$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/6B5C86022D6811EB86D96027C4F9AE02.roa File: 6B5C86022D6811EB86D96027C4F9AE02.roa (raw, json) Hash identifier: t3hqNdqM2MD3ZAVu8FNoGwxlm5G0gcPJniuKJXcYFWI= Subject key identifier: F1:D2:BC:FE:13:65:C3:39:D7:4F:8F:46:3F:DC:F5:4B:0D:D8:64:D9 Certificate issuer: /CN=A91CB0E2/serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58 Certificate serial: 0709 Authority key identifier: 79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/6B5C86022D6811EB86D96027C4F9AE02.roa Signing time: Sun 02 Feb 2025 22:01:13 +0000 ROA not before: Sun 02 Feb 2025 22:01:13 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 133918 IP address blocks: 103.47.252.0/22 maxlen: 22 103.47.252.0/24 maxlen: 24 103.47.253.0/24 maxlen: 24 103.47.254.0/24 maxlen: 24 103.47.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1801 (0x709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB0E2, serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58 Validity Not Before: Feb 2 22:01:13 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=679feb28-7ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:07:43:b8:b9:b6:aa:25:38:4f:c4:45:73: 39:df:dc:d9:51:2d:71:a4:58:33:b7:35:b5:15:72: 43:86:45:5d:ee:06:62:cb:ad:10:70:b7:64:dc:93: a0:ce:50:15:6e:e6:2c:80:90:cf:ae:1b:a0:1b:5c: 46:0b:10:d2:dd:9f:59:52:f9:39:3c:11:d0:8c:8a: 38:83:a8:a7:a7:fe:0a:b4:69:bb:85:5e:85:fb:37: d9:a2:10:91:c1:4a:76:21:36:64:5b:42:fd:ae:0f: f0:f1:68:a4:e9:3b:ec:f2:3e:ee:3e:a8:9a:61:ed: 03:e9:3c:9b:0d:82:e9:84:b8:7a:76:22:57:4d:d2: 11:72:54:76:ff:7a:cf:2a:72:83:36:d6:6d:81:5e: 1c:95:39:f2:1a:02:e4:25:76:75:82:ea:9e:7d:15: 9b:62:a2:8f:d0:06:a3:ed:d5:29:42:51:7c:05:b8: f5:72:5e:96:25:97:2a:74:77:0f:da:37:cf:5d:82: 4c:a5:a2:76:e3:c1:04:d6:16:bd:33:61:9d:55:1f: 1c:71:a0:4d:45:20:77:cb:9d:ef:48:7f:83:c5:99: 28:52:df:22:e7:f1:37:cc:65:9c:39:cb:b3:6a:bb: a7:32:75:1a:e1:bd:2e:74:a2:92:9d:8c:80:f2:be: 20:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D2:BC:FE:13:65:C3:39:D7:4F:8F:46:3F:DC:F5:4B:0D:D8:64:D9 X509v3 Authority Key Identifier: keyid:79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/6B5C86022D6811EB86D96027C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.47.252.0/22 Signature Algorithm: sha256WithRSAEncryption 03:c5:4c:2b:93:8f:85:cd:e8:ce:83:40:25:2b:fa:bc:3e:36: 5a:9f:56:59:4e:3a:77:40:05:20:0b:27:9f:13:b3:54:3e:5a: fe:bf:cf:ab:fd:b6:93:21:16:34:17:e6:7b:4c:1f:b2:f0:c9: f7:19:e7:ce:18:b7:b3:df:4d:4f:c3:e4:bc:2c:b7:bf:33:a6: a8:c8:73:63:06:ef:eb:70:eb:c2:a7:c2:e8:a8:bb:4b:de:aa: be:56:ec:e2:78:8c:05:37:a1:69:c1:22:52:de:21:9b:11:a6: 87:83:d6:37:4c:3d:e0:fd:af:6a:69:17:49:52:b0:9b:88:33: a6:52:95:aa:74:a8:46:fe:80:28:90:4f:c2:99:41:1a:07:18: 3d:0b:ce:7f:8e:9a:27:df:ce:8a:74:ac:03:0c:96:e6:18:7c: 06:98:dd:51:06:5e:1f:7c:38:2d:f5:a8:62:24:f4:5a:3c:ab: 6f:74:25:70:e2:4b:4b:1a:db:45:26:e8:f7:81:37:8d:3c:2a: 3e:4e:2a:7d:53:e7:3b:89:c9:b9:bb:f3:51:1e:1b:90:28:d7: c0:04:83:db:6a:af:bc:a1:5f:8d:a7:38:34:67:b4:99:6d:eb: 1b:3b:69:96:12:d2:fd:f6:3d:c1:85:69:4a:bb:bd:3d:7e:fa: 67:a4:3c:a4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwRTIxMTAvBgNVBAUTKDc5REQ1MkFBMzE3NTMwODEyNkQxNzQ4NkE3MjgwNUZC MEUxQkFBNTgwHhcNMjUwMjAyMjIwMTEzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzlmZWIyOC03Y2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAQHQ7i5tqolOE/ERXM539zZUS1xpFgztzW1FXJDhkVd7gZiy60QcLdk3JOg zlAVbuYsgJDPrhugG1xGCxDS3Z9ZUvk5PBHQjIo4g6inp/4KtGm7hV6F+zfZohCR wUp2ITZkW0L9rg/w8Wik6Tvs8j7uPqiaYe0D6TybDYLphLh6diJXTdIRclR2/3rP KnKDNtZtgV4clTnyGgLkJXZ1guqefRWbYqKP0Aaj7dUpQlF8Bbj1cl6WJZcqdHcP 2jfPXYJMpaJ248EE1ha9M2GdVR8ccaBNRSB3y53vSH+DxZkoUt8i5/E3zGWcOcuz arunMnUa4b0udKKSnYyA8r4gTQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPHSvP4T ZcM510+PRj/c9UsN2GTZMB8GA1UdIwQYMBaAFHndUqoxdTCBJtF0hqcoBfsOG6pY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjBFMi9CNjIzODUyQTJE NjYxMUVCQjQ0RjU3MjVDNEY5QUUwMi9lZDFTcWpGMU1JRW0wWFNHcHlnRi13NGJx bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkMVNxakYxTUlFbTBYU0dweWdGLXc0YnFsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0IwRTIvQjYyMzg1MkEyRDY2MTFFQkI0NEY1NzI1QzRGOUFFMDIvNkI1Qzg2MDIy RDY4MTFFQjg2RDk2MDI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnL/wwDQYJKoZIhvcNAQELBQADggEBAAPFTCuTj4XN6M6D QCUr+rw+NlqfVllOOndABSALJ58Ts1Q+Wv6/z6v9tpMhFjQX5ntMH7LwyfcZ584Y t7PfTU/D5Lwst78zpqjIc2MG7+tw68Knwuiou0veqr5W7OJ4jAU3oWnBIlLeIZsR poeD1jdMPeD9r2ppF0lSsJuIM6ZSlap0qEb+gCiQT8KZQRoHGD0Lzn+Omiffzop0 rAMMluYYfAaY3VEGXh98OC31qGIk9Fo8q290JXDiS0sa20Um6PeBN408Kj5OKn1T 5zuJybm781EeG5Ao18AEg9tqr7yhX42nODRntJlt6xs7aZYS0v32PcGFaUq7vT1+ +mekPKQ= -----END CERTIFICATE-----Generated at Sat Apr 26 08:26:57 2025 by rpki-client