$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5DEB6B02D3BB11EF80C3AF80C4F9AE02.roa File: 5DEB6B02D3BB11EF80C3AF80C4F9AE02.roa (raw, json) Hash identifier: QSPivy5RJK48HHT2SlrvrCH9DPiTCFPajDEwNKBnEww= Subject key identifier: 29:C4:08:8F:DA:AC:39:0D:80:67:14:59:BA:04:0C:87:12:0E:43:D9 Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Certificate serial: 15 Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5DEB6B02D3BB11EF80C3AF80C4F9AE02.roa Signing time: Tue 11 Feb 2025 07:20:21 +0000 ROA not before: Tue 11 Feb 2025 07:20:21 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 206150 IP address blocks: 103.49.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EEB Validity Not Before: Feb 11 07:20:21 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67aafa35-9068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9b:4e:03:ea:fe:c5:bc:3e:a7:3a:8e:84:3b: a3:20:35:23:73:a7:fb:1a:cb:db:2e:b7:21:2c:cd: 20:10:20:e6:09:7a:2e:14:71:80:73:7e:30:35:72: 5a:8e:18:b6:60:9d:08:1e:8a:54:39:ef:a3:03:f1: 5b:5d:27:5d:bc:87:e7:80:92:64:11:da:46:1c:77: d5:a7:72:e3:52:ce:c6:72:c6:73:f8:68:f2:23:33: 35:3e:e5:fe:0a:74:ad:e2:a3:6c:92:10:f0:2f:ce: 45:47:67:ef:a3:61:b0:58:43:85:80:96:56:e3:29: ba:8e:0b:12:08:2c:fd:7c:05:dd:12:b4:ac:7f:a2: 6b:3a:06:3d:f5:0b:82:95:7a:5b:bf:ee:49:8d:48: 39:66:da:be:70:f8:39:b9:d9:36:ca:8d:17:90:37: 46:96:d9:df:91:89:67:23:09:60:52:a5:10:2d:ad: cd:6f:d2:65:4f:55:d8:1b:4f:e9:8e:b8:b3:de:63: cd:47:87:1a:65:6f:06:e1:8b:2d:61:7c:0c:6b:87: 36:f6:bd:c5:6b:35:3b:78:90:d4:6c:7d:b7:e8:de: 8a:ff:78:cf:88:99:84:25:05:d4:69:86:e2:ff:41: 4a:7a:68:01:2c:c1:3e:5e:ca:02:ed:b6:46:c5:cf: b4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C4:08:8F:DA:AC:39:0D:80:67:14:59:BA:04:0C:87:12:0E:43:D9 X509v3 Authority Key Identifier: keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5DEB6B02D3BB11EF80C3AF80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.49.41.0/24 Signature Algorithm: sha256WithRSAEncryption 84:27:3a:53:0e:a6:a3:b5:42:c9:04:7d:1b:be:fc:3e:09:9c: b7:35:f7:cb:0a:40:ef:3d:ec:2c:ec:06:73:7f:0f:10:f8:9d: 26:ed:f1:19:77:42:c6:ee:14:b9:45:6b:cd:b4:dc:52:00:cd: b5:ff:7d:6a:16:19:b4:4b:cf:b7:31:47:7a:ee:07:71:06:6d: 36:43:8b:8b:2b:0f:78:c7:98:74:79:cc:fd:68:79:2c:2c:f2: 0c:ea:4c:06:cd:47:20:f7:52:b1:b7:f9:45:10:9f:c4:08:05: 71:80:cd:70:bc:8e:c4:63:14:e2:1f:e6:53:ff:56:df:62:4f: 12:84:01:9d:5d:88:0a:bc:c5:eb:51:8e:ba:e1:07:18:0c:ba: c0:b9:5c:09:31:3e:9b:de:ab:67:74:cd:d2:31:f3:89:f6:6d: 95:0c:9e:90:1d:9e:32:b0:bb:db:c5:2e:00:8d:ea:98:d4:c9: a2:57:86:12:b1:1e:66:67:79:11:4a:bc:27:9e:ba:d7:e1:7c: 40:e4:83:37:a1:0e:bb:5e:d5:29:9d:f8:6b:fa:5a:40:ed:6f: 57:2a:ff:71:f7:59:6b:8a:ca:6e:a5:45:e0:79:b9:78:d8:50: 6d:a8:96:2c:a9:39:57:4e:5f:75:62:d1:47:db:3f:3f:fc:24: 19:e1:4e:fe -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0VFQjExMC8GA1UEBRMoREVGMzMxN0NCRDE0RDdEQkFBMjdCRkZFM0ZFNUE3QjhB NkVEQ0ZCOTAeFw0yNTAyMTEwNzIwMjFaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YWFmYTM1LTkwNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNm04D6v7FvD6nOo6EO6MgNSNzp/say9sutyEszSAQIOYJei4UcYBzfjA1clqO GLZgnQgeilQ576MD8VtdJ128h+eAkmQR2kYcd9WncuNSzsZyxnP4aPIjMzU+5f4K dK3io2ySEPAvzkVHZ++jYbBYQ4WAllbjKbqOCxIILP18Bd0StKx/oms6Bj31C4KV elu/7kmNSDlm2r5w+Dm52TbKjReQN0aW2d+RiWcjCWBSpRAtrc1v0mVPVdgbT+mO uLPeY81Hhxplbwbhiy1hfAxrhzb2vcVrNTt4kNRsfbfo3or/eM+ImYQlBdRphuL/ QUp6aAEswT5eygLttkbFz7RzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUKcQIj9qs OQ2AZxRZugQMhxIOQ9kwHwYDVR0jBBgwFoAU3vMxfL0U19uqJ7/+P+WnuKbtz7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RUVCL0Y1N0M5NEIwRDNC QTExRUY5NDdCMDU4MEM0RjlBRTAyLzN2TXhmTDBVMTl1cUo3Xy1QLVdudUtidHo3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3ZNeGZMMFUxOXVxSjdfLVAtV251S2J0ejdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0VFQi9GNTdDOTRCMEQzQkExMUVGOTQ3QjA1ODBDNEY5QUUwMi81REVCNkIwMkQz QkIxMUVGODBDM0FGODBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGcxKTANBgkqhkiG9w0BAQsFAAOCAQEAhCc6Uw6mo7VCyQR9 G778PgmctzX3ywpA7z3sLOwGc38PEPidJu3xGXdCxu4UuUVrzbTcUgDNtf99ahYZ tEvPtzFHeu4HcQZtNkOLiysPeMeYdHnM/Wh5LCzyDOpMBs1HIPdSsbf5RRCfxAgF cYDNcLyOxGMU4h/mU/9W32JPEoQBnV2ICrzF61GOuuEHGAy6wLlcCTE+m96rZ3TN 0jHzifZtlQyekB2eMrC728UuAI3qmNTJoleGErEeZmd5EUq8J5661+F8QOSDN6EO u17VKZ34a/paQO1vVyr/cfdZa4rKbqVF4Hm5eNhQbaiWLKk5V05fdWLRR9s/P/wk GeFO/g== -----END CERTIFICATE-----Generated at Sat Apr 5 00:55:08 2025 by rpki-client