$ rpki-client -vvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/1E9D1268B3E011ED98356A75C4F9AE02.roa File: 1E9D1268B3E011ED98356A75C4F9AE02.roa (raw, json) Hash identifier: q2NpAKCFs4OqUi3rj9uEiN/8qjO9vGuIBeFLXS5ulLQ= Subject key identifier: 0E:F5:35:42:59:1F:0D:67:EA:51:EE:47:C6:B2:CD:87:CB:25:B2:54 Certificate issuer: /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE Certificate serial: 062A Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/1E9D1268B3E011ED98356A75C4F9AE02.roa Signing time: Sat 04 Jan 2025 22:11:46 +0000 ROA not before: Sat 04 Jan 2025 22:11:46 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 7492 IP address blocks: 103.157.244.0/23 maxlen: 23 103.157.244.0/24 maxlen: 24 103.157.245.0/24 maxlen: 24 2001:df2:3340::/48 maxlen: 48 2001:df2:33c0::/48 maxlen: 48 2001:df5:3680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1578 (0x62a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912542C Validity Not Before: Jan 4 22:11:46 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6779b222-261a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:d8:b7:9d:d9:6a:ce:5c:41:b7:cf:1a:6d: bd:c6:41:67:f2:42:05:5a:a6:51:5a:e5:54:9e:34: 1d:58:31:c5:f3:cd:77:13:95:ba:11:6e:75:a8:bb: 00:da:1e:ce:58:4f:5c:c6:e6:c8:04:73:18:57:54: cc:cc:4e:f5:fc:59:af:14:fc:0f:2c:51:cf:7f:69: c0:08:10:d3:b3:81:7c:d4:39:2d:6a:e7:1d:08:35: c6:b3:82:97:68:71:d2:a2:e4:74:8d:f4:42:75:90: 71:44:7a:f3:bf:81:5b:44:14:55:b7:63:50:4a:b9: bf:1f:8d:35:8b:65:8a:ab:61:76:6e:18:c5:4c:e6: de:64:f5:3e:19:5f:99:a7:50:90:bb:0e:73:6c:2f: 60:4f:ae:73:0f:c4:c2:b3:5b:54:3b:60:17:1f:4d: 36:84:7d:a3:b2:c1:4a:3b:23:d8:e4:bc:d3:9d:56: c7:03:ec:ef:e0:af:4b:dc:ce:be:1a:0b:e3:2f:2e: cc:ff:ad:57:76:0a:d7:9e:6c:c8:ed:4f:f6:d5:d9: 04:46:69:00:10:df:19:d5:79:a3:a7:e6:b2:2a:09: 59:b8:b4:79:08:ce:dd:bc:b6:93:0d:ea:47:eb:38: 84:6d:7a:a2:46:63:06:74:a4:0c:60:d1:15:04:21: 57:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F5:35:42:59:1F:0D:67:EA:51:EE:47:C6:B2:CD:87:CB:25:B2:54 X509v3 Authority Key Identifier: keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/1E9D1268B3E011ED98356A75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.244.0/23 IPv6: 2001:df2:3340::/48 2001:df2:33c0::/48 2001:df5:3680::/48 Signature Algorithm: sha256WithRSAEncryption 78:0a:67:1b:c6:5d:8e:16:7c:5e:3a:41:3f:4f:10:7e:f2:c2: cd:41:16:47:b8:c4:2d:e5:5d:86:29:32:94:28:56:17:6a:7a: 