$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/CB56435E3C5311EC81D0DB48C4F9AE02.roa File: CB56435E3C5311EC81D0DB48C4F9AE02.roa (raw, json) Hash identifier: Ev++x624cT4RveaW6MjuuztzlLqpsfCU1GHY6FW0OBU= Subject key identifier: AB:4B:13:14:04:A1:4E:A4:9A:A9:4D:FB:C3:F3:80:04:73:C1:9A:69 Certificate issuer: /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Certificate serial: 0474 Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/CB56435E3C5311EC81D0DB48C4F9AE02.roa Signing time: Sat 15 Mar 2025 00:15:49 +0000 ROA not before: Sat 15 Mar 2025 00:15:49 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 55402 IP address blocks: 103.110.44.0/24 maxlen: 24 103.110.45.0/24 maxlen: 24 103.110.46.0/24 maxlen: 24 103.110.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7B1 Validity Not Before: Mar 15 00:15:49 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67d4c6b5-9d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:86:b8:b6:11:df:3c:ee:29:66:ba:30:7b: 97:bf:c5:80:54:ca:b2:ba:e8:e8:28:e9:e2:42:ae: 83:27:69:00:a7:16:99:81:35:e1:d2:18:1e:ee:b9: 1f:9c:bc:24:97:1e:dc:c1:fe:cf:b2:31:d8:38:b5: 1b:a6:2c:14:e0:c4:d2:72:89:48:a7:f7:44:3d:04: 56:2a:56:3a:f3:22:fb:d3:16:c3:21:4c:97:68:31: 6d:79:56:ae:9d:0b:fe:ab:69:f6:a0:28:d8:8e:c5: b5:15:bf:d5:2b:a3:04:a3:f0:7f:09:c0:e7:4f:db: a5:80:66:e9:f1:7b:97:f3:fe:43:be:76:f8:ab:c0: cf:bb:5c:34:ef:79:38:67:17:b7:0b:ea:cb:ac:2f: 64:8c:50:87:b8:c7:25:06:3c:7e:0b:66:d5:33:b4: 5e:48:96:ae:46:e1:5c:9c:07:7d:ed:11:68:dc:9b: 71:8c:eb:e2:52:ad:57:e1:b8:07:4c:5d:9b:e0:86: 7f:82:0d:47:1c:f3:48:53:3f:b7:17:60:6c:33:c0: fc:eb:6b:21:ec:5d:76:c6:e8:0d:3a:f5:56:b7:89: 6c:5e:8a:08:80:d9:71:70:6a:7a:e3:90:39:8f:e8: 2d:92:48:e2:51:c4:34:f1:38:c5:32:38:fe:b2:9c: 5d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4B:13:14:04:A1:4E:A4:9A:A9:4D:FB:C3:F3:80:04:73:C1:9A:69 X509v3 Authority Key Identifier: keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/CB56435E3C5311EC81D0DB48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.44.0/22 Signature Algorithm: sha256WithRSAEncryption b7:11:9b:a5:bb:08:e7:75:fb:e2:92:74:5e:e7:3d:ea:ae:bd: 3e:62:b3:39:c6:02:8f:96:4a:be:9b:1d:67:6a:bb:d0:c8:0f: be:6a:37:2a:86:c1:d7:4a:17:3e:cb:4f:c4:ac:e0:90:8f:0c: 5f:05:86:51:0c:71:9a:d8:49:b4:95:66:49:e7:34:40:60:b7: eb:55:f2:10:b4:5e:a9:4f:ef:36:53:75:01:7e:a9:e9:d3:71: a1:c6:0e:73:51:40:af:78:5a:12:2e:cb:aa:24:fd:2a:da:88: 86:ac:82:39:60:ba:e9:b6:92:43:62:96:36:93:4e:e6:70:cf: 64:c5:fc:6b:9a:2b:b7:86:83:49:9e:95:c8:ae:3c:3a:37:b4: d9:20:ea:a6:7c:33:39:19:09:4e:b7:a7:6f:cd:e1:11:db:b3: 56:56:ab:52:fc:1e:11:66:96:b1:e3:ca:97:9c:46:ba:12:d9: d6:c4:5b:90:94:46:b5:af:9c:6d:21:9d:3a:0c:82:a7:7b:9c: 2a:6f:2e:a9:15:d6:9a:af:be:70:a8:3a:db:f5:a6:62:cb:2d: 93:20:a2:6d:ee:43:7e:b9:31:77:46:fb:2d:dd:54:80:ec:d5: ce:28:c1:60:a3:5e:f9:a2:8e:54:cf:1d:89:82:0f:d0:59:71: cb:41:95:7f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3QjExMTAvBgNVBAUTKEE2MjZDRENEQjc3MUU5NjU1RTZFOTFBMUM3MkQxMkZC NTdEMUM0RTgwHhcNMjUwMzE1MDAxNTQ5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q0YzZiNS05ZDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoySGuLYR3zzuKWa6MHuXv8WAVMqyuujoKOniQq6DJ2kApxaZgTXh0hge7rkf nLwklx7cwf7PsjHYOLUbpiwU4MTScolIp/dEPQRWKlY68yL70xbDIUyXaDFteVau nQv+q2n2oCjYjsW1Fb/VK6MEo/B/CcDnT9ulgGbp8XuX8/5Dvnb4q8DPu1w073k4 Zxe3C+rLrC9kjFCHuMclBjx+C2bVM7ReSJauRuFcnAd97RFo3JtxjOviUq1X4bgH TF2b4IZ/gg1HHPNIUz+3F2BsM8D862sh7F12xugNOvVWt4lsXooIgNlxcGp645A5 j+gtkkjiUcQ08TjFMjj+spxd/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFKtLExQE oU6kmqlN+8PzgARzwZppMB8GA1UdIwQYMBaAFKYmzc23cellXm6RocctEvtX0cTo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdCMS9BMEY0ODBCNjND NEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZXVmVicEdoeHkwUy0xZlJ4 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpYk56YmR4NldWZWJwR2h4eTBTLTFmUnhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM3QjEvQTBGNDgwQjYzQzRGMTFFQ0I4NzEyODNFQzRGOUFFMDIvQ0I1NjQzNUUz QzUzMTFFQzgxRDBEQjQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnbiwwDQYJKoZIhvcNAQELBQADggEBALcRm6W7COd1++KS dF7nPequvT5isznGAo+WSr6bHWdqu9DID75qNyqGwddKFz7LT8Ss4JCPDF8FhlEM cZrYSbSVZknnNEBgt+tV8hC0XqlP7zZTdQF+qenTcaHGDnNRQK94WhIuy6ok/Sra iIasgjlguum2kkNiljaTTuZwz2TF/GuaK7eGg0melciuPDo3tNkg6qZ8MzkZCU63 p2/N4RHbs1ZWq1L8HhFmlrHjypecRroS2dbEW5CURrWvnG0hnToMgqd7nCpvLqkV 1pqvvnCoOtv1pmLLLZMgom3uQ365MXdG+y3dVIDs1c4owWCjXvmijlTPHYmCD9BZ cctBlX8= -----END CERTIFICATE-----Generated at Sun Apr 6 12:10:02 2025 by rpki-client