$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/F3E543B4CBB611EB94FE6E68C4F9AE02.roa File: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (raw, json) Hash identifier: ZXJMtYkkqA7hHeKOhLlOV4cY6XESDyR/pKiToP5eSgg= Subject key identifier: 31:D1:AA:07:42:C9:94:3B:3A:34:B6:FB:EB:90:2D:FC:52:36:DA:F3 Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Certificate serial: 0C22 Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/F3E543B4CBB611EB94FE6E68C4F9AE02.roa Signing time: Tue 26 Nov 2024 18:26:48 +0000 ROA not before: Tue 26 Nov 2024 18:26:48 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 139728 IP address blocks: 103.144.48.0/23 maxlen: 23 103.144.48.0/24 maxlen: 24 2405:bd40::/32 maxlen: 32 2405:bd40::/48 maxlen: 48 2405:bd40:1::/48 maxlen: 48 2405:bd40:2::/48 maxlen: 48 2405:bd40:3::/48 maxlen: 48 2405:bd40:4::/48 maxlen: 48 2405:bd40:5::/48 maxlen: 48 2405:bd40:6::/48 maxlen: 48 2405:bd40:7::/48 maxlen: 48 2405:bd40:8::/48 maxlen: 48 2405:bd40:9::/48 maxlen: 48 2405:bd40:a::/48 maxlen: 48 2405:bd40:10::/48 maxlen: 48 2405:bd40:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192248 Validity Not Before: Nov 26 18:26:48 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674612e8-08a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:4f:5a:00:81:a8:fb:8c:e8:7d:28:fe:d9: ab:3e:a1:81:2a:e7:18:d9:76:76:6e:b7:25:f1:88: 56:c7:f7:4e:83:44:97:be:db:47:2c:e5:f2:f7:eb: 09:39:43:f2:80:2e:1b:3b:5f:44:76:3a:92:94:36: f8:f0:8a:77:ab:27:85:8f:8e:f3:14:4a:4d:d6:86: 9e:76:88:98:6a:56:44:bb:79:6a:0d:d1:a3:3c:a7: b9:c1:0a:7b:c4:79:e1:d7:cd:e0:d6:02:ed:0d:40: 8c:a6:40:e0:e2:25:77:95:0a:7e:a9:79:d1:fd:e0: f9:92:59:19:df:b8:57:82:f8:29:ec:c6:be:42:4d: 6f:cb:b3:44:bc:e4:c5:7d:35:a0:f7:5c:82:3d:6f: be:f0:e7:38:bd:ec:37:b1:dd:cc:9c:dd:a8:8b:c5: a3:33:f2:22:c7:9a:66:7b:f8:ff:11:a0:d3:e8:7f: dd:86:c3:c8:b0:19:e9:d6:42:ed:e3:2d:40:2a:7e: 95:81:0c:bb:a9:d3:83:13:d8:c7:f0:23:a7:60:25: 33:ab:97:44:15:3b:43:62:43:74:dd:f3:79:73:1c: af:14:4e:b1:9b:18:d1:1f:95:8f:7b:68:67:b2:1e: 2f:11:11:ee:02:bd:9e:9d:21:4b:0a:e1:b9:70:21: c2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D1:AA:07:42:C9:94:3B:3A:34:B6:FB:EB:90:2D:FC:52:36:DA:F3 X509v3 Authority Key Identifier: keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/F3E543B4CBB611EB94FE6E68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.48.0/23 IPv6: 2405:bd40::/32 Signature Algorithm: sha256WithRSAEncryption 