$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/A6550254216E11EF88CCA84FC4F9AE02.roa File: A6550254216E11EF88CCA84FC4F9AE02.roa (raw, json) Hash identifier: hgy+s41tW18ZsoIITX25VfjzDwvg0uuSJ0bvy5UWIIA= Subject key identifier: C5:B3:97:9F:9A:29:66:D5:5F:0A:F6:8F:E3:A0:C6:2E:00:D0:C4:9E Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Certificate serial: A0 Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/A6550254216E11EF88CCA84FC4F9AE02.roa Signing time: Tue 11 Mar 2025 05:53:13 +0000 ROA not before: Tue 11 Mar 2025 05:53:13 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.44.109.0/24 maxlen: 24 117.18.103.0/24 maxlen: 24 203.28.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CED3 Validity Not Before: Mar 11 05:53:13 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67cfcfc9-173d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:82:98:69:58:27:bf:9c:6f:b6:7c:a0:2b:cb: 96:37:d3:a1:c1:bf:a4:e7:8f:90:9a:1d:ac:1a:cf: 8c:76:9e:46:52:4f:c6:7b:c1:96:2d:b5:b4:6c:99: f2:8f:bb:5d:a9:13:84:21:a6:ac:c5:b7:94:3a:11: 84:17:22:09:37:e5:34:83:67:a6:6b:65:a7:6b:42: 3d:c9:9b:0d:0c:12:4a:3a:3d:81:02:a8:3e:05:88: 50:b7:c3:0c:b4:ba:96:f9:8e:6e:10:7c:dc:0b:e3: c3:ed:28:c3:6e:f6:bc:05:41:9c:32:b2:56:72:9a: b9:b2:c1:71:ff:b8:ae:08:2f:0d:f5:ac:7d:f5:c4: 6f:3a:06:93:7b:2c:54:c2:c2:eb:72:32:93:bc:82: 8e:23:43:74:fe:1c:b4:81:57:54:7a:ee:c3:62:41: 68:d0:11:11:45:2e:fa:d1:37:8e:6d:d6:41:5c:0e: 48:83:b7:72:29:8a:e3:1d:14:a1:3e:67:2c:a0:c0: 91:ea:33:45:6b:91:89:9b:da:9f:f9:b4:fb:be:eb: ce:b1:8b:e5:42:7a:2d:39:27:5f:4a:5b:9b:ca:06: 7d:3c:53:32:7a:da:a1:60:58:a4:e0:70:39:6e:be: b4:21:a5:c5:e9:af:4d:5e:0e:df:7e:b5:1a:40:bb: 40:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B3:97:9F:9A:29:66:D5:5F:0A:F6:8F:E3:A0:C6:2E:00:D0:C4:9E X509v3 Authority Key Identifier: keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/A6550254216E11EF88CCA84FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.44.109.0/24 117.18.103.0/24 203.28.249.0/24 Signature Algorithm: sha256WithRSAEncryption 52:9b:99:b9:4d:82:2c:43:29:6e:a5:a9:ea:6c:03:51:cd:9c: 79:cc:59:32:66:49:70:83:39:4f:4d:0b:dc:30:1f:8b:3d:62: 27:4e:90:48:dc:ce:69:68:cb:69:e2:90:de:6d:75:08:80:f7: 71:60:2d:52:4e:30:83:77:6e:28:77:84:82:10:80:a0:b4:9d: 0a:cd:d9:5e:7b:f5:08:a4:47:e4:1d:e5:5b:2e:8c:11:c3:09: df:8c:bc:1c:db:7d:b7:ca:93:c4:5b:c4:b8:25:2c:9e:47:0f: 7d:47:fb:7f:c9:d5:62:4a:6c:f0:d9:f6:76:6d:6c:c5:26:27: c4:c1:50:79:94:e8:75:98:11:2c:85:52:30:41:c0:fc:b9:ed: 30:f6:7e:f5:49:1a:2f:87:d5:fe:98:9f:37:28:da:18:2a:d4: b3:20:67:7c:60:cb:55:74:56:fa:a6:b0:27:d0:57:bb:5a:ce: 9e:ca:f6:00:79:11:2b:26:86:c4:c9:12:46:f0:2f:49:06:86: a0:b6:fd:58:0d:df:6d:d5:ce:f5:e1:b5:c1:21:cb:38:72:3f: b8:e0:d4:15:74:f9:80:94:c4:35:4c:c0:7c:95:16:67:9a:bc: c3:55:6c:2d:26:1f:ab:02:7c:fe:8d:29:1c:95:5f:a7:eb:a2: 92:1d:75:2b -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFRDMxMTAvBgNVBAUTKEE3NDFFQjQxMEQ0QjhFNDZGRjQ4QUI3MEExREEwMDZB M0RDRjQxQTMwHhcNMjUwMzExMDU1MzEzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NmY2ZjOS0xNzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYKYaVgnv5xvtnygK8uWN9Ohwb+k54+Qmh2sGs+Mdp5GUk/Ge8GWLbW0bJny j7tdqROEIaasxbeUOhGEFyIJN+U0g2ema2Wna0I9yZsNDBJKOj2BAqg+BYhQt8MM tLqW+Y5uEHzcC+PD7SjDbva8BUGcMrJWcpq5ssFx/7iuCC8N9ax99cRvOgaTeyxU wsLrcjKTvIKOI0N0/hy0gVdUeu7DYkFo0BERRS760TeObdZBXA5Ig7dyKYrjHRSh PmcsoMCR6jNFa5GJm9qf+bT7vuvOsYvlQnotOSdfSlubygZ9PFMyetqhYFik4HA5 br60IaXF6a9NXg7ffrUaQLtACQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFMWzl5+a KWbVXwr2j+Ogxi4A0MSeMB8GA1UdIwQYMBaAFKdB60ENS45G/0ircKHaAGo9z0Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VEMy8zQzE2MUZBNjIx NkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGprYl9TS3R3b2RvQWFqM1BR YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwSHJRUTFMamtiX1NLdHdvZG9BYWozUFFhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNFRDMvM0MxNjFGQTYyMTZDMTFFRjgwQjE1MzJCQzRGOUFFMDIvQTY1NTAyNTQy MTZFMTFFRjg4Q0NBODRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnLG0DBAB1EmcDBADLHPkwDQYJKoZIhvcNAQELBQADggEB AFKbmblNgixDKW6lqepsA1HNnHnMWTJmSXCDOU9NC9wwH4s9YidOkEjczmloy2ni kN5tdQiA93FgLVJOMIN3bih3hIIQgKC0nQrN2V579QikR+Qd5VsujBHDCd+MvBzb fbfKk8RbxLglLJ5HD31H+3/J1WJKbPDZ9nZtbMUmJ8TBUHmU6HWYESyFUjBBwPy5 7TD2fvVJGi+H1f6Ynzco2hgq1LMgZ3xgy1V0VvqmsCfQV7tazp7K9gB5ESsmhsTJ EkbwL0kGhqC2/VgN323VzvXhtcEhyzhyP7jg1BV0+YCUxDVMwHyVFmeavMNVbC0m H6sCfP6NKRyVX6fropIddSs= -----END CERTIFICATE-----Generated at Sat Apr 5 07:16:59 2025 by rpki-client