$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/DA45147EB35E11EE8EED0E37C4F9AE02.roa File: DA45147EB35E11EE8EED0E37C4F9AE02.roa (raw, json) Hash identifier: MLem2RJrmzD72xixiKpCd0XFlZ6/VicCf/qXTlSWENc= Subject key identifier: 04:3A:E5:F2:8E:82:AF:FE:D8:56:C3:19:BC:B9:BA:97:3D:CA:81:B9 Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Certificate serial: 0685 Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/DA45147EB35E11EE8EED0E37C4F9AE02.roa Signing time: Mon 02 Dec 2024 22:31:52 +0000 ROA not before: Mon 02 Dec 2024 22:31:52 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 133073 IP address blocks: 43.251.118.0/24 maxlen: 24 43.251.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Validity Not Before: Dec 2 22:31:52 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=674e3558-9289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:01:51:9a:79:60:d9:4b:05:33:52:bb:05:5a: 15:2e:66:a5:76:83:05:55:a3:e2:aa:0b:5f:69:f2: a2:df:3d:3e:b3:9e:2e:39:a7:02:c9:f8:16:85:59: f0:6a:a5:9a:0c:2b:a8:b3:9b:d1:1f:eb:ef:33:6b: 9d:25:62:93:c0:d5:81:a9:2c:4f:ff:05:c7:ee:df: ee:4a:a0:24:25:39:8f:cd:3d:90:0a:6d:8d:2d:48: e6:56:ef:17:6d:24:b2:cc:1e:77:ae:27:10:72:19: 76:e6:ff:a4:42:3d:90:c1:99:b1:90:e4:ba:dc:85: c7:85:3b:3e:cb:f6:b9:9c:b2:9b:a1:26:bb:b9:b1: de:1c:2d:4d:80:b7:7a:fb:da:cb:e1:46:61:ef:89: 29:a2:0c:cb:f5:8b:33:65:48:4c:62:04:6f:9f:82: f6:95:57:d8:de:c2:9e:7c:f2:f4:85:b9:7e:a7:9c: 9f:24:cb:7e:3f:58:5e:0e:24:57:51:ff:7f:00:bf: 1b:d3:3d:ce:a6:8f:34:8c:c8:58:4a:85:c5:42:22: 90:34:ed:42:bd:1e:50:44:fe:1c:c1:1d:71:0f:d3: 3e:ab:ba:66:be:8c:9d:68:87:a0:9d:34:99:da:ca: 46:aa:b4:73:ff:7c:63:e7:3c:1a:8c:c9:9c:8a:1d: 00:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3A:E5:F2:8E:82:AF:FE:D8:56:C3:19:BC:B9:BA:97:3D:CA:81:B9 X509v3 Authority Key Identifier: keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/DA45147EB35E11EE8EED0E37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.118.0/23 Signature Algorithm: sha256WithRSAEncryption a2:90:5d:2d:35:91:82:22:ae:d2:0f:a5:64:a9:86:f2:5a:cb: 7d:34:c5:5b:b5:fa:0b:85:ee:33:d8:e2:80:9f:f8:09:e3:84: e1:aa:c4:e2:5d:b8:a0:3e:ec:bf:40:b0:62:24:96:39:30:88: ca:5b:50:3c:63:74:50:f5:ef:42:43:09:48:b6:de:7c:0f:a8: 2d:fd:b2:7f:55:c9:05:e4:4b:f2:09:16:40:c6:67:4e:38:ae: 03:e9:6d:ea:33:82:c0:15:83:06:dd:9b:03:d2:5f:f6:6a:0e: 5b:c2:df:8c:4f:80:00:77:1c:30:cb:19:d6:d3:83:3e:e6:b3: 03:fa:b9:38:af:a8:00:c5:2c:5a:ca:00:db:86:de:64:06:e9: b0:05:c3:d7:25:c5:be:29:6c:d8:35:73:a3:4d:35:10:b2:cf: bd:a6:07:5f:99:fb:47:3d:94:c9:59:08:b5:65:30:09:5a:e4: 53:c8:21:d2:90:92:9b:6c:2c:da:68:80:2e:ee:25:f9:f9:4f: d1:2b:98:ac:c5:c8:a0:0e:95:96:c1:09:a0:26:a5:c9:fd:3f: b4:5d:0b:3a:13:b1:cb:f4:a6:03:b9:d1:f1:46:c2:4e:f9:97: 0f:8b:74:9f:c9:f6:87:da:ff:7d:34:22:a7:16:d8:32:24:13: de:b3:f3:76 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz MzJEQTQzQ0IwHhcNMjQxMjAyMjIzMTUyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRlMzU1OC05Mjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQFRmnlg2UsFM1K7BVoVLmaldoMFVaPiqgtfafKi3z0+s54uOacCyfgWhVnw aqWaDCuos5vRH+vvM2udJWKTwNWBqSxP/wXH7t/uSqAkJTmPzT2QCm2NLUjmVu8X bSSyzB53ricQchl25v+kQj2QwZmxkOS63IXHhTs+y/a5nLKboSa7ubHeHC1NgLd6 +9rL4UZh74kpogzL9YszZUhMYgRvn4L2lVfY3sKefPL0hbl+p5yfJMt+P1heDiRX Uf9/AL8b0z3Opo80jMhYSoXFQiKQNO1CvR5QRP4cwR1xD9M+q7pmvoydaIegnTSZ 2spGqrRz/3xj5zwajMmcih0AJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAQ65fKO gq/+2FbDGby5upc9yoG5MB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdDMDQvQTBEQjM1NTI1RkI0MTFFQkFCN0M2QTIzQzRGOUFFMDIvREE0NTE0N0VC MzVFMTFFRThFRUQwRTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEr+3YwDQYJKoZIhvcNAQELBQADggEBAKKQXS01kYIirtIP pWSphvJay300xVu1+guF7jPY4oCf+AnjhOGqxOJduKA+7L9AsGIkljkwiMpbUDxj dFD170JDCUi23nwPqC39sn9VyQXkS/IJFkDGZ044rgPpbeozgsAVgwbdmwPSX/Zq DlvC34xPgAB3HDDLGdbTgz7mswP6uTivqADFLFrKANuG3mQG6bAFw9clxb4pbNg1 c6NNNRCyz72mB1+Z+0c9lMlZCLVlMAla5FPIIdKQkptsLNpogC7uJfn5T9ErmKzF yKAOlZbBCaAmpcn9P7RdCzoTscv0pgO50fFGwk75lw+LdJ/J9ofa/300IqcW2DIk E96z83Y= -----END CERTIFICATE-----Generated at Sat Apr 26 13:54:27 2025 by rpki-client