$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/5DE0E22C86D611EFBC773E7AC4F9AE02.roa File: 5DE0E22C86D611EFBC773E7AC4F9AE02.roa (raw, json) Hash identifier: WCnkm4p64RYQp11JjDyofIDJwHxjWdtrAu0u0nyqyzQ= Subject key identifier: DA:39:29:6D:70:C3:98:0F:AA:1F:0D:87:6D:75:6C:AF:70:F6:61:C6 Certificate issuer: /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Certificate serial: 142A Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/5DE0E22C86D611EFBC773E7AC4F9AE02.roa Signing time: Tue 22 Apr 2025 17:15:53 +0000 ROA not before: Tue 22 Apr 2025 17:15:53 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 137561 IP address blocks: 103.113.100.0/24 maxlen: 24 103.113.101.0/24 maxlen: 24 103.113.102.0/24 maxlen: 24 103.113.103.0/24 maxlen: 24 103.137.68.0/24 maxlen: 24 103.137.69.0/24 maxlen: 24 103.137.70.0/24 maxlen: 24 103.137.71.0/24 maxlen: 24 2402:ba40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 17:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5162 (0x142a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F547, serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Validity Not Before: Apr 22 17:15:53 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6807cec9-9ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:36:74:6d:91:14:0d:a1:a6:20:61:5d:31:18: 90:47:3e:60:a5:c4:d4:0a:57:9e:fd:eb:30:a2:e4: c1:e9:10:d5:7b:58:8f:a7:e8:11:0a:57:92:cc:b0: 8b:86:4b:36:40:3b:02:2c:5d:79:9e:b3:73:66:43: 80:75:d0:20:c8:ab:ac:fc:93:df:0e:02:b6:4a:3f: 27:e2:2b:1f:21:87:98:ef:d8:94:95:c8:36:aa:78: ec:93:55:8e:d5:1b:83:ac:25:3a:c2:93:58:1a:1e: f8:ba:5a:e3:4e:a3:36:76:cd:75:f5:c3:16:9f:1b: 7b:af:a2:9e:21:f0:13:cb:03:7f:c0:5c:b2:46:5c: 29:6c:03:5f:1f:3a:4e:42:54:56:5c:28:af:e4:1a: cc:68:b1:d8:5c:03:13:b0:e4:33:ab:5c:33:f8:7e: cd:c4:da:95:d9:86:ef:67:00:33:45:e4:22:69:7c: 01:01:78:71:fe:04:c4:da:18:10:03:9e:34:87:21: 5e:c0:a1:2a:48:d8:6e:ec:e8:17:66:2a:8f:23:78: be:b5:fa:67:5a:66:0c:c8:ee:4d:2f:3e:b1:3c:5a: 47:71:7b:65:79:e4:52:eb:1c:ba:94:f9:5c:48:ea: df:e9:b2:b9:07:d0:fc:26:c2:a9:8c:22:7a:93:85: d6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:39:29:6D:70:C3:98:0F:AA:1F:0D:87:6D:75:6C:AF:70:F6:61:C6 X509v3 Authority Key Identifier: keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/5DE0E22C86D611EFBC773E7AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.100.0/22 103.137.68.0/22 IPv6: 2402:ba40::/32 Signature Algorithm: sha256WithRSAEncryption 30:7a:17:84:35:23:61:e2:e8:f9:51:06:ae:aa:83:ec:b8:9e: 8f:46:07:c4:4a:e6:e8:92:ab:e8:06:c5:9f:f3:04:ac:15:1f: ca:2a:59:bb:06:a7:a7:78:0c:ed:60:0e:95:35:12:71:ef:59: cf:d8:e5:de:8e:04:e9:f2:5c:6f:d3:a1:18:c2:1a:a3:ec:60: a8:1f:a6:91:63:55:ee:6c:1e:57:50:71:6a:57:39:13:99:0f: 6d:21:00:4a:bd:dc:02:ba:62:fc:c1:7c:67:b1:9e:cf:33:04: 98:6c:ca:7b:41:ec:33:1a:49:54:0b:2d:33:58:12:71:23:9c: 5b:fb:55:82:59:7f:03:e9:1b:9f:15:8b:ca:cb:39:ed:f4:bd: 15:80:c8:40:90:c3:3b:4c:6d:fb:39:0d:5a:78:e7:62:f7:58: 09:ec:03:55:d3:ee:9e:fa:b3:aa:43:b9:87:0f:10:af:36:6b: 80:80:22:2a:18:9c:1f:1b:cc:2a:15:6c:13:af:a2:ce:54:55: 8c:35:30:ea:04:58:a7:60:2b:bd:f2:fc:19:94:9c:85:3a:85: ff:07:d1:cc:de:58:f4:07:14:09:23:c9:c5:58:5b:60:9c:f8: 65:da:d9:8b:c0:b1:ec:a4:3d:4e:e1:2b:3b:63:36:01:61:de: db:1b:91:cc -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICFCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y1NDcxMTAvBgNVBAUTKDBFRTNFQTIyMkMzOThDRDc2MEM3Njc1NjFENTgyRkMw RkM1RDIzRkYwHhcNMjUwNDIyMTcxNTUzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODA3Y2VjOS05YWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TZ0bZEUDaGmIGFdMRiQRz5gpcTUClee/eswouTB6RDVe1iPp+gRCleSzLCL hks2QDsCLF15nrNzZkOAddAgyKus/JPfDgK2Sj8n4isfIYeY79iUlcg2qnjsk1WO 1RuDrCU6wpNYGh74ulrjTqM2ds119cMWnxt7r6KeIfATywN/wFyyRlwpbANfHzpO QlRWXCiv5BrMaLHYXAMTsOQzq1wz+H7NxNqV2YbvZwAzReQiaXwBAXhx/gTE2hgQ A540hyFewKEqSNhu7OgXZiqPI3i+tfpnWmYMyO5NLz6xPFpHcXtleeRS6xy6lPlc SOrf6bK5B9D8JsKpjCJ6k4XWSwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNo5KW1w w5gPqh8Nh211bK9w9mHGMB8GA1UdIwQYMBaAFA7j6iIsOYzXYMdnVh1YL8D8XSP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjU0Ny80QTgyRjEyNDgw NTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpOZGd4MmRXSFZndndQeGRJ XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1UHFJaXc1ak5kZ3gyZFdIVmd2d1B4ZElfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0Y1NDcvNEE4MkYxMjQ4MDUzMTFFOEI3MjdGMTU2QzRGOUFFMDIvNURFMEUyMkM4 NkQ2MTFFRkJDNzczRTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJncWQDBAJniUQwDQQCAAIwBwMFACQCukAwDQYJKoZIhvcN AQELBQADggEBADB6F4Q1I2Hi6PlRBq6qg+y4no9GB8RK5uiSq+gGxZ/zBKwVH8oq WbsGp6d4DO1gDpU1EnHvWc/Y5d6OBOnyXG/ToRjCGqPsYKgfppFjVe5sHldQcWpX OROZD20hAEq93AK6YvzBfGexns8zBJhsyntB7DMaSVQLLTNYEnEjnFv7VYJZfwPp G58Vi8rLOe30vRWAyECQwztMbfs5DVp452L3WAnsA1XT7p76s6pDuYcPEK82a4CA IioYnB8bzCoVbBOvos5UVYw1MOoEWKdgK73y/BmUnIU6hf8H0czeWPQHFAkjycVY W2Cc+GXa2YvAseykPU7hKztjNgFh3tsbkcw= -----END CERTIFICATE-----Generated at Tue Apr 22 23:17:55 2025 by rpki-client