$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/AC623530A86211ED9ED67945C4F9AE02.roa File: AC623530A86211ED9ED67945C4F9AE02.roa (raw, json) Hash identifier: MyxZujcbakOxBmEwfvS0Za/TiquqSe0s4Vw8//EffqM= Subject key identifier: EC:3F:3E:24:4B:99:24:85:CB:F5:A5:1F:BD:DE:30:3D:3E:02:CB:83 Certificate issuer: /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Certificate serial: 0169 Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/AC623530A86211ED9ED67945C4F9AE02.roa Signing time: Fri 03 Jan 2025 02:45:56 +0000 ROA not before: Fri 03 Jan 2025 02:45:56 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 150753 IP address blocks: 103.67.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D20C Validity Not Before: Jan 3 02:45:56 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67774f64-8774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c4:f9:dd:83:6d:cc:be:da:17:23:c2:84:56: 73:8a:44:b8:a7:c8:ad:01:99:2d:91:4e:b9:77:32: f8:5c:36:09:39:a3:86:a5:31:7c:7f:35:a8:db:ba: e3:7e:91:3d:3e:7b:85:b8:2e:00:fe:32:a8:4d:74: 6e:7a:1a:04:51:93:8d:ab:70:f3:ee:32:f8:f0:65: 21:82:a8:b5:e3:96:c6:3e:46:f0:e6:52:fb:38:0a: a9:14:48:21:16:f0:67:a3:08:43:c3:71:90:63:53: 5a:7d:4d:57:01:de:cb:12:7a:99:7a:b6:ae:94:0b: 1e:43:0f:f0:47:e8:d7:d3:f3:20:be:b7:a1:f4:6e: 96:4e:1b:23:4a:81:b5:4d:24:03:34:59:db:64:91: 43:f1:20:62:6a:f7:e8:b1:24:18:82:68:18:d3:4b: f3:80:77:ed:bf:8e:f5:38:af:64:42:6a:aa:2a:ef: 66:ba:a4:04:a1:10:d7:16:0b:bc:3f:84:f3:59:dc: 99:bb:fe:e7:5e:06:f0:d9:f6:84:73:8d:e4:a5:c1: 7a:3d:14:a5:2d:6e:55:04:cd:bd:f1:03:be:de:4b: 2a:f2:d4:d5:ad:3f:7c:e8:50:e8:41:6a:fc:5c:16: a4:bd:39:60:4c:e0:8b:53:2a:fa:fa:e4:23:f1:88: 3d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3F:3E:24:4B:99:24:85:CB:F5:A5:1F:BD:DE:30:3D:3E:02:CB:83 X509v3 Authority Key Identifier: keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/AC623530A86211ED9ED67945C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.23.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:86:c0:0a:e9:35:f4:e3:8d:d5:77:07:b5:5d:23:a5:15:cd: 51:71:fc:d7:6c:80:76:54:71:2c:e4:6f:ee:87:eb:df:b7:c1: 72:a8:ff:e2:70:2a:eb:e5:5b:4c:f9:a7:59:32:d6:17:97:4d: 9f:3f:7a:c1:0e:21:ba:b0:b2:22:d9:27:60:82:e5:34:42:68: 45:f0:01:6b:55:61:29:5f:47:ea:14:37:fa:dc:71:f4:32:24: f5:30:d1:22:0f:53:d9:e1:e7:3d:e1:43:fa:5a:f6:1f:76:21: 5e:db:41:ad:54:ed:9f:7a:26:7b:1c:bb:95:00:fb:8e:43:6d: 1b:fa:8b:bf:3a:64:d1:ce:09:50:0c:1a:bc:43:32:14:a1:93: e2:31:14:9e:a1:14:51:a2:71:7f:86:b1:68:28:80:71:72:e7: 0a:b2:be:5d:c5:c9:ae:54:93:cd:18:4e:45:6e:14:8c:00:2a: 05:7d:06:8b:07:af:f2:5e:65:7b:33:a2:35:da:74:be:26:c8: cc:c3:13:6b:bb:7a:dd:82:1f:16:2c:e5:a7:fe:ea:04:39:35: f2:f8:be:94:70:f7:fd:6b:25:bd:d5:28:92:66:18:f3:c0:c7: 7e:1c:3c:99:1b:90:c1:de:6a:28:37:cc:e8:16:c0:67:29:32: 87:8b:af:a0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyMEMxMTAvBgNVBAUTKDMzOUQxMkNFMzdFM0EyNjFGNkQwRjQ1M0U1OTk1MEE4 NEJDOEZFQTIwHhcNMjUwMTAzMDI0NTU2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc3NGY2NC04Nzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8T53YNtzL7aFyPChFZzikS4p8itAZktkU65dzL4XDYJOaOGpTF8fzWo27rj fpE9PnuFuC4A/jKoTXRuehoEUZONq3Dz7jL48GUhgqi145bGPkbw5lL7OAqpFEgh FvBnowhDw3GQY1NafU1XAd7LEnqZeraulAseQw/wR+jX0/Mgvreh9G6WThsjSoG1 TSQDNFnbZJFD8SBiavfosSQYgmgY00vzgHftv471OK9kQmqqKu9muqQEoRDXFgu8 P4TzWdyZu/7nXgbw2faEc43kpcF6PRSlLW5VBM298QO+3ksq8tTVrT986FDoQWr8 XBakvTlgTOCLUyr6+uQj8Yg9UwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOw/PiRL mSSFy/WlH73eMD0+AsuDMB8GA1UdIwQYMBaAFDOdEs4346Jh9tD0U+WZUKhLyP6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDIwQy9ENDBFRkY4RUE4 NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9tSDIwUFJUNVpsUXFFdklf cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001MFN6amZqb21IMjBQUlQ1WmxRcUV2SV9xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQyMEMvRDQwRUZGOEVBODUxMTFFREJCMzJFNzQ5QzRGOUFFMDIvQUM2MjM1MzBB ODYyMTFFRDlFRDY3OTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnQxcwDQYJKoZIhvcNAQELBQADggEBAAqGwArpNfTjjdV3 B7VdI6UVzVFx/NdsgHZUcSzkb+6H69+3wXKo/+JwKuvlW0z5p1ky1heXTZ8/esEO IbqwsiLZJ2CC5TRCaEXwAWtVYSlfR+oUN/rccfQyJPUw0SIPU9nh5z3hQ/pa9h92 IV7bQa1U7Z96Jnscu5UA+45DbRv6i786ZNHOCVAMGrxDMhShk+IxFJ6hFFGicX+G sWgogHFy5wqyvl3Fya5Uk80YTkVuFIwAKgV9BosHr/JeZXszojXadL4myMzDE2u7 et2CHxYs5af+6gQ5NfL4vpRw9/1rJb3VKJJmGPPAx34cPJkbkMHeaig3zOgWwGcp MoeLr6A= -----END CERTIFICATE-----Generated at Sat Apr 5 02:18:16 2025 by rpki-client