$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/AEF7F896B23511EF99CCD73DC4F9AE02.roa File: AEF7F896B23511EF99CCD73DC4F9AE02.roa (raw, json) Hash identifier: wSoOb2i11MD192v+PAQoqyp2HOpmx/3/4IA2POen7/s= Subject key identifier: 25:3F:96:85:09:8D:DF:6A:AB:46:31:69:0E:74:04:E9:00:03:4E:0D Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0 Certificate serial: 029C Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/AEF7F896B23511EF99CCD73DC4F9AE02.roa Signing time: Wed 04 Dec 2024 11:48:31 +0000 ROA not before: Wed 04 Dec 2024 11:48:31 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 395793 IP address blocks: 103.189.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917315B Validity Not Before: Dec 4 11:48:31 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6750418f-653d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7a:f6:61:10:92:39:ff:3c:09:9c:f7:f4:40: 4a:e6:3d:4d:5f:e3:54:65:07:53:1d:1e:38:13:2c: 31:3d:d7:af:f5:c5:e0:03:c5:7b:61:ed:3b:24:b9: f2:b4:c2:18:9a:03:21:c7:60:98:a6:57:ba:47:5b: 31:c3:e6:15:75:34:21:4b:4d:c3:ab:90:75:b2:3e: 01:95:97:5b:36:f5:41:00:63:ce:8d:3e:fb:bc:92: ec:d9:4c:6f:b8:f7:fd:cc:13:10:f6:0b:db:54:e0: 04:dc:67:38:69:26:c1:c2:1c:b8:c8:f8:69:5d:6e: 56:ef:32:8e:9e:25:e7:a0:bd:c4:3f:e4:35:f4:0e: 3b:52:70:50:a5:b1:ff:14:af:03:b8:64:b3:00:4d: 89:04:51:35:d4:99:e4:08:ee:53:0c:ab:af:02:70: 97:f6:c1:41:b9:7b:d9:ff:51:28:d4:76:9c:5b:ac: 45:79:57:ec:00:4d:88:f7:ce:e1:a9:9d:cc:9b:77: ca:bc:a3:89:6f:04:f9:34:4f:41:6a:7a:15:be:0b: 18:74:77:e0:5f:0a:ae:62:fd:20:b4:86:d3:dc:50: 94:5e:a8:29:21:20:ef:00:40:9f:a5:2e:3f:9c:47: 00:b6:56:2c:96:cf:38:2b:1e:21:cf:d0:de:11:f8: fa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3F:96:85:09:8D:DF:6A:AB:46:31:69:0E:74:04:E9:00:03:4E:0D X509v3 Authority Key Identifier: keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/AEF7F896B23511EF99CCD73DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.190.0/24 Signature Algorithm: sha256WithRSAEncryption b4:f1:b8:0f:86:a7:7d:70:03:8a:c3:02:ec:7d:8d:48:99:59: a9:ad:48:42:43:6f:8a:17:4c:3c:f2:4d:7f:a6:c4:98:1e:0b: 73:7d:3e:ef:31:b6:87:21:8d:36:7d:bc:b4:b4:03:ba:76:90: b6:53:ff:3a:8e:28:1b:27:a1:81:c0:d3:90:a2:8d:e4:be:c3: 59:56:52:80:bc:8b:84:67:10:83:05:9a:b8:45:6e:c4:76:2d: 42:f2:de:2d:75:2c:8b:65:66:ab:36:65:0e:ed:71:59:dd:7b: 1e:97:ff:41:23:b1:f4:52:59:4e:ba:ef:31:a4:f3:64:61:40: 51:40:38:0a:90:32:0f:73:e4:b4:c5:05:89:f0:93:e4:77:f2: 6a:6d:d8:bc:30:4a:82:1d:fc:79:5b:39:9b:b3:64:99:e3:cd: da:24:26:48:12:4e:69:c1:c1:8b:45:17:ee:d1:db:fa:b7:f3: d8:65:81:e8:7d:7e:89:c6:67:ca:72:49:4b:b2:2a:46:ba:2f: bb:f7:c2:33:fd:94:ba:02:ae:52:39:84:90:42:aa:02:dd:ab: 97:c2:8a:26:3f:cf:ca:ba:52:50:50:b6:16:29:9c:99:5c:ca: c4:8b:40:20:3e:6b:9e:78:68:4f:46:e8:15:a4:0a:93:a4:b6: bf:eb:34:fc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxNUIxMTAvBgNVBAUTKDE5NkY5Mjc3MzI5M0U0OTU0QjREOTdBNUQzN0FDODIw QTc0NUMyRTAwHhcNMjQxMjA0MTE0ODMxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwNDE4Zi02NTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3r2YRCSOf88CZz39EBK5j1NX+NUZQdTHR44EywxPdev9cXgA8V7Ye07JLny tMIYmgMhx2CYple6R1sxw+YVdTQhS03Dq5B1sj4BlZdbNvVBAGPOjT77vJLs2Uxv uPf9zBMQ9gvbVOAE3Gc4aSbBwhy4yPhpXW5W7zKOniXnoL3EP+Q19A47UnBQpbH/ FK8DuGSzAE2JBFE11JnkCO5TDKuvAnCX9sFBuXvZ/1Eo1HacW6xFeVfsAE2I987h qZ3Mm3fKvKOJbwT5NE9BanoVvgsYdHfgXwquYv0gtIbT3FCUXqgpISDvAECfpS4/ nEcAtlYsls84Kx4hz9DeEfj63QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCU/loUJ jd9qq0YxaQ50BOkAA04NMB8GA1UdIwQYMBaAFBlvkncyk+SVS02XpdN6yCCnRcLg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE1Qi9ENzM1QTNCNEVE NEIxMUVDQTk1NTM3NzhDNEY5QUUwMi9HVy1TZHpLVDVKVkxUWmVsMDNySUlLZEZ3 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dXLVNkektUNUpWTFRaZWwwM3JJSUtkRnd1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzMxNUIvRDczNUEzQjRFRDRCMTFFQ0E5NTUzNzc4QzRGOUFFMDIvQUVGN0Y4OTZC MjM1MTFFRjk5Q0NENzNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnvb4wDQYJKoZIhvcNAQELBQADggEBALTxuA+Gp31wA4rD Aux9jUiZWamtSEJDb4oXTDzyTX+mxJgeC3N9Pu8xtochjTZ9vLS0A7p2kLZT/zqO KBsnoYHA05CijeS+w1lWUoC8i4RnEIMFmrhFbsR2LULy3i11LItlZqs2ZQ7tcVnd ex6X/0EjsfRSWU667zGk82RhQFFAOAqQMg9z5LTFBYnwk+R38mpt2LwwSoId/Hlb OZuzZJnjzdokJkgSTmnBwYtFF+7R2/q389hlgeh9fonGZ8pySUuyKka6L7v3wjP9 lLoCrlI5hJBCqgLdq5fCiiY/z8q6UlBQthYpnJlcysSLQCA+a554aE9G6BWkCpOk tr/rNPw= -----END CERTIFICATE-----Generated at Sat Apr 5 06:09:03 2025 by rpki-client