$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/53E9C44CFB2E11EFB488A95EC4F9AE02.roa File: 53E9C44CFB2E11EFB488A95EC4F9AE02.roa (raw, json) Hash identifier: hzaK0MTBJLVrmr0hWnuGmH3SdcFclIxCzlQUZOQabQ8= Subject key identifier: F6:65:48:51:59:FF:F2:C8:6C:FB:F5:82:50:FB:49:4C:6F:02:26:F5 Certificate issuer: /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C Certificate serial: 03 Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/53E9C44CFB2E11EFB488A95EC4F9AE02.roa Signing time: Fri 07 Mar 2025 08:29:47 +0000 ROA not before: Fri 07 Mar 2025 08:29:47 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 133588 IP address blocks: 103.237.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 06:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E502 Validity Not Before: Mar 7 08:29:47 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67caae7a-319c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2d:97:d9:df:eb:99:da:e9:e5:cf:b9:6a:ad: 6f:b4:f9:28:6b:81:75:0a:c6:b9:e4:3d:57:e8:bd: 03:90:65:31:5f:2d:42:e8:85:cc:7c:0e:97:0d:66: 33:59:86:3f:05:47:4c:2c:fa:b1:3e:b3:0e:fc:12: 47:07:44:be:5c:7d:36:36:ba:0b:54:9f:fe:68:4a: e3:1d:e1:71:ca:97:d7:7b:85:30:d9:bc:a3:c5:8e: ea:28:5a:04:51:fa:ea:8b:7e:fd:42:2d:6c:5e:f0: c9:97:50:09:b8:8a:ba:c0:a9:43:65:b2:cd:88:10: 81:c6:fa:f1:04:12:ef:67:72:9f:2e:13:01:58:29: 4d:e4:70:d5:57:4f:05:7c:34:9e:d5:f9:24:9d:50: f8:fe:c5:99:e0:8e:d1:79:b4:5e:13:58:33:98:19: f8:87:e7:54:d1:c3:60:a5:93:2a:2e:a1:a2:a1:f2: 7c:af:5f:e3:42:13:5b:8c:4f:58:2a:a8:fd:35:0c: 0b:69:42:39:66:f0:bf:c5:e8:be:7d:94:8b:b2:63: 4a:8c:aa:c3:e5:c1:f9:86:02:4f:4a:fb:69:1b:9f: 85:c1:50:c5:8d:b1:b9:0f:df:ae:63:38:b4:67:5f: 55:20:cb:8b:35:3c:7d:18:db:c4:e8:5f:aa:d7:90: 6d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:65:48:51:59:FF:F2:C8:6C:FB:F5:82:50:FB:49:4C:6F:02:26:F5 X509v3 Authority Key Identifier: keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/53E9C44CFB2E11EFB488A95EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.237.53.0/24 Signature Algorithm: sha256WithRSAEncryption 84:25:ea:b6:95:a1:13:27:52:04:18:44:5e:de:01:4e:c6:ee: 41:b2:fc:74:41:5a:70:06:f6:b0:5d:47:eb:d7:ee:26:31:d1: 57:6a:ae:76:b3:18:05:fa:a9:08:52:92:cd:bb:03:ee:2b:fd: e6:e0:85:ef:60:51:03:9a:ef:bc:43:c0:4a:dd:1e:01:0b:fa: 03:1d:24:f4:e7:27:44:ab:8b:cc:e7:52:fb:5f:a4:50:8f:36: f2:61:39:51:08:e1:9e:2d:00:8a:d0:64:2c:c0:de:e2:0d:0b: 6e:b5:46:5c:e9:7f:7d:a3:ba:fe:be:90:19:7e:2d:7f:03:c1: ae:7a:9e:fc:31:08:5b:16:98:ab:ca:9b:47:45:68:78:86:af: 70:77:49:a1:ba:1c:42:24:1e:c8:af:ad:4b:cc:4c:46:ab:3c: c1:6e:36:7f:2f:3b:40:41:dd:fe:20:6f:5b:f9:d8:bb:07:6d: 7d:41:45:11:77:76:df:86:3a:30:ec:32:10:ba:43:91:76:f3: 4d:d1:c6:6c:3a:c7:7a:cc:c7:27:4b:38:d6:53:e1:2e:b2:b1: 15:90:5a:48:b7:62:37:51:42:e9:cb:10:5e:08:63:b5:43:ed: 84:c6:f9:9a:d2:be:a4:83:34:0d:f6:b7:0e:eb:0f:80:26:df: 24:c0:7e:1f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTUwMjExMC8GA1UEBRMoMzg2QzMwMEVENzJGMTJCOTA1NDc4QTMzQ0VGMjc3OTky NTRBNjkxQzAeFw0yNTAzMDcwODI5NDdaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3Y2FhZTdhLTMxOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoLZfZ3+uZ2unlz7lqrW+0+ShrgXUKxrnkPVfovQOQZTFfLULohcx8DpcNZjNZ hj8FR0ws+rE+sw78EkcHRL5cfTY2ugtUn/5oSuMd4XHKl9d7hTDZvKPFjuooWgRR +uqLfv1CLWxe8MmXUAm4irrAqUNlss2IEIHG+vEEEu9ncp8uEwFYKU3kcNVXTwV8 NJ7V+SSdUPj+xZngjtF5tF4TWDOYGfiH51TRw2ClkyouoaKh8nyvX+NCE1uMT1gq qP01DAtpQjlm8L/F6L59lIuyY0qMqsPlwfmGAk9K+2kbn4XBUMWNsbkP365jOLRn X1Ugy4s1PH0Y28ToX6rXkG3vAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU9mVIUVn/ 8shs+/WCUPtJTG8CJvUwHwYDVR0jBBgwFoAUOGwwDtcvErkFR4ozzvJ3mSVKaRww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFNTAyLzg3QzNGRDBBRkIy OTExRUZCNzY2REM3NkM0RjlBRTAyL09Hd3dEdGN2RXJrRlI0b3p6dkozbVNWS2FS dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT0d3d0R0Y3ZFcmtGUjRvenp2SjNtU1ZLYVJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTUwMi84N0MzRkQwQUZCMjkxMUVGQjc2NkRDNzZDNEY5QUUwMi81M0U5QzQ0Q0ZC MkUxMUVGQjQ4OEE5NUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGftNTANBgkqhkiG9w0BAQsFAAOCAQEAhCXqtpWhEydSBBhE Xt4BTsbuQbL8dEFacAb2sF1H69fuJjHRV2qudrMYBfqpCFKSzbsD7iv95uCF72BR A5rvvEPASt0eAQv6Ax0k9OcnRKuLzOdS+1+kUI828mE5UQjhni0AitBkLMDe4g0L brVGXOl/faO6/r6QGX4tfwPBrnqe/DEIWxaYq8qbR0VoeIavcHdJobocQiQeyK+t S8xMRqs8wW42fy87QEHd/iBvW/nYuwdtfUFFEXd234Y6MOwyELpDkXbzTdHGbDrH eszHJ0s41lPhLrKxFZBaSLdiN1FC6csQXghjtUPthMb5mtK+pIM0Dfa3DusPgCbf JMB+Hw== -----END CERTIFICATE-----Generated at Mon Apr 7 17:22:37 2025 by rpki-client