$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/F1C686AA1D5811EFA8D26E3EC4F9AE02.roa File: F1C686AA1D5811EFA8D26E3EC4F9AE02.roa (raw, json) Hash identifier: TkoNa9ji5ztcG7b34KFx+YNM0+7Oo5t7XfdNpMfZbEo= Subject key identifier: 3E:28:B9:C3:3C:86:86:4C:11:F1:FC:ED:0A:9D:5F:E9:AA:F6:B3:6B Certificate issuer: /CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8 Certificate serial: 071C Authority key identifier: 3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/F1C686AA1D5811EFA8D26E3EC4F9AE02.roa Signing time: Tue 28 Jan 2025 21:50:41 +0000 ROA not before: Tue 28 Jan 2025 21:50:41 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 58507 IP address blocks: 103.81.124.0/22 maxlen: 24 2400:70c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1820 (0x71c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AF13 Validity Not Before: Jan 28 21:50:41 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67995131-0cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:79:65:4b:6b:94:ae:53:17:cd:6a:c2:f4:5e: 2f:43:ea:34:11:30:d6:7b:64:48:db:15:98:29:ae: 02:6f:d6:cf:0e:58:15:c7:b1:7a:18:e6:2b:8d:94: c2:34:4d:7d:2e:5a:79:37:d2:59:62:28:11:e9:20: 72:f6:1a:d8:0e:c2:16:6d:d6:d6:a9:2a:6a:4a:c4: 20:35:48:78:df:37:b4:10:94:54:f6:a5:46:c4:6d: d6:20:28:9a:6e:f2:6a:46:20:78:8c:c0:2b:84:ad: 4e:05:1f:7e:b6:40:f3:db:2b:71:83:8c:36:e6:51: bf:70:a5:0b:35:92:f0:c9:e6:0a:24:83:19:f1:79: 61:f2:35:32:e3:fc:86:3c:ef:b7:78:2f:94:1e:57: 08:98:21:44:ea:8c:1a:6a:0c:f0:1b:6d:57:dd:ec: a6:4a:89:89:b0:2f:c7:35:81:ff:db:27:e3:f2:5a: ee:5b:45:aa:6d:84:18:af:a3:60:b8:6e:71:c9:de: 19:75:81:4f:8b:b4:36:73:97:d3:d7:5b:05:2b:76: 98:53:64:52:49:bf:43:77:4f:07:9c:6e:32:e6:d7: f5:0f:79:88:fb:c5:97:24:21:e7:59:47:3e:77:b6: 6f:51:06:f4:b5:4f:40:12:c2:ff:d3:5a:db:22:5b: cd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:28:B9:C3:3C:86:86:4C:11:F1:FC:ED:0A:9D:5F:E9:AA:F6:B3:6B X509v3 Authority Key Identifier: keyid:3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/F1C686AA1D5811EFA8D26E3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.81.124.0/22 IPv6: 2400:70c0::/32 Signature Algorithm: sha256WithRSAEncryption 6a:7d:12:e4:01:55:1d:1a:fc:43:77:b7:32:f2:bb:df:2e:25: 15:8b:b1:0c:03:88:f7:78:36:b4:dd:93:06:a4:db:29:65:85: b5:4d:c7:d4:fc:36:3c:ab:74:41:85:e7:2c:46:b0:e0:76:bd: 36:dc:d4:eb:34:83:1a:91:3b:9a:0e:80:b9:38:11:17:62:c0: 97:e4:f5:d1:d5:72:b9:2c:9e:bf:44:c1:0d:5e:85:4a:2f:55: b6:0f:3e:b6:6c:fa:20:f7:49:09:13:a5:a7:e8:ac:4a:5b:81: b1:c8:72:27:a5:61:b9:03:bd:3e:60:ab:a6:e0:f5:cb:10:63: 00:38:f4:da:b3:dc:9e:6b:ae:bf:62:8c:71:69:8b:a0:26:42: c5:59:58:0f:4b:ea:75:ba:22:c6:a4:0c:43:cd:59:63:d4:a8: 43:c9:2a:47:f1:56:67:a7:31:ee:c3:e1:9b:8f:5a:7a:1e:87: fe:a4:81:24:05:1e:e5:c5:2d:ad:f0:80:7f:23:bd:d5:86:1c: f1:74:44:31:1b:88:71:99:e7:e1:d9:c5:12:db:e9:ce:3d:c8: 1a:c8:53:3d:bd:25:41:e8:23:18:ca:84:f3:e0:47:7e:34:16: 9b:5c:ae:34:a6:14:99:50:55:f6:ef:53:84:17:8c:ae:15:e5: ed:07:2d:cd -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGMTMxMTAvBgNVBAUTKDNERjY5Q0E5OENCMTMxRTk2NUI1QkM0QTMzRkNFNzFC OUQzNUU3QTgwHhcNMjUwMTI4MjE1MDQxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk5NTEzMS0wY2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5nllS2uUrlMXzWrC9F4vQ+o0ETDWe2RI2xWYKa4Cb9bPDlgVx7F6GOYrjZTC NE19Llp5N9JZYigR6SBy9hrYDsIWbdbWqSpqSsQgNUh43ze0EJRU9qVGxG3WICia bvJqRiB4jMArhK1OBR9+tkDz2ytxg4w25lG/cKULNZLwyeYKJIMZ8Xlh8jUy4/yG PO+3eC+UHlcImCFE6owaagzwG21X3eymSomJsC/HNYH/2yfj8lruW0WqbYQYr6Ng uG5xyd4ZdYFPi7Q2c5fT11sFK3aYU2RSSb9Dd08HnG4y5tf1D3mI+8WXJCHnWUc+ d7ZvUQb0tU9AEsL/01rbIlvNIwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFD4oucM8 hoZMEfH87QqdX+mq9rNrMB8GA1UdIwQYMBaAFD32nKmMsTHpZbW8SjP85xudNeeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUYxMy81Mzg3MzJGRTI5 NEMxMUVCQTZCRjZEMzFDNEY5QUUwMi9QZmFjcVl5eE1lbGx0YnhLTV96bkc1MDE1 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmYWNxWXl4TWVsbHRieEtNX3puRzUwMTU2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0FGMTMvNTM4NzMyRkUyOTRDMTFFQkE2QkY2RDMxQzRGOUFFMDIvRjFDNjg2QUEx RDU4MTFFRkE4RDI2RTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnUXwwDQQCAAIwBwMFACQAcMAwDQYJKoZIhvcNAQELBQAD ggEBAGp9EuQBVR0a/EN3tzLyu98uJRWLsQwDiPd4NrTdkwak2yllhbVNx9T8Njyr dEGF5yxGsOB2vTbc1Os0gxqRO5oOgLk4ERdiwJfk9dHVcrksnr9EwQ1ehUovVbYP PrZs+iD3SQkTpaforEpbgbHIcielYbkDvT5gq6bg9csQYwA49Nqz3J5rrr9ijHFp i6AmQsVZWA9L6nW6IsakDEPNWWPUqEPJKkfxVmenMe7D4ZuPWnoeh/6kgSQFHuXF La3wgH8jvdWGHPF0RDEbiHGZ5+HZxRLb6c49yBrIUz29JUHoIxjKhPPgR340Fptc rjSmFJlQVfbvU4QXjK4V5e0HLc0= -----END CERTIFICATE-----Generated at Sun Apr 6 15:25:05 2025 by rpki-client