$ rpki-client -vvf rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/0FFE5282122811F0AC9B4112C4F9AE02.roa File: 0FFE5282122811F0AC9B4112C4F9AE02.roa (raw, json) Hash identifier: qP7+uhy7LyLUv4jd3g7zWSe0a9FYblcgiMmuUDc4eAs= Subject key identifier: FB:98:BD:51:B9:8B:C0:B8:AB:BA:6C:F6:38:48:0C:3E:F3:44:5D:1C Certificate issuer: /CN=A919A1BE/serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730 Certificate serial: 0ABF Authority key identifier: EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/0FFE5282122811F0AC9B4112C4F9AE02.roa Signing time: Sat 05 Apr 2025 14:12:53 +0000 ROA not before: Sat 05 Apr 2025 14:12:52 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137396 IP address blocks: 103.107.76.0/22 maxlen: 24 2405:cf40::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 19:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2751 (0xabf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A1BE, serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730 Validity Not Before: Apr 5 14:12:52 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67f13a64-50ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:36:0f:5e:00:58:ae:ea:46:26:3c:13:e4: 60:ac:cf:c7:2b:51:e4:ff:2a:2d:86:ac:35:23:c2: f4:53:08:ba:9d:71:80:60:45:99:63:8f:1b:ed:3a: c7:68:99:fc:01:3d:81:74:ed:47:dc:18:2c:c2:a4: 60:d2:a5:bf:f3:4a:df:99:5b:e5:5f:00:0e:42:40: 35:92:97:7a:b5:c1:6b:a9:26:b3:5d:4c:2c:d0:16: 33:bb:18:ce:56:f9:8c:02:f3:17:74:01:07:4e:2a: e5:d0:a6:29:53:02:95:26:ab:5f:1f:99:63:49:3a: 79:f4:e3:09:8e:f7:0f:2a:5b:14:40:0f:f9:b0:3d: 76:c6:b9:65:91:bb:2b:8d:d7:29:39:80:bb:be:83: c6:23:e6:89:34:f1:ef:e4:2c:16:7a:5f:91:93:dc: 6b:3f:9c:42:3b:ef:26:d5:78:fb:ea:91:dc:08:0d: 2e:a6:42:a2:a1:ae:16:d5:fa:83:81:37:bf:f4:1c: cd:02:74:24:3c:f0:08:d4:e3:6d:e6:da:09:98:a9: b0:6e:a8:25:6f:7d:c2:33:89:dd:f9:ed:d5:98:b6: b9:32:6b:d3:97:ae:8f:5a:42:41:cc:b5:ef:f8:d7: a5:14:70:b7:ee:45:6f:05:28:f4:5b:98:81:cd:da: c6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:98:BD:51:B9:8B:C0:B8:AB:BA:6C:F6:38:48:0C:3E:F3:44:5D:1C X509v3 Authority Key Identifier: keyid:EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/0FFE5282122811F0AC9B4112C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.107.76.0/22 IPv6: 2405:cf40::/32 Signature Algorithm: sha256WithRSAEncryption 72:e0:b0:6e:7b:12:be:02:1b:5c:84:2d:71:ac:b2:51:ab:fb: 54:b0:34:ca:fa:ce:2c:5e:77:14:3f:e2:1e:d1:ff:8e:01:bf: 52:86:68:2d:6a:89:8a:1a:60:4c:af:86:24:33:13:39:0c:83: ba:19:55:a8:65:aa:9a:03:13:6f:db:54:fb:e9:16:41:8e:0c: bd:ff:7d:54:7d:44:2d:64:e2:08:e6:9e:cb:e8:80:40:81:0e: b5:b8:c7:78:cc:b1:b8:79:aa:c9:a7:9a:8b:79:5b:75:cb:f6: 0e:85:9a:b4:88:ad:f9:c3:a3:c8:9b:5f:fa:38:6a:e8:4d:0a: 78:bb:77:7b:cc:b6:36:87:4d:80:98:91:f1:5a:c3:72:6f:12: ca:1d:ab:d1:f0:ad:5e:0e:1d:f3:01:40:40:10:dd:b8:4f:26: 44:14:59:28:90:21:40:73:6d:99:c4:2d:03:05:ac:fe:46:25: 62:3f:a0:ec:5a:99:2d:44:93:d9:2f:d4:a9:3e:5a:07:f4:0a: f0:90:36:0a:e3:d1:b3:88:e8:6c:c3:21:59:2a:9a:69:74:ed: 90:8d:77:1c:ae:c4:b7:84:f5:fe:71:4f:90:5a:09:eb:d4:d1: 12:72:c5:f5:d2:aa:13:c2:e3:79:9f:b1:47:2f:e7:40:99:10: 09:28:d9:25 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUExQkUxMTAvBgNVBAUTKEVBQzI3MUQ2QkRERDU3QzMzMTlFNzFDODExRDg1MDQ3 NTM0QzQ3MzAwHhcNMjUwNDA1MTQxMjUyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YxM2E2NC01MGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnc2D14AWK7qRiY8E+RgrM/HK1Hk/yothqw1I8L0Uwi6nXGAYEWZY48b7TrH aJn8AT2BdO1H3BgswqRg0qW/80rfmVvlXwAOQkA1kpd6tcFrqSazXUws0BYzuxjO VvmMAvMXdAEHTirl0KYpUwKVJqtfH5ljSTp59OMJjvcPKlsUQA/5sD12xrllkbsr jdcpOYC7voPGI+aJNPHv5CwWel+Rk9xrP5xCO+8m1Xj76pHcCA0upkKioa4W1fqD gTe/9BzNAnQkPPAI1ONt5toJmKmwbqglb33CM4nd+e3VmLa5MmvTl66PWkJBzLXv +NelFHC37kVvBSj0W5iBzdrGIQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPuYvVG5 i8C4q7ps9jhIDD7zRF0cMB8GA1UdIwQYMBaAFOrCcda93VfDMZ5xyBHYUEdTTEcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTFCRS83MDA4NDc3RTRE NjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4TXhubkhJRWRoUVIxTk1S ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzSngxcjNkVjhNeG5uSElFZGhRUjFOTVJ6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUExQkUvNzAwODQ3N0U0RDYwMTFFQUFCNjM1Mzc0QzRGOUFFMDIvMEZGRTUyODIx MjI4MTFGMEFDOUI0MTEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJna0wwDQQCAAIwBwMFACQFz0AwDQYJKoZIhvcNAQELBQAD ggEBAHLgsG57Er4CG1yELXGsslGr+1SwNMr6zixedxQ/4h7R/44Bv1KGaC1qiYoa YEyvhiQzEzkMg7oZVahlqpoDE2/bVPvpFkGODL3/fVR9RC1k4gjmnsvogECBDrW4 x3jMsbh5qsmnmot5W3XL9g6FmrSIrfnDo8ibX/o4auhNCni7d3vMtjaHTYCYkfFa w3JvEsodq9HwrV4OHfMBQEAQ3bhPJkQUWSiQIUBzbZnELQMFrP5GJWI/oOxamS1E k9kv1Kk+Wgf0CvCQNgrj0bOI6GzDIVkqmml07ZCNdxyuxLeE9f5xT5BaCevU0RJy xfXSqhPC43mfsUcv50CZEAko2SU= -----END CERTIFICATE-----Generated at Tue Apr 22 23:52:48 2025 by rpki-client