$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa File: F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (raw, json) Hash identifier: Ik/3X8YIb0qhd0Fqkle1gmGuYbSdF2VymS/D7TZSlFk= Subject key identifier: 9E:81:A5:DD:89:43:4E:F8:A5:76:E7:FD:9E:3E:F2:48:2E:A0:64:63 Certificate issuer: /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Certificate serial: 0D74 Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa Signing time: Sat 18 Jan 2025 18:06:21 +0000 ROA not before: Sat 18 Jan 2025 18:06:21 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 24559 IP address blocks: 103.126.104.0/22 maxlen: 24 203.91.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3444 (0xd74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1B92, serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Validity Not Before: Jan 18 18:06:21 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=678bed9c-3c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:39:05:ef:39:24:0d:91:b2:fe:d0:8b:20: ea:ae:cb:f7:75:46:c5:46:cb:0a:8e:26:86:fc:1c: 84:1a:82:fc:14:97:05:dc:49:e8:f0:06:bb:fd:97: 61:20:ac:81:0c:c8:b4:4d:97:e7:91:4e:37:42:84: 90:c7:76:cf:4e:bb:31:34:b1:d0:98:16:2b:64:fe: af:5d:f1:43:8a:69:e7:36:68:bc:66:1c:01:e7:5e: 0b:01:3f:f2:79:87:6c:2b:bb:3f:87:71:a5:25:5d: 5b:40:98:d6:f9:6d:68:3c:ba:4c:80:3a:2c:7d:c0: d0:f2:8e:b0:d7:88:12:bc:4d:3d:86:3e:2b:46:5e: fd:11:e5:f7:4f:1d:00:ab:9e:b6:c9:96:72:ce:98: 73:48:fb:db:6b:83:7d:8e:85:40:55:0c:f0:70:ed: 8c:91:9a:c3:a6:0e:ea:5a:4e:86:18:f8:81:63:9e: 8d:af:8f:86:26:fb:54:68:d0:7b:37:09:d2:37:6e: 7d:d7:11:e7:b5:86:d7:63:ec:32:7d:b9:9d:d0:9c: 39:ff:88:cf:70:d0:70:a2:37:54:36:f7:c2:bb:d6: db:95:e1:1e:71:87:29:6d:ca:f6:64:46:d4:c0:ba: 47:dc:61:75:14:11:29:68:fd:e4:9c:41:07:1b:86: d0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:81:A5:DD:89:43:4E:F8:A5:76:E7:FD:9E:3E:F2:48:2E:A0:64:63 X509v3 Authority Key Identifier: keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.104.0/22 203.91.112.0/21 Signature Algorithm: sha256WithRSAEncryption bd:a7:26:2e:6a:06:a6:c6:26:fa:63:2b:da:f0:06:b5:0e:98: 06:92:76:83:52:7c:92:a6:55:44:9b:cc:0c:e3:2b:e9:ac:26: 9e:dd:0a:44:9e:62:86:91:c3:57:af:e6:01:b7:4e:b4:76:b5: 0b:82:fa:ab:19:ec:03:f3:55:af:67:bc:8f:30:70:68:51:81: fe:7c:a5:8c:e1:34:f7:d6:9e:ed:d0:64:91:fb:c0:3e:1c:72: 78:b5:dd:72:61:56:6d:5d:b3:30:08:f6:a4:74:f4:ad:a7:39: c0:5f:9a:79:ef:4d:c4:fe:6f:8a:30:7c:05:a1:f0:02:49:21: 7e:f2:cb:49:db:f8:69:3f:86:5c:94:f4:25:91:2d:72:a5:f1: 39:84:cf:b0:61:f5:53:2a:ae:a1:87:28:86:57:9c:a4:d0:04: 66:9d:23:14:56:fe:a9:fb:c3:d9:8c:01:d1:0a:4a:83:e7:1d: a8:43:21:ed:6a:72:3e:45:39:35:28:94:25:b3:16:4b:76:ef: 57:c5:fb:4e:3e:8e:37:c8:0a:ba:7c:8e:01:c0:ab:4f:36:1f: 7c:58:d6:65:ff:4b:42:d0:bc:06:c2:2b:74:dd:a6:15:e9:3c: fd:14:00:35:55:21:b8:f5:b8:7f:f1:f3:2d:53:f3:ee:da:80: 45:63:fd:ab -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFCOTIxMTAvBgNVBAUTKEI3NDZDREQzMTcyQTIwMTFGMDIxODlGRjJEQUQ3ODdE MjlDMDExRTkwHhcNMjUwMTE4MTgwNjIxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhiZWQ5Yy0zYzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw905Be85JA2Rsv7QiyDqrsv3dUbFRssKjiaG/ByEGoL8FJcF3Eno8Aa7/Zdh IKyBDMi0TZfnkU43QoSQx3bPTrsxNLHQmBYrZP6vXfFDimnnNmi8ZhwB514LAT/y eYdsK7s/h3GlJV1bQJjW+W1oPLpMgDosfcDQ8o6w14gSvE09hj4rRl79EeX3Tx0A q562yZZyzphzSPvba4N9joVAVQzwcO2MkZrDpg7qWk6GGPiBY56Nr4+GJvtUaNB7 NwnSN2591xHntYbXY+wyfbmd0Jw5/4jPcNBwojdUNvfCu9bbleEecYcpbcr2ZEbU wLpH3GF1FBEpaP3knEEHG4bQoQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJ6Bpd2J Q074pXbn/Z4+8kguoGRjMB8GA1UdIwQYMBaAFLdGzdMXKiAR8CGJ/y2teH0pwBHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUI5Mi9BQUJGQzQ5QUJE NjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlCSHdJWW5fTGExNGZTbkFF ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwYk4weGNxSUJId0lZbl9MYTE0ZlNuQUVlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFCOTIvQUFCRkM0OUFCRDYwMTFFOTk1NkEwRjE5QzRGOUFFMDIvRjhBQzNERDhE QjkxMTFFOUI3MEVERDJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnfmgDBAPLW3AwDQYJKoZIhvcNAQELBQADggEBAL2nJi5q BqbGJvpjK9rwBrUOmAaSdoNSfJKmVUSbzAzjK+msJp7dCkSeYoaRw1ev5gG3TrR2 tQuC+qsZ7APzVa9nvI8wcGhRgf58pYzhNPfWnu3QZJH7wD4ccni13XJhVm1dszAI 9qR09K2nOcBfmnnvTcT+b4owfAWh8AJJIX7yy0nb+Gk/hlyU9CWRLXKl8TmEz7Bh 9VMqrqGHKIZXnKTQBGadIxRW/qn7w9mMAdEKSoPnHahDIe1qcj5FOTUolCWzFkt2 71fF+04+jjfICrp8jgHAq082H3xY1mX/S0LQvAbCK3TdphXpPP0UADVVIbj1uH/x 8y1T8+7agEVj/as= -----END CERTIFICATE-----Generated at Sat Apr 26 07:51:07 2025 by rpki-client