$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/99667AD4F83211ED97101D26C4F9AE02.roa File: 99667AD4F83211ED97101D26C4F9AE02.roa (raw, json) Hash identifier: 2OG0+2v9VA4dZFvNj2X3CNFWKhubxv4DPcDnyPwBjTQ= Subject key identifier: 82:44:1B:24:00:41:8A:BB:E5:FE:97:AB:B2:63:FB:10:C0:00:22:F8 Certificate issuer: /CN=A91C1710/serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228 Certificate serial: 012B Authority key identifier: C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/99667AD4F83211ED97101D26C4F9AE02.roa Signing time: Sun 01 Dec 2024 01:03:45 +0000 ROA not before: Sun 01 Dec 2024 01:03:45 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 58701 IP address blocks: 103.20.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1710, serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228 Validity Not Before: Dec 1 01:03:45 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=674bb5f1-0ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:68:73:da:c0:67:b7:10:92:6d:ce:30:1e:19: 85:1c:97:3f:3f:cc:92:7b:25:54:bf:06:c4:6c:a4: 39:eb:51:79:6d:4d:95:d2:39:3a:49:aa:91:a6:78: 2b:f4:6d:50:b4:83:92:44:d1:62:1e:90:07:41:68: a8:26:4e:bb:f0:14:e0:f6:ee:4d:2c:dc:4b:31:9a: 24:ad:81:32:30:f8:7f:0c:45:43:7f:26:85:47:54: 46:bb:eb:51:37:9e:51:dc:23:d7:8f:b5:3b:99:8a: 13:8a:3c:b6:ca:69:83:eb:f7:6c:74:06:38:77:9d: 81:70:01:24:d5:44:7f:cb:42:35:36:5e:09:63:d9: b9:91:2c:92:e4:36:a3:cf:43:52:a7:48:d8:96:a8: 12:05:de:7d:6d:cd:b6:b5:a8:ed:cf:6f:dc:3b:9a: 89:d5:15:b7:9b:c7:da:ee:00:71:ac:cc:85:60:31: 06:50:be:12:9f:af:b1:d3:38:a9:80:2e:c6:d6:a9: d2:cd:e3:62:a4:8f:62:60:d6:de:d5:f2:2b:41:85: 3a:03:82:b6:66:45:ec:1e:cc:58:e2:a9:b6:09:c7: 00:cf:25:74:d4:2c:03:90:c2:c2:15:20:ee:93:62: 11:6e:31:c4:4b:da:02:00:b4:9d:8d:55:ba:41:34: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:44:1B:24:00:41:8A:BB:E5:FE:97:AB:B2:63:FB:10:C0:00:22:F8 X509v3 Authority Key Identifier: keyid:C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/99667AD4F83211ED97101D26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.89.0/24 Signature Algorithm: sha256WithRSAEncryption 55:0c:31:72:8a:64:b1:57:bf:e6:1c:9f:0d:16:c3:ea:f7:16: 06:c1:e0:79:46:05:e4:73:08:41:d9:db:17:43:fa:fd:77:c0: 65:cb:fc:17:15:79:9e:aa:7d:e1:bf:e4:ce:ce:81:6e:d6:8d: e2:c7:4f:ed:c7:b3:8f:35:48:4d:25:f1:01:94:ca:b1:91:b0: ca:8a:94:e3:7e:8e:a3:02:66:42:a2:f5:a3:fe:53:71:26:6e: 17:c0:59:f1:ab:b0:66:a4:f4:c0:9e:ea:d8:33:d0:2b:2e:04: e6:d9:65:ce:f6:f8:d0:5a:7d:2e:2a:8f:f5:ee:93:ef:42:70: 51:37:a2:67:d7:d5:1c:15:1f:37:9a:d6:e9:6b:4e:23:a8:28: 67:1d:f7:ba:cf:00:c7:6d:64:6c:3a:63:7b:ee:7d:4f:dc:aa: fd:47:86:63:50:bf:eb:ef:c4:96:90:b7:1f:26:fd:ba:5c:1d: fa:ac:8a:42:85:99:dd:75:28:ef:9a:57:57:dd:be:f1:ce:ee: 75:65:b7:2d:f5:22:64:f7:dd:46:3b:73:25:e7:6d:d6:b8:c3: a2:47:6c:26:19:11:27:61:39:af:10:7e:ed:d5:f3:7c:d3:61: ea:d0:2c:55:cf:70:29:45:77:97:58:de:8f:75:17:74:07:9f: d0:19:17:8c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE3MTAxMTAvBgNVBAUTKEM5Mzc1M0E5QUFBMkE4NkU1NkNBNEVBMEMzRkY4NTdD MzBFMzQyMjgwHhcNMjQxMjAxMDEwMzQ1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRiYjVmMS0wZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWhz2sBntxCSbc4wHhmFHJc/P8ySeyVUvwbEbKQ561F5bU2V0jk6SaqRpngr 9G1QtIOSRNFiHpAHQWioJk678BTg9u5NLNxLMZokrYEyMPh/DEVDfyaFR1RGu+tR N55R3CPXj7U7mYoTijy2ymmD6/dsdAY4d52BcAEk1UR/y0I1Nl4JY9m5kSyS5Daj z0NSp0jYlqgSBd59bc22tajtz2/cO5qJ1RW3m8fa7gBxrMyFYDEGUL4Sn6+x0zip gC7G1qnSzeNipI9iYNbe1fIrQYU6A4K2ZkXsHsxY4qm2CccAzyV01CwDkMLCFSDu k2IRbjHES9oCALSdjVW6QTR5RwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIJEGyQA QYq75f6Xq7Jj+xDAACL4MB8GA1UdIwQYMBaAFMk3U6mqoqhuVspOoMP/hXww40Io MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy NkIxMUVDQTExQkE1MkJDNEY5QUUwMi95VGRUcWFxaXFHNVd5azZnd18tRmZERGpR aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lUZFRxYXFpcUc1V3lrNmd3Xy1GZkREalFpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzE3MTAvMTgyMjlBODY4MjZCMTFFQ0ExMUJBNTJCQzRGOUFFMDIvOTk2NjdBRDRG ODMyMTFFRDk3MTAxRDI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnFFkwDQYJKoZIhvcNAQELBQADggEBAFUMMXKKZLFXv+Yc nw0Ww+r3FgbB4HlGBeRzCEHZ2xdD+v13wGXL/BcVeZ6qfeG/5M7OgW7WjeLHT+3H s481SE0l8QGUyrGRsMqKlON+jqMCZkKi9aP+U3EmbhfAWfGrsGak9MCe6tgz0Csu BObZZc72+NBafS4qj/Xuk+9CcFE3omfX1RwVHzea1ulrTiOoKGcd97rPAMdtZGw6 Y3vufU/cqv1HhmNQv+vvxJaQtx8m/bpcHfqsikKFmd11KO+aV1fdvvHO7nVlty31 ImT33UY7cyXnbda4w6JHbCYZESdhOa8Qfu3V83zTYerQLFXPcClFd5dY3o91F3QH n9AZF4w= -----END CERTIFICATE-----Generated at Sat Apr 26 08:02:57 2025 by rpki-client