$ rpki-client -vvf rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/200E2B0059A011EC83255663C4F9AE02.roa File: 200E2B0059A011EC83255663C4F9AE02.roa (raw, json) Hash identifier: /R9JZ26EKIRVQE7fNMtoVyMx8zlmWtOsK2Jrv8Lzto4= Subject key identifier: AB:84:4B:CF:8C:D0:33:BB:E1:F0:6F:91:BB:13:7E:F4:DC:A0:95:B0 Certificate issuer: /CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C Certificate serial: 0476 Authority key identifier: 27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/200E2B0059A011EC83255663C4F9AE02.roa Signing time: Fri 10 Jan 2025 23:53:00 +0000 ROA not before: Fri 10 Jan 2025 23:53:00 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 147315 IP address blocks: 103.174.206.0/24 maxlen: 24 103.174.207.0/24 maxlen: 24 2001:df7:d480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 23:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1142 (0x476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919495D, serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C Validity Not Before: Jan 10 23:53:00 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6781b2dc-6a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:fb:11:ba:e2:9d:78:e5:28:03:85:e7:97: 6d:84:3a:99:85:0e:6c:86:b6:1b:9d:b8:36:37:05: 4c:7a:37:97:02:e5:c6:22:9c:ef:92:db:dc:04:2b: 0a:04:7b:20:29:b0:e8:8c:5c:4a:b1:3a:59:3f:56: 69:2b:e3:8c:aa:43:62:fc:5d:6a:22:98:b8:3d:8f: 0a:54:65:ba:45:45:36:a8:96:17:0e:b3:59:9a:23: 9e:2e:3a:66:f6:f8:5f:72:27:9f:30:6d:eb:46:55: a1:de:04:8f:28:8e:e2:0d:21:bc:95:60:e6:ee:0c: 2c:8e:fb:0e:02:a9:01:f2:9a:47:84:04:2c:45:b6: 7d:72:6e:2e:55:14:25:08:1b:90:47:94:9b:2e:95: d2:60:a4:b6:bf:53:67:4c:63:f5:88:c2:e7:26:73: 06:d2:d9:a5:2e:12:fc:90:c3:66:b0:1c:06:54:03: f2:c2:9a:d6:e1:66:75:21:ab:ae:9d:94:53:00:42: be:74:d7:86:a1:9a:42:52:30:41:4c:e2:b5:be:3e: 7a:db:77:d7:4e:9e:17:b2:27:14:bb:00:da:df:36: 6b:e7:8c:76:be:d0:10:4f:b7:e5:fa:98:fc:b8:31: de:fc:c8:e1:a6:7e:34:b7:b0:e8:cf:02:e5:eb:ec: 69:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:84:4B:CF:8C:D0:33:BB:E1:F0:6F:91:BB:13:7E:F4:DC:A0:95:B0 X509v3 Authority Key Identifier: keyid:27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/200E2B0059A011EC83255663C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.206.0/23 IPv6: 2001:df7:d480::/48 Signature Algorithm: sha256WithRSAEncryption 41:9a:63:54:b0:60:82:ae:48:ee:57:3f:da:e1:e4:0c:66:4d: c8:70:2d:ec:29:0f:8b:72:6b:4b:7f:8e:78:d7:0f:03:4e:d5: 46:df:57:e2:e3:53:94:a7:44:47:74:e0:2f:e2:89:5b:86:52: 37:c1:5e:0c:4b:f5:66:ad:54:63:c3:08:30:3b:10:1b:8d:97: 74:bd:94:52:a8:74:0a:ca:fc:25:ff:cc:c4:d7:8c:50:c2:2b: 37:dd:05:4f:cc:4b:b1:b9:10:90:db:a3:b0:78:d7:03:b5:06: 0c:08:39:2d:f2:20:26:87:73:10:9a:f9:56:7d:f5:53:9f:39: e1:29:89:f3:f8:fc:a5:51:c0:bd:9a:a0:58:90:1a:9e:56:f2: 7f:90:06:71:67:ad:50:81:f5:61:31:92:ec:0f:18:21:30:9d: 2e:5c:6b:ba:3d:92:53:9b:0d:d5:38:32:2b:f5:13:c2:12:92: 24:37:a7:cc:d6:11:31:b5:08:57:96:35:1e:ec:99:72:ba:ba: cf:93:82:e9:f4:78:3e:41:38:59:20:2b:8a:a9:92:a3:52:59: 6a:02:49:ac:f0:23:95:5d:f7:e9:09:32:12:75:60:68:a3:dd: 02:8c:7c:24:a3:e1:ca:65:85:be:30:2f:9b:13:69:49:15:3f: 88:34:36:19 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5NUQxMTAvBgNVBAUTKDI3MkY5RkRGMzAxNDU0RUI2QzgxRjMwMTZDMjA1QUY0 NDNDQUJENUMwHhcNMjUwMTEwMjM1MzAwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzgxYjJkYy02YTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBb7EbrinXjlKAOF55dthDqZhQ5shrYbnbg2NwVMejeXAuXGIpzvktvcBCsK BHsgKbDojFxKsTpZP1ZpK+OMqkNi/F1qIpi4PY8KVGW6RUU2qJYXDrNZmiOeLjpm 9vhfciefMG3rRlWh3gSPKI7iDSG8lWDm7gwsjvsOAqkB8ppHhAQsRbZ9cm4uVRQl CBuQR5SbLpXSYKS2v1NnTGP1iMLnJnMG0tmlLhL8kMNmsBwGVAPywprW4WZ1Iauu nZRTAEK+dNeGoZpCUjBBTOK1vj5623fXTp4XsicUuwDa3zZr54x2vtAQT7fl+pj8 uDHe/Mjhpn40t7DozwLl6+xpzwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKuES8+M 0DO74fBvkbsTfvTcoJWwMB8GA1UdIwQYMBaAFCcvn98wFFTrbIHzAWwgWvRDyr1c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDk1RC84REUyRTRCQTMy NjExMUVDOEM0RkRFMjZDNEY5QUUwMi9KeS1mM3pBVVZPdHNnZk1CYkNCYTlFUEt2 VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p5LWYzekFVVk90c2dmTUJiQ0JhOUVQS3ZWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTQ5NUQvOERFMkU0QkEzMjYxMTFFQzhDNEZERTI2QzRGOUFFMDIvMjAwRTJCMDA1 OUEwMTFFQzgzMjU1NjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrs4wDwQCAAIwCQMHACABDffUgDANBgkqhkiG9w0BAQsF AAOCAQEAQZpjVLBggq5I7lc/2uHkDGZNyHAt7CkPi3JrS3+OeNcPA07VRt9X4uNT lKdER3TgL+KJW4ZSN8FeDEv1Zq1UY8MIMDsQG42XdL2UUqh0Csr8Jf/MxNeMUMIr N90FT8xLsbkQkNujsHjXA7UGDAg5LfIgJodzEJr5Vn31U5854SmJ8/j8pVHAvZqg WJAanlbyf5AGcWetUIH1YTGS7A8YITCdLlxruj2SU5sN1TgyK/UTwhKSJDenzNYR MbUIV5Y1HuyZcrq6z5OC6fR4PkE4WSAriqmSo1JZagJJrPAjlV336QkyEnVgaKPd Aox8JKPhymWFvjAvmxNpSRU/iDQ2GQ== -----END CERTIFICATE-----Generated at Fri Apr 18 18:16:20 2025 by rpki-client