$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/888790B6CD3A11EF87D85012C4F9AE02.roa File: 888790B6CD3A11EF87D85012C4F9AE02.roa (raw, json) Hash identifier: AvFxWnXdXVRW4gSsV2SM184h5qE1FtXhjp3kh4Swn5U= Subject key identifier: 3D:80:0F:A6:94:E2:AF:A8:5A:01:5F:6D:F3:72:E1:E7:69:27:89:4C Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Certificate serial: 0372 Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/888790B6CD3A11EF87D85012C4F9AE02.roa Signing time: Fri 07 Mar 2025 00:47:10 +0000 ROA not before: Fri 07 Mar 2025 00:47:10 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 4760 IP address blocks: 103.182.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 882 (0x372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF8A Validity Not Before: Mar 7 00:47:10 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ca420e-ef4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:ad:34:36:e0:ee:38:25:bb:b2:5c:38:cd: ce:66:f3:6b:41:24:8a:2e:60:12:3a:50:e3:ae:27: b8:83:74:ac:db:58:4a:fb:8e:96:df:d9:37:90:d1: cf:4a:f6:83:3b:29:1b:36:61:a7:49:38:cd:ed:c3: 7d:39:eb:71:0e:a4:b2:8c:33:e3:c8:8f:5e:be:26: a9:b9:88:19:36:58:d0:5c:dd:63:2c:75:3c:34:e6: 83:66:94:92:b7:61:49:c7:18:be:1f:d5:b9:b8:af: dc:e4:8f:f0:d5:2a:1a:2e:5d:b3:6a:fa:c9:ff:f8: a4:85:f3:34:79:fe:3b:2a:fa:6c:c2:a3:73:b7:d1: c8:e1:86:6b:e7:60:75:ff:58:6b:24:27:55:26:4e: 5a:18:c5:4b:18:4e:49:78:ff:fe:06:60:fa:e1:df: 08:86:41:86:f4:4d:44:e8:54:fe:bc:65:27:59:92: 3c:38:00:e2:42:dd:f9:2c:77:ac:e7:54:23:25:5f: 7c:62:81:55:d9:fe:20:52:4b:1c:82:40:01:7a:d8: 7e:4f:53:38:04:18:de:84:ff:0a:60:0a:50:bf:29: 65:1c:4a:6f:1f:48:1b:55:76:94:39:4a:b3:d0:d4: c4:40:96:3f:33:f8:b0:c5:98:af:35:8e:2b:82:c9: fa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:80:0F:A6:94:E2:AF:A8:5A:01:5F:6D:F3:72:E1:E7:69:27:89:4C X509v3 Authority Key Identifier: keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/888790B6CD3A11EF87D85012C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.96.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:9f:8f:eb:a8:86:91:45:9a:78:8e:1f:0b:f5:79:4c:d5:d2: f6:20:74:20:d4:aa:99:58:d9:d6:7b:49:0f:ab:a3:e9:8b:bc: a1:48:18:90:f7:43:87:6a:23:34:23:87:bc:6e:10:ec:03:e0: b2:8c:15:c1:46:92:89:b4:98:aa:e4:9a:21:2d:6a:84:13:d5: 3e:e0:67:98:e3:70:80:5b:4b:9d:83:4a:c2:5b:5f:7e:8c:e5: 1b:ab:5b:2e:56:74:2c:fa:49:87:51:84:75:a5:da:19:8c:23: 5b:6c:b0:52:98:34:0f:85:77:3f:6c:23:d1:9d:b8:9d:7d:57: b8:36:35:d6:68:83:4e:1a:18:ad:84:36:c5:50:ae:9e:c2:6b: b3:f3:7a:1c:1f:0e:90:68:78:c8:25:e6:37:39:d2:89:12:2a: f0:ba:24:d1:26:db:89:8f:a5:a1:d5:34:71:9f:e4:c5:15:38: a9:e7:f5:4c:ce:1f:74:f7:9f:83:56:86:43:c5:c9:80:b7:9c: d8:9c:1e:c7:0a:68:bf:f6:d4:6a:71:62:91:26:75:91:00:82: 95:4a:2a:23:3a:27:96:5c:38:f2:ab:58:0f:e3:16:52:7c:41: c1:e6:8b:20:ba:b5:e4:54:a7:07:a5:cc:ea:27:b7:25:4b:a0: aa:c4:c2:24 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGOEExMTAvBgNVBAUTKDgyNjAwN0E0RTNEMTRCQjBCNTA5QkI5Njk4NDVEMDFF QjgwOUREN0EwHhcNMjUwMzA3MDA0NzEwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2NhNDIwZS1lZjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUatNDbg7jglu7JcOM3OZvNrQSSKLmASOlDjrie4g3Ss21hK+46W39k3kNHP SvaDOykbNmGnSTjN7cN9OetxDqSyjDPjyI9eviapuYgZNljQXN1jLHU8NOaDZpSS t2FJxxi+H9W5uK/c5I/w1SoaLl2zavrJ//ikhfM0ef47KvpswqNzt9HI4YZr52B1 /1hrJCdVJk5aGMVLGE5JeP/+BmD64d8IhkGG9E1E6FT+vGUnWZI8OADiQt35LHes 51QjJV98YoFV2f4gUkscgkABeth+T1M4BBjehP8KYApQvyllHEpvH0gbVXaUOUqz 0NTEQJY/M/iwxZivNY4rgsn6DwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD2AD6aU 4q+oWgFfbfNy4edpJ4lMMB8GA1UdIwQYMBaAFIJgB6Tj0UuwtQm7lphF0B64Cd16 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY4QS8zNTUzQ0ZBQUEz N0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3QzFDYnVXbUVYUUhyZ0oz WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtQUhwT1BSUzdDMUNidVdtRVhRSHJnSjNYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURGOEEvMzU1M0NGQUFBMzdGMTFFQzkyRDZGQTVFQzRGOUFFMDIvODg4NzkwQjZD RDNBMTFFRjg3RDg1MDEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABntmAwDQYJKoZIhvcNAQELBQADggEBAE6fj+uohpFFmniO Hwv1eUzV0vYgdCDUqplY2dZ7SQ+ro+mLvKFIGJD3Q4dqIzQjh7xuEOwD4LKMFcFG kom0mKrkmiEtaoQT1T7gZ5jjcIBbS52DSsJbX36M5RurWy5WdCz6SYdRhHWl2hmM I1tssFKYNA+Fdz9sI9GduJ19V7g2NdZog04aGK2ENsVQrp7Ca7PzehwfDpBoeMgl 5jc50okSKvC6JNEm24mPpaHVNHGf5MUVOKnn9UzOH3T3n4NWhkPFyYC3nNicHscK aL/21GpxYpEmdZEAgpVKKiM6J5ZcOPKrWA/jFlJ8QcHmiyC6teRUpwelzOontyVL oKrEwiQ= -----END CERTIFICATE-----Generated at Sat Apr 5 01:40:37 2025 by rpki-client