$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/DC185D0CB0A111EE8C78834EC4F9AE02.roa File: DC185D0CB0A111EE8C78834EC4F9AE02.roa (raw, json) Hash identifier: zVf7fP7T9Wlmc5kqlhyBV7WQ1wTAT5AIwMfxCy+bFh0= Subject key identifier: 73:AA:A1:E2:6C:7B:E3:8C:19:87:0C:6D:85:AE:CD:B4:4D:4B:F0:1E Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Certificate serial: 0E30 Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/DC185D0CB0A111EE8C78834EC4F9AE02.roa Signing time: Fri 03 Jan 2025 04:21:11 +0000 ROA not before: Fri 03 Jan 2025 04:21:11 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 132824 IP address blocks: 103.136.32.0/24 maxlen: 24 103.136.33.0/24 maxlen: 24 103.136.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3632 (0xe30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E Validity Not Before: Jan 3 04:21:11 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=677765b7-9cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:18:87:80:15:ef:3e:9e:f7:b8:2c:fd:c8:61: 60:ab:d3:de:57:a1:0a:96:83:ae:2d:0a:34:5c:38: 48:d2:2a:a9:60:4a:fb:44:6f:ba:39:cc:35:9b:9a: d2:f3:49:4c:9d:0d:7e:fc:bf:17:64:96:67:89:30: d8:c3:3a:2e:df:79:b4:e5:07:30:9d:95:f7:d5:76: 02:fe:86:fa:27:50:09:bd:c1:3b:c3:fd:ef:72:e5: 01:b7:5d:71:1b:4f:8c:90:9b:57:92:9c:fe:48:96: b0:5a:b1:4f:27:13:03:95:43:05:55:1d:63:a8:0a: 33:90:e2:e2:90:fc:11:1f:5b:87:79:06:4d:67:f1: 8f:85:3a:21:01:67:f5:46:c9:8e:70:b6:4b:8c:e3: 9b:15:a8:4a:d7:b6:48:4d:f1:af:1b:74:bb:03:0d: 25:b0:25:46:cb:62:e9:23:52:ee:50:dc:66:9e:ed: 3f:44:4c:07:2c:d4:99:de:05:d4:c7:9a:df:3b:a6: 40:a4:e4:4f:58:fd:1f:3b:90:6b:23:32:d7:cf:35: 3c:f9:97:b3:4b:bc:5b:e4:28:08:f8:4f:bb:dc:40: 86:5a:c3:53:ff:4b:36:3d:d7:ab:5d:b3:49:cb:87: 29:e8:0a:e6:bb:18:3b:03:90:d0:13:f0:ac:c9:e7: 47:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AA:A1:E2:6C:7B:E3:8C:19:87:0C:6D:85:AE:CD:B4:4D:4B:F0:1E X509v3 Authority Key Identifier: keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/DC185D0CB0A111EE8C78834EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.32.0-103.136.34.255 Signature Algorithm: sha256WithRSAEncryption 35:81:d7:59:aa:49:7c:a2:f7:90:ab:c7:96:63:6c:04:5e:8a: 66:73:e2:56:91:d6:4f:28:e6:ae:fd:d3:4f:f8:d8:8e:5d:e2: d0:37:f4:d8:cb:ce:16:75:2d:dd:03:35:85:c1:a9:19:8e:4c: 85:85:e1:06:85:65:6a:d7:10:57:f1:f1:cd:ad:8c:43:2b:a5: 9b:db:37:ee:97:34:60:e6:46:f7:69:c8:df:ee:ec:96:9c:7c: ea:89:aa:51:8c:3f:21:f4:66:29:57:ba:df:d7:19:ce:e4:60: 9f:cc:fe:4d:41:3c:5f:0d:94:44:cb:5b:a6:71:da:4e:86:59: ef:a7:7e:c3:cf:f4:07:35:72:ee:40:b0:10:9c:6c:25:60:36: e5:dc:a5:3c:cc:97:c0:bc:27:d6:06:ac:48:79:a3:a9:5d:cc: bc:5a:9f:25:dd:46:c7:42:91:e4:0f:b5:2c:ac:2f:a6:85:8b: c8:07:0f:bc:e6:c3:e5:70:b8:a2:3b:30:6b:b2:cf:4f:7c:a5: ae:03:24:48:d5:dd:22:75:4c:c0:ff:d9:ae:d6:89:92:43:36: 05:ed:98:7e:de:b1:ad:38:a7:4e:84:61:b4:3b:1c:5c:24:e4: ad:c8:e0:21:77:cf:b1:6b:64:6f:2b:1f:5f:85:d1:b8:92:87: a0:19:6a:95 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICDjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4 OTVGQzQ3REUwHhcNMjUwMTAzMDQyMTExWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc3NjViNy05Y2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxiHgBXvPp73uCz9yGFgq9PeV6EKloOuLQo0XDhI0iqpYEr7RG+6Ocw1m5rS 80lMnQ1+/L8XZJZniTDYwzou33m05QcwnZX31XYC/ob6J1AJvcE7w/3vcuUBt11x G0+MkJtXkpz+SJawWrFPJxMDlUMFVR1jqAozkOLikPwRH1uHeQZNZ/GPhTohAWf1 RsmOcLZLjOObFahK17ZITfGvG3S7Aw0lsCVGy2LpI1LuUNxmnu0/REwHLNSZ3gXU x5rfO6ZApORPWP0fO5BrIzLXzzU8+ZezS7xb5CgI+E+73ECGWsNT/0s2PderXbNJ y4cp6Armuxg7A5DQE/CsyedH5QIDAQABo4ICnTCCApkwHQYDVR0OBBYEFHOqoeJs e+OMGYcMbYWuzbRNS/AeMB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjY5OEUvRjE5QTdDOTQ5QzFDMTFFOTkyRkFGQjFCQzRGOUFFMDIvREMxODVEMENC MEExMTFFRThDNzg4MzRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEBWeIIAMEAGeIIjANBgkqhkiG9w0BAQsFAAOCAQEANYHX WapJfKL3kKvHlmNsBF6KZnPiVpHWTyjmrv3TT/jYjl3i0Df02MvOFnUt3QM1hcGp GY5MhYXhBoVlatcQV/Hxza2MQyulm9s37pc0YOZG92nI3+7slpx86omqUYw/IfRm KVe639cZzuRgn8z+TUE8Xw2URMtbpnHaToZZ76d+w8/0BzVy7kCwEJxsJWA25dyl PMyXwLwn1gasSHmjqV3MvFqfJd1Gx0KR5A+1LKwvpoWLyAcPvObD5XC4ojswa7LP T3ylrgMkSNXdInVMwP/ZrtaJkkM2Be2Yft6xrTinToRhtDscXCTkrcjgIXfPsWtk bysfX4XRuJKHoBlqlQ== -----END CERTIFICATE-----Generated at Sat Apr 5 05:57:29 2025 by rpki-client