$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/0893031C846611EA9B99E043C4F9AE02.roa File: 0893031C846611EA9B99E043C4F9AE02.roa (raw, json) Hash identifier: 3hay+KNg/2l74ymUeo3rJ7DbBbo6k73NfQvBnuqkfBY= Subject key identifier: 41:D3:95:C8:F7:01:1C:D6:54:18:38:F9:B6:D3:75:16:7E:53:BD:A1 Certificate issuer: /CN=A91F9FA2/serialNumber=FA07E8EABA8470A8A5FE4BA13E75D9E5FEA33B27 Certificate serial: 0961 Authority key identifier: FA:07:E8:EA:BA:84:70:A8:A5:FE:4B:A1:3E:75:D9:E5:FE:A3:3B:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/0893031C846611EA9B99E043C4F9AE02.roa Signing time: Wed 04 Dec 2024 19:58:32 +0000 ROA not before: Wed 04 Dec 2024 19:58:32 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 139471 IP address blocks: 103.145.22.0/23 maxlen: 23 103.145.22.0/24 maxlen: 24 103.145.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.crl rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2401 (0x961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FA2, serialNumber=FA07E8EABA8470A8A5FE4BA13E75D9E5FEA33B27 Validity Not Before: Dec 4 19:58:32 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6750b467-b4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:3e:1e:ee:cc:5b:84:40:0e:9f:ab:6f:18: d6:43:61:ec:b8:9f:3c:47:3d:69:7f:e0:36:84:f5: 86:a9:70:3d:b1:a1:4a:35:05:56:d2:a2:b2:6d:f9: e0:37:b9:fe:26:4a:4e:04:21:88:df:81:87:0c:e9: 38:dd:f4:8b:02:4e:23:e7:d8:06:90:d8:4f:3b:31: d8:1f:33:05:20:ae:81:46:f0:f9:f2:ea:b7:6b:ac: 2c:27:58:f1:66:73:9f:88:61:93:73:1b:76:23:e4: b1:ec:b0:b1:85:4d:42:02:55:08:47:7d:50:4c:bb: 46:47:4c:10:c2:1b:a1:92:59:15:59:62:69:54:51: 17:92:2b:e1:be:83:6f:97:d1:be:6f:5b:e0:b4:a8: ef:0b:3b:2f:7e:81:aa:0e:de:fe:5f:4c:92:13:4e: be:a5:7c:fe:3c:5e:30:be:80:f5:2c:e0:75:d6:d5: 49:6f:ad:87:07:8d:c5:cd:23:ff:ca:4a:86:9b:35: a5:f3:0b:54:0e:a0:1a:40:8c:4b:f4:6b:2d:91:ad: d2:9a:4a:ee:ea:7c:a8:57:ae:63:bf:8d:bf:b6:37: 57:6d:e8:1e:51:44:f8:44:5a:7f:ea:ee:2a:88:d4: 56:5e:1c:4d:81:15:6b:73:e4:42:ee:f5:31:c8:23: eb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D3:95:C8:F7:01:1C:D6:54:18:38:F9:B6:D3:75:16:7E:53:BD:A1 X509v3 Authority Key Identifier: keyid:FA:07:E8:EA:BA:84:70:A8:A5:FE:4B:A1:3E:75:D9:E5:FE:A3:3B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/0893031C846611EA9B99E043C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.22.