$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/84F58DCA7DCB11EC99806E25C4F9AE02.roa File: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (raw, json) Hash identifier: Gd7JCr1281wWWtBPVf/kwPfiC4gERpM54Kx0s/D+laI= Subject key identifier: 09:F1:18:28:B6:4E:B8:ED:21:10:E1:68:62:F5:2E:55:5F:09:45:F5 Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Certificate serial: 03A1 Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/84F58DCA7DCB11EC99806E25C4F9AE02.roa Signing time: Thu 19 Dec 2024 00:34:07 +0000 ROA not before: Thu 19 Dec 2024 00:34:07 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 131284 IP address blocks: 103.133.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 929 (0x3a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8265, serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Validity Not Before: Dec 19 00:34:07 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=676369ff-2479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:57:eb:02:da:61:98:4e:b1:dc:3f:42:65:07: 1a:86:47:2f:fc:81:dd:4e:43:c9:2b:b1:dc:0b:c7: 01:71:10:76:0f:c8:d6:84:41:29:85:7d:63:fe:5f: d9:95:f9:d6:ea:3a:b4:35:86:8e:13:02:ea:8d:c3: aa:d8:04:56:0c:0d:ce:4c:bd:4f:81:be:35:77:23: 46:8d:b2:f7:c0:74:a6:b5:74:61:dc:72:d7:f2:3f: 21:5f:c2:25:69:a6:17:31:14:bc:2e:a7:f0:74:06: 00:9e:c4:95:83:b4:95:c2:f6:de:f9:b4:5f:55:23: 86:29:39:42:6c:bb:66:2d:45:7f:e7:4c:0c:87:78: 47:4b:25:5c:01:b7:f4:92:69:eb:26:95:78:e2:54: 59:92:79:08:8c:b8:16:3e:cf:cb:25:e0:47:5a:3f: 10:1c:2d:95:e9:1c:30:1e:95:a7:0a:8f:8f:8c:fe: 28:44:18:ec:d8:07:4f:55:0f:24:56:15:1f:4d:d3: 16:64:ac:b3:40:52:c0:bd:69:4a:44:83:25:83:b4: 8c:45:51:9f:f9:9f:59:7c:4f:18:a0:a0:bd:ff:35: b7:73:f1:50:b1:41:40:87:6a:92:66:20:f9:1f:0d: f5:fa:cc:ea:9b:00:21:23:97:89:ae:f4:98:d6:14: 87:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F1:18:28:B6:4E:B8:ED:21:10:E1:68:62:F5:2E:55:5F:09:45:F5 X509v3 Authority Key Identifier: keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/84F58DCA7DCB11EC99806E25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.75.0/24 Signature Algorithm: sha256WithRSAEncryption ba:ae:7c:33:3e:ed:54:46:2c:02:9c:de:09:c2:54:1a:1f:31: 56:42:07:d6:d1:44:5a:7a:db:fc:8b:97:ab:62:ae:1b:d4:3c: fc:bc:fc:21:ad:c1:ef:8f:cd:f8:b6:19:43:1f:6e:fb:09:50: 71:50:46:68:ba:9b:5e:8b:27:d4:79:d0:53:4e:6c:f2:91:28: 03:02:98:a4:14:41:ec:c7:56:83:5b:3a:da:ce:89:34:a3:94: 88:b0:b4:84:35:ff:fc:2a:a1:22:e5:af:af:60:83:13:61:1e: f4:86:a0:69:4a:74:21:52:fe:b1:09:85:11:cf:b3:f5:d6:a6: c9:18:43:aa:5e:35:d5:f8:12:d9:13:67:c9:a7:15:2d:48:91: 35:dd:02:8a:38:dd:82:38:d2:4d:4a:dd:b6:36:ca:f8:24:3f: 00:0b:9d:18:a3:f1:ab:61:f2:fe:09:f9:af:ed:e9:4b:50:5d: 0c:c0:47:c4:e8:6e:98:29:f4:a9:87:af:43:99:08:51:28:b5: ae:9e:86:6b:b1:0e:7e:4a:35:23:90:fb:80:1b:8a:3f:7b:a2: 0b:07:d1:f1:0c:c3:df:fa:00:f1:c4:f8:3f:33:e1:c1:b3:b0: aa:4b:71:c6:f8:49:30:38:46:2f:9d:5f:40:cb:78:26:9b:a4: a6:7e:45:09 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyNjUxMTAvBgNVBAUTKDhGMTFDNDdFMkZFQTE5OUMyNzI3Qzg2QjQ5OTBGM0JG QUU4MjAxNjIwHhcNMjQxMjE5MDAzNDA3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYzNjlmZi0yNDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVfrAtphmE6x3D9CZQcahkcv/IHdTkPJK7HcC8cBcRB2D8jWhEEphX1j/l/Z lfnW6jq0NYaOEwLqjcOq2ARWDA3OTL1Pgb41dyNGjbL3wHSmtXRh3HLX8j8hX8Il aaYXMRS8LqfwdAYAnsSVg7SVwvbe+bRfVSOGKTlCbLtmLUV/50wMh3hHSyVcAbf0 kmnrJpV44lRZknkIjLgWPs/LJeBHWj8QHC2V6RwwHpWnCo+PjP4oRBjs2AdPVQ8k VhUfTdMWZKyzQFLAvWlKRIMlg7SMRVGf+Z9ZfE8YoKC9/zW3c/FQsUFAh2qSZiD5 Hw31+szqmwAhI5eJrvSY1hSHdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAnxGCi2 TrjtIRDhaGL1LlVfCUX1MB8GA1UdIwQYMBaAFI8RxH4v6hmcJyfIa0mQ87+uggFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI2NS80Q0Q1RkUwRTdE QzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUdad25KOGhyU1pEenY2NkNB V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4SEVmaV9xR1p3bko4aHJTWkR6djY2Q0FXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgyNjUvNENENUZFMEU3REM0MTFFQ0E5QzQ0MzFEQzRGOUFFMDIvODRGNThEQ0E3 RENCMTFFQzk5ODA2RTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnhUswDQYJKoZIhvcNAQELBQADggEBALqufDM+7VRGLAKc 3gnCVBofMVZCB9bRRFp62/yLl6tirhvUPPy8/CGtwe+Pzfi2GUMfbvsJUHFQRmi6 m16LJ9R50FNObPKRKAMCmKQUQezHVoNbOtrOiTSjlIiwtIQ1//wqoSLlr69ggxNh HvSGoGlKdCFS/rEJhRHPs/XWpskYQ6peNdX4EtkTZ8mnFS1IkTXdAoo43YI40k1K 3bY2yvgkPwALnRij8ath8v4J+a/t6UtQXQzAR8Tobpgp9KmHr0OZCFEota6ehmux Dn5KNSOQ+4Abij97ogsH0fEMw9/6APHE+D8z4cGzsKpLccb4STA4Ri+dX0DLeCab pKZ+RQk= -----END CERTIFICATE-----Generated at Sat Apr 26 07:44:35 2025 by rpki-client