$ rpki-client -vvf rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/C8A09F34F11C11EA83A6D247C4F9AE02.roa File: C8A09F34F11C11EA83A6D247C4F9AE02.roa (raw, json) Hash identifier: zKy/yyxo1KuNb1lr1bEjLMk/9ZIle0kY/A3BTe9o8dE= Subject key identifier: AE:E2:9E:47:1A:D1:47:CC:0D:04:B5:4F:77:DC:BB:C8:A7:7E:E4:A4 Certificate issuer: /CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27 Certificate serial: 0AB2 Authority key identifier: AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/C8A09F34F11C11EA83A6D247C4F9AE02.roa Signing time: Thu 12 Dec 2024 19:38:20 +0000 ROA not before: Thu 12 Dec 2024 19:38:20 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 138418 IP address blocks: 103.114.60.0/23 maxlen: 23 103.114.60.0/24 maxlen: 24 103.114.61.0/24 maxlen: 24 103.125.28.0/22 maxlen: 22 103.125.28.0/23 maxlen: 23 103.125.28.0/24 maxlen: 24 103.125.29.0/24 maxlen: 24 103.125.30.0/23 maxlen: 23 103.125.30.0/24 maxlen: 24 103.125.31.0/24 maxlen: 24 2403:eb40::/32 maxlen: 32 2403:eb40::/48 maxlen: 48 2403:eb40:1000::/48 maxlen: 48 2403:eb40:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2738 (0xab2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FD55, serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27 Validity Not Before: Dec 12 19:38:20 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=675b3bac-e5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:ba:88:13:a5:15:0b:47:75:de:5b:e9:ff: f0:f0:6a:59:2b:4f:d3:77:4e:31:c4:dc:45:e2:d2: 6f:f8:c4:12:28:23:bf:7b:b2:26:b8:af:73:3b:a7: 11:9a:36:65:ab:18:f2:82:8c:f4:17:ab:51:6b:ad: ec:97:0b:40:3a:d5:b8:77:22:d8:c8:13:82:d3:f0: 64:00:73:97:fd:d4:24:07:72:fc:26:f4:3e:46:d8: 8f:38:28:9f:13:05:98:8a:e1:be:12:0e:d6:db:6a: 42:20:58:b5:f6:48:a1:fb:8f:10:cf:8f:24:35:fd: 7f:0c:62:e3:60:bd:a6:b8:ae:dd:dd:37:9b:7a:92: 78:13:0f:2c:ee:fa:73:a4:5e:b5:0d:d0:92:a6:27: b1:0c:d4:92:21:89:17:c4:9b:b2:8e:11:59:40:22: 6e:9a:90:fc:a0:50:80:60:52:43:41:60:3b:d6:f4: 2a:a1:38:f6:f7:b6:52:c1:8d:86:fd:6b:fe:13:67: 87:1c:ab:9b:bc:ab:c9:c1:de:e0:f0:15:f6:0f:ed: 87:d1:53:6b:57:fb:c5:02:9b:2e:cb:76:14:0d:5e: 7c:85:2f:86:b1:b2:78:a3:7f:b3:a5:27:27:65:12: ed:f7:9b:34:37:64:5a:7e:a2:f4:63:0e:cf:db:9b: 59:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E2:9E:47:1A:D1:47:CC:0D:04:B5:4F:77:DC:BB:C8:A7:7E:E4:A4 X509v3 Authority Key Identifier: keyid:AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/C8A09F34F11C11EA83A6D247C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.114.60.0/23 103.125.28.0/22 