$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa File: 8EF0A700973911EDB1E3C460C4F9AE02.roa (raw, json) Hash identifier: Pfx0RtJcLLW5ZFj5crlklO0jOVyz0bjwf3XIGvazerQ= Subject key identifier: 57:E6:8E:06:E6:35:8A:36:44:FD:F2:C3:C9:52:95:3E:34:8B:7A:0F Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Certificate serial: 25BA Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa Signing time: Sat 08 Feb 2025 17:55:39 +0000 ROA not before: Sat 08 Feb 2025 17:55:39 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 4294967200 IP address blocks: 103.138.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9658 (0x25ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B805 Validity Not Before: Feb 8 17:55:39 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67a79a9a-2de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ca:a3:5d:e0:20:83:14:61:e2:0d:07:37:0b: 88:80:7b:e5:34:a6:4d:c4:ec:8f:46:00:8b:53:3f: 90:9d:94:dc:94:d9:07:4a:84:67:56:c7:d2:93:2d: bb:51:44:a0:fc:67:02:91:8a:1f:e1:72:0e:ae:9d: 8c:7c:9d:f4:0d:f0:7f:81:d9:2f:66:aa:28:e0:91: 91:5e:e8:ff:e5:c7:df:b5:7e:ea:9c:48:92:e6:bc: 3a:4d:86:8c:69:48:d7:8f:63:ef:73:d7:d1:3a:48: e8:b6:39:80:f0:19:d4:b4:39:e7:d3:70:52:a7:d3: 44:e5:23:b9:19:8c:cc:23:69:21:56:7c:a2:c1:47: 05:3d:a2:53:15:49:cd:6a:02:05:10:fc:b1:a9:22: d4:46:e9:46:5a:8e:15:b5:64:21:62:6d:b0:70:53: c0:6c:72:ec:5b:38:0a:e2:db:5e:35:79:c6:f4:cd: 5f:bb:65:3f:5b:46:d4:5c:91:33:36:75:84:93:a1: 2f:c2:7c:8b:31:84:18:b1:39:83:84:44:e5:d2:67: 0f:fb:4f:be:b2:10:76:89:85:91:ad:2f:45:5f:80: 94:a4:69:ef:e8:93:4a:26:09:c8:bd:43:3d:3c:92: 5a:bd:be:39:04:6c:2d:2a:94:85:b0:da:d2:06:9b: 2d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E6:8E:06:E6:35:8A:36:44:FD:F2:C3:C9:52:95:3E:34:8B:7A:0F X509v3 Authority Key Identifier: keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.210.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:a3:10:f1:78:35:68:d9:ea:35:5f:f5:7a:1e:0a:11:1a:9b: ee:0b:7b:a4:f4:48:53:af:10:85:ad:c6:d2:fb:13:dc:35:ff: 76:66:09:a8:e6:0d:62:94:68:2f:1d:25:fa:70:11:f3:87:4c: f1:e8:b8:8f:b4:a8:d8:79:3c:f8:f6:41:03:d0:61:41:aa:ec: 99:de:f3:69:13:66:ea:ca:91:e1:43:7c:51:d0:88:a0:9d:cd: 9b:b7:df:2a:ac:10:b5:be:18:4f:e5:43:51:91:1e:d7:67:0b: 09:cd:29:60:fe:c6:70:a3:98:96:6a:57:e8:b4:c1:5f:4e:15: 37:c2:56:80:b8:1c:b4:bc:cd:22:44:7a:8c:da:40:f5:32:18: 31:ef:c7:c5:35:23:ad:c2:3a:1d:81:e3:7f:d2:47:64:c2:7d: 47:b5:6c:da:42:32:12:ee:b4:9c:d4:11:3d:61:fe:ab:09:0d: 37:8c:47:83:65:df:56:6f:b1:a3:40:b0:94:ff:c5:63:3a:1e: 7b:53:83:74:26:4e:59:8b:5a:20:04:66:95:20:2b:94:f6:96: 54:28:51:06:05:40:65:36:e5:23:bd:96:c0:c7:60:36:78:ad: 3b:3f:4a:e7:5b:ef:74:8d:ab:42:c0:df:f0:ce:32:98:3d:3e: 50:46:2f:9c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw RDNEOEE2RDAwHhcNMjUwMjA4MTc1NTM5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E3OWE5YS0yZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsqjXeAggxRh4g0HNwuIgHvlNKZNxOyPRgCLUz+QnZTclNkHSoRnVsfSky27 UUSg/GcCkYof4XIOrp2MfJ30DfB/gdkvZqoo4JGRXuj/5cfftX7qnEiS5rw6TYaM aUjXj2Pvc9fROkjotjmA8BnUtDnn03BSp9NE5SO5GYzMI2khVnyiwUcFPaJTFUnN agIFEPyxqSLURulGWo4VtWQhYm2wcFPAbHLsWzgK4tteNXnG9M1fu2U/W0bUXJEz NnWEk6EvwnyLMYQYsTmDhETl0mcP+0++shB2iYWRrS9FX4CUpGnv6JNKJgnIvUM9 PJJavb45BGwtKpSFsNrSBpstCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFfmjgbm NYo2RP3yw8lSlT40i3oPMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0I4MDUvRjgwNzZCOEE3QjdCMTFFOThCNkVDMDc0QzRGOUFFMDIvOEVGMEE3MDA5 NzM5MTFFREIxRTNDNDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnitIwDQYJKoZIhvcNAQELBQADggEBAJ2jEPF4NWjZ6jVf 9XoeChEam+4Le6T0SFOvEIWtxtL7E9w1/3ZmCajmDWKUaC8dJfpwEfOHTPHouI+0 qNh5PPj2QQPQYUGq7Jne82kTZurKkeFDfFHQiKCdzZu33yqsELW+GE/lQ1GRHtdn CwnNKWD+xnCjmJZqV+i0wV9OFTfCVoC4HLS8zSJEeozaQPUyGDHvx8U1I63COh2B 43/SR2TCfUe1bNpCMhLutJzUET1h/qsJDTeMR4Nl31ZvsaNAsJT/xWM6HntTg3Qm TlmLWiAEZpUgK5T2llQoUQYFQGU25SO9lsDHYDZ4rTs/Sudb73SNq0LA3/DOMpg9 PlBGL5w= -----END CERTIFICATE-----Generated at Sat Apr 5 07:16:58 2025 by rpki-client