$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/403FDDD0DF3511ED8FBA823DC4F9AE02.roa File: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (raw, json) Hash identifier: n02qcDfoz5xfgtE3pmF9DuTrufYGzGxNykq63R1mDas= Subject key identifier: F8:09:F2:6F:D2:5F:D8:D8:F6:BC:31:E9:A8:BA:12:A6:47:35:A2:0B Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0C0A Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/403FDDD0DF3511ED8FBA823DC4F9AE02.roa Signing time: Sat 22 Feb 2025 19:27:32 +0000 ROA not before: Sat 22 Feb 2025 19:27:32 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 139872 IP address blocks: 103.145.208.0/23 maxlen: 23 103.145.208.0/24 maxlen: 24 103.145.209.0/24 maxlen: 24 2001:df2:2780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3082 (0xc0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: Feb 22 19:27:32 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67ba2523-6959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:ea:b2:e8:84:cf:06:84:97:9b:8c:5f:aa: b1:3c:0d:11:80:31:40:87:20:01:ba:96:af:5c:63: 89:bf:f3:b7:dd:47:cb:30:ea:60:ec:40:d5:0d:07: 23:78:cc:a6:87:fa:20:a8:f5:fb:7f:87:97:ea:62: a0:2a:7c:91:fb:f1:7a:2a:36:c0:25:98:b2:e1:22: 53:df:59:74:a6:8d:c1:4f:6b:83:3f:c8:0d:fa:06: 1e:9c:39:26:96:02:fe:a6:22:a3:c2:ca:37:b6:73: cc:6a:df:1a:fe:24:ed:da:46:e0:2d:21:25:c4:f0: 81:b5:5f:8f:f8:65:e1:f0:17:96:81:d8:10:a9:46: 0a:bf:51:9d:a8:0d:58:a6:37:85:aa:58:f5:bc:a7: 1b:d2:bd:69:1d:e3:5a:3e:28:d7:0c:d5:2c:fc:3c: 56:a6:4a:b7:6e:ef:6f:ad:c8:1d:8e:f1:9a:f4:9c: 3a:07:7c:1b:5b:36:6e:c6:42:15:dd:bf:87:23:8e: 45:71:ae:79:13:7d:a7:a9:f4:36:27:e1:1f:28:37: 45:8e:f4:25:46:92:dc:5d:00:1d:d3:ec:06:53:72: 04:2e:a2:42:59:c1:3d:2d:0f:8a:1b:5e:e5:2f:a0: cc:96:89:f2:19:af:4e:24:bf:31:84:0b:cf:b3:89: 28:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:09:F2:6F:D2:5F:D8:D8:F6:BC:31:E9:A8:BA:12:A6:47:35:A2:0B X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/403FDDD0DF3511ED8FBA823DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.208.0/23 IPv6: 2001:df2:2780::/48 Signature Algorithm: sha256WithRSAEncryption c0:6d:a3:13:17:b1:ae:88:f2:68:24:3d:12:f2:d1:31:e8:47: e5:09:fa:da:01:82:d4:8c:b1:df:c3:f7:5d:a0:67:36:38:a7: 37:dd:74:15:11:de:d6:3e:62:82:8a:12:b5:4a:11:79:d0:c1: 9b:99:90:fe:31:d8:ab:f2:73:20:93:dc:ec:bf:b5:d6:2d:6b: 06:4c:44:fa:d4:06:af:b0:ba:a3:31:a1:62:d7:0d:56:0a:d9: 47:de:a6:ac:3c:94:db:21:b0:bc:dc:ed:cc:58:2b:e6:c0:53: 35:1f:42:7c:2a:6c:c5:05:e1:c0:20:29:18:06:8c:2c:da:1c: 36:7c:de:51:cc:d5:c9:11:a7:d0:61:26:62:c5:84:db:f1:c6: ee:38:5f:96:83:1b:74:70:e4:86:df:ae:54:04:d4:9f:ff:5b: 2f:19:e8:70:b4:5f:c8:dc:d4:09:3d:03:ed:d4:8b:bc:50:85: e9:61:e9:f6:5b:bc:98:e2:b9:9a:23:9f:e8:98:78:4b:87:70: e7:c9:6b:64:15:e8:20:08:e3:c6:1f:92:54:0f:ab:e4:98:66: ff:46:b5:ac:e3:29:ee:02:e4:83:f1:c8:ca:fc:e4:3d:58:67: 0a:42:fc:d1:b9:89:2b:8e:92:cf:81:13:59:f6:02:91:8d:71: 5b:23:e5:b0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjUwMjIyMTkyNzMyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JhMjUyMy02OTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyrqsuiEzwaEl5uMX6qxPA0RgDFAhyABupavXGOJv/O33UfLMOpg7EDVDQcj eMymh/ogqPX7f4eX6mKgKnyR+/F6KjbAJZiy4SJT31l0po3BT2uDP8gN+gYenDkm lgL+piKjwso3tnPMat8a/iTt2kbgLSElxPCBtV+P+GXh8BeWgdgQqUYKv1GdqA1Y pjeFqlj1vKcb0r1pHeNaPijXDNUs/DxWpkq3bu9vrcgdjvGa9Jw6B3wbWzZuxkIV 3b+HI45Fca55E32nqfQ2J+EfKDdFjvQlRpLcXQAd0+wGU3IELqJCWcE9LQ+KG17l L6DMlonyGa9OJL8xhAvPs4koCQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPgJ8m/S X9jY9rwx6ai6EqZHNaILMB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E4MkQvQURGNjY1QzAxMjc4MTFFQTlCOEVEMDM0QzRGOUFFMDIvNDAzRkRERDBE RjM1MTFFRDhGQkE4MjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnkdAwDwQCAAIwCQMHACABDfIngDANBgkqhkiG9w0BAQsF AAOCAQEAwG2jExexrojyaCQ9EvLRMehH5Qn62gGC1Iyx38P3XaBnNjinN910FRHe 1j5igooStUoRedDBm5mQ/jHYq/JzIJPc7L+11i1rBkxE+tQGr7C6ozGhYtcNVgrZ R96mrDyU2yGwvNztzFgr5sBTNR9CfCpsxQXhwCApGAaMLNocNnzeUczVyRGn0GEm YsWE2/HG7jhfloMbdHDkht+uVATUn/9bLxnocLRfyNzUCT0D7dSLvFCF6WHp9lu8 mOK5miOf6Jh4S4dw58lrZBXoIAjjxh+SVA+r5Jhm/0a1rOMp7gLkg/HIyvzkPVhn CkL80bmJK46Sz4ETWfYCkY1xWyPlsA== -----END CERTIFICATE-----Generated at Sun Apr 13 01:48:23 2025 by rpki-client