$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/21151EF0A8C411EC8F560C42C4F9AE02.roa File: 21151EF0A8C411EC8F560C42C4F9AE02.roa (raw, json) Hash identifier: eTNVjRr/aSchkaouKrk/Oq/42y0wRZtV7uyB0zYEbrA= Subject key identifier: A7:34:4F:D3:6E:08:F0:2E:54:79:EB:8D:A6:DC:44:50:B0:9F:7C:CC Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Certificate serial: 106D Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/21151EF0A8C411EC8F560C42C4F9AE02.roa Signing time: Fri 28 Feb 2025 18:27:14 +0000 ROA not before: Fri 28 Feb 2025 18:27:14 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 137385 IP address blocks: 103.132.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4205 (0x106d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF0B Validity Not Before: Feb 28 18:27:14 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67c20002-9a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:55:52:6a:17:fe:77:5b:a1:98:b8:e4:71: c0:e0:b8:3b:36:6f:5a:40:b7:64:fa:9e:c5:4e:09: 9b:ec:8b:d3:46:d5:34:c9:df:f5:9c:f1:66:94:39: 88:ab:01:8f:56:48:23:b1:4e:cd:bf:c4:3f:18:a2: 8c:be:ec:75:b5:44:db:33:2f:76:7e:a2:11:ec:15: 38:98:b7:16:24:7e:c1:9b:24:32:dc:87:d1:2a:d8: 9b:5b:cd:72:51:d6:66:20:37:a5:13:28:78:a6:9c: f1:3c:ba:3e:da:1f:6a:fa:11:24:9d:97:28:4b:65: 82:97:0f:fc:ac:12:63:b0:28:ae:12:b9:b9:e8:1a: 07:58:7f:12:01:35:95:3e:dc:5b:2d:1d:fe:4a:17: 7f:a8:48:ab:66:5f:9c:57:70:e3:86:8c:85:22:72: fb:b0:ed:5a:2a:f2:ce:da:1d:ba:ce:bf:cb:d3:2f: a2:f9:3c:a8:f1:ae:5c:26:0c:0a:c3:2a:3a:d8:9d: fa:22:6c:d4:9c:df:a5:cb:6a:c8:d0:e4:82:d2:09: f0:4d:0e:aa:6c:9e:da:86:c5:7c:9d:dd:c0:6c:8b: d6:b6:10:88:d7:a4:71:5f:ef:a4:dd:38:02:f9:f8: 00:b3:76:c6:27:8a:ac:69:80:e6:bb:f2:7b:b4:03: 71:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:34:4F:D3:6E:08:F0:2E:54:79:EB:8D:A6:DC:44:50:B0:9F:7C:CC X509v3 Authority Key Identifier: keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/21151EF0A8C411EC8F560C42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.183.0/24 Signature Algorithm: sha256WithRSAEncryption 38:70:bd:b9:17:b8:7b:82:b0:45:5d:89:b6:b4:56:ca:be:d4: 59:b7:85:20:b9:f6:bf:51:fb:f3:f3:74:76:e6:6f:6c:be:b5: 2f:8f:f2:28:29:6b:48:df:a9:17:9a:87:06:41:32:cd:45:d8: 55:d0:6f:e4:84:6c:ee:b9:59:58:ca:ee:e9:c2:2f:54:43:7d: 42:a1:a5:46:e6:34:1d:e4:6d:0e:e4:32:d2:b1:cf:b0:da:18: f4:bd:83:bd:b2:5f:98:44:3e:61:43:8a:90:91:10:27:e8:bf: ef:2e:e1:b2:ad:38:28:f1:4f:8f:4c:9b:c2:c1:8f:e9:06:9e: 24:e7:fa:b4:66:e9:92:0b:cf:ba:b2:cc:42:06:cd:45:bb:86: 06:e7:f2:47:9d:76:13:17:3e:71:86:23:56:a4:a5:b9:8c:d4: b3:0c:28:31:84:f7:7a:48:c4:83:76:cd:18:26:11:16:3d:df: 87:15:8f:cd:e0:e8:a0:2b:7f:17:fd:c4:c0:65:f0:bb:f5:6e: 18:19:c6:2d:7e:df:71:f3:f9:86:52:07:a9:0a:82:30:0d:7d: 0b:df:11:19:18:9a:b4:aa:82:af:ac:b5:f5:ab:61:6e:6b:98: 94:a5:dd:3d:78:fa:35:69:6c:b7:33:66:93:00:a1:a1:00:20: d0:6b:b1:48 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGMEIxMTAvBgNVBAUTKEM0RDc1MDlFNTMyQ0UyRjZFNENCNEU4RTVDM0MyMjZC QTMxNTRFNkYwHhcNMjUwMjI4MTgyNzE0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyMDAwMi05YTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt15VUmoX/ndboZi45HHA4Lg7Nm9aQLdk+p7FTgmb7IvTRtU0yd/1nPFmlDmI qwGPVkgjsU7Nv8Q/GKKMvux1tUTbMy92fqIR7BU4mLcWJH7BmyQy3IfRKtibW81y UdZmIDelEyh4ppzxPLo+2h9q+hEknZcoS2WClw/8rBJjsCiuErm56BoHWH8SATWV PtxbLR3+Shd/qEirZl+cV3DjhoyFInL7sO1aKvLO2h26zr/L0y+i+Tyo8a5cJgwK wyo62J36ImzUnN+ly2rI0OSC0gnwTQ6qbJ7ahsV8nd3AbIvWthCI16RxX++k3TgC +fgAs3bGJ4qsaYDmu/J7tANxJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKc0T9Nu CPAuVHnrjabcRFCwn3zMMB8GA1UdIwQYMBaAFMTXUJ5TLOL25MtOjlw8ImujFU5v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUYwQi9CNTk0MTlEMjMy RUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2Ymt5MDZPWER3aWE2TVZU bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZFFubE1zNHZia3kwNk9YRHdpYTZNVlRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFGMEIvQjU5NDE5RDIzMkVEMTFFOTlDOTU0QzI0QzRGOUFFMDIvMjExNTFFRjBB OEM0MTFFQzhGNTYwQzQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnhLcwDQYJKoZIhvcNAQELBQADggEBADhwvbkXuHuCsEVd iba0Vsq+1Fm3hSC59r9R+/PzdHbmb2y+tS+P8igpa0jfqReahwZBMs1F2FXQb+SE bO65WVjK7unCL1RDfUKhpUbmNB3kbQ7kMtKxz7DaGPS9g72yX5hEPmFDipCRECfo v+8u4bKtOCjxT49Mm8LBj+kGniTn+rRm6ZILz7qyzEIGzUW7hgbn8keddhMXPnGG I1akpbmM1LMMKDGE93pIxIN2zRgmERY934cVj83g6KArfxf9xMBl8Lv1bhgZxi1+ 33Hz+YZSB6kKgjANfQvfERkYmrSqgq+stfWrYW5rmJSl3T14+jVpbLczZpMAoaEA INBrsUg= -----END CERTIFICATE-----Generated at Sat Apr 5 22:10:16 2025 by rpki-client