$ rpki-client -vvf rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/4D5B35402E8511EB850F8A18C4F9AE02.roa File: 4D5B35402E8511EB850F8A18C4F9AE02.roa (raw, json) Hash identifier: 7N0AglNEEqc9kfaZl/cHF7h51PfaQbNAvQaGl0/xNvc= Subject key identifier: 9E:21:19:CC:AB:A3:AF:6F:02:B4:53:99:6D:65:16:D1:97:5A:00:83 Certificate issuer: /CN=A914C429/serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Certificate serial: 06E2 Authority key identifier: 10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/4D5B35402E8511EB850F8A18C4F9AE02.roa Signing time: Sun 08 Dec 2024 21:40:42 +0000 ROA not before: Sun 08 Dec 2024 21:40:42 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 141351 IP address blocks: 103.157.92.0/23 maxlen: 24 2001:df5:1980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 21:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C429, serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Validity Not Before: Dec 8 21:40:42 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67561259-e2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fe:ff:2b:6a:44:45:8a:67:b3:e6:29:20:6c: c9:25:31:f9:1a:f1:d4:26:67:78:5f:f5:91:1e:8f: e8:f3:11:7a:d4:d0:a7:1f:67:f5:79:ba:00:49:1d: 5f:cc:07:bd:d3:e8:e4:3c:b4:8e:19:7a:02:71:b7: 35:39:98:00:9b:cf:9d:ba:6a:1c:9b:af:c4:53:05: 9b:02:86:a2:73:19:ce:02:df:bf:28:e0:e4:08:6a: 0d:d0:e1:e7:5c:07:24:37:f9:87:55:02:45:9f:9c: a1:de:95:f5:53:61:79:7f:66:c5:38:53:e5:3d:05: ea:50:65:85:21:83:07:31:41:60:e3:f3:7d:b6:4c: 09:1d:c3:e4:df:03:1a:81:b4:7c:c6:bb:be:22:97: bf:b3:38:c9:69:62:66:fb:85:c0:ec:51:54:4d:98: f1:f6:0a:9c:84:de:2f:18:82:5d:f6:45:34:53:44: 55:6d:8a:50:58:b8:34:99:fa:b7:21:2f:a9:65:49: ea:1b:97:a8:fb:cc:29:69:49:90:36:ec:d6:40:62: 09:cc:3f:72:4c:e6:b9:61:0c:9f:85:5d:54:3c:84: 72:bb:11:e2:9a:e4:64:b2:1d:32:66:79:d9:a7:98: 5a:71:91:71:c9:33:d7:77:6a:2b:fa:d6:1e:af:c4: dc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:21:19:CC:AB:A3:AF:6F:02:B4:53:99:6D:65:16:D1:97:5A:00:83 X509v3 Authority Key Identifier: keyid:10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/4D5B35402E8511EB850F8A18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.92.0/23 IPv6: 2001:df5:1980::/48 Signature Algorithm: sha256WithRSAEncryption 39:db:35:93:62:e7:cc:24:dc:ad:d0:40:d9:68:3f:2f:23:81: 75:45:b3:7a:47:7f:ec:c0:10:75:b1:81:f3:4e:cd:df:bf:2e: fb:56:0c:e6:87:94:db:8d:6d:5f:f1:43:87:f0:5b:d8:75:04: 4b:de:f8:d8:80:87:3b:37:c7:bd:64:3b:e4:55:77:83:f2:1c: 5a:d5:fa:c4:df:dc:20:37:da:31:11:9b:e0:05:c4:4f:76:b1: d3:f9:cc:41:e8:88:a1:56:64:48:dd:67:c4:a2:5d:e2:ae:e6: 7e:34:4a:c8:d5:a2:d7:6b:50:b7:f9:23:e9:72:8d:56:a7:b2: 6a:7d:46:87:df:ae:d5:da:5e:d8:fd:85:4b:fc:da:81:32:18: 9c:10:be:b7:9d:a1:e2:e6:40:1d:ad:d6:7b:cb:38:3f:86:35: 80:6a:54:c9:78:eb:fa:70:62:69:2f:53:df:79:fe:d0:9b:6e: 38:8e:c4:27:0d:a1:35:00:16:4e:8a:3b:65:ec:40:2b:6f:83: 46:b4:4d:16:34:84:dd:13:26:c3:2f:bf:cf:5a:24:ee:9c:7c: 74:4f:16:bc:0c:6f:ed:e4:a9:02:90:12:27:a3:db:20:af:6d: e8:d7:cc:6b:8e:17:a5:c4:a3:3b:e4:5d:9d:1d:98:2a:f4:1c: 2c:31:80:a3 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0MjkxMTAvBgNVBAUTKDEwNERCRUY1NjUwREQ3MzU5MkEyRDNDRjgxNzI5RjI2 OUFEOTkxMDgwHhcNMjQxMjA4MjE0MDQyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU2MTI1OS1lMmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApv7/K2pERYpns+YpIGzJJTH5GvHUJmd4X/WRHo/o8xF61NCnH2f1eboASR1f zAe90+jkPLSOGXoCcbc1OZgAm8+dumocm6/EUwWbAoaicxnOAt+/KODkCGoN0OHn XAckN/mHVQJFn5yh3pX1U2F5f2bFOFPlPQXqUGWFIYMHMUFg4/N9tkwJHcPk3wMa gbR8xru+Ipe/szjJaWJm+4XA7FFUTZjx9gqchN4vGIJd9kU0U0RVbYpQWLg0mfq3 IS+pZUnqG5eo+8wpaUmQNuzWQGIJzD9yTOa5YQyfhV1UPIRyuxHimuRksh0yZnnZ p5hacZFxyTPXd2or+tYer8TcbwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJ4hGcyr o69vArRTmW1lFtGXWgCDMB8GA1UdIwQYMBaAFBBNvvVlDdc1kqLTz4Fynyaa2ZEI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzQyOS8yNkQ2QjdDNDJF ODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6V1NvdFBQZ1hLZkpwclpr UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFMi05V1VOMXpXU290UFBnWEtmSnByWmtRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEM0MjkvMjZENkI3QzQyRTg0MTFFQkEzMTZDMzE3QzRGOUFFMDIvNEQ1QjM1NDAy RTg1MTFFQjg1MEY4QTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnnVwwDwQCAAIwCQMHACABDfUZgDANBgkqhkiG9w0BAQsF AAOCAQEAOds1k2LnzCTcrdBA2Wg/LyOBdUWzekd/7MAQdbGB807N378u+1YM5oeU 241tX/FDh/Bb2HUES9742ICHOzfHvWQ75FV3g/IcWtX6xN/cIDfaMRGb4AXET3ax 0/nMQeiIoVZkSN1nxKJd4q7mfjRKyNWi12tQt/kj6XKNVqeyan1Gh9+u1dpe2P2F S/zagTIYnBC+t52h4uZAHa3We8s4P4Y1gGpUyXjr+nBiaS9T33n+0JtuOI7EJw2h NQAWToo7ZexAK2+DRrRNFjSE3RMmwy+/z1ok7px8dE8WvAxv7eSpApASJ6PbIK9t 6NfMa44XpcSjO+RdnR2YKvQcLDGAow== -----END CERTIFICATE-----Generated at Fri Apr 18 07:08:27 2025 by rpki-client