$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/8AD0E57C8FE311EB89767C78C4F9AE02.roa File: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (raw, json) Hash identifier: iGUFOWK6oRwPeEo+C87zciurGuoBwNOi2mVgrnihqBQ= Subject key identifier: 3C:B3:97:00:56:32:40:6A:28:B9:27:70:6B:6A:C8:C9:16:22:43:D7 Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Certificate serial: 0A3C Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/8AD0E57C8FE311EB89767C78C4F9AE02.roa Signing time: Wed 08 Jan 2025 19:38:21 +0000 ROA not before: Wed 08 Jan 2025 19:38:21 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 137453 IP address blocks: 103.127.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2620 (0xa3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CBD7 Validity Not Before: Jan 8 19:38:21 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=677ed42d-1c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d0:01:7d:81:fd:c0:45:8f:48:f0:fb:62:24: d7:c1:0c:15:bb:96:e1:9d:48:c2:94:5a:7e:53:20: 7c:53:4c:06:33:3f:6d:09:73:b3:a5:78:0a:b8:6e: ae:39:1a:8f:ad:09:f4:91:47:5d:25:a5:27:bc:94: f6:4c:69:b8:a2:d2:39:86:6c:c5:ce:48:c7:d5:63: 94:90:e4:f1:f6:07:f6:5e:2b:8b:08:09:4c:58:00: 69:fd:5f:28:d6:ca:6f:b6:72:11:c6:bc:4d:f8:52: e0:d3:39:57:57:73:b2:fa:a8:a4:1a:54:64:2d:e3: 1d:67:ad:3d:c8:9f:0a:b1:b7:c6:9e:59:28:1e:5c: 01:00:2d:1f:1f:95:77:59:a5:f6:d1:51:fc:c2:10: 1e:b3:1d:bf:5d:94:d5:5b:2f:6a:a9:02:1d:94:9b: 9a:64:96:a8:30:e9:66:5e:b3:5d:76:42:8f:59:09: 94:d5:b7:80:22:9b:0b:50:60:db:bb:d2:f9:36:38: 2c:aa:30:dc:f2:18:52:1c:e5:62:b1:ab:9a:05:b8: ad:75:de:6b:7f:e6:de:1c:c3:cb:01:ac:5f:c4:3a: 35:7a:20:af:a4:c5:5e:05:29:71:34:bd:70:2b:73: 32:39:cc:b7:2b:bf:a7:d7:1b:98:0c:94:fc:0d:37: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B3:97:00:56:32:40:6A:28:B9:27:70:6B:6A:C8:C9:16:22:43:D7 X509v3 Authority Key Identifier: keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/8AD0E57C8FE311EB89767C78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.3.0/24 Signature Algorithm: sha256WithRSAEncryption 86:37:05:b8:e5:f2:68:07:4b:78:19:ce:f4:0e:6a:02:8c:44: 26:ed:57:9e:5e:77:20:d1:da:6b:62:10:78:dc:e3:f3:b1:67: c9:b6:82:7d:a4:20:6a:5a:1e:c4:ab:31:42:4e:b5:90:38:64: 33:85:56:88:96:2c:41:99:b6:e5:2d:e0:b6:9e:33:ce:28:65: 1d:fd:c4:44:fb:9f:e1:c8:18:d2:bf:8f:ac:0a:b0:ae:5d:9f: 7b:ff:0e:60:c9:32:9d:cb:8c:78:09:c7:9a:ea:b0:f8:0b:a2: 3e:3d:9e:ae:6e:2f:5a:c1:2d:8f:7d:f6:da:62:0c:b4:53:0e: 23:18:ef:51:d9:0a:1f:3d:26:cd:17:71:44:d6:14:3c:10:be: be:42:af:42:c0:b8:21:48:2a:31:c1:6f:3b:5e:1c:53:10:3b: 58:95:d4:f8:d3:39:b1:8c:a4:02:fe:ad:92:55:bb:86:39:a4: 36:6e:55:a9:f8:88:e9:4a:51:d1:74:d6:30:b5:c3:5b:17:d9: 81:cf:2c:20:0d:01:a8:02:26:97:a5:08:9c:3e:8b:e3:25:da: c5:b5:f0:5d:d5:a8:0d:37:af:c1:5a:f8:e2:3f:4e:77:e8:18: 7a:bc:d9:23:92:7a:ab:81:fe:bd:03:d0:2b:d9:69:50:ba:bd: 88:b9:a7:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4NkNBMjAyNjZG MUY2RUZCMTQwHhcNMjUwMTA4MTkzODIxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdlZDQyZC0xYzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNABfYH9wEWPSPD7YiTXwQwVu5bhnUjClFp+UyB8U0wGMz9tCXOzpXgKuG6u ORqPrQn0kUddJaUnvJT2TGm4otI5hmzFzkjH1WOUkOTx9gf2XiuLCAlMWABp/V8o 1spvtnIRxrxN+FLg0zlXV3Oy+qikGlRkLeMdZ609yJ8KsbfGnlkoHlwBAC0fH5V3 WaX20VH8whAesx2/XZTVWy9qqQIdlJuaZJaoMOlmXrNddkKPWQmU1beAIpsLUGDb u9L5NjgsqjDc8hhSHOVisauaBbitdd5rf+beHMPLAaxfxDo1eiCvpMVeBSlxNL1w K3MyOcy3K7+n1xuYDJT8DTce8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDyzlwBW MkBqKLkncGtqyMkWIkPXMB8GA1UdIwQYMBaAFOmSO6wPXFjKvrkyhsogJm8fbvsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0JENy8xOTIzQkY2ODY0 MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dNcS11VEtHeWlBbWJ4OXUt eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaSTdyQTljV01xLXVUS0d5aUFtYng5dS14US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0NCRDcvMTkyM0JGNjg2NDI4MTFFQUE3MDQxRDQ4QzRGOUFFMDIvOEFEMEU1N0M4 RkUzMTFFQjg5NzY3Qzc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnfwMwDQYJKoZIhvcNAQELBQADggEBAIY3Bbjl8mgHS3gZ zvQOagKMRCbtV55edyDR2mtiEHjc4/OxZ8m2gn2kIGpaHsSrMUJOtZA4ZDOFVoiW LEGZtuUt4LaeM84oZR39xET7n+HIGNK/j6wKsK5dn3v/DmDJMp3LjHgJx5rqsPgL oj49nq5uL1rBLY999tpiDLRTDiMY71HZCh89Js0XcUTWFDwQvr5Cr0LAuCFIKjHB bzteHFMQO1iV1PjTObGMpAL+rZJVu4Y5pDZuVan4iOlKUdF01jC1w1sX2YHPLCAN AagCJpelCJw+i+Ml2sW18F3VqA03r8Fa+OI/TnfoGHq82SOSequB/r0D0CvZaVC6 vYi5p1k= -----END CERTIFICATE-----Generated at Sat Apr 5 07:19:29 2025 by rpki-client