$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa File: 862720F4031611EB9086351AC4F9AE02.roa (raw, json) Hash identifier: 2zKL2eeTJdxP4POaaALiM0rJiDZ4mdlP/D8Tb5yhoj4= Subject key identifier: F2:73:F8:A8:F5:6C:C3:B2:1F:F3:66:4B:50:F9:8B:43:A1:F0:5D:CF Certificate issuer: /CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F Certificate serial: 079E Authority key identifier: BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa Signing time: Fri 31 Jan 2025 21:30:19 +0000 ROA not before: Fri 31 Jan 2025 21:30:19 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 63931 IP address blocks: 103.47.246.0/23 maxlen: 24 103.204.104.0/23 maxlen: 24 192.140.248.0/22 maxlen: 24 2402:1280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1950 (0x79e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD6A Validity Not Before: Jan 31 21:30:19 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=679d40ea-a616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:df:23:09:a2:dd:5d:31:57:89:93:33:12: ac:4a:b4:62:46:d8:c2:07:ed:61:83:86:72:d8:f3: 30:31:a3:61:0a:9a:7b:97:ba:be:17:9c:c3:9e:4b: 1b:07:c4:21:ad:7b:2f:fb:dc:b7:8d:77:26:f1:0f: 44:5e:94:6d:9f:d3:d0:de:39:4a:59:2b:7b:2d:22: 12:fc:81:09:17:0e:3e:ce:a5:6c:9a:79:31:a4:b6: fb:63:ae:a5:ed:cf:09:4f:b5:c6:e4:b7:16:95:5b: 1a:d5:87:9f:65:3e:37:fc:53:6a:c3:4e:7c:65:9d: 69:3a:23:7b:6f:99:9e:4d:a9:24:5d:41:48:b4:91: ca:2a:a5:81:24:c4:e9:c2:94:88:4a:79:1e:a7:db: 90:88:24:69:26:e6:15:ce:72:7f:f6:24:68:16:bb: 83:4a:7e:2d:b4:21:0f:d4:13:ab:e9:95:72:f6:e4: ec:e3:46:a0:27:01:c0:5e:36:66:3c:c5:32:d9:50: b9:02:64:64:d2:cf:3f:c9:1a:22:1e:d4:92:57:61: 5a:88:42:85:8d:95:9f:61:cd:e9:eb:ec:2c:73:58: db:3e:c9:d7:15:90:2c:22:e8:6e:21:4d:4c:8f:16: 54:1d:42:86:41:32:29:79:d9:02:71:42:13:b8:6d: 72:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:73:F8:A8:F5:6C:C3:B2:1F:F3:66:4B:50:F9:8B:43:A1:F0:5D:CF X509v3 Authority Key Identifier: keyid:BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.47.246.0/23 103.204.104.0/23 192.140.248.0/22 IPv6: 2402:1280::/32 Signature Algorithm: sha256WithRSAEncryption 1e:31:5c:4a:76:75:7c:56:82:6b:a0:bf:27:0b:e4:8e:f3:f4: 52:07:99:c0:01:6d:af:86:43:63:41:8b:8c:97:47:45:9b:e0: fd:ee:5a:35:d5:7a:c6:42:8e:fd:ea:16:a0:a1:06:ae:7f:97: 36:14:3c:ad:95:a0:62:31:68:65:59:77:61:03:ab:ab:9e:f3: e4:dd:c6:25:74:d1:62:e7:a0:5a:1a:db:11:09:57:b6:93:c7: 05:cb:bc:24:c4:e6:f5:2a:c2:f2:2b:99:fc:55:9d:70:94:98: e4:ac:67:fc:a8:a7:23:9d:eb:b9:11:78:43:18:6b:26:ea:6c: 11:e0:ec:85:38:fd:e5:86:13:ec:51:f5:01:27:1f:76:47:cb: dd:d0:ef:8c:57:60:30:13:f1:09:43:56:1f:83:06:13:44:77: 4d:bc:f5:4a:bd:87:fe:25:bc:4d:2a:fc:7a:36:26:c1:6f:a2: e5:b9:db:a4:10:9d:05:e3:28:28:a5:f0:1e:26:b8:dc:af:35: cf:e9:e2:91:64:18:db:20:ae:a9:fe:45:c8:94:d1:37:60:d8: 1c:28:a7:6f:b7:07:ce:42:93:23:a1:86:77:e2:44:b0:37:65: c2:70:2d:10:4c:ab:cf:69:e2:d8:f5:63:2e:d0:6f:de:0d:6e: 5d:fd:9d:63 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICB54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RENkExMTAvBgNVBAUTKEJCOUQ1RDUwRjc1NTgxOTcyRkMzQUYxQzZDRTZBRkNG NTdDRkI5M0YwHhcNMjUwMTMxMjEzMDE5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzlkNDBlYS1hNjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArq7fIwmi3V0xV4mTMxKsSrRiRtjCB+1hg4Zy2PMwMaNhCpp7l7q+F5zDnksb B8QhrXsv+9y3jXcm8Q9EXpRtn9PQ3jlKWSt7LSIS/IEJFw4+zqVsmnkxpLb7Y66l 7c8JT7XG5LcWlVsa1YefZT43/FNqw058ZZ1pOiN7b5meTakkXUFItJHKKqWBJMTp wpSISnkep9uQiCRpJuYVznJ/9iRoFruDSn4ttCEP1BOr6ZVy9uTs40agJwHAXjZm PMUy2VC5AmRk0s8/yRoiHtSSV2FaiEKFjZWfYc3p6+wsc1jbPsnXFZAsIuhuIU1M jxZUHUKGQTIpedkCcUITuG1yCQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFPJz+Kj1 bMOyH/NmS1D5i0Oh8F3PMB8GA1UdIwQYMBaAFLudXVD3VYGXL8OvHGzmr89Xz7k/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQ2QS8zOUY0OEExMDAz MTUxMUVCQjU1RDIyMTlDNEY5QUUwMi91NTFkVVBkVmdaY3Z3NjhjYk9hdnoxZlB1 VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1MWRVUGRWZ1pjdnc2OGNiT2F2ejFmUHVUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0RENkEvMzlGNDhBMTAwMzE1MTFFQkI1NUQyMjE5QzRGOUFFMDIvODYyNzIwRjQw MzE2MTFFQjkwODYzNTFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAFnL/YDBAFnzGgDBALAjPgwDQQCAAIwBwMFACQCEoAwDQYJ KoZIhvcNAQELBQADggEBAB4xXEp2dXxWgmugvycL5I7z9FIHmcABba+GQ2NBi4yX R0Wb4P3uWjXVesZCjv3qFqChBq5/lzYUPK2VoGIxaGVZd2EDq6ue8+TdxiV00WLn oFoa2xEJV7aTxwXLvCTE5vUqwvIrmfxVnXCUmOSsZ/yopyOd67kReEMYaybqbBHg 7IU4/eWGE+xR9QEnH3ZHy93Q74xXYDAT8QlDVh+DBhNEd0289Uq9h/4lvE0q/Ho2 JsFvouW526QQnQXjKCil8B4muNyvNc/p4pFkGNsgrqn+RciU0Tdg2Bwop2+3B85C kyOhhnfiRLA3ZcJwLRBMq89p4tj1Yy7Qb94Nbl39nWM= -----END CERTIFICATE-----Generated at Sat Apr 5 23:56:13 2025 by rpki-client