$ rpki-client -vvf rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/5181F33CE8C011EDADA54A23C4F9AE02.roa File: 5181F33CE8C011EDADA54A23C4F9AE02.roa (raw, json) Hash identifier: 9wRwgsGB8Fy9z1Xq7bw5sLUsMsE1FSTZuA/DyllyXak= Subject key identifier: B8:D6:17:49:A6:33:C0:30:B9:C9:94:53:58:F3:B3:77:A0:C2:90:2C Certificate issuer: /CN=A912A31E/serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8 Certificate serial: 012C Authority key identifier: DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/5181F33CE8C011EDADA54A23C4F9AE02.roa Signing time: Fri 29 Nov 2024 03:17:26 +0000 ROA not before: Fri 29 Nov 2024 03:17:26 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 135662 IP address blocks: 103.78.108.0/23 maxlen: 24 103.118.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.crl rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A31E Validity Not Before: Nov 29 03:17:26 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67493246-eff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:b1:44:9e:81:b2:35:28:87:75:05:aa:80: 6b:87:16:be:a2:e4:d9:91:48:ca:ea:ef:3d:e7:d9: ad:c0:05:1c:5e:fe:7c:61:fa:a0:db:73:8c:3f:bf: e9:af:58:28:23:e0:1b:e0:2c:be:fa:0d:76:b6:20: d0:75:81:a7:8d:80:e4:29:77:a2:86:fc:9e:71:40: 58:6b:2a:1d:a5:c1:75:51:d5:2d:95:37:63:3a:6e: ba:0d:82:d3:6a:1b:be:db:f8:1a:5b:a7:97:33:93: 6c:b7:28:3a:21:e5:db:fb:dd:27:8f:f8:cc:2c:48: e9:04:8e:f6:25:a2:4f:36:11:0c:2f:e4:94:24:e6: a4:cb:03:48:68:30:5e:c8:d4:59:cb:48:cc:65:ae: 89:29:26:3d:7d:54:1b:eb:f6:bf:3e:85:13:39:a4: 81:97:4b:44:aa:7b:3d:67:b2:81:2a:87:b7:3d:2f: 37:4b:bf:79:3b:2f:64:83:67:56:25:70:1a:ff:83: f4:df:35:15:7a:c7:8c:8d:aa:22:36:7a:b0:9e:ba: 52:2e:cb:f5:db:10:0d:6d:10:08:b7:8f:3f:90:85: f8:42:c6:d7:5f:f4:f7:fb:86:a5:3d:3e:0a:27:00: 08:59:0d:95:f0:2f:43:27:39:df:70:df:0f:88:80: eb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D6:17:49:A6:33:C0:30:B9:C9:94:53:58:F3:B3:77:A0:C2:90:2C X509v3 Authority Key Identifier: keyid:DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/5181F33CE8C011EDADA54A23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.78.108.0/23 103.118.162.0/23 Signature Algorithm: sha256WithRSAEncryption a4:b0:3a:1f:f0:8c:be:cd:60:70:d2:83:08:5d:f3:79:1b:0b: 67:a4:71:7c:ce:dc:b3:53:89:fa:f5:63:32:03:5d:42:3d:a2: 25:8a:1c:4b:c2:cc:3d:f6:1b:35:85:d7:e5:a1:26:30:a4:e2: 63:0f:19:de:0b:9f:16:86:6e:27:4c:d1:e1:17:cb:9f:b1:da: bb:08:78:e8:59:46:99:c5:c7:f3:d0:d1:fd:da:2d:61:cc:09: d1:c6:d5:c7:d1:b5:9f:ca:18:9d:2a:12:cb:cc:c5:a5:f9:c2: 56:b4:80:47:cc:42:82:dd:8b:83:f6:89:5b:a7:9e:c6:2c:93: d5:e6:d3:e1:36:6f:46:e9:f8:3b:2f:d0:15:3b:04:b6:8f:ed: 7e:7f:77:7c:09:34:0a:9a:e7:45:80:3e:28:b9:fa:98:cf:55: 2e:de:c0:e4:e8:ba:cd:64:48:dc:ad:0b:ed:35:f3:79:11:8e: 77:75:5b:c4:d2:af:6b:d7:e6:b5:b6:a6:b0:4f:5d:fe:14:5e: a4:26:aa:27:8c:d4:8d:df:f1:56:95:17:38:41:dc:ff:c2:d6: fe:16:94:db:26:3b:a4:de:cf:35:d3:08:10:6c:bf:9c:79:52: f9:a9:49:c5:af:ac:5e:8f:61:13:95:39:ac:d7:94:c3:f8:76: 8d:a9:ea:44 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzMUUxMTAvBgNVBAUTKERBNTdCMTkxQzU1QkIzMzE5RUJEOTE4MkRDMEQ0RTZB RUYzRTBERDgwHhcNMjQxMTI5MDMxNzI2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ5MzI0Ni1lZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuCxRJ6BsjUoh3UFqoBrhxa+ouTZkUjK6u8959mtwAUcXv58Yfqg23OMP7/p r1goI+Ab4Cy++g12tiDQdYGnjYDkKXeihvyecUBYayodpcF1UdUtlTdjOm66DYLT ahu+2/gaW6eXM5Nstyg6IeXb+90nj/jMLEjpBI72JaJPNhEML+SUJOakywNIaDBe yNRZy0jMZa6JKSY9fVQb6/a/PoUTOaSBl0tEqns9Z7KBKoe3PS83S795Oy9kg2dW JXAa/4P03zUVeseMjaoiNnqwnrpSLsv12xANbRAIt48/kIX4QsbXX/T3+4alPT4K JwAIWQ2V8C9DJznfcN8PiIDr7wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLjWF0mm M8AwucmUU1jzs3egwpAsMB8GA1UdIwQYMBaAFNpXsZHFW7Mxnr2RgtwNTmrvPg3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTMxRS9DOEE0QzRFNEU4 QkIxMUVEQThEQjhBMUZDNEY5QUUwMi8ybGV4a2NWYnN6R2V2WkdDM0ExT2F1OC1E ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsZXhrY1Zic3pHZXZaR0MzQTFPYXU4LURkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkEzMUUvQzhBNEM0RTRFOEJCMTFFREE4REI4QTFGQzRGOUFFMDIvNTE4MUYzM0NF OEMwMTFFREFEQTU0QTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnTmwDBAFndqIwDQYJKoZIhvcNAQELBQADggEBAKSwOh/w jL7NYHDSgwhd83kbC2ekcXzO3LNTifr1YzIDXUI9oiWKHEvCzD32GzWF1+WhJjCk 4mMPGd4LnxaGbidM0eEXy5+x2rsIeOhZRpnFx/PQ0f3aLWHMCdHG1cfRtZ/KGJ0q EsvMxaX5wla0gEfMQoLdi4P2iVunnsYsk9Xm0+E2b0bp+Dsv0BU7BLaP7X5/d3wJ NAqa50WAPii5+pjPVS7ewOTous1kSNytC+0183kRjnd1W8TSr2vX5rW2prBPXf4U XqQmqieM1I3f8VaVFzhB3P/C1v4WlNsmO6TezzXTCBBsv5x5UvmpScWvrF6PYROV OazXlMP4do2p6kQ= -----END CERTIFICATE-----Generated at Sat Apr 5 00:50:02 2025 by rpki-client