$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/487BBF90C42711EFA3BE1C71C4F9AE02.roa File: 487BBF90C42711EFA3BE1C71C4F9AE02.roa (raw, json) Hash identifier: CO8ARyf0G39t0XN3B2WpKf6Ay4jZWnQ/6OTavNjYOuo= Subject key identifier: C1:76:29:0D:65:3E:0A:03:A1:31:3F:96:2C:B6:6E:E6:71:1D:A2:BD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: A0C4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/487BBF90C42711EFA3BE1C71C4F9AE02.roa Signing time: Mon 30 Dec 2024 12:21:55 +0000 ROA not before: Mon 30 Dec 2024 12:21:55 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 146886 IP address blocks: 103.173.22.0/23 maxlen: 24 103.173.23.0/26 maxlen: 26 103.173.23.64/26 maxlen: 26 103.173.23.128/26 maxlen: 26 103.173.23.192/26 maxlen: 26 2407:de40:4200::/48 maxlen: 48 2407:de40:4300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 15:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41156 (0xa0c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Dec 30 12:21:55 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67729063-9743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e2:d1:da:83:8a:51:74:16:22:f8:af:f5:18: 5e:f3:30:ee:70:1c:ac:91:f4:4d:f8:7e:b0:40:7a: 07:19:85:c4:4e:1d:5e:b6:83:1c:c0:21:c8:f1:8e: 3e:df:fb:5c:be:e7:2c:4c:65:bf:ec:e4:a6:85:c7: 57:3b:e3:84:e4:7f:91:bb:7b:67:8b:be:f3:74:2a: b7:ea:a5:43:82:c1:42:35:0c:e0:ee:25:c7:58:ec: cb:9e:81:2c:9d:6e:60:82:7b:8c:05:c4:28:81:f2: 75:c7:eb:c9:52:f0:95:76:9b:80:8d:26:4e:5e:14: 6f:68:c1:57:ab:23:0a:b7:13:f3:ab:16:d5:79:30: fb:1a:f5:14:3b:5d:03:55:29:a8:0e:da:a0:43:b8: f0:bf:1e:03:b2:72:67:6a:5e:86:2e:c8:44:ef:25: de:99:14:f5:bd:ae:6f:63:9c:58:f5:a1:33:de:5b: a2:61:b6:41:a7:77:d5:53:a3:65:2c:a6:13:81:3f: 8a:de:09:c0:73:c9:72:72:d9:08:23:21:f8:1e:56: 00:09:c4:18:c5:c7:23:09:07:91:2b:75:c4:d8:ef: c4:36:52:d9:24:6d:ba:14:8b:d2:b5:d2:64:47:0c: e1:ab:6c:2c:62:b5:8f:a2:06:8d:00:2b:a4:c2:7d: 52:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:76:29:0D:65:3E:0A:03:A1:31:3F:96:2C:B6:6E:E6:71:1D:A2:BD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/487BBF90C42711EFA3BE1C71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.22.0/23 IPv6: 2407:de40:4200::/48 2407:de40:4300::/48 Signature Algorithm: sha256WithRSAEncryption 29:eb:dd:3e:8e:fe:3d:f4:58:ea:11:aa:db:0e:dc:a4:b5:cd: cc:07:16:99:63:ba:1f:cb:83:e2:f8:1c:7b:8c:78:4a:e3:be: 1c:c9:c0:e9:e6:79:33:b5:d9:44:1b:80:ce:82:d5:25:51:e9: 4a:bb:24:30:ce:ae:9d:40:dc:8a:d8:ce:af:8d:85:35:04:ed: 5b:66:0e:de:ca:a7:f2:83:64:81:8b:3e:ac:6b:c3:77:5d:fd: 7a:d8:68:2c:60:6f:f7:a9:af:32:42:01:59:54:36:0f:6c:61: 05:dd:46:63:b9:aa:84:e8:f5:60:c6:68:cb:f3:ec:e8:a6:4c: 5f:c6:b4:ad:2a:44:3f:7d:bf:ef:83:fa:45:1a:b6:6d:b9:6d: 83:b1:d2:6f:a3:c6:76:5e:a9:d6:c0:b2:c3:e5:6c:8d:4a:79: 88:d3:1e:2d:3f:a0:6e:20:d7:7d:93:2c:13:cb:0e:45:b7:6f: 83:13:94:23:3b:ed:a6:4f:10:cd:8a:58:09:8d:6f:1a:ac:e4: b5:ba:e6:55:17:ee:0b:8b:35:be:bd:d5:60:60:3a:ad:1c:5b: 19:5b:5c:38:a0:c5:70:de:b2:b9:df:a7:d3:3b:51:36:16:8b: 32:48:fa:b6:16:82:a5:a0:88:5f:4e:9e:88:6b:2c:b4:7d:92: fa:e3:89:7e -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIDAKDEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MTIzMDEyMjE1NVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjc3MjkwNjMtOTc0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMzi0dqDilF0FiL4r/UYXvMw7nAcrJH0Tfh+sEB6BxmFxE4dXraDHMAhyPGO Pt/7XL7nLExlv+zkpoXHVzvjhOR/kbt7Z4u+83Qqt+qlQ4LBQjUM4O4lx1jsy56B LJ1uYIJ7jAXEKIHydcfryVLwlXabgI0mTl4Ub2jBV6sjCrcT86sW1Xkw+xr1FDtd A1UpqA7aoEO48L8eA7JyZ2pehi7IRO8l3pkU9b2ub2OcWPWhM95bomG2Qad31VOj ZSymE4E/it4JwHPJcnLZCCMh+B5WAAnEGMXHIwkHkSt1xNjvxDZS2SRtuhSL0rXS ZEcM4atsLGK1j6IGjQArpMJ9Ui0CAwEAAaOCAq8wggKrMB0GA1UdDgQWBBTBdikN ZT4KA6ExP5Ystm7mcR2ivTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ4N0JCRjkw QzQyNzExRUZBM0JFMUM3MUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDkGCCsGAQUFBwEHAQH/ BCowKDAMBAIAATAGAwQBZ60WMBgEAgACMBIDBwAkB95AQgADBwAkB95AQwAwDQYJ KoZIhvcNAQELBQADggEBACnr3T6O/j30WOoRqtsO3KS1zcwHFpljuh/Lg+L4HHuM eErjvhzJwOnmeTO12UQbgM6C1SVR6Uq7JDDOrp1A3IrYzq+NhTUE7VtmDt7Kp/KD ZIGLPqxrw3dd/XrYaCxgb/eprzJCAVlUNg9sYQXdRmO5qoTo9WDGaMvz7OimTF/G tK0qRD99v++D+kUatm25bYOx0m+jxnZeqdbAssPlbI1KeYjTHi0/oG4g132TLBPL DkW3b4MTlCM77aZPEM2KWAmNbxqs5LW65lUX7guLNb691WBgOq0cWxlbXDigxXDe srnfp9M7UTYWizJI+rYWgqWgiF9OnohrLLR9kvrjiX4= -----END CERTIFICATE-----Generated at Fri Apr 4 10:51:33 2025 by rpki-client