$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/804EBE76E89811EC8CDD1B61C4F9AE02.roa File: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (raw, json) Hash identifier: gigu9XXG4TciW/baJe+D9FNij/SMJDKtLbxaQE6wPW8= Subject key identifier: 33:A0:81:EC:43:52:58:60:4E:8E:17:A1:C2:64:45:69:16:D3:4F:C3 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 06A3 Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/804EBE76E89811EC8CDD1B61C4F9AE02.roa Signing time: Fri 13 Dec 2024 06:18:12 +0000 ROA not before: Fri 13 Dec 2024 06:18:12 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 132395 IP address blocks: 103.20.24.0/22 maxlen: 22 103.42.208.0/22 maxlen: 24 202.152.68.0/24 maxlen: 24 202.152.76.0/22 maxlen: 22 202.152.76.0/24 maxlen: 24 202.152.77.0/24 maxlen: 24 202.152.78.0/24 maxlen: 24 202.152.79.0/24 maxlen: 24 202.152.88.0/22 maxlen: 22 202.160.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1699 (0x6a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Dec 13 06:18:12 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=675bd1a4-0ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:b1:64:fe:44:ef:63:45:0a:e7:50:c2:9f: cc:87:65:1b:06:fa:c8:dc:ed:7a:8e:c2:c5:f6:9b: 14:97:60:6e:aa:61:d9:bc:a7:db:1f:91:ab:30:67: 8c:a4:1f:7f:37:be:07:60:09:d3:21:62:c5:70:83: 10:e7:a4:04:61:ea:4d:fa:13:bd:b9:bc:3d:20:51: d5:e2:f6:2d:c4:2d:b0:99:ee:24:b8:7e:fb:c0:44: d3:67:38:84:a1:fe:f0:2e:61:be:98:64:eb:ce:af: 78:98:72:76:89:8a:41:3b:7c:f0:af:6c:b5:51:3d: 91:5a:63:aa:da:e2:e0:74:5f:46:cf:35:ca:0f:35: 1a:34:27:b6:da:2a:53:8a:57:9e:56:e3:87:bc:ff: a2:ef:19:80:af:2a:a7:86:27:75:45:43:08:b3:e8: 4c:29:76:4a:3f:bd:6f:0c:14:87:73:2d:01:8f:af: 47:7d:f9:49:c6:2a:24:a8:ed:48:ce:7d:9a:22:d0: 3b:c6:40:e8:c3:62:97:15:28:76:48:39:8b:94:cc: 80:1d:39:e1:9d:da:a6:50:ad:9d:12:a2:d7:7e:4f: 53:d9:53:82:34:75:5e:c7:f9:42:d9:bf:21:a2:4a: fb:4a:54:cd:10:77:5e:90:39:71:c9:8c:66:15:42: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A0:81:EC:43:52:58:60:4E:8E:17:A1:C2:64:45:69:16:D3:4F:C3 X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/804EBE76E89811EC8CDD1B61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.24.0/22 103.42.208.0/22 202.152.68.0/24 202.152.76.0/22 202.152.88.0/22 202.160.32.0/20 Signature Algorithm: sha256WithRSAEncryption 51:86:1e:6b:00:56:53:f5:d7:00:88:ee:ba:e6:61:b1:71:59: 2a:68:ce:f8:80:28:7c:64:24:c2:8b:99:3d:3b:49:2e:2e:9d: 77:39:39:93:8f:fe:2e:d1:c6:bb:be:1f:e1:cb:98:e7:12:dc: d9:04:0b:da:ea:12:14:74:f7:be:a0:65:34:d5:80:f5:d3:66: b7:69:d8:e7:5a:85:d7:0b:9b:54:5d:f8:e7:1a:83:44:1d:6f: d1:6d:65:7d:0f:26:a9:62:63:dd:50:c2:d9:ef:f5:ce:be:02: d5:de:1b:24:16:de:a5:cb:c1:f9:f9:31:94:20:12:f9:65:09: 14:07:7e:26:02:f9:61:3f:22:78:12:1a:c7:9b:e4:7f:b7:85: 9a:17:b2:13:41:1a:de:d5:ec:17:7a:7f:02:f6:df:04:70:70: a1:81:95:5b:87:56:db:e6:10:ca:ed:a9:04:6e:01:e0:0a:7e: 8a:ae:57:75:94:bb:d4:d0:89:e4:2a:b0:95:be:a2:94:12:a0: 0a:13:b5:09:5c:b6:23:7f:dc:ab:aa:b2:77:84:93:58:ba:d6: ea:d8:0b:26:c3:bc:12:b4:87:9e:5f:4e:42:fc:54:26:3b:93: 4e:73:e3:15:50:41:7b:ea:cc:bc:b2:26:ee:71:a7:87:cb:9c: b8:01:25:a3 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICBqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjQxMjEzMDYxODEyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzViZDFhNC0wZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsH6xZP5E72NFCudQwp/Mh2UbBvrI3O16jsLF9psUl2BuqmHZvKfbH5GrMGeM pB9/N74HYAnTIWLFcIMQ56QEYepN+hO9ubw9IFHV4vYtxC2wme4kuH77wETTZziE of7wLmG+mGTrzq94mHJ2iYpBO3zwr2y1UT2RWmOq2uLgdF9GzzXKDzUaNCe22ipT ileeVuOHvP+i7xmAryqnhid1RUMIs+hMKXZKP71vDBSHcy0Bj69HfflJxiokqO1I zn2aItA7xkDow2KXFSh2SDmLlMyAHTnhndqmUK2dEqLXfk9T2VOCNHVex/lC2b8h okr7SlTNEHdekDlxyYxmFUKA4wIDAQABo4ICszCCAq8wHQYDVR0OBBYEFDOggexD UlhgTo4XocJkRWkW00/DMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhBNDEvNTU0MTQwREU4N0JDMTFFQkIzQzA4MjcyQzRGOUFFMDIvODA0RUJFNzZF ODk4MTFFQzhDREQxQjYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAJnFBgDBAJnKtADBADKmEQDBALKmEwDBALKmFgDBATKoCAw DQYJKoZIhvcNAQELBQADggEBAFGGHmsAVlP11wCI7rrmYbFxWSpozviAKHxkJMKL mT07SS4unXc5OZOP/i7Rxru+H+HLmOcS3NkEC9rqEhR0976gZTTVgPXTZrdp2Oda hdcLm1Rd+Ocag0Qdb9FtZX0PJqliY91Qwtnv9c6+AtXeGyQW3qXLwfn5MZQgEvll CRQHfiYC+WE/IngSGseb5H+3hZoXshNBGt7V7Bd6fwL23wRwcKGBlVuHVtvmEMrt qQRuAeAKfoquV3WUu9TQieQqsJW+opQSoAoTtQlctiN/3KuqsneEk1i61urYCybD vBK0h55fTkL8VCY7k05z4xVQQXvqzLyyJu5xp4fLnLgBJaM= -----END CERTIFICATE-----Generated at Sat Apr 26 08:16:53 2025 by rpki-client