$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/183DE570057A11EC822F230EC4F9AE02.roa File: 183DE570057A11EC822F230EC4F9AE02.roa (raw, json) Hash identifier: bEfFzY9ERkUCouk5XoaucvDsVkrzcwabTIVAnbK3Eko= Subject key identifier: 2D:C5:C7:72:66:59:97:0F:73:69:56:22:E0:CB:6B:C9:75:4C:9B:96 Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Certificate serial: 0BE8 Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/183DE570057A11EC822F230EC4F9AE02.roa Signing time: Wed 08 Jan 2025 19:07:48 +0000 ROA not before: Wed 08 Jan 2025 19:07:48 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 138197 IP address blocks: 103.126.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3048 (0xbe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CBF3 Validity Not Before: Jan 8 19:07:48 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=677ecd03-19ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:89:85:62:23:9a:50:d4:ac:83:c7:b9:a1:ef: 4f:d2:8f:48:7b:72:1d:1a:d4:67:dc:05:a3:3e:88: 57:ca:26:eb:74:eb:79:94:d2:fd:a3:41:c4:20:ad: 2e:d0:eb:94:6d:d0:e8:55:2d:f7:ce:2c:1e:ba:22: ec:56:33:41:ad:aa:b4:6e:71:09:ba:84:7d:a8:8c: c2:4a:3c:5f:fc:eb:42:90:dc:f4:6b:60:8b:13:4b: e4:16:99:bb:df:12:0b:0c:9f:51:7f:fb:cc:f1:eb: 7c:6d:e3:72:22:51:b0:78:92:b1:29:8b:e1:83:ce: bd:cf:a0:49:d7:41:58:60:30:4d:ec:93:6d:d7:72: b4:2b:a7:47:37:20:11:a9:0e:9a:b8:7c:40:78:b9: 2d:36:97:8d:4f:c2:db:ab:a4:39:f0:fb:41:c2:32: cc:54:69:da:5b:f9:65:e4:d5:84:33:7e:4f:64:79: 9b:d4:01:92:3a:bb:a8:03:43:ef:f8:d3:e9:57:8a: 09:75:c2:49:9a:c4:25:51:a0:62:de:26:96:67:0a: 2e:7c:d6:f2:66:34:2c:e5:d8:72:c9:e6:9f:7c:e2: aa:99:f6:1c:c7:15:30:ce:cb:d3:be:6c:3b:73:65: 07:3f:3e:b4:63:a1:9f:14:66:d4:80:c8:28:b1:73: 0a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C5:C7:72:66:59:97:0F:73:69:56:22:E0:CB:6B:C9:75:4C:9B:96 X509v3 Authority Key Identifier: keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/183DE570057A11EC822F230EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.21.0/24 Signature Algorithm: sha256WithRSAEncryption 35:70:c9:94:9b:fa:f3:ef:5c:65:2b:91:ac:3b:61:95:94:54: e0:79:e5:d9:f6:48:99:8f:91:43:1e:65:24:b3:fb:c3:85:75: c0:aa:1a:32:b2:0b:2e:67:c1:16:2d:76:df:dd:2c:0c:2e:12: c3:b0:14:0d:b8:69:03:c9:ad:26:da:3a:37:cb:dc:25:f9:60: 5f:ea:90:2a:72:2c:3c:83:3d:93:9b:ab:3e:26:75:c8:be:cf: 3f:56:c6:94:7b:cc:75:23:45:e6:19:1f:7b:ad:f1:69:ac:0b: 81:7e:5f:bd:8a:51:88:a3:c0:9d:6a:c2:7a:1e:50:12:12:de: 1e:90:0b:29:6e:20:02:f0:cb:71:33:cc:f2:1e:1e:9c:d7:96: 6f:17:30:05:88:b8:50:1b:2f:88:d2:98:70:f4:73:dd:f7:c9: 77:b8:8c:ec:22:a9:46:60:8a:02:14:65:bc:53:6e:0e:72:49: e6:48:12:85:09:17:60:2c:e6:cf:ca:a3:09:47:09:c7:cc:b8: 2e:ac:d3:41:9f:44:c3:03:9f:a4:13:9a:5c:c5:2c:db:ff:22: 61:3a:c8:f7:e5:e6:eb:c7:ef:97:e2:5e:4d:c0:8b:f0:b0:2a: 5c:77:65:6e:db:7b:b1:da:0f:49:63:9c:1c:42:a0:b7:a2:20: 24:0a:cd:d4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQyQzdDQ0M2REQx OTM1MTA3MDcwHhcNMjUwMTA4MTkwNzQ4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdlY2QwMy0xOWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14mFYiOaUNSsg8e5oe9P0o9Ie3IdGtRn3AWjPohXyibrdOt5lNL9o0HEIK0u 0OuUbdDoVS33ziweuiLsVjNBraq0bnEJuoR9qIzCSjxf/OtCkNz0a2CLE0vkFpm7 3xILDJ9Rf/vM8et8beNyIlGweJKxKYvhg869z6BJ10FYYDBN7JNt13K0K6dHNyAR qQ6auHxAeLktNpeNT8Lbq6Q58PtBwjLMVGnaW/ll5NWEM35PZHmb1AGSOruoA0Pv +NPpV4oJdcJJmsQlUaBi3iaWZwoufNbyZjQs5dhyyeaffOKqmfYcxxUwzsvTvmw7 c2UHPz60Y6GfFGbUgMgosXMK/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFC3Fx3Jm WZcPc2lWIuDLa8l1TJuWMB8GA1UdIwQYMBaAFOJEnjEiIBMeLnbELHzMbdGTUQcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0JGMy8xQkM2RUIyMDEx RTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4NHVkc1FzZk14dDBaTlJC d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrU2VNU0lnRXg0dWRzUXNmTXh0MFpOUkJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENCRjMvMUJDNkVCMjAxMUU3MTFFQUI5MDNBQTc5QzRGOUFFMDIvMTgzREU1NzAw NTdBMTFFQzgyMkYyMzBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnfhUwDQYJKoZIhvcNAQELBQADggEBADVwyZSb+vPvXGUr kaw7YZWUVOB55dn2SJmPkUMeZSSz+8OFdcCqGjKyCy5nwRYtdt/dLAwuEsOwFA24 aQPJrSbaOjfL3CX5YF/qkCpyLDyDPZObqz4mdci+zz9WxpR7zHUjReYZH3ut8Wms C4F+X72KUYijwJ1qwnoeUBIS3h6QCyluIALwy3EzzPIeHpzXlm8XMAWIuFAbL4jS mHD0c933yXe4jOwiqUZgigIUZbxTbg5ySeZIEoUJF2As5s/KowlHCcfMuC6s00Gf RMMDn6QTmlzFLNv/ImE6yPfl5uvH75fiXk3Ai/CwKlx3ZW7be7HaD0ljnBxCoLei ICQKzdQ= -----END CERTIFICATE-----Generated at Sun Apr 6 06:37:18 2025 by rpki-client