$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/CF272560413111ECB71E086AC4F9AE02.roa File: CF272560413111ECB71E086AC4F9AE02.roa (raw, json) Hash identifier: DFm7D2HD21ulEvvyR2LKRVZi0MMQ+cGXUer0vQ5hcd0= Subject key identifier: D1:F9:C8:EF:50:3C:40:16:D3:FD:AA:69:F0:90:7A:5F:17:9F:11:4B Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Certificate serial: 042C Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/CF272560413111ECB71E086AC4F9AE02.roa Signing time: Tue 03 Dec 2024 00:14:49 +0000 ROA not before: Tue 03 Dec 2024 00:14:49 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 23747 IP address blocks: 103.103.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 23:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1068 (0x42c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Validity Not Before: Dec 3 00:14:49 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674e4d78-0dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:27:43:d2:62:a6:6e:82:10:6a:ea:8e:a1:1c: 1d:98:86:59:f9:f5:32:f1:56:2b:48:58:0d:3e:d4: 78:c2:58:9f:70:e9:ce:36:9d:e3:74:e7:e5:f6:51: 1d:7b:d3:f8:8e:8a:11:45:73:49:a0:4b:ed:f3:b2: b1:f9:d7:2e:d3:49:b1:15:c7:78:42:31:0f:4c:d3: d6:be:29:34:8b:e4:4c:c8:e7:5c:39:f7:6b:da:08: e6:b8:2a:b7:b0:7f:b4:99:b7:55:4e:30:6c:6d:d8: bc:54:66:ea:2d:93:a0:89:3d:0f:a0:13:46:88:10: f8:e8:b8:6c:0c:ec:cc:75:ec:0e:fb:cc:ba:12:50: 04:af:e9:59:5f:6e:a9:bd:0c:b8:d3:fc:b4:0f:a2: 35:40:10:2e:85:74:d9:29:b6:3b:74:ad:c0:fe:6f: 89:f9:f5:d9:db:4d:f4:ed:6d:b9:ca:68:0a:10:91: 63:0d:bd:5c:12:90:34:37:cf:7f:39:1f:2d:07:92: 30:5b:08:fc:1b:39:0f:e7:5b:ea:17:8c:77:46:23: 4d:f4:97:38:9e:3d:a5:e3:22:b4:53:d1:d0:7a:c7: cc:22:f8:68:dc:02:98:60:5e:7d:83:b6:d2:04:6b: a7:d8:ff:be:11:a3:56:79:29:e0:f2:c8:2e:9c:de: 90:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F9:C8:EF:50:3C:40:16:D3:FD:AA:69:F0:90:7A:5F:17:9F:11:4B X509v3 Authority Key Identifier: keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/CF272560413111ECB71E086AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.103.148.0/22 Signature Algorithm: sha256WithRSAEncryption 21:de:4e:28:ef:7e:b8:ad:f1:d6:4d:f4:1c:71:7f:39:67:ed: 3c:bd:f5:77:1c:ff:2a:9d:9a:1d:01:7c:4d:85:aa:bc:41:2d: f9:29:50:69:fa:dd:ff:3d:86:6f:0a:ce:e1:0f:a3:79:4e:74: 36:b8:e9:87:29:99:79:74:a1:0e:57:fb:d6:f4:dd:e7:15:e9: 1a:a5:02:01:4d:de:98:f8:33:4c:c6:43:66:93:fe:5b:dd:f5: 35:71:88:1f:e1:3b:70:93:49:e6:8f:53:ff:56:cc:d2:01:e6: 75:da:0a:fd:5e:a3:24:72:8d:18:c4:ef:c0:28:0d:35:10:e4: 5f:ad:13:50:2a:ac:9a:00:76:8f:2b:1b:de:68:27:78:37:9c: d7:df:21:6c:b3:e9:d3:3e:9b:a0:08:80:f6:90:28:52:46:34: 5c:49:1e:70:e8:d6:dd:d8:d0:46:f7:3d:9d:6f:c6:62:56:78: c6:78:ae:c7:6a:30:08:cd:ca:5a:3d:91:c1:d4:3d:3a:33:3b: 2e:52:0d:8a:4b:17:0c:52:b8:7d:9c:24:03:7c:36:cf:9e:b2: a4:fd:96:af:54:56:33:c4:af:e1:97:f6:93:b6:71:43:06:fd: 8b:3f:11:2a:11:00:ce:9c:a0:5e:91:2a:2c:79:a1:ee:3a:53: f1:c6:f9:88 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMjQxMTAvBgNVBAUTKDMxRjM3ODNDN0ExRUQ3ODNGQzFGREE3NDFGNkE3NTI5 RDVBNUU2QTAwHhcNMjQxMjAzMDAxNDQ5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRlNGQ3OC0wZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSdD0mKmboIQauqOoRwdmIZZ+fUy8VYrSFgNPtR4wlifcOnONp3jdOfl9lEd e9P4jooRRXNJoEvt87Kx+dcu00mxFcd4QjEPTNPWvik0i+RMyOdcOfdr2gjmuCq3 sH+0mbdVTjBsbdi8VGbqLZOgiT0PoBNGiBD46LhsDOzMdewO+8y6ElAEr+lZX26p vQy40/y0D6I1QBAuhXTZKbY7dK3A/m+J+fXZ20307W25ymgKEJFjDb1cEpA0N89/ OR8tB5IwWwj8GzkP51vqF4x3RiNN9Jc4nj2l4yK0U9HQesfMIvho3AKYYF59g7bS BGun2P++EaNWeSng8sgunN6QeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNH5yO9Q PEAW0/2qafCQel8XnxFLMB8GA1UdIwQYMBaAFDHzeDx6HteD/B/adB9qdSnVpeag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIyNC81RkZDOUVGNjQx MjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0UDhIOXAwSDJwMUtkV2w1 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mTjRQSG9lMTRQOEg5cDBIMnAxS2RXbDVxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTlCMjQvNUZGQzlFRjY0MTI1MTFFQ0I3REY0NzdFQzRGOUFFMDIvQ0YyNzI1NjA0 MTMxMTFFQ0I3MUUwODZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnZ5QwDQYJKoZIhvcNAQELBQADggEBACHeTijvfrit8dZN 9Bxxfzln7Ty99Xcc/yqdmh0BfE2FqrxBLfkpUGn63f89hm8KzuEPo3lOdDa46Ycp mXl0oQ5X+9b03ecV6RqlAgFN3pj4M0zGQ2aT/lvd9TVxiB/hO3CTSeaPU/9WzNIB 5nXaCv1eoyRyjRjE78AoDTUQ5F+tE1AqrJoAdo8rG95oJ3g3nNffIWyz6dM+m6AI gPaQKFJGNFxJHnDo1t3Y0Eb3PZ1vxmJWeMZ4rsdqMAjNylo9kcHUPTozOy5SDYpL FwxSuH2cJAN8Ns+esqT9lq9UVjPEr+GX9pO2cUMG/Ys/ESoRAM6coF6RKix5oe46 U/HG+Yg= -----END CERTIFICATE-----Generated at Sun Apr 13 04:33:41 2025 by rpki-client