$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/DF4767286F6211EEB3CA1222C4F9AE02.roa File: DF4767286F6211EEB3CA1222C4F9AE02.roa (raw, json) Hash identifier: h7ET5rK/UTRVFMtJIjxgJTPauzAIz4YIbahkqpm3+GM= Subject key identifier: AC:44:EC:00:95:0B:7A:4D:9A:84:DC:73:52:53:7C:BA:83:6A:2D:46 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 0671 Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/DF4767286F6211EEB3CA1222C4F9AE02.roa Signing time: Wed 28 Aug 2024 23:02:17 +0000 ROA not before: Wed 28 Aug 2024 23:02:17 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 150750 IP address blocks: 103.152.100.0/23 maxlen: 23 103.152.100.0/24 maxlen: 24 103.152.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B Validity Not Before: Aug 28 23:02:17 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66cfac79-6da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:62:7b:c2:a1:af:7d:64:f3:28:37:b7:77:e7: 99:64:5f:49:6b:e0:48:48:ff:6c:04:6a:f0:26:54: 4e:7b:94:1a:3a:61:6d:7c:8b:14:b1:ce:5a:31:0a: 2c:c7:fc:41:eb:24:9a:ad:1b:25:89:72:36:06:99: c4:76:e1:50:79:e8:17:92:f4:b7:8f:68:3c:10:21: 6a:5a:2e:19:55:10:6b:7a:34:99:f8:42:f9:05:47: 3b:e0:e4:da:a7:ae:d9:e3:27:f4:50:e8:be:e7:15: 92:80:fd:e5:ac:6c:3d:d4:e2:a4:52:19:30:62:8b: 90:9b:42:18:c3:96:94:4a:3a:f6:76:1d:8a:35:3c: 21:32:6a:c1:b1:ff:7f:31:80:ea:0f:2b:c6:ee:6a: ca:f1:75:37:81:e1:f5:0c:c5:86:2e:36:0d:ba:3f: 3f:a4:be:4c:bc:77:a3:c1:ed:62:d0:20:f7:45:48: 3f:f4:c7:f4:62:69:a7:70:18:1f:27:18:c0:5b:4d: e3:9b:b9:0f:8d:67:a8:18:1b:62:a1:15:89:7a:ae: 26:97:29:fc:c1:17:14:4b:56:e0:aa:da:8a:46:c0: 6d:2a:ea:e5:ee:f5:6c:13:6c:d7:93:d1:d9:8f:fc: a3:54:a2:f3:fb:50:1f:5d:92:87:a8:73:a8:b9:32: a0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:44:EC:00:95:0B:7A:4D:9A:84:DC:73:52:53:7C:BA:83:6A:2D:46 X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/DF4767286F6211EEB3CA1222C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.100.0/23 Signature Algorithm: sha256WithRSAEncryption 92:e7:63:ea:a8:e5:fc:07:df:c1:bc:e7:b0:3a:5c:2a:73:10: ed:aa:2a:d4:4b:4a:e9:f8:47:18:8c:ab:4b:5c:03:29:72:47: b1:36:fe:f7:22:9c:38:8b:a2:86:4a:8a:f4:dc:a6:6c:1f:f2: 9d:de:36:6a:02:c8:15:ea:74:b8:c1:d1:2f:4e:b3:74:b3:04: c6:2c:41:3c:d5:65:2c:f9:a2:bf:78:27:03:31:85:fb:af:3e: c2:e0:a7:40:a5:b9:d7:2b:fe:37:89:5f:a1:30:8c:aa:06:bc: b9:35:86:ee:33:26:1d:c3:18:6a:5b:0c:2e:8a:a4:ea:12:bb: 98:9a:da:60:84:50:72:9c:4d:e4:0f:7a:b8:95:76:45:e6:4b: b7:21:d3:2e:73:54:21:90:7c:e3:aa:b3:49:ff:8d:16:e1:85: 4d:18:3c:e6:61:cd:79:75:66:7f:13:08:a6:7d:aa:8d:47:71: c7:ef:1a:d5:c6:5b:67:5e:f6:21:c0:98:4d:62:90:0c:30:7b: 75:f9:e8:e7:1b:04:af:0a:c2:df:f9:25:0d:b0:fd:24:11:2e: 38:82:b3:d5:56:f6:53:57:43:b6:44:fb:a8:87:ff:d7:c0:dd: ea:a8:16:c5:92:33:b0:f2:12:d5:ee:29:ec:96:87:a0:80:ad: 14:d2:f6:4e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjQwODI4MjMwMjE3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNmYWM3OS02ZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2J7wqGvfWTzKDe3d+eZZF9Ja+BISP9sBGrwJlROe5QaOmFtfIsUsc5aMQos x/xB6ySarRsliXI2BpnEduFQeegXkvS3j2g8ECFqWi4ZVRBrejSZ+EL5BUc74OTa p67Z4yf0UOi+5xWSgP3lrGw91OKkUhkwYouQm0IYw5aUSjr2dh2KNTwhMmrBsf9/ MYDqDyvG7mrK8XU3geH1DMWGLjYNuj8/pL5MvHejwe1i0CD3RUg/9Mf0YmmncBgf JxjAW03jm7kPjWeoGBtioRWJeq4mlyn8wRcUS1bgqtqKRsBtKurl7vVsE2zXk9HZ j/yjVKLz+1AfXZKHqHOouTKgQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKxE7ACV C3pNmoTcc1JTfLqDai1GMB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU5OUIvNzMzREE0RTg1QjMzMTFFQjgwMENCODBDQzRGOUFFMDIvREY0NzY3Mjg2 RjYyMTFFRUIzQ0ExMjIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmGQwDQYJKoZIhvcNAQELBQADggEBAJLnY+qo5fwH38G8 57A6XCpzEO2qKtRLSun4RxiMq0tcAylyR7E2/vcinDiLooZKivTcpmwf8p3eNmoC yBXqdLjB0S9Os3SzBMYsQTzVZSz5or94JwMxhfuvPsLgp0Cludcr/jeJX6EwjKoG vLk1hu4zJh3DGGpbDC6KpOoSu5ia2mCEUHKcTeQPeriVdkXmS7ch0y5zVCGQfOOq s0n/jRbhhU0YPOZhzXl1Zn8TCKZ9qo1HccfvGtXGW2de9iHAmE1ikAwwe3X56Ocb BK8Kwt/5JQ2w/SQRLjiCs9VW9lNXQ7ZE+6iH/9fA3eqoFsWSM7DyEtXuKeyWh6CA rRTS9k4= -----END CERTIFICATE-----Generated at Sun Apr 6 01:29:41 2025 by rpki-client