$ rpki-client -vvf rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/1F82BB9C0B9F11F0A5D71B16C4F9AE02.roa File: 1F82BB9C0B9F11F0A5D71B16C4F9AE02.roa (raw, json) Hash identifier: 3DPsYteikwLPPbMMWFK/9fc92rvU3d3QIJer699Jw28= Subject key identifier: 04:2F:30:5A:07:CB:FB:39:DD:1C:A3:A0:7A:D8:F2:E4:5C:66:6F:A5 Certificate issuer: /CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Certificate serial: 0650 Authority key identifier: E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/1F82BB9C0B9F11F0A5D71B16C4F9AE02.roa Signing time: Fri 28 Mar 2025 06:37:30 +0000 ROA not before: Fri 28 Mar 2025 06:37:30 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 138970 IP address blocks: 103.137.209.0/24 maxlen: 24 2401:3be0::/32 maxlen: 32 2401:3be0:1000::/36 maxlen: 36 2401:3be0:2000::/36 maxlen: 36 2401:3be0:3000::/36 maxlen: 36 2401:3be0:4000::/36 maxlen: 36 2401:3be0:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1616 (0x650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C15F Validity Not Before: Mar 28 06:37:30 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67e643aa-1c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:30:d0:67:34:cc:14:7a:ca:09:9d:79:89:3b: 0d:14:04:c1:0c:e0:1d:be:af:70:c8:10:ff:d1:f8: 41:54:c2:b8:6a:43:65:7c:83:d6:cf:7b:44:41:1f: ec:4a:9f:a1:ea:30:11:09:1e:8c:87:cb:52:f6:49: c9:0b:df:b5:78:bb:97:88:2a:30:14:46:e8:82:3d: ed:c0:93:5b:f3:b9:5b:92:c0:7d:f7:65:bd:0f:5f: 61:eb:61:4a:c3:62:af:25:e0:d2:a8:31:60:79:ee: 8d:a8:13:00:ce:59:24:fa:fd:2a:51:27:bf:6d:93: d0:26:14:f3:97:2e:91:60:98:2a:0f:b5:e8:8b:37: a9:57:29:00:64:1f:cd:6c:8e:3c:fe:63:68:95:50: 44:23:0c:32:2e:46:96:e1:0d:30:ac:11:87:5f:ee: 43:cc:ef:35:69:e4:4b:2b:a8:f5:e8:ba:93:90:06: c9:15:31:2f:f8:b1:b7:d9:6b:a9:97:1e:57:cc:71: 34:bd:4e:6d:8a:97:62:e6:e3:48:f7:d5:f2:e2:05: d9:9d:d9:f8:26:2c:64:cf:72:c2:22:7b:bc:47:03: 4a:53:31:dd:5f:89:e2:90:4e:05:07:fb:e7:c0:d9: 03:8c:32:6c:89:a6:8f:7a:22:02:e0:a1:4a:5a:e3: ba:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2F:30:5A:07:CB:FB:39:DD:1C:A3:A0:7A:D8:F2:E4:5C:66:6F:A5 X509v3 Authority Key Identifier: keyid:E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/1F82BB9C0B9F11F0A5D71B16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.209.0/24 IPv6: 2401:3be0::/32 Signature Algorithm: sha256WithRSAEncryption b2:2f:63:cb:5d:d7:61:92:f2:e7:ee:d1:03:30:4c:23:ca:82: a2:2b:58:9a:0a:38:bd:12:db:19:c2:42:d8:68:95:94:94:53: 25:ba:82:4d:4e:6e:96:5d:b4:ad:8c:ca:98:f1:05:48:c0:12: d9:a5:c3:c4:e6:d2:90:32:3d:f0:24:19:d3:7a:c2:3e:cf:6b: a8:66:ca:34:db:ad:ea:59:e1:b5:60:1b:36:fc:a2:31:6e:bf: a2:36:66:2f:86:22:13:c7:2f:21:66:cc:e8:c6:30:8e:3d:de: 56:76:68:bc:42:99:b3:57:57:c0:6f:58:f2:3a:85:5b:c5:46: 47:9e:0d:ee:41:8f:cd:67:70:f6:7e:08:1f:ba:3a:6d:73:f1: a9:ac:51:19:41:89:33:90:4a:e2:34:e9:7f:81:ee:ab:dc:7b: b4:30:08:66:1c:c7:72:9f:9d:24:8d:91:8e:4f:c4:ea:0b:6a: 9e:ff:e2:d3:76:c8:e3:64:29:9f:59:87:2c:05:d0:94:38:8e: 03:31:91:08:88:00:28:c9:b3:b4:23:3f:85:b1:90:ae:d9:01: 01:08:d9:d0:be:d6:e6:00:19:7a:2a:de:90:97:93:d9:c0:05: a4:93:90:2a:b3:9b:5a:2c:00:5c:14:43:00:95:73:0f:e9:21: bb:05:a1:07 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxNUYxMTAvBgNVBAUTKEU2OTlEQkNERTA5QzBBQTVGOEU2NkFFMEE3MzI1NERD QTA1RDg1RDQwHhcNMjUwMzI4MDYzNzMwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2U2NDNhYS0xYzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DDQZzTMFHrKCZ15iTsNFATBDOAdvq9wyBD/0fhBVMK4akNlfIPWz3tEQR/s Sp+h6jARCR6Mh8tS9knJC9+1eLuXiCowFEbogj3twJNb87lbksB992W9D19h62FK w2KvJeDSqDFgee6NqBMAzlkk+v0qUSe/bZPQJhTzly6RYJgqD7XoizepVykAZB/N bI48/mNolVBEIwwyLkaW4Q0wrBGHX+5DzO81aeRLK6j16LqTkAbJFTEv+LG32Wup lx5XzHE0vU5tipdi5uNI99Xy4gXZndn4Jixkz3LCInu8RwNKUzHdX4nikE4FB/vn wNkDjDJsiaaPeiIC4KFKWuO6BQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAQvMFoH y/s53RyjoHrY8uRcZm+lMB8GA1UdIwQYMBaAFOaZ283gnAql+OZq4KcyVNygXYXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzE1Ri85MzI5QjBCNjhD NjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0NxWDQ1bXJncHpKVTNLQmRo ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwbmJ6ZUNjQ3FYNDVtcmdwekpVM0tCZGhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUMxNUYvOTMyOUIwQjY4QzY3MTFFQkI3RUU4NjNFQzRGOUFFMDIvMUY4MkJCOUMw QjlGMTFGMEE1RDcxQjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABnidEwDQQCAAIwBwMFACQBO+AwDQYJKoZIhvcNAQELBQAD ggEBALIvY8td12GS8ufu0QMwTCPKgqIrWJoKOL0S2xnCQtholZSUUyW6gk1ObpZd tK2MypjxBUjAEtmlw8Tm0pAyPfAkGdN6wj7Pa6hmyjTbrepZ4bVgGzb8ojFuv6I2 Zi+GIhPHLyFmzOjGMI493lZ2aLxCmbNXV8BvWPI6hVvFRkeeDe5Bj81ncPZ+CB+6 Om1z8amsURlBiTOQSuI06X+B7qvce7QwCGYcx3KfnSSNkY5PxOoLap7/4tN2yONk KZ9ZhywF0JQ4jgMxkQiIACjJs7QjP4WxkK7ZAQEI2dC+1uYAGXoq3pCXk9nABaST kCqzm1osAFwUQwCVcw/pIbsFoQc= -----END CERTIFICATE-----Generated at Sat Apr 5 22:50:44 2025 by rpki-client