$ rpki-client -vvf rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/2A44CEFE311111E98C69B181C4F9AE02.roa File: 2A44CEFE311111E98C69B181C4F9AE02.roa (raw, json) Hash identifier: 0SVk2cOfikrAvRDDJgb5TANBAXNNynzVUWZgXY+3hcc= Subject key identifier: 3D:D2:58:10:5B:33:41:0C:AE:3D:13:A3:D8:C0:3D:1C:3C:2E:B2:3D Certificate issuer: /CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Certificate serial: 1054 Authority key identifier: 00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/2A44CEFE311111E98C69B181C4F9AE02.roa Signing time: Sun 02 Mar 2025 18:05:44 +0000 ROA not before: Sun 02 Mar 2025 18:05:44 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138616 IP address blocks: 103.136.168.0/24 maxlen: 24 2001:df7:c900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4180 (0x1054) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912216A Validity Not Before: Mar 2 18:05:44 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c49df8-659f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:32:9e:8e:32:77:df:c5:97:da:af:30:70:43: 86:eb:a6:e8:bb:a4:88:36:a4:8a:c9:fd:d0:59:7a: d7:e5:b7:a2:da:49:b5:2c:83:23:2a:d7:4f:d4:70: 91:50:70:1d:36:83:1f:a2:b5:bf:5c:5b:cd:96:fe: 21:bf:cd:ca:4a:8c:80:5b:0b:92:36:fb:4a:e6:ac: ef:42:e3:ef:b7:39:6b:5f:c2:12:cc:da:37:12:36: d2:3f:bb:20:fa:78:58:3b:27:4c:27:3d:77:cd:58: e3:37:f6:86:04:34:19:bd:1a:59:94:06:3c:d3:c9: 01:3b:1f:c8:a8:4f:cf:69:56:b3:48:44:fe:97:2a: c8:14:c3:c3:49:41:72:9b:69:67:73:5f:08:b6:2c: 07:12:50:3f:6f:60:48:96:ce:f5:7c:15:62:04:05: d2:72:8e:ca:db:f9:fa:51:e7:01:7d:24:eb:ce:ab: ec:cd:6d:35:10:28:04:d9:e7:8e:cc:0f:8d:90:d4: d4:dd:95:f8:61:aa:7c:e5:8f:0f:31:50:97:65:ff: 58:d4:a7:88:48:5d:0c:f1:d5:fe:7b:f7:08:f8:f3: 3a:64:ca:61:48:60:24:a5:b0:7e:06:ae:35:37:d8: 39:94:32:1a:b7:1d:45:50:9b:d4:70:ee:a0:fc:3f: 58:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D2:58:10:5B:33:41:0C:AE:3D:13:A3:D8:C0:3D:1C:3C:2E:B2:3D X509v3 Authority Key Identifier: keyid:00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/2A44CEFE311111E98C69B181C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.168.0/24 IPv6: 2001:df7:c900::/48 Signature Algorithm: sha256WithRSAEncryption 52:88:6e:de:94:39:90:4d:ce:06:5d:71:45:20:5f:e7:bf:c3: ac:9c:51:4d:bf:5a:d6:47:97:bc:4d:e0:a5:e1:81:6e:43:9c: b6:0a:96:1b:43:c9:30:4a:e4:19:ef:cd:e0:80:53:65:50:d3: e2:ad:99:52:c1:28:0d:f9:4c:1a:6c:ea:d8:c7:27:86:61:d2: 63:d2:33:d9:6b:b6:d4:50:6b:93:f1:21:6f:f5:40:78:01:bd: c6:3f:eb:0e:10:3f:01:e3:a7:33:c4:e7:4d:db:8e:52:af:b5: 1f:b8:49:df:63:45:ea:ab:24:8f:ce:6a:b3:4d:5a:f3:ff:b8: ab:10:01:01:76:37:58:92:b7:23:53:75:6e:42:73:ee:ca:d7: 3f:5f:00:e7:3f:09:c1:2f:6d:03:32:22:d3:54:66:7d:f0:f7: 6b:fe:13:87:32:c2:27:75:d8:52:06:fc:26:7d:0a:76:3f:ae: fa:06:70:3f:43:94:e0:50:31:6a:e1:16:19:13:92:c4:83:a4: 44:d1:70:2a:3a:96:b5:b1:98:9b:c5:5e:59:e2:fe:7c:75:9b: 5e:39:f7:5b:18:28:43:12:07:fb:b9:ac:bb:1a:15:94:f2:13: ac:e1:6f:7a:75:d1:68:81:80:30:0a:43:2f:70:62:13:6d:e9: f8:ca:64:1f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICEFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxNkExMTAvBgNVBAUTKDAwOTYxQjhGNjNBREU5RDE5RjNBQ0Y0MjgzM0FDNUQ5 QzlDNzI3OEYwHhcNMjUwMzAyMTgwNTQ0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2M0OWRmOC02NTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTKejjJ338WX2q8wcEOG66bou6SINqSKyf3QWXrX5bei2km1LIMjKtdP1HCR UHAdNoMforW/XFvNlv4hv83KSoyAWwuSNvtK5qzvQuPvtzlrX8ISzNo3EjbSP7sg +nhYOydMJz13zVjjN/aGBDQZvRpZlAY808kBOx/IqE/PaVazSET+lyrIFMPDSUFy m2lnc18ItiwHElA/b2BIls71fBViBAXSco7K2/n6UecBfSTrzqvszW01ECgE2eeO zA+NkNTU3ZX4Yap85Y8PMVCXZf9Y1KeISF0M8dX+e/cI+PM6ZMphSGAkpbB+Bq41 N9g5lDIatx1FUJvUcO6g/D9YGwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFD3SWBBb M0EMrj0To9jAPRw8LrI9MB8GA1UdIwQYMBaAFACWG49jrenRnzrPQoM6xdnJxyeP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjE2QS9GQzUxQzlFODMx MEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZkR2ZPczlDZ3pyRjJjbkhK NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKWWJqMk90NmRHZk9zOUNnenJGMmNuSEo0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjIxNkEvRkM1MUM5RTgzMTBCMTFFOUJCODJGRTcyQzRGOUFFMDIvMkE0NENFRkUz MTExMTFFOThDNjlCMTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABniKgwDwQCAAIwCQMHACABDffJADANBgkqhkiG9w0BAQsF AAOCAQEAUohu3pQ5kE3OBl1xRSBf57/DrJxRTb9a1keXvE3gpeGBbkOctgqWG0PJ MErkGe/N4IBTZVDT4q2ZUsEoDflMGmzq2McnhmHSY9Iz2Wu21FBrk/Ehb/VAeAG9 xj/rDhA/AeOnM8TnTduOUq+1H7hJ32NF6qskj85qs01a8/+4qxABAXY3WJK3I1N1 bkJz7srXP18A5z8JwS9tAzIi01RmffD3a/4ThzLCJ3XYUgb8Jn0Kdj+u+gZwP0OU 4FAxauEWGROSxIOkRNFwKjqWtbGYm8VeWeL+fHWbXjn3WxgoQxIH+7msuxoVlPIT rOFvenXRaIGAMApDL3BiE23p+MpkHw== -----END CERTIFICATE-----Generated at Sun Apr 6 06:53:19 2025 by rpki-client