$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/36C627945ADD11EF80893A3FC4F9AE02.roa File: 36C627945ADD11EF80893A3FC4F9AE02.roa (raw, json) Hash identifier: SmnJr3cmtzrwi435sl7t5/Qk1K3MbfKQ5zVZNYo5M50= Subject key identifier: 28:A2:63:24:B8:87:F2:BF:7A:D3:63:28:1D:A2:E4:CF:38:7F:7F:E2 Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Certificate serial: 3B Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/36C627945ADD11EF80893A3FC4F9AE02.roa Signing time: Fri 29 Nov 2024 05:49:38 +0000 ROA not before: Fri 29 Nov 2024 05:49:37 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 26658 IP address blocks: 103.197.168.0/22 maxlen: 22 220.158.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Validity Not Before: Nov 29 05:49:37 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674955f1-c2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cb:f2:33:39:36:c4:3a:22:7e:9d:e8:d4:2f: d8:64:cd:8a:56:20:b9:0e:d5:0e:34:ea:47:67:77: 59:d8:5b:28:3d:23:80:1b:29:a7:a8:f2:1a:eb:84: ad:9f:60:96:1e:1e:db:f9:a0:71:62:2c:8c:5d:bd: 78:a6:2b:9f:e1:6b:f2:e3:d2:21:ec:32:da:05:d5: 06:d2:72:88:9a:c2:1d:42:9f:e7:ec:43:84:04:eb: b0:92:20:1a:c8:30:81:de:35:e7:f2:83:5c:2c:26: 16:3a:33:94:fa:59:9f:8a:25:fd:cd:42:0e:ee:47: 3f:d3:fb:4b:4b:5b:b8:ce:81:7f:92:23:b7:3c:9a: 8e:e0:78:a3:7f:21:c1:6a:80:1b:a1:44:10:66:d4: f2:2c:c7:aa:fe:04:5b:b1:8b:38:ca:4f:ac:12:e5: 70:fa:eb:3d:8a:19:5e:02:05:25:ff:38:03:5b:d2: 3a:85:c4:af:2e:e5:18:88:4a:67:b3:d8:4e:00:1c: 45:5b:37:47:e8:10:31:f0:a7:d0:49:11:18:eb:ff: ab:57:ce:97:4a:50:1b:f8:14:e7:ba:73:40:ba:32: 46:ff:57:ae:76:5f:9a:cb:0d:4c:3b:e6:f1:d1:98: e3:65:dd:08:c8:2e:15:9d:ed:19:7d:93:ef:18:2b: e7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A2:63:24:B8:87:F2:BF:7A:D3:63:28:1D:A2:E4:CF:38:7F:7F:E2 X509v3 Authority Key Identifier: keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/36C627945ADD11EF80893A3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.168.0/22 220.158.224.0/22 Signature Algorithm: sha256WithRSAEncryption 70:2c:40:76:cf:1a:03:04:7f:19:f4:29:4d:43:bf:3d:be:a1: 5b:b5:72:4d:7b:e7:cf:e5:c0:82:3d:58:62:02:1b:00:4b:a9: e6:76:58:b2:ee:56:1c:cf:14:3b:45:2c:b4:12:4d:21:1e:b3: 0c:18:1c:a3:03:10:48:fc:84:7d:de:da:a6:e9:c7:2f:04:c8: b2:a5:b3:a0:87:ad:2b:10:4b:a9:c0:d1:af:40:ef:a3:51:95: 1d:43:b4:a5:03:51:a2:6f:49:1f:b8:27:2c:93:4d:2d:f4:d2: 87:6e:4f:32:b6:91:54:d1:4b:1d:64:eb:3a:62:92:e0:86:2a: e0:b3:57:b7:33:22:83:b1:ab:a5:83:7c:55:03:57:99:63:a2: c4:0b:00:85:fc:1c:fd:72:a8:d3:3b:c3:d9:e7:6e:7d:3e:d9: ca:27:f7:79:1a:9c:10:9b:ab:9f:30:ee:a7:b6:39:81:b0:fb: 47:96:a5:c0:8b:75:d9:b9:04:e3:79:6e:4b:b4:6e:19:24:e5: 2f:d5:69:e2:0c:77:88:d1:60:d4:18:24:73:88:92:7b:af:86: 22:8b:90:5d:d4:82:d2:65:74:f5:ea:ab:7c:86:b8:60:a1:69: ba:50:d4:1f:df:6d:29:3f:a2:88:ff:f0:62:d3:62:00:e3:fe: 60:47:90:f0 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUVCQTExMC8GA1UEBRMoODVBRTYyMTlGODYyNjk0MTRCRTE3NkI3ODI1RjE2Q0RE RDQyNDJENDAeFw0yNDExMjkwNTQ5MzdaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NDk1NWYxLWMyZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKy/IzOTbEOiJ+nejUL9hkzYpWILkO1Q406kdnd1nYWyg9I4AbKaeo8hrrhK2f YJYeHtv5oHFiLIxdvXimK5/ha/Lj0iHsMtoF1QbScoiawh1Cn+fsQ4QE67CSIBrI MIHeNefyg1wsJhY6M5T6WZ+KJf3NQg7uRz/T+0tLW7jOgX+SI7c8mo7geKN/IcFq gBuhRBBm1PIsx6r+BFuxizjKT6wS5XD66z2KGV4CBSX/OANb0jqFxK8u5RiISmez 2E4AHEVbN0foEDHwp9BJERjr/6tXzpdKUBv4FOe6c0C6Mkb/V652X5rLDUw75vHR mONl3QjILhWd7Rl9k+8YK+ePAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUKKJjJLiH 8r9602MoHaLkzzh/f+IwHwYDVR0jBBgwFoAUha5iGfhiaUFL4Xa3gl8Wzd1CQtQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5RUJBL0ZBMzIwQ0RBNUFE QzExRUZCNTYwNjYzN0M0RjlBRTAyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGE1aUdmaGlhVUZMNFhhM2dsOFd6ZDFDUXRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVCQS9GQTMyMENEQTVBREMxMUVGQjU2MDY2MzdDNEY5QUUwMi8zNkM2Mjc5NDVB REQxMUVGODA4OTNBM0ZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmfFqAMEAtye4DANBgkqhkiG9w0BAQsFAAOCAQEAcCxAds8a AwR/GfQpTUO/Pb6hW7VyTXvnz+XAgj1YYgIbAEup5nZYsu5WHM8UO0UstBJNIR6z DBgcowMQSPyEfd7apunHLwTIsqWzoIetKxBLqcDRr0Dvo1GVHUO0pQNRom9JH7gn LJNNLfTSh25PMraRVNFLHWTrOmKS4IYq4LNXtzMig7GrpYN8VQNXmWOixAsAhfwc /XKo0zvD2edufT7Zyif3eRqcEJurnzDup7Y5gbD7R5alwIt12bkE43luS7RuGSTl L9Vp4gx3iNFg1Bgkc4iSe6+GIouQXdSC0mV09eqrfIa4YKFpulDUH99tKT+iiP/w YtNiAOP+YEeQ8A== -----END CERTIFICATE-----Generated at Sat Apr 26 09:29:59 2025 by rpki-client