$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/A8D10944DEA511EEB7B9DC35C4F9AE02.roa File: A8D10944DEA511EEB7B9DC35C4F9AE02.roa (raw, json) Hash identifier: F5nZUR683r0GHaN7PIQS7ScZ+hYmoRww/yUwHk4aoNk= Subject key identifier: CA:71:B2:D9:3B:63:78:1B:E2:85:8A:63:DE:41:FE:4A:02:ED:02:37 Certificate issuer: /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC Certificate serial: 06B0 Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/A8D10944DEA511EEB7B9DC35C4F9AE02.roa Signing time: Thu 26 Dec 2024 19:48:13 +0000 ROA not before: Thu 26 Dec 2024 19:48:13 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 140222 IP address blocks: 103.144.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1712 (0x6b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EE77 Validity Not Before: Dec 26 19:48:13 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=676db2fd-844a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6e:89:76:80:ca:8f:78:71:3e:0f:f9:76:9c: f1:d4:f3:09:02:24:37:fa:78:5e:fc:f2:46:48:bd: 2c:b5:fb:dc:77:8b:82:6d:58:20:7c:8e:2f:62:3a: eb:80:50:65:5f:de:f2:2f:2f:da:52:b8:39:d0:47: 8e:a1:f6:60:3e:f0:ec:99:98:eb:e3:54:68:2d:fa: f3:e2:2a:f1:11:87:91:ce:94:7f:57:72:8c:bc:0b: 93:5e:37:66:70:6d:82:12:b8:a5:74:0e:92:36:74: 20:55:6c:6a:21:d6:cf:f0:36:e2:c4:2f:80:66:8a: c2:45:5f:36:16:11:5f:85:2d:3e:04:08:aa:c4:d7: 24:5d:93:29:07:ee:6d:8b:d6:7b:dc:d8:51:cd:43: fd:d4:06:cc:7f:8b:e1:5a:0a:f2:f7:b1:46:8d:8b: 76:18:cd:98:87:22:aa:79:e3:be:e1:4a:5a:43:8d: fc:31:5b:0e:4d:cd:0f:d6:c0:e3:bb:13:94:25:6e: 08:33:f5:26:bc:e5:83:61:00:79:d5:34:bd:33:44: e9:b1:fd:fe:9b:62:6d:7d:69:69:cc:09:7f:08:44: 4a:58:22:51:a1:15:45:58:3a:12:83:84:29:5d:22: a1:36:d7:ee:a9:46:ed:9c:85:9c:c0:78:c6:55:bf: 80:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:71:B2:D9:3B:63:78:1B:E2:85:8A:63:DE:41:FE:4A:02:ED:02:37 X509v3 Authority Key Identifier: keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/A8D10944DEA511EEB7B9DC35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.104.0/24 Signature Algorithm: sha256WithRSAEncryption 50:03:be:b9:f2:fe:1e:7b:7e:0a:9d:1d:57:75:4a:ef:7c:9b: 52:66:17:6e:09:51:c0:a1:47:4a:cc:f6:dd:a2:79:44:71:b2: 29:15:b2:26:e4:19:78:d0:99:48:2d:72:8d:b8:4d:c9:f2:63: 7f:ce:39:c7:c4:32:5d:c8:a8:63:66:9f:1a:46:2c:eb:a5:bd: 7f:3a:25:9b:71:a4:1c:f0:d6:94:ef:1a:ef:4b:4c:76:85:ce: f8:75:30:04:38:5c:3e:12:3e:18:a1:75:b6:30:d7:b9:11:27: b7:ac:2c:c1:1d:6f:1f:df:c2:28:e0:ca:a1:3e:be:27:90:a2: cf:16:7f:bb:89:f0:09:6f:83:30:57:c2:98:79:45:a1:75:33: 0d:d0:86:a1:f3:8d:9d:a0:48:c8:1b:f7:0a:9f:b3:0e:d3:b0: 82:41:76:5f:ed:cf:8d:37:62:37:b4:4e:5f:4a:12:c6:e8:f1: 86:d0:9b:90:b0:50:c6:c2:e4:8a:ff:f2:92:4c:a3:07:6a:88: d5:40:f4:6d:40:ba:c4:3e:4d:d8:0d:06:6d:75:eb:2c:68:da: 8d:7b:bc:18:51:a6:f0:23:01:8b:60:b1:a8:57:5c:f6:0e:9c: ea:3d:50:9b:1b:39:b4:92:bc:ee:c2:11:07:58:3a:61:37:e2: e4:d3:06:cd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VFNzcxMTAvBgNVBAUTKEIxOEVBNEI0ODY4NEE2N0RFQTAxMzhCQUJBMjMzMDZE MDAwM0NEQ0MwHhcNMjQxMjI2MTk0ODEzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZkYjJmZC04NDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzW6JdoDKj3hxPg/5dpzx1PMJAiQ3+nhe/PJGSL0stfvcd4uCbVggfI4vYjrr gFBlX97yLy/aUrg50EeOofZgPvDsmZjr41RoLfrz4irxEYeRzpR/V3KMvAuTXjdm cG2CErildA6SNnQgVWxqIdbP8DbixC+AZorCRV82FhFfhS0+BAiqxNckXZMpB+5t i9Z73NhRzUP91AbMf4vhWgry97FGjYt2GM2YhyKqeeO+4UpaQ438MVsOTc0P1sDj uxOUJW4IM/UmvOWDYQB51TS9M0Tpsf3+m2JtfWlpzAl/CERKWCJRoRVFWDoSg4Qp XSKhNtfuqUbtnIWcwHjGVb+AMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMpxstk7 Y3gb4oWKY95B/koC7QI3MB8GA1UdIwQYMBaAFLGOpLSGhKZ96gE4urojMG0AA83M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU3Ny9DNDAwQkI1QzU2 RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBuM3FBVGk2dWlNd2JRQUR6 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZNmt0SWFFcG4zcUFUaTZ1aU13YlFBRHpjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0VFNzcvQzQwMEJCNUM1NkQxMTFFQUE5NEU3RTVEQzRGOUFFMDIvQThEMTA5NDRE RUE1MTFFRUI3QjlEQzM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkGgwDQYJKoZIhvcNAQELBQADggEBAFADvrny/h57fgqd HVd1Su98m1JmF24JUcChR0rM9t2ieURxsikVsibkGXjQmUgtco24TcnyY3/OOcfE Ml3IqGNmnxpGLOulvX86JZtxpBzw1pTvGu9LTHaFzvh1MAQ4XD4SPhihdbYw17kR J7esLMEdbx/fwijgyqE+vieQos8Wf7uJ8AlvgzBXwph5RaF1Mw3QhqHzjZ2gSMgb 9wqfsw7TsIJBdl/tz403Yje0Tl9KEsbo8YbQm5CwUMbC5Ir/8pJMowdqiNVA9G1A usQ+TdgNBm116yxo2o17vBhRpvAjAYtgsahXXPYOnOo9UJsbObSSvO7CEQdYOmE3 4uTTBs0= -----END CERTIFICATE-----Generated at Sun Apr 6 01:19:03 2025 by rpki-client