$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/A0E062260A8C11EAB25FD253C4F9AE02.roa File: A0E062260A8C11EAB25FD253C4F9AE02.roa (raw, json) Hash identifier: 7xX6rH7i12z21iTWC8vTwBT7bsP1fB8No9Xtvt+ZVCA= Subject key identifier: 1E:59:AF:B6:ED:86:33:41:50:46:9A:62:AA:DC:3F:F1:E4:44:A0:A9 Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Certificate serial: 0BD0 Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/A0E062260A8C11EAB25FD253C4F9AE02.roa Signing time: Sat 30 Nov 2024 19:07:52 +0000 ROA not before: Sat 30 Nov 2024 19:07:52 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 137029 IP address blocks: 103.102.136.0/22 maxlen: 22 103.102.136.0/24 maxlen: 24 103.102.137.0/24 maxlen: 24 103.102.138.0/24 maxlen: 24 103.102.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3024 (0xbd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Validity Not Before: Nov 30 19:07:52 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674b6287-7bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ee:da:16:9b:fb:ac:5f:16:03:cf:46:15:59: 27:ec:ff:9c:06:52:58:ca:dd:cf:ef:3f:ca:fc:10: e3:bc:35:97:8a:c7:f6:e6:e2:e3:e0:d5:7d:4f:a6: 87:82:4b:88:d5:e1:26:f5:be:28:ab:79:4a:b5:e3: 78:67:f5:ef:36:03:c6:8b:32:d8:1d:e9:59:dd:50: 18:cd:1b:29:85:cf:56:31:13:35:2f:48:df:94:20: 5c:42:d3:94:a6:ec:b2:dd:67:15:83:c5:b8:15:d4: b5:ba:99:32:e2:f3:28:cf:12:92:f3:9c:9b:60:e0: e4:ec:e5:81:3d:05:8d:2b:12:c2:46:d6:49:03:02: 43:4c:56:fb:f2:e6:04:32:bf:a1:eb:2c:04:0a:b5: b5:a7:f8:f9:ee:49:3d:8d:16:a2:d4:2f:50:ae:8f: cc:bf:30:fb:bb:96:a4:03:40:ac:a2:38:b6:39:0e: 3c:50:8a:2a:2b:92:ce:49:05:8a:52:ff:2c:c6:b5: 58:ab:8d:26:79:3b:e1:48:3f:d4:01:41:12:38:ed: ff:e2:a1:e6:45:0c:c4:31:4f:91:37:f8:51:a7:63: 6c:f3:ac:fd:4e:04:37:7b:25:21:91:b5:25:ca:26: ad:39:97:91:3a:72:bf:18:c2:0d:6e:ab:24:d2:15: 85:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:59:AF:B6:ED:86:33:41:50:46:9A:62:AA:DC:3F:F1:E4:44:A0:A9 X509v3 Authority Key Identifier: keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/A0E062260A8C11EAB25FD253C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.136.0/22 Signature Algorithm: sha256WithRSAEncryption 35:75:0a:53:be:d1:08:e5:9c:5b:45:05:c4:58:4e:f0:10:42: 93:2c:d7:e4:28:dd:3c:65:1e:f5:2f:db:b3:1b:1b:b6:6c:00: 6f:d4:b7:4a:f1:a7:46:45:fe:ed:c8:ff:05:61:18:d2:62:c9: 1f:d9:09:85:97:14:8e:07:73:a3:af:96:2e:45:56:b4:8f:18: b1:47:1d:1d:20:44:9d:af:f0:af:f9:25:11:4a:7c:3c:6b:6f: a3:e2:47:2b:65:0d:ec:f1:1a:6a:06:ea:04:15:94:a5:30:17: 94:91:fe:7d:f6:a5:13:3a:c1:a4:9d:6d:a0:ba:75:ce:17:3a: 4e:67:7c:f3:8b:e2:6f:c9:e1:dc:2c:eb:ec:c7:a3:c8:f6:a9: 25:67:c4:a0:18:07:fa:88:1a:66:a4:bc:01:61:0b:11:71:b0: 47:7a:02:c8:37:a1:48:02:51:84:5f:db:1b:1a:24:84:c3:8d: b9:41:1d:0c:07:17:5f:5c:23:da:b1:75:92:31:b1:d4:57:6e: 66:a9:b9:43:d3:c2:2f:d9:fc:bf:8c:cf:fb:56:ba:d5:17:28: f5:cf:3a:ba:ee:2f:31:fb:aa:18:c9:db:17:a7:51:4b:25:a5: c8:5b:f3:3b:a5:85:f5:9d:8a:62:d7:92:3c:f8:88:3c:42:3a: 53:13:df:d9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy QjkwQkVFNTgwHhcNMjQxMTMwMTkwNzUyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRiNjI4Ny03YmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6e7aFpv7rF8WA89GFVkn7P+cBlJYyt3P7z/K/BDjvDWXisf25uLj4NV9T6aH gkuI1eEm9b4oq3lKteN4Z/XvNgPGizLYHelZ3VAYzRsphc9WMRM1L0jflCBcQtOU puyy3WcVg8W4FdS1upky4vMozxKS85ybYODk7OWBPQWNKxLCRtZJAwJDTFb78uYE Mr+h6ywECrW1p/j57kk9jRai1C9Qro/MvzD7u5akA0Csoji2OQ48UIoqK5LOSQWK Uv8sxrVYq40meTvhSD/UAUESOO3/4qHmRQzEMU+RN/hRp2Ns86z9TgQ3eyUhkbUl yiatOZeROnK/GMINbqsk0hWF8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFB5Zr7bt hjNBUEaaYqrcP/HkRKCpMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzlENUQvREQ2RjI4NzIwQThCMTFFQUJDRjlDRTUyQzRGOUFFMDIvQTBFMDYyMjYw QThDMTFFQUIyNUZEMjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnZogwDQYJKoZIhvcNAQELBQADggEBADV1ClO+0QjlnFtF BcRYTvAQQpMs1+Qo3TxlHvUv27MbG7ZsAG/Ut0rxp0ZF/u3I/wVhGNJiyR/ZCYWX FI4Hc6Ovli5FVrSPGLFHHR0gRJ2v8K/5JRFKfDxrb6PiRytlDezxGmoG6gQVlKUw F5SR/n32pRM6waSdbaC6dc4XOk5nfPOL4m/J4dws6+zHo8j2qSVnxKAYB/qIGmak vAFhCxFxsEd6Asg3oUgCUYRf2xsaJITDjblBHQwHF19cI9qxdZIxsdRXbmapuUPT wi/Z/L+Mz/tWutUXKPXPOrruLzH7qhjJ2xenUUslpchb8zulhfWdimLXkjz4iDxC OlMT39k= -----END CERTIFICATE-----Generated at Sat Apr 26 07:58:43 2025 by rpki-client