$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/39F4FA3EC28011EFA15F7983C4F9AE02.roa File: 39F4FA3EC28011EFA15F7983C4F9AE02.roa (raw, json) Hash identifier: Tv0EkNRvl6HwjRZU1kGmTPF818bqvfwzUYMD5mrfPL8= Subject key identifier: AD:8E:99:80:90:E8:31:C2:59:32:B4:65:B7:AE:BC:91:28:27:20:E2 Certificate issuer: /CN=A91CBDC8/serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E Certificate serial: 0BB0 Authority key identifier: 9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/39F4FA3EC28011EFA15F7983C4F9AE02.roa Signing time: Wed 25 Dec 2024 05:22:26 +0000 ROA not before: Wed 25 Dec 2024 05:22:26 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 138024 IP address blocks: 103.195.0.0/24 maxlen: 24 103.195.1.0/24 maxlen: 24 103.195.2.0/24 maxlen: 24 103.195.3.0/24 maxlen: 24 139.5.133.0/24 maxlen: 24 139.5.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2992 (0xbb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBDC8, serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E Validity Not Before: Dec 25 05:22:26 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=676b9691-a504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f9:77:19:f0:fa:42:fe:77:78:85:e8:ac:78: eb:75:d3:0b:ca:95:51:40:d6:af:94:be:79:fd:45: 7e:85:42:a9:e6:e1:ba:01:e0:03:8a:55:cf:ec:fa: 13:22:50:d1:fb:0e:9f:84:72:9f:ce:69:01:9d:8d: d9:75:33:56:4c:34:40:40:da:7b:a3:b1:3f:6c:9b: e0:c1:99:04:82:f1:c8:75:36:28:12:1c:ae:0c:57: b4:fc:d3:84:87:a4:19:6b:18:ed:f0:8b:06:2e:20: 0f:8b:c4:d7:86:33:b7:6b:4e:5a:69:9e:55:e6:63: d7:cf:95:61:39:c1:bf:bb:24:56:ab:55:d9:49:4d: 62:70:e0:a8:5f:9a:79:de:0a:0f:58:ea:68:54:2a: 3f:b8:86:04:71:03:22:56:57:ec:97:73:30:8a:f4: c3:d1:07:5e:50:bd:24:6d:a9:d0:d0:33:5c:15:c7: ce:11:16:93:f7:57:d8:ba:0c:70:d0:ba:7d:a5:df: f6:3c:fe:ee:20:fe:a4:97:d8:a4:38:0c:c0:21:e4: 07:9e:10:a7:bf:79:c2:a6:7f:1f:99:64:a3:f1:59: 4a:a6:f8:68:f6:b0:c5:81:c8:cd:76:3b:0a:a5:5f: 14:4c:9d:b5:66:84:01:68:18:f9:f2:10:5c:e2:91: 06:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8E:99:80:90:E8:31:C2:59:32:B4:65:B7:AE:BC:91:28:27:20:E2 X509v3 Authority Key Identifier: keyid:9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/39F4FA3EC28011EFA15F7983C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.195.0.0/22 139.5.133.0-139.5.134.255 Signature Algorithm: sha256WithRSAEncryption 96:f0:29:8b:b1:7d:8b:4c:14:c2:72:2c:fb:04:76:4a:48:de: