$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/4BA3FAC8B53311EFACDFC575C4F9AE02.roa File: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (raw, json) Hash identifier: VFGpYkVQUYPgthphq1FI7HtfcdckVL6PZeOiO03NNQs= Subject key identifier: F2:B7:B5:28:B5:E7:9C:DE:A6:80:8F:94:0A:EC:7B:EC:74:2D:0B:A2 Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Certificate serial: 84 Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/4BA3FAC8B53311EFACDFC575C4F9AE02.roa Signing time: Sun 08 Dec 2024 07:15:39 +0000 ROA not before: Sun 08 Dec 2024 07:15:39 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 151845 IP address blocks: 103.49.70.0/23 maxlen: 23 103.49.70.0/24 maxlen: 24 103.49.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C20D Validity Not Before: Dec 8 07:15:39 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6755479b-3999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:7b:e9:49:46:ae:7a:96:08:d7:26:4a:fd: 08:fb:30:dd:74:2f:dd:79:6d:d3:1b:b0:47:08:49: b9:50:21:3b:1d:85:44:85:14:b7:4b:c0:36:12:c5: d1:24:0d:a0:e8:96:d1:23:20:f1:7f:41:27:ab:65: af:e7:76:9f:8d:85:bb:7d:1b:36:6c:aa:b0:95:08: 03:f2:22:b2:17:42:dd:4d:ed:fe:09:29:67:85:e5: a1:5c:dd:a4:68:fe:6b:b7:d7:17:42:1d:3b:ae:ce: c3:63:2f:0f:5d:7d:b7:15:b6:52:4c:c5:ff:bf:82: e1:a5:f5:2d:0b:59:39:b7:4c:b5:cb:4d:ae:fc:17: 4d:c1:69:e3:36:01:a3:15:4a:97:64:a6:aa:74:ec: 62:70:57:ce:4d:e7:b5:e7:8d:04:b6:9d:83:e6:c0: 75:39:d9:94:05:bd:fd:e4:a9:2d:7e:07:52:bf:9a: 90:a7:41:5e:85:b7:b0:5b:9d:6a:d4:0d:dc:df:00: 78:e7:2b:1c:09:b1:cb:ce:55:a2:69:c5:8e:9a:36: 2c:54:0b:b5:4e:17:c4:f8:35:08:c2:c9:cf:6a:39: 6b:e6:35:a8:a8:62:6c:7d:e1:10:55:d8:09:22:55: 9e:ff:8a:6a:70:0b:1a:dc:85:21:14:b8:fe:29:5d: 98:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B7:B5:28:B5:E7:9C:DE:A6:80:8F:94:0A:EC:7B:EC:74:2D:0B:A2 X509v3 Authority Key Identifier: keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/4BA3FAC8B53311EFACDFC575C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.49.70.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:cb:0a:1d:f0:45:e5:f5:c9:0c:d2:6e:54:d8:12:46:d1:3e: fc:04:0b:e2:61:0d:29:ab:f2:52:27:45:a1:12:27:08:8b:79: c0:0e:3e:25:7d:6c:bd:dd:1e:df:76:13:a7:6a:fb:bb:56:9b: e6:5a:fc:e8:4b:3f:9e:cb:05:85:46:6a:8f:93:cc:df:5f:01: a8:8e:b4:68:e0:d1:a9:e9:ec:0f:e4:ab:f1:3d:96:54:f3:1a: 67:bb:b9:dc:98:87:89:6f:43:26:5e:3a:05:67:5b:59:95:56: 85:2f:5e:04:3c:6c:0e:0a:db:c7:c1:6b:21:3d:d2:c0:fa:ed: e0:1a:88:0a:39:4c:2f:71:6e:f8:f2:8b:50:17:2e:78:a9:71: ab:68:5b:b5:ff:da:38:7c:1d:28:eb:ea:9b:2b:22:b7:03:d0: 5f:52:9f:3c:99:c2:9c:45:ab:00:af:c9:b1:79:98:6b:c8:b9: a7:de:b7:05:cc:a6:81:aa:3a:ed:e9:db:2f:33:ce:30:f2:e6: 28:aa:cf:0c:df:5c:91:a0:55:32:0c:d6:a3:24:59:93:2f:69: 72:07:fc:df:ef:ef:76:b1:52:65:3f:f8:65:06:27:45:15:7a: bf:97:0f:9c:72:1e:11:a9:60:0a:23:13:68:56:78:7b:d9:60: 8e:d3:f2:25 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMEQxMTAvBgNVBAUTKEE3NDk3ODhDQjRGNDFGRDg1RTdBQzI2M0M4NzVCN0VB RjJDMEU3OEQwHhcNMjQxMjA4MDcxNTM5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU1NDc5Yi0zOTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXV76UlGrnqWCNcmSv0I+zDddC/deW3TG7BHCEm5UCE7HYVEhRS3S8A2EsXR JA2g6JbRIyDxf0Enq2Wv53afjYW7fRs2bKqwlQgD8iKyF0LdTe3+CSlnheWhXN2k aP5rt9cXQh07rs7DYy8PXX23FbZSTMX/v4LhpfUtC1k5t0y1y02u/BdNwWnjNgGj FUqXZKaqdOxicFfOTee1540Etp2D5sB1OdmUBb395KktfgdSv5qQp0FehbewW51q 1A3c3wB45yscCbHLzlWiacWOmjYsVAu1ThfE+DUIwsnPajlr5jWoqGJsfeEQVdgJ IlWe/4pqcAsa3IUhFLj+KV2YkwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPK3tSi1 55zepoCPlArse+x0LQuiMB8GA1UdIwQYMBaAFKdJeIy09B/YXnrCY8h1t+rywOeN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIwRC84ODY4QTExRTAz QTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5aGVlc0pqeUhXMzZ2TEE1 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwbDRqTFQwSDloZWVzSmp5SFczNnZMQTU0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyMEQvODg2OEExMUUwM0ExMTFFRjg5MjZDMDJBQzRGOUFFMDIvNEJBM0ZBQzhC NTMzMTFFRkFDREZDNTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnMUYwDQYJKoZIhvcNAQELBQADggEBAH7LCh3wReX1yQzS blTYEkbRPvwEC+JhDSmr8lInRaESJwiLecAOPiV9bL3dHt92E6dq+7tWm+Za/OhL P57LBYVGao+TzN9fAaiOtGjg0anp7A/kq/E9llTzGme7udyYh4lvQyZeOgVnW1mV VoUvXgQ8bA4K28fBayE90sD67eAaiAo5TC9xbvjyi1AXLnipcatoW7X/2jh8HSjr 6psrIrcD0F9SnzyZwpxFqwCvybF5mGvIuafetwXMpoGqOu3p2y8zzjDy5iiqzwzf XJGgVTIM1qMkWZMvaXIH/N/v73axUmU/+GUGJ0UVer+XD5xyHhGpYAojE2hWeHvZ YI7T8iU= -----END CERTIFICATE-----Generated at Mon Apr 7 03:12:12 2025 by rpki-client