$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/C2BE71E8AA9A11E7B4776E52C4F9AE02.roa File: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (raw, json) Hash identifier: oKQhI+83g6vqFAl7basVs7Sw18T4MEh7Nu9fLLathWs= Subject key identifier: 8E:8E:8F:83:A3:B1:AF:52:D3:BB:4C:49:84:25:56:6A:3F:F7:1F:AB Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 17FE Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/C2BE71E8AA9A11E7B4776E52C4F9AE02.roa Signing time: Wed 04 Dec 2024 16:53:58 +0000 ROA not before: Wed 04 Dec 2024 16:53:58 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 9512 IP address blocks: 103.101.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 16:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6142 (0x17fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF Validity Not Before: Dec 4 16:53:58 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67508926-1697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:e0:41:c3:62:f0:51:aa:a9:5a:2f:44:6f: df:1a:a6:d4:d5:86:7c:6b:f8:a0:fe:71:51:d4:76: 03:3b:e8:06:78:5a:f3:c2:f0:97:8e:04:bc:c7:63: 3b:9f:1a:69:7a:7f:86:f3:fe:ec:e4:4e:4a:33:1d: b0:e9:f7:7b:22:9a:69:ab:55:93:08:f6:cc:51:88: 89:98:cb:0f:28:9f:8c:cd:5a:74:68:b7:21:dc:d8: bc:a4:a6:8c:0b:35:29:c6:1f:89:4d:fe:23:70:b5: 8a:75:94:08:bd:f2:6a:64:5b:bd:93:de:cb:45:6b: ff:fd:d4:df:73:13:c5:af:e0:42:dd:24:c9:f7:34: 19:a6:22:47:c0:97:12:d1:b2:82:fb:cf:1c:70:0d: 4d:af:8b:b6:ec:90:30:e6:57:61:06:8e:94:1b:31: 09:c5:0a:e2:d8:72:e1:9d:e8:61:9b:d0:eb:e7:a6: b6:10:cb:3f:16:40:fe:2b:4e:f8:c2:c1:b8:c3:0b: fb:04:60:cd:d9:f2:a2:4f:35:d9:4a:c4:d1:46:dc: 2e:78:75:41:91:15:e0:a2:14:e0:f4:68:ec:84:54: 31:ae:85:65:be:93:79:b7:ca:48:ad:98:79:2b:9f: e7:ea:18:6d:9f:31:fd:68:fc:9c:e9:31:da:58:c1: 65:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8E:8F:83:A3:B1:AF:52:D3:BB:4C:49:84:25:56:6A:3F:F7:1F:AB X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/C2BE71E8AA9A11E7B4776E52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.248.0/24 Signature Algorithm: sha256WithRSAEncryption 87:99:d7:f7:59:4b:e4:95:d9:0b:16:43:95:e7:59:43:6f:04: 30:9b:73:fc:5c:d5:ec:6a:4c:60:80:ea:4f:fe:09:48:43:7a: 54:04:b7:89:71:19:85:22:5d:d6:59:cd:1d:16:8b:85:16:a2: 7d:1f:ae:ce:c2:37:be:44:5e:66:23:67:e0:3b:9c:1a:6d:2c: 3d:03:22:27:8d:37:74:0e:e2:af:c2:b1:ae:01:79:43:e2:28: 11:ce:c8:75:ed:ca:ea:02:4a:b2:c9:4c:c5:3e:2b:d2:65:42: 44:15:24:56:d2:50:29:03:d7:c1:cd:8e:8f:b9:6d:54:17:01: 06:82:c6:84:1a:65:a0:88:c2:a4:de:6f:75:79:07:01:85:87: d6:5b:88:d2:4c:f7:df:9f:85:f9:93:f9:75:4e:c4:c2:29:d2: 9d:b4:c3:3c:70:1a:5c:08:d9:26:a3:53:db:fa:de:d1:bc:98: c6:3b:78:6b:ca:2b:78:37:19:d8:34:59:6b:1e:fd:11:de:e9: 04:cd:c6:f8:6e:eb:2a:71:47:d3:12:05:4f:42:d0:d6:10:5b: 00:e8:c0:37:ac:22:c9:91:58:79:ab:09:a5:26:a9:a9:16:1e: 1a:c9:1c:81:de:03:8d:65:93:80:92:05:f0:14:f7:c4:15:ae: 38:ae:40:02 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICF/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjQxMjA0MTY1MzU4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwODkyNi0xNjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2XgQcNi8FGqqVovRG/fGqbU1YZ8a/ig/nFR1HYDO+gGeFrzwvCXjgS8x2M7 nxppen+G8/7s5E5KMx2w6fd7Ipppq1WTCPbMUYiJmMsPKJ+MzVp0aLch3Ni8pKaM CzUpxh+JTf4jcLWKdZQIvfJqZFu9k97LRWv//dTfcxPFr+BC3STJ9zQZpiJHwJcS 0bKC+88ccA1Nr4u27JAw5ldhBo6UGzEJxQri2HLhnehhm9Dr56a2EMs/FkD+K074 wsG4wwv7BGDN2fKiTzXZSsTRRtwueHVBkRXgohTg9GjshFQxroVlvpN5t8pIrZh5 K5/n6hhtnzH9aPyc6THaWMFlUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI6Oj4Oj sa9S07tMSYQlVmo/9x+rMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZCQ0YvNEFCNTc2QkVBQTVBMTFFN0FFNDM2RjMyQzRGOUFFMDIvQzJCRTcxRThB QTlBMTFFN0I0Nzc2RTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnZfgwDQYJKoZIhvcNAQELBQADggEBAIeZ1/dZS+SV2QsW Q5XnWUNvBDCbc/xc1exqTGCA6k/+CUhDelQEt4lxGYUiXdZZzR0Wi4UWon0frs7C N75EXmYjZ+A7nBptLD0DIieNN3QO4q/Csa4BeUPiKBHOyHXtyuoCSrLJTMU+K9Jl QkQVJFbSUCkD18HNjo+5bVQXAQaCxoQaZaCIwqTeb3V5BwGFh9ZbiNJM99+fhfmT +XVOxMIp0p20wzxwGlwI2SajU9v63tG8mMY7eGvKK3g3Gdg0WWse/RHe6QTNxvhu 6ypxR9MSBU9C0NYQWwDowDesIsmRWHmrCaUmqakWHhrJHIHeA41lk4CSBfAU98QV rjiuQAI= -----END CERTIFICATE-----Generated at Wed Apr 9 01:20:11 2025 by rpki-client