f0:f9:6b:9f:37:af:a9:b3:17:49:82:ce:9b:94:ed:f4:d6:84: f1:d0:ac:a6:80:66:56:27:d9:11:e4:2b:ec:14:fe:f5:32:30: 3c:ad:30:72:10:40:b8:0c:22:15:11:ef:48:f5:e1:06:58:4e: f6:80:0e:c9:3d:4f:7d:ef:74:9a:69:78:e6:53:9b:ba:2a:15: 9c:97:8e:ca:49:26:bc:7e:54:77:ff:c8:df:d7:6a:69:dd:ee: 85:30:64:d7:ac:33:1b:f3:3d:9a:38:63:ca:04:f8:2c:c8:b1: 74:86:48:9a:70:8b:1a:5a:4c:35:1d:fd:c2:de:c1:0e:bb:2c: 0e:20:97:5c:ff:83:d4:e2:af:94:6e:a8:c4:04:12:23:7b:d3: 79:95:31:6c:61:62:eb:77:0c:16:16:fb:c6:e7:0d:0f:e7:dd: 2b:9e:c9:8d:74:1f:65:47:66:b4:38:98:c1:fb:f4:e9:df:9a: 20:03:2f:90:60:a0:2b:81:fe:c3:d7:69:b0:2c:ef:5c:d0:b0: 86:01:07:57:9b:ec:71:e5:e5:d7:62:58:be:3c:5d:74:07:9b: 50:2f:aa:d6:06:66:cf:66:5e:2b:4c:fc:d7:24:f5:99:82:7d: 67:7e:e9:c9 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICC7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JEQzgxMTAvBgNVBAUTKDlCNjdDODcyMTRFRDk5NjU0MDcxMTkwQkVCQ0YwQjhE OUZBMUFGNEUwHhcNMjQxMjI1MDUyMjI2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZiOTY5MS1hNTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vl3GfD6Qv53eIXorHjrddMLypVRQNavlL55/UV+hUKp5uG6AeADilXP7PoT IlDR+w6fhHKfzmkBnY3ZdTNWTDRAQNp7o7E/bJvgwZkEgvHIdTYoEhyuDFe0/NOE h6QZaxjt8IsGLiAPi8TXhjO3a05aaZ5V5mPXz5VhOcG/uyRWq1XZSU1icOCoX5p5 3goPWOpoVCo/uIYEcQMiVlfsl3MwivTD0QdeUL0kbanQ0DNcFcfOERaT91fYugxw 0Lp9pd/2PP7uIP6kl9ikOAzAIeQHnhCnv3nCpn8fmWSj8VlKpvho9rDFgcjNdjsK pV8UTJ21ZoQBaBj58hBc4pEG8QIDAQABo4ICozCCAp8wHQYDVR0OBBYEFK2OmYCQ 6DHCWTK0ZbeuvJEoJyDiMB8GA1UdIwQYMBaAFJtnyHIU7ZllQHEZC+vPC42foa9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkRDOC82Njk3NjNGMDE4 RTAxMUVBQTBDMzhFN0JDNEY5QUUwMi9tMmZJY2hUdG1XVkFjUmtMNjg4TGpaLWhy MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20yZkljaFR0bVdWQWNSa0w2ODhMalotaHIwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JEQzgvNjY5NzYzRjAxOEUwMTFFQUEwQzM4RTdCQzRGOUFFMDIvMzlGNEZBM0VD MjgwMTFFRkExNUY3OTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAJnwwAwDAMEAIsFhQMEAIsFhjANBgkqhkiG9w0BAQsFAAOC AQEAlvApi7F9i0wUwnIs+wR2Skje8PlrnzevqbMXSYLOm5Tt9NaE8dCspoBmVifZ EeQr7BT+9TIwPK0wchBAuAwiFRHvSPXhBlhO9oAOyT1Pfe90mml45lObuioVnJeO ykkmvH5Ud//I39dqad3uhTBk16wzG/M9mjhjygT4LMixdIZImnCLGlpMNR39wt7B DrssDiCXXP+D1OKvlG6oxAQSI3vTeZUxbGFi63cMFhb7xucND+fdK57JjXQfZUdm tDiYwfv06d+aIAMvkGCgK4H+w9dpsCzvXNCwhgEHV5vsceXl12JYvjxddAebUC+q 1gZmz2ZeK0z81yT1mYJ9Z37pyQ== -----END CERTIFICATE-----Generated at Sat Apr 26 07:11:26 2025 by rpki-client