$ rpki-client -vvf rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/E3901F981BD711EEB9597921C4F9AE02.roa File: E3901F981BD711EEB9597921C4F9AE02.roa (raw, json) Hash identifier: gXQtBkkUAb9x4NlHq240u/Z9LPp8ccDpu+5MVL1TOAI= Subject key identifier: 2E:ED:12:2E:DB:80:C1:7B:CF:CB:4D:D1:8C:6A:6E:30:C3:66:A9:A7 Certificate issuer: /CN=A917A67E/serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Certificate serial: 0131 Authority key identifier: 4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/E3901F981BD711EEB9597921C4F9AE02.roa Signing time: Mon 10 Feb 2025 06:08:35 +0000 ROA not before: Mon 10 Feb 2025 06:08:35 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 151326 IP address blocks: 103.197.254.0/23 maxlen: 23 2001:df2:6fc0::/48 maxlen: 48 2401:ed60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A67E Validity Not Before: Feb 10 06:08:35 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67a997e3-1c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cb:10:62:a4:b7:6a:32:8e:5a:91:5e:0c:77: 90:41:ed:ac:46:69:ca:e5:0b:60:2e:39:f5:b1:ac: a0:1e:69:c5:52:31:89:76:95:a2:a6:02:f7:6f:8c: 9c:6a:07:8e:65:0e:aa:aa:ee:21:7f:8c:29:08:48: 3e:5b:7b:d4:09:a0:3c:21:19:2b:73:e7:b4:7f:05: 90:79:ce:65:74:0b:81:e9:52:a4:c2:a5:ba:ef:58: 8a:60:32:af:f7:8e:7c:6c:72:ca:21:d4:68:0b:54: f0:2b:59:be:a9:50:32:f7:86:da:62:4d:92:01:e1: 69:2a:06:5c:f1:17:fb:8a:0e:7c:dd:11:b4:4d:73: 9f:aa:e6:07:77:94:ef:23:6f:a7:f1:ab:ca:2f:29: 6b:0e:88:ec:be:6a:a1:15:82:8c:d8:3a:3a:a3:6d: 62:34:fa:f6:d5:37:2c:b9:d2:d1:7d:58:84:e6:f3: 34:ef:e7:31:4d:ed:e9:ae:ea:73:d1:16:41:15:67: 0c:11:71:58:f8:2c:d3:c1:e3:54:09:fe:67:98:03: 20:d4:06:bb:d3:4d:4c:a7:a5:ad:08:ee:be:fc:cf: f2:2c:9d:d9:6c:0d:fc:ba:83:21:e5:8c:7d:4d:c7: e4:df:78:fa:d6:72:bb:72:c1:a8:7a:32:69:0e:25: e6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:ED:12:2E:DB:80:C1:7B:CF:CB:4D:D1:8C:6A:6E:30:C3:66:A9:A7 X509v3 Authority Key Identifier: keyid:4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/E3901F981BD711EEB9597921C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.254.0/23 IPv6: 2001:df2:6fc0::/48 2401:ed60::/32 Signature Algorithm: sha256WithRSAEncryption 8f:ca:c9:d0:d9:3e:8b:30:ba:71:36:9f:9e:7f:2a:75:4e:8b: fb:07:f1:d7:7e:0b:d1:81:37:f6:a7:f3:b1:0b:e9:77:f0:6c: c9:9c:c9:2a:42:bc:c9:c7:9b:ce:e0:4d:b5:c5:64:03:b6:f0: 45:b7:5f:80:e3:91:17:7f:23:6c:4c:c6:5c:f4:d2:02:c8:dc: 31:4a:01:9f:34:07:d6:56:31:83:db:fc:b4:66:4a:0a:33:d5: 91:97:5e:d7:aa:dc:e2:0c:c9:03:55:a9:94:e5:c7:e4:63:b6: 42:18:02:18:7a:c0:e5:50:1a:0c:22:3b:b4:18:65:df:d8:30: 30:d7:da:71:63:85:15:fa:1f:53:3f:c8:d2:d4:23:b9:eb:cb: 96:62:2a:10:d5:b1:9d:93:2e:cd:6d:59:9d:00:b6:39:f0:fe: ba:12:c4:5a:04:d7:57:cb:cc:61:a4:72:e3:ad:44:19:40:1a: 0b:b6:de:bb:a8:2d:50:a3:ee:69:b7:da:be:eb:ae:54:d9:4b: f8:18:9b:1f:1a:e1:9e:73:7b:b1:ea:d8:1b:b4:1c:c3:e7:5d: 46:26:c8:17:34:d9:84:f9:61:ed:23:ee:6c:ae:ce:7b:ea:6b: 78:65:48:25:53:79:08:39:e5:55:76:77:42:10:53:df:a4:d0: 48:d4:12:d1 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2N0UxMTAvBgNVBAUTKDRCNzIyQTNBNjc5M0JGMzJDOUJDRjUyRTRFNzcyRTBB NkYzQTYzMTkwHhcNMjUwMjEwMDYwODM1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E5OTdlMy0xYzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsssQYqS3ajKOWpFeDHeQQe2sRmnK5QtgLjn1saygHmnFUjGJdpWipgL3b4yc ageOZQ6qqu4hf4wpCEg+W3vUCaA8IRkrc+e0fwWQec5ldAuB6VKkwqW671iKYDKv 9458bHLKIdRoC1TwK1m+qVAy94baYk2SAeFpKgZc8Rf7ig583RG0TXOfquYHd5Tv I2+n8avKLylrDojsvmqhFYKM2Do6o21iNPr21TcsudLRfViE5vM07+cxTe3prupz 0RZBFWcMEXFY+CzTweNUCf5nmAMg1Aa7001Mp6WtCO6+/M/yLJ3ZbA38uoMh5Yx9 Tcfk33j61nK7csGoejJpDiXmbwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFC7tEi7b gMF7z8tN0YxqbjDDZqmnMB8GA1UdIwQYMBaAFEtyKjpnk78yybz1Lk53LgpvOmMZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY3RS82N0I0Q0I4NDFC RDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9TM0lxT21lVHZ6TEp2UFV1VG5jdUNtODZZ eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzSXFPbWVUdnpMSnZQVXVUbmN1Q204Nll4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E2N0UvNjdCNENCODQxQkQzMTFFRTk2NUZFRjM4QzRGOUFFMDIvRTM5MDFGOTgx QkQ3MTFFRUI5NTk3OTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMAwEAgABMAYDBAFnxf4wFgQCAAIwEAMHACABDfJvwAMFACQB7WAwDQYJKoZI hvcNAQELBQADggEBAI/KydDZPoswunE2n55/KnVOi/sH8dd+C9GBN/an87EL6Xfw bMmcySpCvMnHm87gTbXFZAO28EW3X4DjkRd/I2xMxlz00gLI3DFKAZ80B9ZWMYPb /LRmSgoz1ZGXXteq3OIMyQNVqZTlx+RjtkIYAhh6wOVQGgwiO7QYZd/YMDDX2nFj hRX6H1M/yNLUI7nry5ZiKhDVsZ2TLs1tWZ0Atjnw/roSxFoE11fLzGGkcuOtRBlA Ggu23ruoLVCj7mm32r7rrlTZS/gYmx8a4Z5ze7Hq2Bu0HMPnXUYmyBc02YT5Ye0j 7myuznvqa3hlSCVTeQg55VV2d0IQU9+k0EjUEtE= -----END CERTIFICATE-----Generated at Sun Apr 6 09:10:19 2025 by rpki-client