$ rpki-client -vvf rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/BEB34436FE3211EFAA1D9A4EC4F9AE02.roa File: BEB34436FE3211EFAA1D9A4EC4F9AE02.roa (raw, json) Hash identifier: yFDpBLHsX38bp2JcWh75H9eK/2yaSCGu63FKHuPPshA= Subject key identifier: 8C:46:21:1C:40:71:D3:1D:04:90:C9:7E:E6:C3:E3:6F:E5:F0:1D:A8 Certificate issuer: /CN=A91524AF/serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A Certificate serial: 0460 Authority key identifier: 5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/BEB34436FE3211EFAA1D9A4EC4F9AE02.roa Signing time: Tue 11 Mar 2025 04:39:40 +0000 ROA not before: Tue 11 Mar 2025 04:39:40 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 9230 IP address blocks: 103.177.72.0/24 maxlen: 24 103.177.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91524AF Validity Not Before: Mar 11 04:39:40 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67cfbe8c-c631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9a:12:e7:de:46:ac:c0:81:98:d9:ef:93:4e: b5:84:1d:10:e4:35:d7:db:c7:e0:bc:5f:74:78:27: 2e:7d:6c:56:bd:c1:82:12:c2:c0:ed:12:68:02:f7: a1:cb:f5:8c:bd:1b:67:8d:1f:70:c9:b2:03:cc:72: bd:32:46:9a:a7:e2:e8:09:9e:24:77:cb:15:6d:6d: 2c:74:0f:9c:56:3d:ad:0b:83:e2:6c:26:a0:1a:fb: 73:90:d2:dd:3d:4f:5d:d2:a7:46:ba:21:ae:61:65: 8e:cd:a6:55:31:15:a4:8e:40:20:c2:f6:e9:05:28: eb:43:21:21:5d:40:6a:ce:4f:71:6d:1b:67:76:a4: e1:6e:dc:15:02:9d:67:f9:cf:a8:aa:46:38:15:e2: d3:d1:94:e1:bc:15:b0:5a:45:33:aa:d6:7c:a4:f9: 81:5e:5f:3b:14:69:d1:83:4a:c6:65:2f:11:ca:ab: 3b:fa:7a:64:4a:e7:29:d7:48:3e:fb:68:04:29:cb: 72:dc:ec:5c:88:fb:9b:1d:2b:c7:5d:55:88:c3:13: 9d:5e:cc:e7:dd:15:7a:77:c2:ee:39:d7:8e:39:4b: 4a:da:fb:ff:73:77:21:92:cb:ea:76:f5:24:d1:e4: 83:06:b2:48:68:4a:b4:6e:e0:b1:f7:36:f4:c4:62: ce:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:46:21:1C:40:71:D3:1D:04:90:C9:7E:E6:C3:E3:6F:E5:F0:1D:A8 X509v3 Authority Key Identifier: keyid:5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/BEB34436FE3211EFAA1D9A4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.72.0/23 Signature Algorithm: sha256WithRSAEncryption 14:c0:c8:bf:61:a2:19:ea:49:4e:3b:ac:57:15:f6:e4:c5:ea: d7:21:c8:e8:7f:a1:93:d6:e5:60:f4:35:94:36:d0:66:0e:a8: 39:1b:4c:08:7d:23:c1:64:16:f6:29:ef:03:c0:91:f8:18:a4: ea:5b:e6:10:a4:8a:4f:6c:bc:be:3a:89:f3:3b:19:e1:d7:a6: de:94:fd:33:de:ac:43:a9:39:02:5f:45:3e:bc:ed:02:22:b3: df:a6:c5:ce:07:65:6e:f6:7e:0c:7f:95:79:ad:5f:d9:e3:d2: 4d:05:f3:b2:a0:06:38:f4:8e:9d:16:f4:84:95:54:b8:84:13: a3:9b:46:8f:0e:29:f0:5b:e6:49:4b:3d:01:3c:5d:f1:9a:7f: 02:73:1d:db:2b:48:dd:8c:be:c0:cb:00:72:7c:c2:e4:c7:66: 62:9a:72:bd:45:9b:f1:3d:58:35:ea:23:ef:34:be:ef:f9:bd: 05:f6:8f:77:e9:04:1e:31:19:04:18:ee:c1:a1:4c:d9:f1:cd: 7a:76:6f:5b:6a:7a:44:b7:3e:bc:64:bf:85:45:7f:e4:38:a2: 51:4c:ed:5d:e7:90:e0:9e:8c:3e:9e:25:45:30:40:2a:e5:e6: 39:64:64:8d:84:a9:96:ad:43:a6:51:90:49:4b:d8:52:96:a7: a0:76:47:7e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI0QUYxMTAvBgNVBAUTKDVDMzE1REFGQzUzQTgyRkRENjJDNzIwMDVDNzY0NDMz M0JDMDI5N0EwHhcNMjUwMzExMDQzOTQwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NmYmU4Yy1jNjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6JoS595GrMCBmNnvk061hB0Q5DXX28fgvF90eCcufWxWvcGCEsLA7RJoAveh y/WMvRtnjR9wybIDzHK9Mkaap+LoCZ4kd8sVbW0sdA+cVj2tC4PibCagGvtzkNLd PU9d0qdGuiGuYWWOzaZVMRWkjkAgwvbpBSjrQyEhXUBqzk9xbRtndqThbtwVAp1n +c+oqkY4FeLT0ZThvBWwWkUzqtZ8pPmBXl87FGnRg0rGZS8Ryqs7+npkSucp10g+ +2gEKcty3OxciPubHSvHXVWIwxOdXszn3RV6d8LuOdeOOUtK2vv/c3chksvqdvUk 0eSDBrJIaEq0buCx9zb0xGLOUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIxGIRxA cdMdBJDJfubD42/l8B2oMB8GA1UdIwQYMBaAFFwxXa/FOoL91ixyAFx2RDM7wCl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjRBRi83NkM3RjBGNDUx RjYxMUVDOUUzQzZDM0FDNEY5QUUwMi9YREZkcjhVNmd2M1dMSElBWEhaRU16dkFL WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hERmRyOFU2Z3YzV0xISUFYSFpFTXp2QUtYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTI0QUYvNzZDN0YwRjQ1MUY2MTFFQzlFM0M2QzNBQzRGOUFFMDIvQkVCMzQ0MzZG RTMyMTFFRkFBMUQ5QTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnsUgwDQYJKoZIhvcNAQELBQADggEBABTAyL9hohnqSU47 rFcV9uTF6tchyOh/oZPW5WD0NZQ20GYOqDkbTAh9I8FkFvYp7wPAkfgYpOpb5hCk ik9svL46ifM7GeHXpt6U/TPerEOpOQJfRT687QIis9+mxc4HZW72fgx/lXmtX9nj 0k0F87KgBjj0jp0W9ISVVLiEE6ObRo8OKfBb5klLPQE8XfGafwJzHdsrSN2MvsDL AHJ8wuTHZmKacr1Fm/E9WDXqI+80vu/5vQX2j3fpBB4xGQQY7sGhTNnxzXp2b1tq ekS3Prxkv4VFf+Q4olFM7V3nkOCejD6eJUUwQCrl5jlkZI2EqZatQ6ZRkElL2FKW p6B2R34= -----END CERTIFICATE-----Generated at Sat Apr 5 03:52:10 2025 by rpki-client