54:79:04:b9:40:b3:3b:b8:68:ed:f9:71:51:2c:24:28:8a:7d: e0:ba:6e:5d:21:98:21:c6:d8:4c:d3:c7:fa:29:fd:71:17:f1: fe:02:bb:49:db:55:aa:7c:16:b6:72:92:34:2d:9d:18:c6:fd: 76:74:40:a9:29:00:13:93:d6:09:a7:1e:ef:9c:4c:f5:eb:b4: 90:3f:53:8a:0e:25:70:0c:86:92:f3:f6:19:45:af:ed:88:0c: 96:d6:34:e8:83:c6:be:d0:e2:fe:87:c9:55:1f:48:b2:17:4c: 39:2b:86:44:be:7e:d2:99:31:c5:18:5a:6b:0e:9b:aa:ac:db: 5c:d4:50:62:f2:8b:c9:42:3e:6e:38:10:1d:52:f1:6f:02:a8: e3:3a:84:82:3a:25:a0:e2:68:89:82:ab:d7:09:50:6c:3b:28: 32:47:3e:1d:4e:9f:bc:54:5e:b2:94:36:21:46:3c:27:7d:ec: 65:50:86:d3:29:b6:d3:d4:ae:8e:f1:79:81:1a:e9:2c:a0:bd: d6:96:4d:1f:f1:75:ef:cb:a9:e6:87:0c:33:74:0e:7d:95:8f: 80:8e:53:11:e7:12:64:d6:83:71:4e:5d:0d:ef:06:bb:16:a9: 44:7d:4a:db:71:7e:c6:9a:a3:56:03:3f:35:63:e2:8b:1a:c7: af:a2:31:1e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIyNDgxMTAvBgNVBAUTKDU1MTFERUMyOURDQUVEQTE3QkYzNkJCRjMzOTUzMjcx NTlGMTRBODEwHhcNMjQxMTI2MTgyNjQ4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ2MTJlOC0wOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfhPWgCBqPuM6H0o/tmrPqGBKucY2XZ2brcl8YhWx/dOg0SXvttHLOXy9+sJ OUPygC4bO19EdjqSlDb48Ip3qyeFj47zFEpN1oaedoiYalZEu3lqDdGjPKe5wQp7 xHnh183g1gLtDUCMpkDg4iV3lQp+qXnR/eD5klkZ37hXgvgp7Ma+Qk1vy7NEvOTF fTWg91yCPW++8Oc4vew3sd3MnN2oi8WjM/Iix5pme/j/EaDT6H/dhsPIsBnp1kLt 4y1AKn6VgQy7qdODE9jH8COnYCUzq5dEFTtDYkN03fN5cxyvFE6xmxjRH5WPe2hn sh4vERHuAr2enSFLCuG5cCHCXQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDHRqgdC yZQ7OjS2++uQLfxSNtrzMB8GA1UdIwQYMBaAFFUR3sKdyu2he/NrvzOVMnFZ8UqB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjI0OC9DNzk4QTBGQUZG MDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdhRjc4MnVfTTVVeWNWbnhT b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSSGV3cDNLN2FGNzgydV9NNVV5Y1ZueFNvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTIyNDgvQzc5OEEwRkFGRjAwMTFFOTk1ODZBQjIxQzRGOUFFMDIvRjNFNTQzQjRD QkI2MTFFQjk0RkU2RTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnkDAwDQQCAAIwBwMFACQFvUAwDQYJKoZIhvcNAQELBQAD ggEBAFR5BLlAszu4aO35cVEsJCiKfeC6bl0hmCHG2EzTx/op/XEX8f4Cu0nbVap8 FrZykjQtnRjG/XZ0QKkpABOT1gmnHu+cTPXrtJA/U4oOJXAMhpLz9hlFr+2IDJbW NOiDxr7Q4v6HyVUfSLIXTDkrhkS+ftKZMcUYWmsOm6qs21zUUGLyi8lCPm44EB1S 8W8CqOM6hII6JaDiaImCq9cJUGw7KDJHPh1On7xUXrKUNiFGPCd97GVQhtMpttPU ro7xeYEa6SygvdaWTR/xde/LqeaHDDN0Dn2Vj4COUxHnEmTWg3FOXQ3vBrsWqUR9 Sttxfsaao1YDPzVj4osax6+iMR4= -----END CERTIFICATE-----Generated at Sat Apr 5 13:45:06 2025 by rpki-client