$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E5A47506DFCE11EFBC4CD631C4F9AE02.roa File: E5A47506DFCE11EFBC4CD631C4F9AE02.roa (raw, json) Hash identifier: oAbHn+ZIVueY57m3XmFrOLBMGmy5b8O5gqzUSLNcsVE= Subject key identifier: 8B:9F:91:79:70:9B:58:98:2E:B9:2E:B9:DA:1B:B5:35:38:D1:5E:8A Certificate issuer: /CN=A9157DA0/serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44 Certificate serial: 3452 Authority key identifier: 88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E5A47506DFCE11EFBC4CD631C4F9AE02.roa Signing time: Fri 31 Jan 2025 12:28:38 +0000 ROA not before: Fri 31 Jan 2025 12:28:38 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 45193 IP address blocks: 103.39.252.0/22 maxlen: 22 119.252.123.0/24 maxlen: 24 119.252.124.0/23 maxlen: 23 119.252.124.0/24 maxlen: 24 119.252.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13394 (0x3452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DA0 Validity Not Before: Jan 31 12:28:38 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=679cc1f6-94a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ba:3c:6d:fb:f1:d9:1d:fb:04:b7:aa:33:87: b2:68:5a:ce:c7:bb:50:ae:98:fc:55:0b:2a:9d:66: e2:4d:89:dc:42:9f:45:ab:28:0c:32:d5:5e:24:49: 28:62:48:4a:6e:44:6c:99:ff:f1:cd:91:e1:0a:d8: c9:36:04:9c:54:38:f3:62:73:13:52:dc:5b:bb:6c: d0:bc:dd:87:73:ca:f7:ff:75:6e:bd:bb:15:2f:ba: 67:e9:52:46:31:bf:d5:72:35:67:f6:f2:c9:32:62: 92:9d:39:c4:e7:0b:28:73:fb:f4:9e:23:5f:18:c7: a0:02:14:6c:b0:68:59:49:07:3e:82:4b:fa:cc:a3: 73:de:a4:3f:3f:4e:53:43:e8:5a:fe:86:5a:4f:4f: 44:a2:90:e4:4b:88:e3:2b:02:3f:63:68:d5:bd:90: 68:79:52:2f:54:59:98:59:04:3b:5e:8e:b4:3d:06: ec:44:6f:17:d3:87:2f:bd:77:19:20:70:9c:13:9d: 12:44:c7:d1:21:3b:50:95:19:ab:c0:8b:e3:e6:e5: 32:06:80:2e:82:58:c9:bc:16:e7:f9:1e:6e:2b:33: f1:ed:a0:21:79:10:dc:c1:08:56:c8:80:13:d0:0f: 5e:cb:9b:95:a6:89:3a:e1:41:51:f8:82:7b:e3:4f: d6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9F:91:79:70:9B:58:98:2E:B9:2E:B9:DA:1B:B5:35:38:D1:5E:8A X509v3 Authority Key Identifier: keyid:88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E5A47506DFCE11EFBC4CD631C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.39.252.0/22 119.252.123.0-119.252.125.255 Signature Algorithm: sha256WithRSAEncryption 49:3f:d2:aa:0a:6f:52:fb:d7:1e:37:20:72:99:a4:9b:86:6e: ab:3b:be:cb:fb:d3:72:73:b3:f5:ec:4f:25:0e:ba:e5:96:60: 86:01:aa:16:20:73:14:51:bf:5a:91:ae:3d:f5:83:10:4c:0c: d7:54:69:d8:c7:a4:f3:2c:25:68:bd:c3:bf:86:56:46:5a:0f: 8d:f5:12:dd:72:33:35:46:84:b1:5b:4b:7c:1b:89:4b:93:c4: 8f:71:62:cf:94:16:75:33:c6:92:ca:fd:2b:bd:9c:f4:62:36: 82:a7:02:ba:8e:ad:d8:7b:e0:15:1b:d5:c9:a9:41:8e:a4:67: 7d:e7:31:d6:50:06:07:e5:6d:63:d0:41:2a:61:f0:2f:86:60: f1:66:bc:ed:62:32:f0:92:99:13:72:4c:5d:7f:7e:82:f5:55: 25:26:03:e8:54:87:f6:78:36:6a:bb:b1:25:0c:f1:b8:8b:eb: 17:d3:65:38:45:e9:16:f0:08:ec:1e:bc:52:10:0b:97:79:cd: 85:61:82:3a:5f:73:fa:44:96:ad:20:a6:d7:d7:c3:8c:8f:28: 3c:a4:f0:54:60:f2:80:bf:71:44:89:35:c7:e6:6b:ec:fa:24: a6:93:69:d9:0a:16:a9:95:47:d9:3c:19:98:2e:10:a3:1e:7e: db:00:a1:51 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICNFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQTAxMTAvBgNVBAUTKDg4ODdDRjZDRjUxMDJGMEZCNzEzRjRDNEExQkRFMzg5 NDgxRjFDNDQwHhcNMjUwMTMxMTIyODM4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzljYzFmNi05NGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA97o8bfvx2R37BLeqM4eyaFrOx7tQrpj8VQsqnWbiTYncQp9FqygMMtVeJEko YkhKbkRsmf/xzZHhCtjJNgScVDjzYnMTUtxbu2zQvN2Hc8r3/3VuvbsVL7pn6VJG Mb/VcjVn9vLJMmKSnTnE5wsoc/v0niNfGMegAhRssGhZSQc+gkv6zKNz3qQ/P05T Q+ha/oZaT09EopDkS4jjKwI/Y2jVvZBoeVIvVFmYWQQ7Xo60PQbsRG8X04cvvXcZ IHCcE50SRMfRITtQlRmrwIvj5uUyBoAugljJvBbn+R5uKzPx7aAheRDcwQhWyIAT 0A9ey5uVpok64UFR+IJ740/WTQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFIufkXlw m1iYLrkuudobtTU40V6KMB8GA1UdIwQYMBaAFIiHz2z1EC8PtxP0xKG944lIHxxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBMC8zQTBEOTMxMDFE OEMxMUUyOEVGRjU3RTcwOEIwMkNEMi9pSWZQYlBVUUx3LTNFX1RFb2IzamlVZ2ZI RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lJZlBiUFVRTHctM0VfVEVvYjNqaVVnZkhFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQTAvM0EwRDkzMTAxRDhDMTFFMjhFRkY1N0U3MDhCMDJDRDIvRTVBNDc1MDZE RkNFMTFFRkJDNENENjMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAJnJ/wwDAMEAHf8ewMEAXf8fDANBgkqhkiG9w0BAQsFAAOC AQEAST/SqgpvUvvXHjcgcpmkm4Zuqzu+y/vTcnOz9exPJQ665ZZghgGqFiBzFFG/ WpGuPfWDEEwM11Rp2Mek8ywlaL3Dv4ZWRloPjfUS3XIzNUaEsVtLfBuJS5PEj3Fi z5QWdTPGksr9K72c9GI2gqcCuo6t2HvgFRvVyalBjqRnfecx1lAGB+VtY9BBKmHw L4Zg8Wa87WIy8JKZE3JMXX9+gvVVJSYD6FSH9ng2aruxJQzxuIvrF9NlOEXpFvAI 7B68UhALl3nNhWGCOl9z+kSWrSCm19fDjI8oPKTwVGDygL9xRIk1x+Zr7PokppNp 2QoWqZVH2TwZmC4Qox5+2wChUQ== -----END CERTIFICATE-----Generated at Sat Apr 5 03:58:16 2025 by rpki-client