2+QbKh+APw9I46X+JfmJ c5QHm2+yMMnTEweYHuoTOOaLz/2AqvrNSPvwVVODORBnUhCExoawRfxcOhqwJylW 98Qw776Io8PePB1MbDabn+IRSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDJwEPzt 3pnqLEvXmVbhG79p49cuMB8GA1UdIwQYMBaAFGwICiun2qyV1Nk0iKkAFRrjpZ34 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRFOC80N0Y2MjAxMjQz RUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJKWFUyVFNJcVFBVkd1T2xu ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBZ0tLNmZhckpYVTJUU0lxUUFWR3VPbG5mZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjc0RTgvNDdGNjIwMTI0M0VBMTFFQzg0QUI2MzQ3QzRGOUFFMDIvNTFGRDYwNENF MDg3MTFFRkEwNkQ2NDM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnsAMwDQYJKoZIhvcNAQELBQADggEBAJOA36JsFHEYBcdt b7QFxL4Hrg6CIDVQBxDnvwGZuPrYYS5F60zH5W2Qtn8MGxFM0ItWwBWeioG6P149 a4Wp3SGj5WRJNdW8jJsiZlnSCAigijzAOdP7fAL5Xg35GNbF9+Fzzn3QrPxXaA9d kLWa9seQ0QAfB9ElLm1pc5Rpcdg6papwfbtUUITUFkdyiG0LIOV/Cs2hpNDPxT9E wtQO2EhfIBI7WF7LRx347jvyfUS5TlIw7tXsxU+e09v46Cb2qWC9L77ZyaPwlsUQ UceW7do+PD0GpKImuVUyqeyRhIRlPefHce7CMktdNisGqbwNPCd6LYyjnEleeeNd ytsOj6o= -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:00 2025 by rpki-client