$ rpki-client -vvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/1AA7504A92DD11EB9B9E993FC4F9AE02.roa File: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (raw, json) Hash identifier: C75Vrv4Uz+C6zFOBFG0FQ16ertvfsDBJQmC7BROeKb0= Subject key identifier: A6:4A:11:19:06:55:24:3D:76:3C:99:EA:EC:01:E8:F2:1D:89:AB:42 Certificate issuer: /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Certificate serial: 0630 Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/1AA7504A92DD11EB9B9E993FC4F9AE02.roa Signing time: Tue 31 Dec 2024 21:09:46 +0000 ROA not before: Tue 31 Dec 2024 21:09:46 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 138368 IP address blocks: 103.131.212.0/22 maxlen: 22 103.131.212.0/24 maxlen: 24 103.131.213.0/24 maxlen: 24 103.131.214.0/24 maxlen: 24 103.131.215.0/24 maxlen: 24 2403:d240::/32 maxlen: 32 2403:d240::/36 maxlen: 36 2403:d240:1000::/36 maxlen: 36 2403:d240:2000::/36 maxlen: 36 2403:d240:3000::/36 maxlen: 36 2403:d240:4000::/36 maxlen: 36 2403:d240:5000::/36 maxlen: 36 2403:d240:6000::/36 maxlen: 36 2403:d240:7000::/36 maxlen: 36 2403:d240:8000::/36 maxlen: 36 2403:d240:9000::/36 maxlen: 36 2403:d240:a000::/36 maxlen: 36 2403:d240:b000::/36 maxlen: 36 2403:d240:c000::/36 maxlen: 36 2403:d240:d000::/36 maxlen: 36 2403:d240:e000::/36 maxlen: 36 2403:d240:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1584 (0x630) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F697 Validity Not Before: Dec 31 21:09:46 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67745d9a-f7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e1:a7:b8:38:86:be:c2:e8:52:b8:16:08:1b: 5e:cd:96:7e:f9:1d:b7:a9:c9:14:f8:5e:61:2d:8c: 8d:b2:61:58:45:d4:28:4b:d8:0c:af:db:3d:01:6e: 6c:ab:2c:1f:a7:18:85:dd:19:cc:03:8c:f3:80:91: bd:10:54:42:84:82:1c:ce:3f:42:3c:29:62:57:81: b7:e4:8f:7b:ad:46:f3:c0:fe:34:55:84:c1:be:de: a4:cf:bb:1c:d4:bb:0a:e1:23:3e:b6:4e:85:99:fd: db:b0:7f:1a:c0:c8:90:42:9f:05:a9:89:ec:de:74: a1:e7:34:c6:8e:37:75:9c:6b:3b:19:82:d5:4c:2e: bc:ac:58:15:1a:e2:69:dd:ee:b5:78:89:13:4c:d5: 70:7e:33:a2:81:07:ff:f3:70:dc:66:fb:7c:07:13: 32:1e:18:2a:c4:e6:cd:48:0b:15:1d:b2:bd:11:b3: aa:12:55:e1:e3:7f:81:79:49:d6:d0:5f:7d:19:ac: 5c:70:11:70:9c:99:cc:8f:2c:ee:6e:4a:5b:3f:ac: bb:76:71:27:87:02:06:2b:3e:26:c0:89:08:a4:e8: 33:d3:32:53:be:4f:9a:c0:d7:6a:f9:90:d3:a5:01: fa:09:26:12:12:2d:57:3c:10:f2:76:69:62:99:44: 4d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4A:11:19:06:55:24:3D:76:3C:99:EA:EC:01:E8:F2:1D:89:AB:42 X509v3 Authority Key Identifier: keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/1AA7504A92DD11EB9B9E993FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.212.0/22 IPv6: 2403:d240::/32 Signature Algorithm: sha256WithRSAEncryption 50:b0:6b:28:a7:c6:71:2f:f3:54:40:90:3f:50:96:c2:88:f0: 9c:e2:95:85:c7:cd:9a:4a:9a:f1:97:82:ed:5a:3c:34:73:c7: c1:12:ec:2b:3c:b9:cb:d0:30:5d:e7:f0:2e:23:48:2f:1f:16: c6:4e:91:9d:63:04:21:78:94:fc:a1:74:d3:cd:46:75:7d:1d: 35:65:2f:52:a7:fc:9b:cd:50:5e:e4:c7:33:e7:d0:ce:9f:34: 95:19:d0:f0:1f:74:3e:0d:88:bf:a1:ed:b3:bd:64:86:11:41: a1:6e:c9:4c:fc:49:6f:de:18:4e:da:2a:8c:6c:2c:c2:fa:68: 17:c0:81:80:af:f0:07:71:28:25:f9:dd:3e:de:24:4d:29:9e: 02:20:fe:3a:30:c0:ca:ef:c3:1a:56:92:e9:de:0c:2b:c6:56: 5b:7b:67:bd:74:93:3e:1f:c4:90:01:8b:98:34:7b:1a:5c:3a: e5:fa:2e:3a:e2:04:35:93:34:16:54:7f:0b:af:4f:46:86:22: 8d:d5:b9:5f:04:44:68:68:95:d5:3b:71:88:4b:90:8f:a3:03: 2f:11:f3:72:96:ff:e2:85:4c:b3:ce:47:a7:e6:52:ce:cb:8f: 95:64:37:77:3e:8c:80:8f:30:4a:2a:59:38:ea:e5:5c:c7:06: cf:00:f7:03 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY2OTcxMTAvBgNVBAUTKERCRTZDN0Y5OTA5MDQ2QUUzNUEyMTVCMEUyMTU0NEFF NTIyMzdFOEEwHhcNMjQxMjMxMjEwOTQ2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0NWQ5YS1mN2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeGnuDiGvsLoUrgWCBtezZZ++R23qckU+F5hLYyNsmFYRdQoS9gMr9s9AW5s qywfpxiF3RnMA4zzgJG9EFRChIIczj9CPCliV4G35I97rUbzwP40VYTBvt6kz7sc 1LsK4SM+tk6Fmf3bsH8awMiQQp8FqYns3nSh5zTGjjd1nGs7GYLVTC68rFgVGuJp 3e61eIkTTNVwfjOigQf/83DcZvt8BxMyHhgqxObNSAsVHbK9EbOqElXh43+BeUnW 0F99GaxccBFwnJnMjyzubkpbP6y7dnEnhwIGKz4mwIkIpOgz0zJTvk+awNdq+ZDT pQH6CSYSEi1XPBDydmlimURNMQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKZKERkG VSQ9djyZ6uwB6PIdiatCMB8GA1UdIwQYMBaAFNvmx/mQkEauNaIVsOIVRK5SI36K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjY5Ny83NTIxREZDMEU4 NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJxNDFvaFd3NGhWRXJsSWpm b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItYkgtWkNRUnE0MW9oV3c0aFZFcmxJamZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEY2OTcvNzUyMURGQzBFODVEMTFFQUIyM0M4Rjg3QzRGOUFFMDIvMUFBNzUwNEE5 MkREMTFFQjlCOUU5OTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJng9QwDQQCAAIwBwMFACQD0kAwDQYJKoZIhvcNAQELBQAD ggEBAFCwayinxnEv81RAkD9QlsKI8JzilYXHzZpKmvGXgu1aPDRzx8ES7Cs8ucvQ MF3n8C4jSC8fFsZOkZ1jBCF4lPyhdNPNRnV9HTVlL1Kn/JvNUF7kxzPn0M6fNJUZ 0PAfdD4NiL+h7bO9ZIYRQaFuyUz8SW/eGE7aKoxsLML6aBfAgYCv8AdxKCX53T7e JE0pngIg/jowwMrvwxpWkuneDCvGVlt7Z710kz4fxJABi5g0expcOuX6LjriBDWT NBZUfwuvT0aGIo3VuV8ERGholdU7cYhLkI+jAy8R83KW/+KFTLPOR6fmUs7Lj5Vk N3c+jICPMEoqWTjq5VzHBs8A9wM= -----END CERTIFICATE-----Generated at Sat Apr 5 22:14:36 2025 by rpki-client