$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/B9D90E00606311EE8844F941C4F9AE02.roa File: B9D90E00606311EE8844F941C4F9AE02.roa (raw, json) Hash identifier: X2R7fBr7byP7M3KR3cBhw+xawX2t49iSaQy5emSoxD4= Subject key identifier: D4:47:ED:CC:A6:2F:BB:BB:9A:6E:4B:79:E6:53:09:09:36:FB:EE:FE Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Certificate serial: 048F Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/B9D90E00606311EE8844F941C4F9AE02.roa Signing time: Thu 28 Nov 2024 23:43:11 +0000 ROA not before: Thu 28 Nov 2024 23:43:11 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 211949 IP address blocks: 103.173.126.0/24 maxlen: 24 103.173.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1167 (0x48f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E83FE, serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Validity Not Before: Nov 28 23:43:11 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6749000f-2061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7b:c2:31:1e:48:14:91:e5:1c:90:d9:62:b2: 1f:2a:d5:cb:c4:b3:55:b5:1b:53:30:a2:26:7f:4d: 0e:29:ec:90:84:fd:2e:78:30:a7:0a:d0:b8:df:a1: 04:08:3d:8d:7d:dc:37:62:61:c7:ef:1c:43:6e:67: d6:2a:f7:03:97:23:89:8e:a5:29:3a:30:55:8c:e7: 3d:38:40:7e:78:f1:a8:94:6c:52:9d:21:2c:71:bd: 06:c5:21:e7:ec:7b:97:e7:91:4b:21:2a:4b:0a:6b: 75:c9:74:37:fa:e2:d8:9b:ea:db:8f:68:4e:fa:7b: 72:0a:b4:7e:81:ca:ee:78:e3:e3:e5:81:33:68:53: 68:fb:cc:5f:b6:20:11:9d:a2:af:da:a6:37:8e:a7: 4d:f0:99:02:9d:1a:8a:42:52:e8:3a:6b:0a:df:0a: 00:4c:31:7c:c6:27:29:5b:91:3a:c2:43:b4:12:52: 71:49:2d:0b:1a:70:70:98:d8:f2:54:7f:d4:bb:0f: ac:eb:02:43:86:f0:00:54:65:6b:94:dd:59:04:b2: 7f:c9:af:3a:83:9b:44:93:62:43:d6:eb:5a:d1:fc: e7:07:10:c1:51:2c:0d:83:17:94:d2:0b:dd:75:c6: a0:d7:7c:dd:e3:bb:0e:3f:93:cc:f3:78:54:ac:84: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:47:ED:CC:A6:2F:BB:BB:9A:6E:4B:79:E6:53:09:09:36:FB:EE:FE X509v3 Authority Key Identifier: keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/B9D90E00606311EE8844F941C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.126.0/23 Signature Algorithm: sha256WithRSAEncryption 16:87:45:7f:d4:c1:19:4a:cd:22:47:7b:55:bd:02:a1:e3:76: 6b:38:21:14:0e:10:5b:d9:c6:a8:92:e9:1e:9c:67:b2:12:9e: 5f:d7:aa:4a:74:18:78:a5:2f:14:4a:17:11:4e:91:07:cf:6d: e0:64:0f:f4:f0:8b:02:9c:52:b0:9b:a5:a8:b5:f0:f7:30:fd: 1d:0f:00:1e:5d:e2:b0:f7:92:b7:40:60:cf:a3:c6:41:a3:65: a6:e0:3c:49:8c:b8:22:27:d0:7e:de:41:24:b7:fc:49:78:8f: 96:53:a5:e8:61:15:10:35:f2:a2:88:3c:d1:5a:7a:e0:2d:17: e3:5d:03:0f:74:f6:9c:d1:86:c4:44:c4:ae:75:c2:65:8c:c5: ca:e6:b8:37:10:b1:fe:8e:dc:32:fc:e3:dc:c0:fe:ea:7d:c2: 43:f9:c3:2a:b5:07:31:94:10:a0:5d:89:a9:3a:48:1b:a3:05: 6a:b4:0b:cb:b1:a9:1a:5b:6f:55:bb:52:a8:8f:1a:4a:7d:db: 7a:fb:88:dd:23:22:63:b8:d1:14:8f:09:9d:39:b1:4f:35:1b: 4c:c6:2d:45:f8:3d:96:0f:92:e2:7c:36:cd:6c:a4:1a:a3:43: 0d:ce:02:a1:52:c7:ed:39:97:46:b1:a4:4b:a5:c1:ab:39:a6: dd:31:5a:69 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzRkUxMTAvBgNVBAUTKEExNENBMDc4Qzg1RTQ2NTM1RDkyMDQzODJCODQ5NzRG MTNCMEM5M0MwHhcNMjQxMTI4MjM0MzExWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ5MDAwZi0yMDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nvCMR5IFJHlHJDZYrIfKtXLxLNVtRtTMKImf00OKeyQhP0ueDCnCtC436EE CD2Nfdw3YmHH7xxDbmfWKvcDlyOJjqUpOjBVjOc9OEB+ePGolGxSnSEscb0GxSHn 7HuX55FLISpLCmt1yXQ3+uLYm+rbj2hO+ntyCrR+gcrueOPj5YEzaFNo+8xftiAR naKv2qY3jqdN8JkCnRqKQlLoOmsK3woATDF8xicpW5E6wkO0ElJxSS0LGnBwmNjy VH/Uuw+s6wJDhvAAVGVrlN1ZBLJ/ya86g5tEk2JD1uta0fznBxDBUSwNgxeU0gvd dcag13zd47sOP5PM83hUrIStrwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNRH7cym L7u7mm5LeeZTCQk2++7+MB8GA1UdIwQYMBaAFKFMoHjIXkZTXZIEOCuEl08TsMk8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODNGRS8zMjk1RjkwMjFE QjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJsTmRrZ1E0SzRTWFR4T3d5 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VeWdlTWhlUmxOZGtnUTRLNFNYVHhPd3lUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTgzRkUvMzI5NUY5MDIxREIzMTFFQzg2RTA4NjNFQzRGOUFFMDIvQjlEOTBFMDA2 MDYzMTFFRTg4NDRGOTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnrX4wDQYJKoZIhvcNAQELBQADggEBABaHRX/UwRlKzSJH e1W9AqHjdms4IRQOEFvZxqiS6R6cZ7ISnl/Xqkp0GHilLxRKFxFOkQfPbeBkD/Tw iwKcUrCbpai18Pcw/R0PAB5d4rD3krdAYM+jxkGjZabgPEmMuCIn0H7eQSS3/El4 j5ZTpehhFRA18qKIPNFaeuAtF+NdAw909pzRhsRExK51wmWMxcrmuDcQsf6O3DL8 49zA/up9wkP5wyq1BzGUEKBdiak6SBujBWq0C8uxqRpbb1W7UqiPGkp923r7iN0j ImO40RSPCZ05sU81G0zGLUX4PZYPkuJ8Ns1spBqjQw3OAqFSx+05l0axpEulwas5 pt0xWmk= -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:15 2025 by rpki-client