$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/C75B642268F211EFB7A6A06EC4F9AE02.roa File: C75B642268F211EFB7A6A06EC4F9AE02.roa (raw, json) Hash identifier: kOYdujebZuJtzPQYq/KrU4LAvGLUwAviwH7iInIzQIw= Subject key identifier: 3E:5D:05:A0:51:95:9A:28:BB:60:D1:9B:E4:A8:A8:9D:11:3F:39:DC Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: FC Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/C75B642268F211EFB7A6A06EC4F9AE02.roa Signing time: Fri 03 Jan 2025 04:07:32 +0000 ROA not before: Fri 03 Jan 2025 04:07:32 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 4785 IP address blocks: 36.50.84.0/23 maxlen: 23 103.47.186.0/24 maxlen: 24 103.53.80.0/23 maxlen: 23 103.99.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C Validity Not Before: Jan 3 04:07:32 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67776283-b472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d8:8d:10:88:54:ba:28:89:8d:93:86:24:b4: 23:62:d0:09:f3:97:26:4b:42:c8:da:1d:f3:83:2e: 57:6a:3f:0d:f6:03:0a:49:ee:bb:77:fb:41:d4:92: b6:a6:d6:8f:85:be:85:87:9d:da:a0:6c:cb:5a:4a: b5:e8:86:20:83:1e:3f:7c:5b:bc:16:c9:9d:e1:a2: 41:41:ca:69:95:4e:3e:7b:00:f6:96:6f:b3:26:aa: bb:d5:c6:c2:0f:74:0f:9b:d7:aa:1f:50:45:f7:9f: 6d:d4:e1:08:e6:6f:e1:1a:da:d6:f7:3d:3e:26:da: 2e:74:fe:5a:94:8c:a3:45:b3:03:87:a7:18:23:1c: ab:5a:7c:8d:06:a7:e6:40:bb:5c:b4:b8:73:d6:61: 0c:f3:85:75:20:53:32:c5:37:32:0d:4d:c8:cf:6f: e1:d2:26:d7:a7:f7:d6:8c:d4:33:ab:80:84:3f:42: 4c:09:1d:6b:f2:82:73:84:7d:e0:72:5c:7f:08:a0: ee:6a:20:b2:0c:de:9e:15:8c:c7:69:32:b9:8d:9c: 61:84:87:31:5f:96:7f:75:9e:56:79:f9:f8:02:f4: 3c:e2:3f:d1:b1:c2:61:a4:93:11:51:e2:7e:8a:b0: 48:a9:77:e8:39:0b:4a:67:8e:4e:93:40:f3:73:3b: b2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5D:05:A0:51:95:9A:28:BB:60:D1:9B:E4:A8:A8:9D:11:3F:39:DC X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/C75B642268F211EFB7A6A06EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.84.0/23 103.47.186.0/24 103.53.80.0/23 103.99.178.0/23 Signature Algorithm: sha256WithRSAEncryption 78:58:dc:cb:89:be:9d:3e:fd:40:6d:d0:b2:4a:15:72:9e:8a: ac:e2:4a:d7:b6:b5:44:9e:79:25:f0:fb:ad:63:e9:46:04:76: 63:b0:f4:66:94:36:f1:49:a7:c6:a7:60:00:cb:62:ef:34:1c: 0c:c3:85:45:51:b9:3e:8b:91:6b:6d:45:3c:1e:c1:b6:60:6f: af:1b:77:28:22:e9:2a:b2:cd:cb:ef:52:04:95:97:b3:d8:93: 58:57:b6:ac:59:44:f9:83:69:2a:22:b3:13:5c:54:d3:8d:73: ff:d9:ab:7d:35:1a:3b:4a:7d:45:21:e2:e3:54:f0:a5:1a:be: 2b:9d:29:54:c2:de:d0:98:53:28:c0:0d:33:19:1a:a0:d1:94: c4:3c:fa:81:2a:d8:d6:a8:96:e6:39:a7:d4:5b:42:c7:67:3f: 16:10:16:87:49:93:d9:e8:58:fc:be:2e:58:46:f3:47:1d:18: 5f:cc:28:a1:f8:7f:05:57:8b:91:80:dd:ff:b9:53:13:d2:ee: 4e:68:b0:88:0e:bf:eb:4a:77:ff:30:e7:25:51:35:a4:ff:c0: c3:66:b7:7c:49:18:80:fc:af:46:b7:9f:9e:e5:3a:07:84:e5: ad:ee:5e:6f:88:49:1d:4b:e6:a1:4f:af:14:ed:1c:0c:45:5b: b0:ef:7a:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjUwMTAzMDQwNzMyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc3NjI4My1iNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltiNEIhUuiiJjZOGJLQjYtAJ85cmS0LI2h3zgy5Xaj8N9gMKSe67d/tB1JK2 ptaPhb6Fh53aoGzLWkq16IYggx4/fFu8Fsmd4aJBQcpplU4+ewD2lm+zJqq71cbC D3QPm9eqH1BF959t1OEI5m/hGtrW9z0+JtoudP5alIyjRbMDh6cYIxyrWnyNBqfm QLtctLhz1mEM84V1IFMyxTcyDU3Iz2/h0ibXp/fWjNQzq4CEP0JMCR1r8oJzhH3g clx/CKDuaiCyDN6eFYzHaTK5jZxhhIcxX5Z/dZ5Wefn4AvQ84j/RscJhpJMRUeJ+ irBIqXfoOQtKZ45Ok0DzczuyfQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFD5dBaBR lZoou2DRm+SoqJ0RPzncMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUVEMkMvMDAzNzNDNkM5QkJDMTFFRTg1MUFERDUwQzRGOUFFMDIvQzc1QjY0MjI2 OEYyMTFFRkI3QTZBMDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAEkMlQDBABnL7oDBAFnNVADBAFnY7IwDQYJKoZIhvcNAQEL BQADggEBAHhY3MuJvp0+/UBt0LJKFXKeiqziSte2tUSeeSXw+61j6UYEdmOw9GaU NvFJp8anYADLYu80HAzDhUVRuT6LkWttRTwewbZgb68bdygi6SqyzcvvUgSVl7PY k1hXtqxZRPmDaSoisxNcVNONc//Zq301GjtKfUUh4uNU8KUaviudKVTC3tCYUyjA DTMZGqDRlMQ8+oEq2NaoluY5p9RbQsdnPxYQFodJk9noWPy+LlhG80cdGF/MKKH4 fwVXi5GA3f+5UxPS7k5osIgOv+tKd/8w5yVRNaT/wMNmt3xJGID8r0a3n57lOgeE 5a3uXm+ISR1L5qFPrxTtHAxFW7Dvemo= -----END CERTIFICATE-----Generated at Sat Apr 5 03:55:12 2025 by rpki-client