$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/CE74C490AA4911EF80B4D381C4F9AE02.roa File: CE74C490AA4911EF80B4D381C4F9AE02.roa (raw, json) Hash identifier: 9trSPATG6e6kZcNLx6FEo2PvgXLIh+akuZgMM6SjcBw= Subject key identifier: 66:A7:58:E7:AC:B6:B8:60:F9:D9:B9:38:B0:86:8C:2C:21:2C:86:2A Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: EB Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/CE74C490AA4911EF80B4D381C4F9AE02.roa Signing time: Sun 24 Nov 2024 09:52:25 +0000 ROA not before: Sun 24 Nov 2024 09:52:25 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 138197 IP address blocks: 103.72.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25 Validity Not Before: Nov 24 09:52:25 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6742f758-1ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c8:d6:d5:45:a5:5d:0c:7f:a9:82:ae:59:0b: 86:ca:aa:30:44:87:94:c1:7d:56:f8:66:6f:2f:15: be:d8:23:33:4a:cf:6d:a7:7e:39:94:c9:02:66:af: 33:80:7f:b4:9c:97:28:c2:30:d6:a2:79:c5:83:9c: 3c:e1:70:9f:4f:36:e8:93:76:ad:e7:1b:92:fb:36: d1:ec:79:57:d3:c0:c5:ae:31:2c:ae:86:a4:91:12: e7:86:be:6d:5e:40:3b:c0:d0:7b:0f:2a:5c:f0:35: 69:d3:85:a6:0f:3b:7a:5e:f9:cd:9c:07:30:8d:d0: 6f:cd:46:18:4a:17:0e:5b:fe:e3:1a:3c:0e:da:76: 45:77:32:2f:06:3a:66:0a:f4:4d:27:be:d9:a9:3e: 5e:4d:28:6c:94:57:a2:ff:28:e8:88:87:ff:09:5b: df:92:d1:37:2c:5e:54:61:e7:3d:91:12:0a:e5:65: 7b:c7:7b:5c:85:97:4f:a5:8b:45:de:a7:68:83:81: 16:55:a5:03:b5:2a:0f:31:e3:d4:55:c5:cb:ee:2d: 72:8c:58:58:c8:34:b9:a3:d3:bf:c1:05:f3:ed:ee: 00:03:1e:74:75:0c:12:77:9f:20:18:76:01:68:4c: b5:23:87:b1:3a:bc:73:e1:55:c8:48:ce:73:b6:aa: 8b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A7:58:E7:AC:B6:B8:60:F9:D9:B9:38:B0:86:8C:2C:21:2C:86:2A X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/CE74C490AA4911EF80B4D381C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.65.0/24 Signature Algorithm: sha256WithRSAEncryption 79:e1:e8:5d:5c:41:b9:f2:d6:2f:52:7a:9a:28:f7:a0:d2:1f: d9:c3:2c:5a:36:96:c3:16:fb:58:84:1e:cc:45:59:d9:c6:d8: 04:52:9d:76:b5:0c:c4:88:f2:b1:80:98:67:f1:a1:bb:75:17: c8:ff:71:aa:8f:ae:2d:a8:59:f4:0b:dd:80:4e:18:06:a6:a4: 84:8c:ab:01:a5:58:17:30:12:01:22:02:77:a3:f5:61:fa:81: b3:85:32:42:f3:55:14:d3:fc:36:29:c6:ef:3b:af:2d:e3:20: 8e:ee:ed:7e:fd:1d:54:d6:86:fa:16:84:2f:0a:0b:fc:ce:e2: 75:ea:4d:2e:40:8f:41:68:20:fa:15:25:d9:63:de:56:be:d8: 1e:8c:88:4d:72:5a:63:b0:d6:6c:8d:0b:8e:b9:ef:7f:13:bd: 96:7a:ac:3d:cb:cf:0e:f4:44:dd:f9:59:a8:01:b3:2f:c3:c3: 6a:9c:5a:45:d6:27:11:99:75:89:a9:f6:7d:52:18:56:b4:07: 47:79:ba:c0:e7:79:f1:b9:2a:20:60:dd:c9:3c:3e:48:71:74: e0:f6:0d:d8:9c:cb:fc:bb:08:31:28:ed:85:20:1f:e0:66:46: c7:4f:7f:e0:31:32:ee:2a:80:c5:2f:29:77:d3:a0:f9:dc:77: 87:d9:ee:27 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjQxMTI0MDk1MjI1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQyZjc1OC0xZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcjW1UWlXQx/qYKuWQuGyqowRIeUwX1W+GZvLxW+2CMzSs9tp345lMkCZq8z gH+0nJcowjDWonnFg5w84XCfTzbok3at5xuS+zbR7HlX08DFrjEsroakkRLnhr5t XkA7wNB7Dypc8DVp04WmDzt6XvnNnAcwjdBvzUYYShcOW/7jGjwO2nZFdzIvBjpm CvRNJ77ZqT5eTShslFei/yjoiIf/CVvfktE3LF5UYec9kRIK5WV7x3tchZdPpYtF 3qdog4EWVaUDtSoPMePUVcXL7i1yjFhYyDS5o9O/wQXz7e4AAx50dQwSd58gGHYB aEy1I4exOrxz4VXISM5ztqqL8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGanWOes trhg+dm5OLCGjCwhLIYqMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUZGMjUvNjA2NEJBQjI1MkY0MTFFRTg5OEI5QjQzQzRGOUFFMDIvQ0U3NEM0OTBB QTQ5MTFFRjgwQjREMzgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnSEEwDQYJKoZIhvcNAQELBQADggEBAHnh6F1cQbny1i9S epoo96DSH9nDLFo2lsMW+1iEHsxFWdnG2ARSnXa1DMSI8rGAmGfxobt1F8j/caqP ri2oWfQL3YBOGAampISMqwGlWBcwEgEiAnej9WH6gbOFMkLzVRTT/DYpxu87ry3j II7u7X79HVTWhvoWhC8KC/zO4nXqTS5Aj0FoIPoVJdlj3la+2B6MiE1yWmOw1myN C465738TvZZ6rD3Lzw70RN35WagBsy/Dw2qcWkXWJxGZdYmp9n1SGFa0B0d5usDn efG5KiBg3ck8PkhxdOD2Ddicy/y7CDEo7YUgH+BmRsdPf+AxMu4qgMUvKXfToPnc d4fZ7ic= -----END CERTIFICATE-----Generated at Sat Apr 5 01:58:01 2025 by rpki-client