99:ee:93:b8:a9:ad:8b:fc:fa:e0:20:fe:7e:76:82:c9:d2:c1: 3f:63:49:43:90:0c:8f:78:36:99:90:b5:33:1b:fd:cf:9d:60: a3:d4:a4:70:87:91:80:ed:94:f5:0a:ec:67:b2:fa:af:d3:99: 7e:db:65:be:78:5e:b7:3b:e1:a6:a4:f3:eb:8b:bd:7b:5a:dc: 22:13:25:24:54:12:cc:11:7f:7c:c5:13:7b:fa:ca:a7:50:72: d3:b0:11:6d:f5:b5:b8:75:b3:78:72:2f:39:7c:51:89:42:e6: 48:69:58:52:a2:cf:34:5e:66:62:2e:ba:e2:41:07:77:da:b2: 21:71:2c:23:67:8a:6b:08:28:90:ab:41:e3:32:ac:84:4e:de: 5f:f4:fa:56:42:a2:a1:e8:ca:10:19:e2:a5:d5:89:c1:cd:1c: 76:6f:44:b1:93:07:3e:ba:7e:45:b3:89:bd:96:84:93:a4:de: cf:a8:f5:1c:ef:0f:9b:86:cc:36:cc:9b:2c:c8:cb:f4:d5:90: fc:98:56:a1:7e:f9:14:0d:ec:fc:24:bd:fd:14:b3:85:2b:23: 30:37:b2:c4 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0MkMxMTAvBgNVBAUTKERCN0NFNTIzRTg0MEI3N0ZDOUUxOTZGNThGMTQ5NzZB Q0U0MTU0QkUwHhcNMjUwMTA0MjIxMTQ2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc5YjIyMi0yNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7fYt53Zas5cQbfPGm29xkFn8kIFWqZRWuVUnjQdWDHF8813E5W6EW51qLsA 2h7OWE9cxubIBHMYV1TMzE71/FmvFPwPLFHPf2nACBDTs4F81DktaucdCDXGs4KX aHHSouR0jfRCdZBxRHrzv4FbRBRVt2NQSrm/H401i2WKq2F2bhjFTObeZPU+GV+Z p1CQuw5zbC9gT65zD8TCs1tUO2AXH002hH2jssFKOyPY5LzTnVbHA+zv4K9L3M6+ GgvjLy7M/61XdgrXnmzI7U/21dkERmkAEN8Z1Xmjp+ayKglZuLR5CM7dvLaTDepH 6ziEbXqiRmMGdKQMYNEVBCFXCwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFA71NUJZ Hw1n6lHuR8ayzYfLJbJUMB8GA1UdIwQYMBaAFNt85SPoQLd/yeGW9Y8Ul2rOQVS+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQyQy8xQjYzNDY2RThD QTgxMUVCQTJCRDBBNkJDNEY5QUUwMi8yM3psSS1oQXQzX0o0WmIxanhTWGFzNUJW TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzemxJLWhBdDNfSjRaYjFqeFNYYXM1QlZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0MkMvMUI2MzQ2NkU4Q0E4MTFFQkEyQkQwQTZCQzRGOUFFMDIvMUU5RDEyNjhC M0UwMTFFRDk4MzU2QTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMAwEAgABMAYDBAFnnfQwIQQCAAIwGwMHACABDfIzQAMHACABDfIzwAMHACAB DfU2gDANBgkqhkiG9w0BAQsFAAOCAQEAeApnG8ZdjhZ8XjpBP08QfvLCzUEWR7jE LeVdhikylChWF2p6me6TuKmti/z64CD+fnaCydLBP2NJQ5AMj3g2mZC1Mxv9z51g o9SkcIeRgO2U9QrsZ7L6r9OZfttlvnhetzvhpqTz64u9e1rcIhMlJFQSzBF/fMUT e/rKp1By07ARbfW1uHWzeHIvOXxRiULmSGlYUqLPNF5mYi664kEHd9qyIXEsI2eK awgokKtB4zKshE7eX/T6VkKioejKEBnipdWJwc0cdm9EsZMHPrp+RbOJvZaEk6Te z6j1HO8Pm4bMNsybLMjL9NWQ/JhWoX75FA3s/CS9/RSzhSsjMDeyxA== -----END CERTIFICATE-----Generated at Sun Apr 6 12:25:43 2025 by rpki-client