$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/998B917421DA11EBAA441F75C4F9AE02.roa File: 998B917421DA11EBAA441F75C4F9AE02.roa (raw, json) Hash identifier: b4w7QgPcZzJXvh0ZqyON2NEy/TPDBAfSWtVCJWQUkJM= Subject key identifier: E8:09:46:00:35:FE:EC:6F:01:73:3E:BA:94:2F:48:0D:68:5D:5B:DE Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0BE5 Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/998B917421DA11EBAA441F75C4F9AE02.roa Signing time: Mon 30 Dec 2024 18:47:27 +0000 ROA not before: Mon 30 Dec 2024 18:47:27 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 138538 IP address blocks: 103.145.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3045 (0xbe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA Validity Not Before: Dec 30 18:47:27 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6772eabf-a848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c1:da:67:9d:85:42:53:5d:f5:bf:98:2a:ca: 7d:9a:39:94:30:d1:b2:bd:e2:56:56:6d:81:9a:52: a5:5a:31:b2:c1:2f:2a:09:11:9c:5d:7d:07:36:ee: e8:72:91:f3:3b:02:e4:37:a2:5b:28:e3:e2:2c:93: 71:c6:41:cd:83:08:39:d6:c2:11:7a:ea:20:e6:d0: 9e:3c:e3:a8:78:cb:ef:cb:7a:9c:b2:80:e0:32:e5: 0d:30:8b:0b:05:37:a2:80:17:4c:36:7b:b7:5b:6f: f1:2d:3a:26:4e:b1:a7:44:91:67:c7:8a:4f:0a:8b: 9c:40:fa:ae:80:40:01:e0:d3:4c:1b:87:70:2c:93: dc:12:d6:2e:09:fc:63:64:4c:14:9b:00:f3:4c:ba: b0:23:77:4f:e9:7f:b4:f2:ce:7c:67:5a:c2:93:24: 2e:a5:c1:1d:9e:be:c2:d8:2b:ac:b9:c1:14:e3:7d: 59:7f:fe:0c:2f:be:de:d7:16:0b:2a:44:ca:af:7f: 11:74:a8:5c:db:33:2e:56:7f:39:d1:e4:b2:db:47: a5:16:fe:13:ea:c6:56:3f:51:1f:7e:eb:2d:be:73: 90:89:83:39:aa:10:59:4c:bc:75:53:59:98:25:9a: 3e:8c:67:4d:2b:18:33:f2:f2:37:9a:2d:78:0d:f0: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:09:46:00:35:FE:EC:6F:01:73:3E:BA:94:2F:48:0D:68:5D:5B:DE X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/998B917421DA11EBAA441F75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.38.0/23 Signature Algorithm: sha256WithRSAEncryption 71:48:4d:ec:60:f5:ad:a7:47:70:e8:70:55:65:d9:7a:fa:56: 01:71:24:78:a3:a0:06:b0:dc:b0:a9:b6:78:86:32:d3:66:b2: 4a:15:7f:3a:f7:7f:01:57:d0:51:86:5d:93:4b:fa:5a:4a:f3: 00:f1:3c:dc:7b:8d:3a:aa:f7:c8:2d:5d:23:22:9f:47:4d:66: 8f:47:b6:fa:0f:6b:45:ed:c7:c8:2c:a0:2e:69:cf:5d:35:04: 35:bc:1f:f9:3c:73:5c:8e:f7:96:4a:8c:45:c7:3e:4b:04:53: 28:23:80:77:dd:87:f3:56:6f:50:7b:e3:a2:1b:78:e2:f7:fb: ff:92:bf:12:71:21:67:22:2b:76:b9:1b:3f:07:ce:a0:fa:95: b2:11:8d:8a:10:c0:9d:93:c2:5e:56:f6:7c:32:48:f4:c3:7f: 3e:94:71:2b:94:2b:ef:30:be:3e:52:94:79:10:2b:36:e7:ac: 25:c7:a8:f5:71:7f:51:29:14:8e:88:3e:3a:f5:93:8a:d1:0e: 4c:87:6c:54:37:c1:5b:b5:01:e5:bc:81:ef:33:36:56:ad:f3: ed:4e:12:56:7c:9a:15:59:6a:14:08:15:1b:6f:a9:dd:05:2e: ad:01:d5:f9:f9:67:6d:ab:fd:37:2d:9a:fe:4f:d6:75:27:85: be:f0:ef:aa -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjQxMjMwMTg0NzI3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzcyZWFiZi1hODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7MHaZ52FQlNd9b+YKsp9mjmUMNGyveJWVm2BmlKlWjGywS8qCRGcXX0HNu7o cpHzOwLkN6JbKOPiLJNxxkHNgwg51sIReuog5tCePOOoeMvvy3qcsoDgMuUNMIsL BTeigBdMNnu3W2/xLTomTrGnRJFnx4pPCoucQPqugEAB4NNMG4dwLJPcEtYuCfxj ZEwUmwDzTLqwI3dP6X+08s58Z1rCkyQupcEdnr7C2CusucEU431Zf/4ML77e1xYL KkTKr38RdKhc2zMuVn850eSy20elFv4T6sZWP1EffustvnOQiYM5qhBZTLx1U1mY JZo+jGdNKxgz8vI3mi14DfDfkwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOgJRgA1 /uxvAXM+upQvSA1oXVveMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJGREEvNjgxMjdFMjAwRjRCMTFFQUFEQTM3OTc3QzRGOUFFMDIvOTk4QjkxNzQy MURBMTFFQkFBNDQxRjc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnkSYwDQYJKoZIhvcNAQELBQADggEBAHFITexg9a2nR3Do cFVl2Xr6VgFxJHijoAaw3LCptniGMtNmskoVfzr3fwFX0FGGXZNL+lpK8wDxPNx7 jTqq98gtXSMin0dNZo9HtvoPa0Xtx8gsoC5pz101BDW8H/k8c1yO95ZKjEXHPksE UygjgHfdh/NWb1B746IbeOL3+/+SvxJxIWciK3a5Gz8HzqD6lbIRjYoQwJ2Twl5W 9nwySPTDfz6UcSuUK+8wvj5SlHkQKzbnrCXHqPVxf1EpFI6IPjr1k4rRDkyHbFQ3 wVu1AeW8ge8zNlat8+1OElZ8mhVZahQIFRtvqd0FLq0B1fn5Z22r/Tctmv5P1nUn hb7w76o= -----END CERTIFICATE-----Generated at Sun Apr 6 01:51:59 2025 by rpki-client