IPv6: 2403:eb40::/32 Signature Algorithm: sha256WithRSAEncryption 39:78:80:1b:72:c9:85:d3:d7:b7:17:f2:94:1a:2c:ea:6e:b4: 4f:50:85:a1:f5:64:84:85:53:d1:9a:de:b9:8f:8a:b7:cc:af: c9:b4:83:4c:7e:41:2f:14:c5:6f:41:bb:6b:cd:9f:cc:78:d7: cb:b3:ac:a2:a5:14:05:96:49:5c:7d:fe:12:5d:bf:d1:d0:b1: 38:1d:94:4b:44:dd:ef:ae:41:92:24:92:3a:38:b6:71:3e:bc: d5:d1:58:64:7f:9a:5d:22:16:0a:03:50:88:e8:f5:86:49:ff: 03:3e:dd:a6:a5:eb:e1:36:d5:3c:27:00:7a:a8:d0:c7:fc:8b: a1:34:c7:5f:09:46:af:d1:84:53:d6:4b:42:05:a7:d7:ce:c3: ba:e0:b7:12:47:d0:5f:53:c2:98:1e:2a:f0:3f:df:de:f8:04: 10:a4:04:f1:82:47:4b:8d:c6:c8:cd:8b:02:0f:22:ac:60:ba: aa:9b:b8:64:71:93:05:92:b1:0d:08:c8:1c:b7:7b:57:e2:00: 5b:36:59:53:d9:5d:d8:6f:d9:92:7d:f5:f4:f4:47:3b:2e:95: c3:1d:76:8f:27:ce:5b:f4:5a:ca:af:5f:ed:a6:50:b4:c1:ea: d6:0e:1f:32:f3:2d:ac:33:5f:17:90:23:f1:ae:35:a9:3c:fd: f2:48:6a:82 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZENTUxMTAvBgNVBAUTKEFDREVCQkRDOEFFQTdBNjExMzY5MzE4MzM4NjNCMUUz OUUwMTdFMjcwHhcNMjQxMjEyMTkzODIwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzViM2JhYy1lNWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoO6iBOlFQtHdd5b6f/w8GpZK0/Td04xxNxF4tJv+MQSKCO/e7ImuK9zO6cR mjZlqxjygoz0F6tRa63slwtAOtW4dyLYyBOC0/BkAHOX/dQkB3L8JvQ+RtiPOCif EwWYiuG+Eg7W22pCIFi19kih+48Qz48kNf1/DGLjYL2muK7d3TebepJ4Ew8s7vpz pF61DdCSpiexDNSSIYkXxJuyjhFZQCJumpD8oFCAYFJDQWA71vQqoTj297ZSwY2G /Wv+E2eHHKubvKvJwd7g8BX2D+2H0VNrV/vFApsuy3YUDV58hS+GsbJ4o3+zpScn ZRLt95s0N2RafqL0Yw7P25tZVQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFK7inkca 0UfMDQS1T3fcu8infuSkMB8GA1UdIwQYMBaAFKzeu9yK6nphE2kxgzhjseOeAX4n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkQ1NS9FNzhGRDJBQTQ3 MzIxMUVBODEwQjUwNDJDNEY5QUUwMi9yTjY3M0lycWVtRVRhVEdET0dPeDQ1NEJm aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JONjczSXJxZW1FVGFUR0RPR094NDU0QmZpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUZENTUvRTc4RkQyQUE0NzMyMTFFQTgxMEI1MDQyQzRGOUFFMDIvQzhBMDlGMzRG MTFDMTFFQTgzQTZEMjQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFncjwDBAJnfRwwDQQCAAIwBwMFACQD60AwDQYJKoZIhvcN AQELBQADggEBADl4gBtyyYXT17cX8pQaLOputE9QhaH1ZISFU9Ga3rmPirfMr8m0 g0x+QS8UxW9Bu2vNn8x418uzrKKlFAWWSVx9/hJdv9HQsTgdlEtE3e+uQZIkkjo4 tnE+vNXRWGR/ml0iFgoDUIjo9YZJ/wM+3aal6+E21TwnAHqo0Mf8i6E0x18JRq/R hFPWS0IFp9fOw7rgtxJH0F9TwpgeKvA/3974BBCkBPGCR0uNxsjNiwIPIqxguqqb uGRxkwWSsQ0IyBy3e1fiAFs2WVPZXdhv2ZJ99fT0RzsulcMddo8nzlv0WsqvX+2m ULTB6tYOHzLzLawzXxeQI/GuNak8/fJIaoI= -----END CERTIFICATE-----Generated at Tue Apr 22 18:26:37 2025 by rpki-client