$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/3352C1BAECFC11EFA398671BC4F9AE02.roa File: 3352C1BAECFC11EFA398671BC4F9AE02.roa (raw, json) Hash identifier: Us38glA0PRb/dVpHLW6+MQj9tdG4tZeLrUJnViUxN+4= Subject key identifier: 87:A8:55:B7:C1:1B:E0:C7:A7:6C:61:8B:FD:49:B6:9F:2E:CC:13:7E Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 01A7 Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/3352C1BAECFC11EFA398671BC4F9AE02.roa Signing time: Mon 17 Feb 2025 06:55:41 +0000 ROA not before: Mon 17 Feb 2025 06:55:41 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 138699 IP address blocks: 101.47.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520 Validity Not Before: Feb 17 06:55:41 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67b2dd6d-f1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a0:bd:09:79:bc:9c:e8:56:7c:37:d0:6b:11: 57:6c:7c:ed:7c:18:de:1a:c3:85:ce:5f:a6:64:37: aa:eb:63:c1:ae:f5:cc:c3:a3:81:f6:44:2f:f9:1c: 52:e2:d3:7f:c4:a4:e4:7d:bc:fa:55:d0:2a:63:81: a5:df:3b:8f:ec:62:1b:a9:2d:e8:fe:1e:fb:f5:cc: ec:11:73:27:71:28:56:6e:9c:c8:6f:12:04:00:53: 57:c3:64:12:8f:11:45:d1:87:ec:49:f3:80:e2:12: c3:b4:74:5d:10:88:0d:87:dc:42:df:78:7a:e6:b9: 9d:fe:44:dc:51:df:5e:a5:13:10:4b:aa:2f:c7:f0: 29:c2:4a:3b:db:59:e8:0a:d4:34:14:aa:9e:c7:fe: 6a:bc:0c:79:d7:79:8b:ea:1a:5e:d9:36:b4:b6:77: 3a:40:3a:a7:dc:90:d0:77:67:5c:b0:f1:34:2c:42: 46:b4:af:31:0d:50:2a:27:e0:05:9f:6b:e1:94:c4: bc:04:b2:39:b2:6c:fa:76:a8:7f:0b:dd:ad:79:2f: dd:65:df:47:44:4c:fb:6d:3c:5a:bd:fa:ab:97:c5: c3:67:1f:41:d7:f3:0e:1e:fc:3e:e9:bd:ed:a0:81: 7d:db:2d:da:1a:75:4d:c0:d0:94:82:8d:6a:52:f1: 41:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A8:55:B7:C1:1B:E0:C7:A7:6C:61:8B:FD:49:B6:9F:2E:CC:13:7E X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/3352C1BAECFC11EFA398671BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.47.188.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:9f:40:b6:30:02:cb:4e:29:8a:25:0b:3a:c4:16:32:71:1d: cc:7e:b3:60:90:d7:01:d7:64:09:1f:c5:ae:8c:39:96:b6:e2: a2:0b:e0:60:e8:f1:51:0f:d4:4f:c2:f9:7c:7a:7c:62:0f:d8: 46:d1:da:a8:f3:37:08:99:6a:8e:69:38:91:d9:5c:de:48:85: 1b:2d:9d:bd:36:86:26:ed:fa:b0:c4:84:bf:9b:7e:21:ce:90: bf:75:df:94:8c:74:66:3b:53:94:14:77:5a:ce:9a:77:c4:da: e9:28:21:fe:ea:ec:07:83:86:59:02:dc:31:82:a1:be:39:cc: 5d:47:02:b1:01:e3:3c:f7:6f:e4:3a:c7:29:fa:c5:f5:07:9c: e5:e1:21:72:c5:97:bd:80:74:0f:c4:4b:42:1f:33:56:74:a7: a5:5e:ab:bd:a7:77:58:37:26:c7:c1:53:7c:61:59:5e:ff:17: c6:8b:10:05:6c:7f:b7:ef:cc:93:ac:2d:87:90:b5:52:3c:2e: 34:a4:42:d3:45:94:93:73:e4:50:c1:81:6f:f6:ac:9b:a1:ce: 63:be:5f:fc:a0:ca:0d:63:52:00:fa:e4:2e:d4:e0:5d:7f:ec: a1:48:51:2c:46:3d:ef:7c:6b:1e:9a:cf:1e:d9:3c:61:2b:1b: f1:87:fc:c0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjUwMjE3MDY1NTQxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2IyZGQ2ZC1mMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qC9CXm8nOhWfDfQaxFXbHztfBjeGsOFzl+mZDeq62PBrvXMw6OB9kQv+RxS 4tN/xKTkfbz6VdAqY4Gl3zuP7GIbqS3o/h779czsEXMncShWbpzIbxIEAFNXw2QS jxFF0YfsSfOA4hLDtHRdEIgNh9xC33h65rmd/kTcUd9epRMQS6ovx/Apwko721no CtQ0FKqex/5qvAx513mL6hpe2Ta0tnc6QDqn3JDQd2dcsPE0LEJGtK8xDVAqJ+AF n2vhlMS8BLI5smz6dqh/C92teS/dZd9HREz7bTxavfqrl8XDZx9B1/MOHvw+6b3t oIF92y3aGnVNwNCUgo1qUvFB2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIeoVbfB G+DHp2xhi/1Jtp8uzBN+MB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I1MjAvMTYxRDRDMEFFNENBMTFFREE0MTRFMjU5QzRGOUFFMDIvMzM1MkMxQkFF Q0ZDMTFFRkEzOTg2NzFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABlL7wwDQYJKoZIhvcNAQELBQADggEBAEufQLYwAstOKYol CzrEFjJxHcx+s2CQ1wHXZAkfxa6MOZa24qIL4GDo8VEP1E/C+Xx6fGIP2EbR2qjz NwiZao5pOJHZXN5IhRstnb02hibt+rDEhL+bfiHOkL9135SMdGY7U5QUd1rOmnfE 2ukoIf7q7AeDhlkC3DGCob45zF1HArEB4zz3b+Q6xyn6xfUHnOXhIXLFl72AdA/E S0IfM1Z0p6Veq72nd1g3JsfBU3xhWV7/F8aLEAVsf7fvzJOsLYeQtVI8LjSkQtNF lJNz5FDBgW/2rJuhzmO+X/ygyg1jUgD65C7U4F1/7KFIUSxGPe98ax6azx7ZPGEr G/GH/MA= -----END CERTIFICATE-----Generated at Sat Apr 5 07:12:29 2025 by rpki-client