$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/C9989D9EF52011EF88416555C4F9AE02.roa File: C9989D9EF52011EF88416555C4F9AE02.roa (raw, json) Hash identifier: 5ttWZpUai22oFSUg02AkUKazNYGpWMAvqC2hReQsDD4= Subject key identifier: CF:87:1A:2B:46:AF:FD:64:5A:43:69:98:0B:10:3E:B2:F2:E9:C2:A0 Certificate issuer: /CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Certificate serial: 0BEC Authority key identifier: 90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/C9989D9EF52011EF88416555C4F9AE02.roa Signing time: Thu 27 Feb 2025 15:37:45 +0000 ROA not before: Thu 27 Feb 2025 15:37:45 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136022 IP address blocks: 103.134.40.0/24 maxlen: 24 103.134.41.0/24 maxlen: 24 2404:5cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3052 (0xbec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA2CC, serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Validity Not Before: Feb 27 15:37:45 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c086c8-ecb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:50:cd:a2:c5:80:09:7b:b8:b1:76:b6:a4: 4d:ad:03:8e:e9:82:3a:cc:9b:c1:ff:eb:eb:57:d2: bc:2d:43:51:ea:96:58:1a:f5:20:02:be:89:74:8e: 0b:cf:6f:f6:0b:35:31:25:02:aa:82:08:48:99:64: c8:3a:ee:cd:58:79:2d:6e:ac:75:02:78:5b:6a:3c: 4e:40:0f:d2:42:9f:2d:e1:48:a9:8e:eb:c0:a6:60: 66:72:6c:61:15:7d:19:03:d4:76:b0:b6:40:79:40: 06:80:31:25:6d:fb:be:5c:36:ea:e8:09:d0:db:f9: b1:d0:8f:cb:c9:18:a5:b9:fd:68:b9:66:c2:37:52: 31:01:c6:d0:5c:66:d4:90:eb:c4:7a:55:10:55:8f: e7:cb:e4:9d:e6:f2:2e:62:af:d0:51:04:d4:e4:78: 15:82:44:f0:2c:cc:7b:33:b5:13:f2:02:9a:74:18: a5:bc:ea:57:16:3c:5e:68:58:08:fa:b1:f5:25:9b: ee:54:25:11:17:c9:74:a4:55:37:fb:a1:17:90:c8: e3:53:cd:30:9c:c7:98:ff:ee:d6:71:fa:0e:33:ae: 6e:9e:88:44:a5:ad:29:82:ff:13:fa:c7:e0:51:13: c6:2f:27:1c:41:04:59:fb:73:fe:c1:f1:64:00:25: b0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:87:1A:2B:46:AF:FD:64:5A:43:69:98:0B:10:3E:B2:F2:E9:C2:A0 X509v3 Authority Key Identifier: keyid:90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/C9989D9EF52011EF88416555C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.40.0/23 IPv6: 2404:5cc0::/32 Signature Algorithm: sha256WithRSAEncryption 19:90:0e:4c:44:9a:b3:2b:25:b5:cc:08:07:80:08:d0:22:28: 04:6a:aa:ac:a6:b5:4f:5f:57:2d:99:67:e8:c2:ba:42:9e:b0: d4:6d:ee:22:7a:f1:eb:1b:10:b4:24:72:f7:09:3d:6c:f2:32: e8:3f:50:22:a3:b6:aa:12:c0:42:93:1b:0b:ce:92:7d:c3:10: 14:87:57:20:29:f3:c3:48:85:81:27:bc:9b:a0:a7:21:de:8d: 12:bb:87:9b:64:24:d0:5f:e6:30:0f:24:f6:a2:0f:a8:f7:e8: 6f:18:cb:92:c2:33:19:37:49:93:21:6b:fd:a1:93:82:52:01: c4:ca:01:e2:e5:db:c7:84:7d:40:04:c4:d2:ea:1c:1d:7e:5e: c0:4c:e6:e2:30:de:2a:7f:46:26:2a:9b:dd:39:e6:e1:d3:b3: d5:38:b7:61:04:f3:1a:0a:49:3c:91:ab:81:7b:a5:fa:48:cb: 69:44:2b:92:e9:42:34:76:f6:af:f8:12:0b:b9:d2:16:35:59: 65:36:f1:87:f5:28:a1:a1:8d:c1:1a:ea:68:4a:b0:2e:6f:62: 0e:b6:65:88:12:df:45:d7:34:e5:48:d6:75:b9:a8:ec:29:a9: 80:af:92:5f:db:05:81:07:37:8a:90:20:fb:e7:28:fc:82:fd: 2f:95:61:fc -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUEyQ0MxMTAvBgNVBAUTKDkwQTk4NDUwQjlEQTkzODExOEEyRDVBRDUzNEQ4ODI4 RjRCOTQ2MzQwHhcNMjUwMjI3MTUzNzQ1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MwODZjOC1lY2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNpQzaLFgAl7uLF2tqRNrQOO6YI6zJvB/+vrV9K8LUNR6pZYGvUgAr6JdI4L z2/2CzUxJQKqgghImWTIOu7NWHktbqx1AnhbajxOQA/SQp8t4UipjuvApmBmcmxh FX0ZA9R2sLZAeUAGgDElbfu+XDbq6AnQ2/mx0I/LyRiluf1ouWbCN1IxAcbQXGbU kOvEelUQVY/ny+Sd5vIuYq/QUQTU5HgVgkTwLMx7M7UT8gKadBilvOpXFjxeaFgI +rH1JZvuVCURF8l0pFU3+6EXkMjjU80wnMeY/+7WcfoOM65unohEpa0pgv8T+sfg URPGLyccQQRZ+3P+wfFkACWwxwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFM+HGitG r/1kWkNpmAsQPrLy6cKgMB8GA1UdIwQYMBaAFJCphFC52pOBGKLVrVNNiCj0uUY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTJDQy9GMjZFMDZDRTEx RjkxMUVBOUNCODhDMzVDNEY5QUUwMi9rS21FVUxuYWs0RVlvdFd0VTAySUtQUzVS alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tLbUVVTG5hazRFWW90V3RVMDJJS1BTNVJqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUEyQ0MvRjI2RTA2Q0UxMUY5MTFFQTlDQjg4QzM1QzRGOUFFMDIvQzk5ODlEOUVG NTIwMTFFRjg4NDE2NTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnhigwDQQCAAIwBwMFACQEXMAwDQYJKoZIhvcNAQELBQAD ggEBABmQDkxEmrMrJbXMCAeACNAiKARqqqymtU9fVy2ZZ+jCukKesNRt7iJ68esb ELQkcvcJPWzyMug/UCKjtqoSwEKTGwvOkn3DEBSHVyAp88NIhYEnvJugpyHejRK7 h5tkJNBf5jAPJPaiD6j36G8Yy5LCMxk3SZMha/2hk4JSAcTKAeLl28eEfUAExNLq HB1+XsBM5uIw3ip/RiYqm9055uHTs9U4t2EE8xoKSTyRq4F7pfpIy2lEK5LpQjR2 9q/4Egu50hY1WWU28Yf1KKGhjcEa6mhKsC5vYg62ZYgS30XXNOVI1nW5qOwpqYCv kl/bBYEHN4qQIPvnKPyC/S+VYfw= -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:15 2025 by rpki-client