$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa File: DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa (raw, json) Hash identifier: jb+NbLPJbNRFrpXKly3k3uaY8m7AD5q86vW7O0jvGcA= Subject key identifier: 7F:AD:F1:86:40:86:57:E8:E5:A6:A4:56:84:A1:2B:C3:B6:53:77:2B Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0AC8 Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa Signing time: Mon 02 Dec 2024 19:38:00 +0000 ROA not before: Mon 02 Dec 2024 19:38:00 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 132827 IP address blocks: 43.249.92.0/24 maxlen: 24 43.249.93.0/24 maxlen: 24 43.249.94.0/23 maxlen: 23 43.249.95.0/24 maxlen: 24 103.246.254.0/24 maxlen: 24 103.246.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2760 (0xac8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40 Validity Not Before: Dec 2 19:38:00 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=674e0c98-20ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0e:09:22:57:a1:e5:5e:55:2a:10:ee:7b:ca: 9d:07:79:45:30:ae:4d:2f:11:d2:90:59:5f:e8:af: fb:de:fd:f6:e8:33:e4:9a:1d:27:cb:c9:bc:cd:82: a0:f5:e6:44:a8:f0:27:5f:90:bf:f3:90:6f:55:22: f7:92:75:28:49:81:78:a4:16:55:77:14:ec:a1:0c: cf:d2:d4:05:98:c4:d4:91:b8:00:93:99:1e:25:ac: 97:24:ce:60:7a:76:a3:e0:c2:70:31:81:0d:23:3e: d3:a4:87:8b:5e:56:b7:f1:71:26:b3:15:81:e6:6b: 90:12:ed:e4:75:18:7b:e3:5a:d3:e7:08:48:3c:91: 6b:9e:0c:41:a9:ab:f9:59:be:9c:79:ca:b3:7a:b3: 78:6a:40:af:1b:c3:67:c4:42:a5:e6:64:f1:12:90: 50:4f:7f:00:58:0c:96:95:d3:3c:31:0f:26:cd:e7: 6d:ce:ed:0d:0b:7b:61:f4:47:5a:66:ed:b5:a7:7c: 22:65:ff:90:9e:d2:02:c5:3a:8b:c7:5b:a7:0a:2c: a7:0b:58:62:26:1c:9e:e8:cf:eb:40:dd:40:20:30: 39:83:77:d4:f6:cc:24:e6:9f:9c:b0:30:ea:7c:04: b8:5f:fd:2d:28:05:0a:8d:d0:e7:88:06:4e:1c:4d: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AD:F1:86:40:86:57:E8:E5:A6:A4:56:84:A1:2B:C3:B6:53:77:2B X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.92.0/22 103.246.254.0/23 Signature Algorithm: sha256WithRSAEncryption c5:10:7e:6f:a3:4f:0c:08:00:75:5c:d3:33:7c:fc:26:90:06: d1:bc:04:0a:40:de:6e:ca:56:81:a7:c8:4e:da:cf:be:f5:3d: 33:f0:9d:ce:04:68:58:18:9a:7d:b7:0d:3d:f7:8e:bc:85:0d: f8:e0:ea:93:54:a0:80:85:4b:d2:ca:33:92:d8:44:b2:e3:52: 7e:52:0c:40:b2:4c:3a:e2:f1:88:61:e0:01:f8:39:65:39:c9: e7:eb:aa:46:53:f9:f6:a9:75:e9:25:91:cb:3d:b2:70:ec:3c: 9e:f1:bd:ba:e7:e1:1c:9e:4f:fd:67:2e:21:44:e9:5c:8b:66: e9:4e:63:2a:ee:b9:f1:b8:b0:0d:dd:e9:22:bb:26:86:b1:04: bd:f5:70:43:5e:9c:bb:f5:e8:ce:dc:f7:a2:db:50:22:df:28: e5:7b:62:86:22:d5:e1:6a:e6:17:e8:31:31:55:d8:f6:ec:e1: 84:4c:03:47:5b:90:59:ee:b9:1a:fa:1a:16:a8:a0:38:6f:15: 3a:5d:e6:d3:66:bd:43:f7:33:96:84:6b:b3:b9:69:3b:17:13: 33:9c:2c:a2:52:19:0c:80:84:2c:13:a0:76:94:3b:46:18:6d: 07:e8:75:48:72:84:e6:84:c0:f1:5a:4b:44:80:a6:19:fe:d5: 82:b4:2d:97 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjQxMjAyMTkzODAwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRlMGM5OC0yMGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvw4JIleh5V5VKhDue8qdB3lFMK5NLxHSkFlf6K/73v326DPkmh0ny8m8zYKg 9eZEqPAnX5C/85BvVSL3knUoSYF4pBZVdxTsoQzP0tQFmMTUkbgAk5keJayXJM5g enaj4MJwMYENIz7TpIeLXla38XEmsxWB5muQEu3kdRh741rT5whIPJFrngxBqav5 Wb6cecqzerN4akCvG8NnxEKl5mTxEpBQT38AWAyWldM8MQ8mzedtzu0NC3th9Eda Zu21p3wiZf+QntICxTqLx1unCiynC1hiJhye6M/rQN1AIDA5g3fU9swk5p+csDDq fAS4X/0tKAUKjdDniAZOHE1trwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFH+t8YZA hlfo5aakVoShK8O2U3crMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNDAvNjE3RjM1MzY0MEUxMTFFQUJDNjJEQjI2QzRGOUFFMDIvREMwNkNCQzA0 MTlBMTFFQUE1RTJCQTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+VwDBAFn9v4wDQYJKoZIhvcNAQELBQADggEBAMUQfm+j TwwIAHVc0zN8/CaQBtG8BApA3m7KVoGnyE7az771PTPwnc4EaFgYmn23DT33jryF Dfjg6pNUoICFS9LKM5LYRLLjUn5SDECyTDri8Yhh4AH4OWU5yefrqkZT+fapdekl kcs9snDsPJ7xvbrn4RyeT/1nLiFE6VyLZulOYyruufG4sA3d6SK7JoaxBL31cENe nLv16M7c96LbUCLfKOV7YoYi1eFq5hfoMTFV2Pbs4YRMA0dbkFnuuRr6GhaooDhv FTpd5tNmvUP3M5aEa7O5aTsXEzOcLKJSGQyAhCwToHaUO0YYbQfodUhyhOaEwPFa S0SAphn+1YK0LZc= -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:26 2025 by rpki-client