$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/29B6EA80F2C411EC97A42B73C4F9AE02.roa File: 29B6EA80F2C411EC97A42B73C4F9AE02.roa (raw, json) Hash identifier: O9VH081pE8F9Lw59kLD8OKGix93beOfAyf1mf+VTITU= Subject key identifier: 24:F7:81:D1:D8:D7:32:43:65:4D:8B:2A:4F:A7:BA:69:3D:7A:BF:40 Certificate issuer: /CN=A91AC100/serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB Certificate serial: 0266 Authority key identifier: 30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/29B6EA80F2C411EC97A42B73C4F9AE02.roa Signing time: Thu 05 Dec 2024 01:45:11 +0000 ROA not before: Thu 05 Dec 2024 01:45:11 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 138388 IP address blocks: 103.124.96.0/22 maxlen: 22 103.124.96.0/24 maxlen: 24 103.124.97.0/24 maxlen: 24 103.124.98.0/24 maxlen: 24 103.124.99.0/24 maxlen: 24 2403:ddc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 614 (0x266) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC100, serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB Validity Not Before: Dec 5 01:45:11 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=675105a7-b305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6d:4d:63:c6:dc:b9:58:ed:00:8c:7e:5a:fb: e4:f5:8c:b4:9b:dd:32:f5:90:a8:38:13:c6:87:e9: 3c:98:e4:ee:8e:73:13:8c:91:d8:29:bd:62:69:bb: 39:c4:f9:13:48:24:56:e5:9a:28:d5:77:3f:41:a3: 68:c4:e8:e6:6d:23:4a:12:e0:29:e5:89:ed:c2:03: 81:ee:ba:27:9d:85:8d:8d:46:fe:47:86:c9:b5:92: 65:42:a6:93:b4:4b:5a:c9:b1:4c:d3:03:c2:35:80: ab:2c:80:f5:ce:80:c4:24:c6:06:96:36:38:8a:3e: 3e:6e:b7:c0:4e:94:91:7e:7a:e8:88:04:cd:82:ea: a9:60:16:25:0f:e2:ae:b2:0e:2c:22:71:75:19:77: a9:9f:7d:39:75:e6:b7:5d:a5:72:46:29:7c:74:85: 6c:ef:02:9e:05:b8:6a:6f:f8:16:f8:47:ac:ba:7e: f5:c0:aa:47:27:bf:a1:73:e1:81:eb:8a:59:7f:33: 68:f8:b2:c1:7c:78:4a:fd:71:82:f3:31:50:fd:dc: 9f:47:eb:71:79:19:10:ea:e7:93:1e:51:4d:6e:3e: 70:6e:2c:e7:51:c1:6f:c0:4b:0f:b6:e2:98:93:20: 57:37:ab:62:39:81:15:01:6b:fa:8d:3c:d0:96:2a: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F7:81:D1:D8:D7:32:43:65:4D:8B:2A:4F:A7:BA:69:3D:7A:BF:40 X509v3 Authority Key Identifier: keyid:30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/29B6EA80F2C411EC97A42B73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.96.0/22 IPv6: 2403:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption b3:67:33:23:58:35:14:89:ed:3f:b1:a9:c4:87:e0:1f:29:34: 17:b8:07:ae:a3:0c:b6:38:a7:d2:a3:56:fe:30:85:3d:ca:c0: a1:5e:dc:b1:10:b1:c4:8b:8f:74:98:fe:a3:e8:6f:74:3b:53: 2e:23:ee:9b:f0:fc:09:5c:a7:ea:e7:02:8a:93:5e:8f:25:97: c4:67:e2:44:55:5c:0a:34:58:37:5f:3b:85:39:41:40:b1:8e: 7f:73:58:00:ce:74:dc:82:32:f0:82:ba:dc:21:8d:7a:94:b8: 0c:a5:d5:02:31:1b:7c:2d:36:fb:d4:5a:a5:01:2d:70:71:55: a0:49:88:fe:1a:7c:20:97:4d:73:0d:ea:4e:20:4f:85:9d:db: 13:dd:41:c0:d5:cf:fd:0d:04:f9:6c:26:42:57:a0:97:4d:4f: da:4c:55:58:fe:12:d4:1c:0a:ac:b6:02:66:33:3f:f7:a7:e6: 52:ca:83:42:30:17:22:ea:57:99:75:7f:e9:27:ba:32:8d:61: bd:76:fb:9a:51:87:80:78:de:3d:b6:f3:18:db:9a:e8:3d:18: 58:09:86:a3:27:e1:eb:10:54:e7:e4:e9:bb:a7:12:57:42:81: a4:63:5e:58:c8:bc:3f:3d:1b:64:23:fc:13:0f:b7:25:a9:a3: 6f:20:c1:9b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUMxMDAxMTAvBgNVBAUTKDMwOUEyQTM2NDMzNEE5RERCQTRBNkQ0NDA0MUQ3OUE1 RDMyQkFGQUIwHhcNMjQxMjA1MDE0NTExWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUxMDVhNy1iMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArW1NY8bcuVjtAIx+Wvvk9Yy0m90y9ZCoOBPGh+k8mOTujnMTjJHYKb1iabs5 xPkTSCRW5Zoo1Xc/QaNoxOjmbSNKEuAp5YntwgOB7ronnYWNjUb+R4bJtZJlQqaT tEtaybFM0wPCNYCrLID1zoDEJMYGljY4ij4+brfATpSRfnroiATNguqpYBYlD+Ku sg4sInF1GXepn305dea3XaVyRil8dIVs7wKeBbhqb/gW+Eesun71wKpHJ7+hc+GB 64pZfzNo+LLBfHhK/XGC8zFQ/dyfR+txeRkQ6ueTHlFNbj5wbiznUcFvwEsPtuKY kyBXN6tiOYEVAWv6jTzQlioOGQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCT3gdHY 1zJDZU2LKk+numk9er9AMB8GA1UdIwQYMBaAFDCaKjZDNKndukptRAQdeaXTK6+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzEwMC9FNDNEQzVDQUYy QkMxMUVDODhBQzk0NTJDNEY5QUUwMi9NSm9xTmtNMHFkMjZTbTFFQkIxNXBkTXJy NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Kb3FOa00wcWQyNlNtMUVCQjE1cGRNcnI2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUMxMDAvRTQzREM1Q0FGMkJDMTFFQzg4QUM5NDUyQzRGOUFFMDIvMjlCNkVBODBG MkM0MTFFQzk3QTQyQjczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfGAwDQQCAAIwBwMFACQD3cAwDQYJKoZIhvcNAQELBQAD ggEBALNnMyNYNRSJ7T+xqcSH4B8pNBe4B66jDLY4p9KjVv4whT3KwKFe3LEQscSL j3SY/qPob3Q7Uy4j7pvw/Alcp+rnAoqTXo8ll8Rn4kRVXAo0WDdfO4U5QUCxjn9z WADOdNyCMvCCutwhjXqUuAyl1QIxG3wtNvvUWqUBLXBxVaBJiP4afCCXTXMN6k4g T4Wd2xPdQcDVz/0NBPlsJkJXoJdNT9pMVVj+EtQcCqy2AmYzP/en5lLKg0IwFyLq V5l1f+knujKNYb12+5pRh4B43j228xjbmug9GFgJhqMn4esQVOfk6bunEldCgaRj XljIvD89G2Qj/BMPtyWpo28gwZs= -----END CERTIFICATE-----Generated at Mon May 12 12:28:28 2025 by rpki-client