$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/56E0B60AFC1F11EF8049634BC4F9AE02.roa File: 56E0B60AFC1F11EF8049634BC4F9AE02.roa (raw, json) Hash identifier: Vwa1QnVUdhPb9wj4URFbd8BHmNoWSD7gHW3FB9U0NUI= Subject key identifier: 4F:AF:40:34:34:CD:98:B8:A0:43:1F:8F:A1:FF:AC:0B:4F:5B:09:70 Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5 Certificate serial: 057F Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/56E0B60AFC1F11EF8049634BC4F9AE02.roa Signing time: Sat 08 Mar 2025 20:52:48 +0000 ROA not before: Sat 08 Mar 2025 20:52:48 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 40065 IP address blocks: 103.172.134.0/24 maxlen: 24 103.172.135.0/24 maxlen: 24 2407:d340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917419E Validity Not Before: Mar 8 20:52:48 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67ccae20-11ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:84:ed:da:ff:7d:1f:b0:25:b1:6b:d3:02: 7b:58:d3:5d:1a:0f:59:8a:84:79:05:3d:1e:53:42: c3:ec:2f:d5:d7:cf:71:17:fe:b9:2e:b0:85:70:76: 1c:9a:8f:52:af:0b:68:5a:32:e8:e8:33:6e:a7:04: 3e:9d:5b:7f:79:70:f6:b4:4d:00:0d:3c:9e:27:c1: 89:f8:21:7d:d3:7e:6d:ed:e3:77:59:3b:67:4c:49: d5:23:00:d4:91:6a:3e:d6:64:e6:41:eb:f2:31:48: d0:92:a2:c2:df:9a:8e:03:a8:2a:90:e6:9c:ae:cb: bf:be:12:34:60:47:d6:da:a0:88:1f:59:b5:d0:ba: 42:89:14:1e:6e:dc:3a:a5:90:6e:90:92:01:bf:3c: a8:f7:d8:96:93:67:c9:f5:1d:98:be:6b:37:aa:0f: d2:5f:5c:69:91:07:5b:aa:1d:44:18:6b:39:0b:9e: 66:30:dd:ea:9d:98:21:85:6a:fa:1d:81:07:58:5e: 6d:cd:a2:c2:ab:16:33:14:31:ff:3d:a3:e9:16:e7: cc:a4:55:a0:66:d4:4d:eb:c5:44:4e:59:45:00:6f: b1:84:13:40:b9:6f:0a:50:fd:80:21:e6:6e:f8:d6: 32:1d:dd:33:92:03:29:ba:c1:e2:47:f0:1c:84:c4: a7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AF:40:34:34:CD:98:B8:A0:43:1F:8F:A1:FF:AC:0B:4F:5B:09:70 X509v3 Authority Key Identifier: keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/56E0B60AFC1F11EF8049634BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.134.0/23 IPv6: 2407:d340::/32 Signature Algorithm: sha256WithRSAEncryption c0:a9:9a:a7:ac:65:47:4c:ca:c9:da:57:c7:81:0d:0d:0a:5c: 8c:7a:ac:47:c3:5c:0d:92:23:96:84:00:6f:00:54:37:fb:11: 5e:1c:bb:d2:2c:bb:3f:81:09:b4:7d:0c:1e:66:fa:7d:92:e8: 90:73:5e:11:81:5a:f7:04:72:4b:c9:7c:19:66:5b:e9:56:5d: 70:ae:73:93:ed:3c:99:a2:f6:0c:6a:b9:52:57:71:d3:5e:3d: be:01:5e:5e:68:bc:e2:89:29:4e:c5:f0:6d:f8:8b:99:91:f9: 12:6f:8a:6f:ed:4b:c2:f6:25:87:f9:ed:41:c1:d7:61:e0:7d: 39:91:24:91:f4:6b:b7:b9:cf:a1:a4:7e:40:65:16:d3:72:4c: 74:44:38:33:7a:ec:bd:8d:e6:93:f4:2b:8f:66:ac:cb:d3:b7: 11:26:9f:14:ac:9e:96:48:8b:39:c2:23:77:12:e0:ac:e6:e7: b1:a5:70:86:67:bc:2a:91:ec:49:a8:bc:7a:c0:4b:f9:d9:b9: 18:4b:98:4e:53:01:ad:83:50:9d:ce:42:81:04:40:9d:b3:81: 1b:86:a8:42:c3:fb:e2:98:7d:7a:c9:f9:16:9f:80:d4:c5:fa: dc:09:06:6b:13:7c:72:c2:ae:bd:48:21:ec:0e:14:67:82:65: 78:ce:08:98 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxOUUxMTAvBgNVBAUTKDE0NDU0ODlGREQ1MEFBNDRBQzFEMkEzQzNBMTY2RTA2 QzY2MkFGRDUwHhcNMjUwMzA4MjA1MjQ4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NjYWUyMC0xMWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0eE7dr/fR+wJbFr0wJ7WNNdGg9ZioR5BT0eU0LD7C/V189xF/65LrCFcHYc mo9SrwtoWjLo6DNupwQ+nVt/eXD2tE0ADTyeJ8GJ+CF9035t7eN3WTtnTEnVIwDU kWo+1mTmQevyMUjQkqLC35qOA6gqkOacrsu/vhI0YEfW2qCIH1m10LpCiRQebtw6 pZBukJIBvzyo99iWk2fJ9R2Yvms3qg/SX1xpkQdbqh1EGGs5C55mMN3qnZghhWr6 HYEHWF5tzaLCqxYzFDH/PaPpFufMpFWgZtRN68VETllFAG+xhBNAuW8KUP2AIeZu +NYyHd0zkgMpusHiR/AchMSnGwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFE+vQDQ0 zZi4oEMfj6H/rAtPWwlwMB8GA1UdIwQYMBaAFBRFSJ/dUKpErB0qPDoWbgbGYq/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE5RS85ODFFRTk4NjBC MjExMUVDODQyMTQ5NERDNEY5QUUwMi9GRVZJbjkxUXFrU3NIU284T2hadUJzWmly OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZFVkluOTFRcWtTc0hTbzhPaFp1QnNaaXI5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzQxOUUvOTgxRUU5ODYwQjIxMTFFQzg0MjE0OTREQzRGOUFFMDIvNTZFMEI2MEFG QzFGMTFFRjgwNDk2MzRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnrIYwDQQCAAIwBwMFACQH00AwDQYJKoZIhvcNAQELBQAD ggEBAMCpmqesZUdMysnaV8eBDQ0KXIx6rEfDXA2SI5aEAG8AVDf7EV4cu9Isuz+B CbR9DB5m+n2S6JBzXhGBWvcEckvJfBlmW+lWXXCuc5PtPJmi9gxquVJXcdNePb4B Xl5ovOKJKU7F8G34i5mR+RJvim/tS8L2JYf57UHB12HgfTmRJJH0a7e5z6GkfkBl FtNyTHREODN67L2N5pP0K49mrMvTtxEmnxSsnpZIiznCI3cS4Kzm57GlcIZnvCqR 7EmovHrAS/nZuRhLmE5TAa2DUJ3OQoEEQJ2zgRuGqELD++KYfXrJ+RafgNTF+twJ BmsTfHLCrr1IIewOFGeCZXjOCJg= -----END CERTIFICATE-----Generated at Sat Apr 5 07:21:03 2025 by rpki-client