$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/3AB3F80E578611EA8CC3B124C4F9AE02.roa File: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (raw, json) Hash identifier: E9GpG8r2RS+wZVKx4VfWz8DtkWxY78qwYvbLbq0Wo/g= Subject key identifier: 65:18:6A:4D:CB:76:16:01:75:B2:CF:D2:75:C2:76:62:80:97:BB:8F Certificate issuer: /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD Certificate serial: 28AE Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/3AB3F80E578611EA8CC3B124C4F9AE02.roa Signing time: Fri 06 Dec 2024 16:02:29 +0000 ROA not before: Fri 06 Dec 2024 16:02:29 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.43.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10414 (0x28ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112707 Validity Not Before: Dec 6 16:02:29 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67532015-4660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:2f:0f:3d:44:6d:a1:ee:aa:44:1f:95:fe: 14:61:61:82:06:b4:6b:27:f6:60:24:f0:b2:51:09: 87:d5:ba:44:2b:79:1e:4b:8f:ea:88:3a:57:5a:1f: d3:6e:dc:72:fb:90:d9:e3:1c:f1:5c:84:cf:51:a8: 3e:f3:d5:20:86:c3:aa:81:7c:91:f6:a9:cd:6c:be: d5:2c:e8:46:3e:0a:05:4e:6f:30:b3:ba:69:63:7c: c8:18:2b:60:d4:05:d6:b8:ec:1c:1a:ce:c3:f6:f4: fb:43:c3:50:9b:d0:2c:14:57:a1:1d:61:ce:fe:c0: b9:7b:70:de:07:2a:5b:44:94:54:49:37:49:42:f6: 7d:84:96:e1:7f:80:a8:23:2b:a1:8b:27:d3:15:9c: af:f6:e7:76:88:29:a2:0a:7b:2b:19:99:0e:97:71: ee:e4:aa:19:09:6b:1f:87:ec:86:ac:3f:ea:37:70: b0:be:7a:ad:17:e4:79:2b:4e:03:61:68:46:84:ae: c6:76:98:8a:63:e0:ae:fc:69:17:d7:1f:95:cf:00: dc:8f:bd:19:2a:7b:fe:57:29:c8:38:8b:51:4b:9b: 77:6f:4f:6f:00:36:d9:5e:5e:f0:91:31:17:d8:09: 03:62:e4:8a:36:e1:34:68:0e:3a:84:fd:40:d7:90: 62:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:18:6A:4D:CB:76:16:01:75:B2:CF:D2:75:C2:76:62:80:97:BB:8F X509v3 Authority Key Identifier: keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/3AB3F80E578611EA8CC3B124C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.43.38.0/23 Signature Algorithm: sha256WithRSAEncryption 79:1e:80:39:cf:31:5b:3e:43:8e:10:72:83:ab:bf:c5:8f:39: 27:ee:5c:25:7e:79:c9:cb:f8:6b:84:1d:5e:24:10:b1:ae:7a: 77:3a:91:78:59:aa:10:05:70:88:56:7c:3d:47:9f:de:59:c6: a9:56:53:a8:2c:2f:ba:f1:f7:85:06:be:ea:0d:de:2f:77:3f: d0:2a:e8:13:98:7c:eb:99:27:8e:a8:19:62:ff:49:fe:a1:42: d9:1c:c3:75:d2:31:7f:67:e8:b6:29:1f:b4:5b:87:ea:d3:d0: 1e:ac:da:5a:cb:55:f2:24:72:4f:71:c9:38:0a:48:bb:02:8d: 7b:1d:c5:57:06:19:23:85:75:70:3b:2b:e9:7c:30:6c:21:79: 0d:ee:50:b6:47:11:33:02:ad:6c:3c:6c:72:67:75:ac:26:b3: 34:02:45:b0:18:02:c2:b7:99:50:f6:ab:f7:05:bb:34:14:23: 25:33:0c:51:e1:7a:55:6d:5e:da:15:ad:83:90:bd:18:b9:bf: a0:66:0b:f9:27:38:2d:cf:fa:31:0d:13:b2:97:63:67:bb:0d: e6:d7:8a:d4:70:cd:e2:dc:b4:d1:17:fc:d5:8d:b8:03:e7:2a: 0e:59:15:58:f7:72:37:09:72:fa:bd:e8:4d:1e:dd:5d:59:ff: eb:bf:83:37 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3MDcxMTAvBgNVBAUTKEMxRTIyNzY1MUFEQTNCRkJDMTg3NzFBRUM4QjYwMDI2 NzIzQjYwQUQwHhcNMjQxMjA2MTYwMjI5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUzMjAxNS00NjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQwvDz1EbaHuqkQflf4UYWGCBrRrJ/ZgJPCyUQmH1bpEK3keS4/qiDpXWh/T btxy+5DZ4xzxXITPUag+89UghsOqgXyR9qnNbL7VLOhGPgoFTm8ws7ppY3zIGCtg 1AXWuOwcGs7D9vT7Q8NQm9AsFFehHWHO/sC5e3DeBypbRJRUSTdJQvZ9hJbhf4Co IyuhiyfTFZyv9ud2iCmiCnsrGZkOl3Hu5KoZCWsfh+yGrD/qN3CwvnqtF+R5K04D YWhGhK7GdpiKY+Cu/GkX1x+VzwDcj70ZKnv+VynIOItRS5t3b09vADbZXl7wkTEX 2AkDYuSKNuE0aA46hP1A15BiNwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGUYak3L dhYBdbLP0nXCdmKAl7uPMB8GA1UdIwQYMBaAFMHiJ2Ua2jv7wYdxrsi2ACZyO2Ct MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwNy9CNEFDRTE2NDcw QjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9fdkJoM0d1eUxZQUpuSTdZ SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dlSW5aUnJhT192QmgzR3V5TFlBSm5JN1lLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI3MDcvQjRBQ0UxNjQ3MEI2MTFFNDlDQ0FGMTZGQzRGOUFFMDIvM0FCM0Y4MEU1 Nzg2MTFFQThDQzNCMTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnKyYwDQYJKoZIhvcNAQELBQADggEBAHkegDnPMVs+Q44Q coOrv8WPOSfuXCV+ecnL+GuEHV4kELGuenc6kXhZqhAFcIhWfD1Hn95ZxqlWU6gs L7rx94UGvuoN3i93P9Aq6BOYfOuZJ46oGWL/Sf6hQtkcw3XSMX9n6LYpH7Rbh+rT 0B6s2lrLVfIkck9xyTgKSLsCjXsdxVcGGSOFdXA7K+l8MGwheQ3uULZHETMCrWw8 bHJndawmszQCRbAYAsK3mVD2q/cFuzQUIyUzDFHhelVtXtoVrYOQvRi5v6BmC/kn OC3P+jENE7KXY2e7DebXitRwzeLctNEX/NWNuAPnKg5ZFVj3cjcJcvq96E0e3V1Z /+u/gzc= -----END CERTIFICATE-----Generated at Sat Apr 5 13:47:55 2025 by rpki-client