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:c4:e8:aa:23:2b:89:b4:7e:28:91:08:21:9d:89:9f:80:f8: 98:3b:43:02:7b:00:c5:4e:2c:ba:88:0a:e0:fc:69:33:95:61: 8a:d0:9c:16:84:d0:89:79:18:60:71:ad:66:ce:3c:33:c7:c1: 02:ef:98:e0:aa:d4:9c:bb:74:15:ed:e8:a6:b3:87:47:fc:e9: 28:2b:af:27:46:fa:5e:b2:04:b7:b4:3a:b1:fd:78:04:9d:bd: 49:1c:e4:1d:1f:8f:34:60:ac:d8:91:7a:b1:c2:cf:a1:6d:47: a0:0d:dd:82:1a:93:49:69:4b:4d:80:76:e5:13:9b:8e:73:b6: 46:ce:93:6a:db:26:1e:33:14:7c:8c:a2:f0:29:71:78:a8:aa: 7b:b7:49:7d:35:d3:3b:f4:7d:9e:9b:39:23:87:cc:03:b6:1c: 33:c1:d6:fd:75:35:50:35:34:63:d4:a9:0e:2d:d9:be:36:6e: 96:40:dc:cb:c2:0c:f9:6a:1d:9d:d8:91:bc:6b:73:01:2f:ed: 83:c9:c3:37:05:10:d1:f5:a4:2b:39:db:62:8d:77:aa:b1:74: fd:68:d5:67:b0:fa:66:e5:e8:5e:10:98:d5:0e:75:2f:6a:75: 9b:86:e2:5b:af:10:61:34:98:d6:3e:76:53:9a:dd:f0:14:88: 70:be:7f:21 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQTIxMTAvBgNVBAUTKEZBMDdFOEVBQkE4NDcwQThBNUZFNEJBMTNFNzVEOUU1 RkVBMzNCMjcwHhcNMjQxMjA0MTk1ODMyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwYjQ2Ny1iNGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaM+Hu7MW4RADp+rbxjWQ2HsuJ88Rz1pf+A2hPWGqXA9saFKNQVW0qKybfng N7n+JkpOBCGI34GHDOk43fSLAk4j59gGkNhPOzHYHzMFIK6BRvD58uq3a6wsJ1jx ZnOfiGGTcxt2I+Sx7LCxhU1CAlUIR31QTLtGR0wQwhuhklkVWWJpVFEXkivhvoNv l9G+b1vgtKjvCzsvfoGqDt7+X0ySE06+pXz+PF4wvoD1LOB11tVJb62HB43FzSP/ ykqGmzWl8wtUDqAaQIxL9Gstka3Smkru6nyoV65jv42/tjdXbegeUUT4RFp/6u4q iNRWXhxNgRVrc+RC7vUxyCPrTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEHTlcj3 ARzWVBg4+bbTdRZ+U72hMB8GA1UdIwQYMBaAFPoH6Oq6hHCopf5LoT512eX+ozsn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZBMi8xQzg4QjAzQTg0 NjQxMUVBQTk5NDE1NDBDNEY5QUUwMi8tZ2ZvNnJxRWNLaWxfa3VoUG5YWjVmNmpP eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nZm82cnFFY0tpbF9rdWhQblhaNWY2ak95Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjlGQTIvMUM4OEIwM0E4NDY0MTFFQUE5OTQxNTQwQzRGOUFFMDIvMDg5MzAzMUM4 NDY2MTFFQTlCOTlFMDQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnkRYwDQYJKoZIhvcNAQELBQADggEBAD7E6KojK4m0fiiR CCGdiZ+A+Jg7QwJ7AMVOLLqICuD8aTOVYYrQnBaE0Il5GGBxrWbOPDPHwQLvmOCq 1Jy7dBXt6Kazh0f86SgrrydG+l6yBLe0OrH9eASdvUkc5B0fjzRgrNiRerHCz6Ft R6AN3YIak0lpS02AduUTm45ztkbOk2rbJh4zFHyMovApcXioqnu3SX010zv0fZ6b OSOHzAO2HDPB1v11NVA1NGPUqQ4t2b42bpZA3MvCDPlqHZ3YkbxrcwEv7YPJwzcF ENH1pCs522KNd6qxdP1o1Wew+mbl6F4QmNUOdS9qdZuG4luvEGE0mNY+dlOa3fAU iHC+fyE= -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:30 2025 by rpki-client