$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/315D1630DDD911EFBAA4D977C4F9AE02.roa File: 315D1630DDD911EFBAA4D977C4F9AE02.roa (raw, json) Hash identifier: W4Wbfb9YnYtu8VIOO6jpXdYrtPZMihSeu+gvyUB2w5I= Subject key identifier: 30:CA:6F:E5:10:32:3A:9D:20:ED:50:A5:64:96:1A:2F:13:4E:E8:1C Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Certificate serial: 09E4 Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/315D1630DDD911EFBAA4D977C4F9AE02.roa Signing time: Wed 29 Jan 2025 00:37:18 +0000 ROA not before: Wed 29 Jan 2025 00:37:18 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 24233 IP address blocks: 103.1.52.0/22 maxlen: 22 116.255.42.0/24 maxlen: 24 123.176.118.0/24 maxlen: 24 125.253.9.0/24 maxlen: 24 125.253.19.0/24 maxlen: 24 125.253.58.0/24 maxlen: 24 125.253.59.0/24 maxlen: 24 203.132.68.0/23 maxlen: 23 203.132.76.0/22 maxlen: 22 203.132.80.0/21 maxlen: 21 203.132.82.0/24 maxlen: 24 203.212.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 20:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2532 (0x9e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E475 Validity Not Before: Jan 29 00:37:18 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6799783e-12c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:da:92:02:77:53:6e:5d:05:59:e3:16:d4:31: 7a:af:6a:39:af:28:a5:8a:8e:bf:9e:a4:5f:ab:f5: 86:f9:c1:08:a1:a6:b6:a9:84:06:ae:dd:cd:43:f3: 67:b0:9e:c8:1a:0c:04:c3:46:d4:50:09:00:ae:11: fc:f3:1a:54:2b:16:96:ca:9a:39:e7:fe:78:01:bc: 61:59:36:c7:22:fa:a5:4f:79:8a:21:ee:40:96:56: 67:29:20:cd:b2:e6:38:e6:c2:d8:44:6d:ed:53:03: 2f:73:3d:aa:81:da:16:aa:d0:d1:36:0c:ec:d4:ad: 0f:51:d8:b6:87:96:c7:28:d4:e0:52:e8:78:fe:52: 60:ab:8b:69:90:e8:c5:ed:90:e2:b2:b7:da:e7:2d: 52:e2:af:9c:d2:b6:f4:db:62:dc:47:c4:32:68:21: 62:bb:4e:10:73:8c:d1:d9:c7:56:33:db:1d:cb:ae: 94:30:2b:2d:ad:88:28:da:85:a2:fe:2c:7d:02:75: c1:f6:04:ae:1b:17:7c:91:96:20:32:96:bc:0e:69: b2:ba:77:a8:c4:a5:47:fb:04:97:7e:3f:f9:51:c4: e7:3a:41:1b:5f:45:40:0d:67:c0:10:d8:0d:71:40: f1:d5:dd:d3:8b:8e:af:2e:ce:9e:f1:35:0d:71:d8: e1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CA:6F:E5:10:32:3A:9D:20:ED:50:A5:64:96:1A:2F:13:4E:E8:1C X509v3 Authority Key Identifier: keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/315D1630DDD911EFBAA4D977C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.1.52.0/22 116.255.42.0/24 123.176.118.0/24 125.253.9.0/24 125.253.19.0/24 125.253.58.0/23 203.132.68.0/23 203.132.76.0-203.132.87.255 203.212.16.0/21 Signature Algorithm: sha256WithRSAEncryption 98:02:a8:06:95:24:a6:40:71:2d:24:30:f4:1e:73:d2:03:21: 0b:fa:2e:eb:ec:80:01:f5:a6:b1:3e:14:2d:f2:48:66:d8:28: e0:d9:a7:91:48:2e:45:af:8c:fb:9c:22:06:8e:7a:95:00:f0: e8:7a:5d:58:5e:88:b0:bf:08:9e:72:24:26:bd:8d:08:19:a6: 0c:69:f3:89:c4:9c:4f:16:2f:c4:ae:1d:69:20:3b:bb:2a:2d: 78:51:27:b0:a2:8f:ab:8e:cc:93:8b:26:c8:fd:dd:26:ed:ee: 0e:07:12:a1:f7:1f:05:74:eb:25:54:df:d1:92:97:ea:d8:69: 92:2e:1d:2d:ad:a0:db:ba:70:63:0d:a6:a1:fb:8d:62:33:16: f8:19:55:88:57:22:aa:6a:b0:ce:59:c1:77:9c:ee:45:90:1d: ee:8c:4b:8c:7b:4b:b5:29:fe:f0:6e:52:95:96:24:d8:e8:21: 71:fe:d7:94:af:7d:6b:98:13:cf:1e:be:31:84:6e:60:5c:de: 59:92:ad:03:df:a1:62:98:92:67:53:9d:7a:6c:37:5c:eb:a4: 14:9c:d7:7c:6c:27:0f:52:7b:a7:7b:ed:ec:a2:ea:97:5d:d2: a8:89:0b:08:28:7c:d2:c1:e8:39:f6:9b:29:f9:b7:03:93:43: b0:bc:ca:74 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgICCeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0 QkM3OTczQjEwHhcNMjUwMTI5MDAzNzE4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk5NzgzZS0xMmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydqSAndTbl0FWeMW1DF6r2o5ryilio6/nqRfq/WG+cEIoaa2qYQGrt3NQ/Nn sJ7IGgwEw0bUUAkArhH88xpUKxaWypo55/54AbxhWTbHIvqlT3mKIe5AllZnKSDN suY45sLYRG3tUwMvcz2qgdoWqtDRNgzs1K0PUdi2h5bHKNTgUuh4/lJgq4tpkOjF 7ZDisrfa5y1S4q+c0rb022LcR8QyaCFiu04Qc4zR2cdWM9sdy66UMCstrYgo2oWi /ix9AnXB9gSuGxd8kZYgMpa8DmmyuneoxKVH+wSXfj/5UcTnOkEbX0VADWfAENgN cUDx1d3Ti46vLs6e8TUNcdjhEwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFDDKb+UQ MjqdIO1QpWSWGi8TTugcMB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUU0NzUvREE4M0FBN0FDQTExMTFFQUE0NzlDNzM0QzRGOUFFMDIvMzE1RDE2MzBE REQ5MTFFRkJBQTREOTc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVwYIKwYBBQUHAQcBAf8E SDBGMEQEAgABMD4DBAJnATQDBAB0/yoDBAB7sHYDBAB9/QkDBAB9/RMDBAF9/ToD BAHLhEQwDAMEAsuETAMEA8uEUAMEA8vUEDANBgkqhkiG9w0BAQsFAAOCAQEAmAKo BpUkpkBxLSQw9B5z0gMhC/ou6+yAAfWmsT4ULfJIZtgo4NmnkUguRa+M+5wiBo56 lQDw6HpdWF6IsL8InnIkJr2NCBmmDGnzicScTxYvxK4daSA7uyoteFEnsKKPq47M k4smyP3dJu3uDgcSofcfBXTrJVTf0ZKX6thpki4dLa2g27pwYw2mofuNYjMW+BlV iFciqmqwzlnBd5zuRZAd7oxLjHtLtSn+8G5SlZYk2Oghcf7XlK99a5gTzx6+MYRu YFzeWZKtA9+hYpiSZ1Odemw3XOukFJzXfGwnD1J7p3vt7KLql13SqIkLCCh80sHo OfabKfm3A5NDsLzKdA== -----END CERTIFICATE-----Generated at Tue Apr 8 20:22:26 2025 by rpki-client