$ rpki-client -vvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/0CE4B8C6474911EEA995D74FC4F9AE02.roa File: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (raw, json) Hash identifier: o8XeNpRnuUBlVWA6mPKxdSovFEQUWjBzrI7Rs+4BJAM= Subject key identifier: C8:1C:31:49:22:BF:DD:C6:61:FE:96:EB:D7:18:ED:A5:15:4D:EB:12 Certificate issuer: /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A Certificate serial: 010A Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/0CE4B8C6474911EEA995D74FC4F9AE02.roa Signing time: Thu 23 Jan 2025 03:16:58 +0000 ROA not before: Thu 23 Jan 2025 03:16:58 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 150729 IP address blocks: 103.73.184.0/23 maxlen: 23 103.73.184.0/24 maxlen: 24 103.73.185.0/24 maxlen: 24 2001:df1:dac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913500A Validity Not Before: Jan 23 03:16:58 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6791b4a9-b442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1e:77:23:03:f1:03:f8:cd:f4:15:a7:4c:40: 7e:1b:15:3a:df:09:a8:fb:88:59:42:e0:85:7d:fc: 04:f0:09:24:92:bd:ee:a0:25:9d:1e:0f:f6:ea:fa: 6b:20:c9:d1:fa:ab:12:76:94:08:3b:58:6c:e1:4c: ab:8d:3a:fa:6b:91:da:69:af:a2:6b:a7:a6:81:9d: aa:5b:08:99:ae:06:3b:37:7f:12:5f:4a:9f:23:b0: e5:4e:a2:5b:ec:f1:88:1d:c1:5e:f6:f1:54:03:31: cc:70:fc:fa:d7:4e:01:09:f3:bf:47:c9:f0:36:78: 27:92:88:84:55:79:f9:f0:3f:81:4f:87:0f:76:c4: 75:6b:10:e5:25:f2:8d:5e:8d:1a:41:a1:d8:d2:34: bf:c6:38:56:4a:c2:74:17:9b:09:16:09:ca:1a:48: ca:bc:96:6e:89:d6:87:29:a5:a0:f7:5a:15:11:92: 8e:73:ed:ad:54:e2:21:94:a6:98:41:e7:45:df:3b: f1:fc:68:fc:b0:3b:ff:3c:37:cd:d1:47:73:50:2d: 55:43:c9:28:3b:6b:c5:34:90:0d:3a:ef:76:fd:b1: 71:9b:f6:c6:11:94:09:a4:4c:3d:cb:64:f1:f3:f8: 6d:04:fc:2b:14:14:f7:48:17:9e:6e:8d:d8:ec:71: 74:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1C:31:49:22:BF:DD:C6:61:FE:96:EB:D7:18:ED:A5:15:4D:EB:12 X509v3 Authority Key Identifier: keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/0CE4B8C6474911EEA995D74FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.184.0/23 IPv6: 2001:df1:dac0::/48 Signature Algorithm: sha256WithRSAEncryption 4f:43:70:a6:a7:0a:96:8a:db:fb:c7:52:9b:8d:66:61:63:fb: c3:a7:79:3e:93:e7:c2:39:79:40:cc:3a:80:c0:75:3d:98:5c: c7:66:33:de:1e:67:2b:03:57:51:36:6e:2d:da:7b:2b:97:20: bf:8f:7d:e0:f1:ea:47:fd:fd:09:ae:ac:77:62:6c:d5:84:11: b1:97:60:71:eb:3b:47:70:53:aa:bb:d9:a7:4e:ce:60:ce:b4: d3:6a:64:6a:c7:62:c8:db:f4:89:3c:0e:8c:7f:fa:c2:5e:23: d1:24:b3:18:dd:22:af:04:15:39:7d:7a:61:41:20:a7:31:4e: 10:66:e4:a6:c8:55:80:22:1a:16:21:f0:0a:50:2f:a6:e0:fa: dd:3e:06:2c:d6:8b:f6:b8:fb:4c:f4:3b:12:9d:ae:33:26:bb: b4:6b:e3:6b:9a:65:a0:8f:18:46:c3:f1:da:8b:be:dc:1a:dc: 7c:42:d7:3c:97:96:dd:1e:d6:4f:d1:54:6d:95:b6:61:40:f5: 41:89:25:d4:1c:37:b6:72:5f:b7:3d:18:d1:81:97:8b:90:d1: ff:ab:e7:5e:a3:02:90:10:21:6f:d6:45:a9:43:1b:82:82:e3: 10:77:a0:b2:6c:a3:65:97:c9:c3:fb:07:53:4d:6e:06:e1:76: 34:47:1a:45 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMEExMTAvBgNVBAUTKDY4NDVBMzU3MDc1N0U2QkYyQzA0ODVBQzIxNzg5QkZG NTAwNTFFOUEwHhcNMjUwMTIzMDMxNjU4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkxYjRhOS1iNDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7x53IwPxA/jN9BWnTEB+GxU63wmo+4hZQuCFffwE8Akkkr3uoCWdHg/26vpr IMnR+qsSdpQIO1hs4UyrjTr6a5Haaa+ia6emgZ2qWwiZrgY7N38SX0qfI7DlTqJb 7PGIHcFe9vFUAzHMcPz6104BCfO/R8nwNngnkoiEVXn58D+BT4cPdsR1axDlJfKN Xo0aQaHY0jS/xjhWSsJ0F5sJFgnKGkjKvJZuidaHKaWg91oVEZKOc+2tVOIhlKaY QedF3zvx/Gj8sDv/PDfN0UdzUC1VQ8koO2vFNJANOu92/bFxm/bGEZQJpEw9y2Tx 8/htBPwrFBT3SBeebo3Y7HF0PwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMgcMUki v93GYf6W69cY7aUVTesSMB8GA1UdIwQYMBaAFGhFo1cHV+a/LASFrCF4m/9QBR6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAwQS9DQ0EzRUE5MjQ3 M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVyOHNCSVdzSVhpYl8xQUZI cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FFV2pWd2RYNXI4c0JJV3NJWGliXzFBRkhwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzUwMEEvQ0NBM0VBOTI0NzNGMTFFRTg3RjQwQTdFQzRGOUFFMDIvMENFNEI4QzY0 NzQ5MTFFRUE5OTVENzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnSbgwDwQCAAIwCQMHACABDfHawDANBgkqhkiG9w0BAQsF AAOCAQEAT0NwpqcKlorb+8dSm41mYWP7w6d5PpPnwjl5QMw6gMB1PZhcx2Yz3h5n KwNXUTZuLdp7K5cgv4994PHqR/39Ca6sd2Js1YQRsZdgces7R3BTqrvZp07OYM60 02pkasdiyNv0iTwOjH/6wl4j0SSzGN0irwQVOX16YUEgpzFOEGbkpshVgCIaFiHw ClAvpuD63T4GLNaL9rj7TPQ7Ep2uMya7tGvja5ploI8YRsPx2ou+3BrcfELXPJeW 3R7WT9FUbZW2YUD1QYkl1Bw3tnJftz0Y0YGXi5DR/6vnXqMCkBAhb9ZFqUMbgoLj EHegsmyjZZfJw/sHU01uBuF2NEcaRQ== -----END CERTIFICATE-----Generated at Sun Apr 6 00:31:22 2025 by rpki-client