$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/FE01F520B20011EFB577317FC4F9AE02.roa File: FE01F520B20011EFB577317FC4F9AE02.roa (raw, json) Hash identifier: KqY08d2zca48/rOCNSVyTHuUmPAeetDStFcxR2juINQ= Subject key identifier: E3:54:03:69:28:D1:04:FA:82:83:2F:A6:07:9B:E4:9C:38:BF:4A:66 Certificate issuer: /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11 Certificate serial: 1DC6 Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/FE01F520B20011EFB577317FC4F9AE02.roa Signing time: Wed 04 Dec 2024 05:31:21 +0000 ROA not before: Wed 04 Dec 2024 05:31:21 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 58424 IP address blocks: 43.255.112.0/22 maxlen: 24 103.5.124.0/22 maxlen: 24 103.206.200.0/22 maxlen: 24 116.214.24.0/23 maxlen: 24 116.214.30.0/23 maxlen: 24 2407:8180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7622 (0x1dc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B3BC Validity Not Before: Dec 4 05:31:21 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=674fe928-fe5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ab:3a:eb:c1:12:9b:72:98:0c:96:5d:d0:8f: d7:58:c5:90:c4:1b:19:f1:76:a8:6c:fa:13:88:3b: 12:cc:2b:ff:d6:fc:bb:dd:c6:82:89:8c:cb:6c:5a: 02:72:3c:a1:80:b4:c1:72:73:1a:92:2c:dc:4b:4e: fe:a5:7f:b3:7b:b5:77:de:35:fb:3f:c5:f5:0a:cd: b8:be:9a:09:ed:d4:09:c0:69:98:91:54:d4:41:3c: 5d:6d:27:3c:d1:30:85:c9:ed:b8:dd:2b:20:8b:be: cf:5f:e1:a5:95:8a:19:b5:1a:76:da:6a:ae:54:fd: ed:72:b0:3b:5e:e8:55:2e:c2:a5:99:bd:76:c1:ea: 4d:e5:df:8d:9b:e8:d5:20:bc:66:0c:50:74:3e:c1: 91:bb:80:24:4e:eb:7a:2f:0f:11:ce:45:0b:e8:c7: 54:64:ff:7f:8a:eb:e0:64:11:56:cd:5c:82:82:36: 41:b5:d2:21:44:43:5e:5b:42:5c:87:5f:2a:36:32: d9:a3:e2:d3:d6:8f:44:80:b8:d3:52:89:b0:07:59: 8a:b9:d3:b4:dd:1d:ea:a0:06:30:27:ed:09:d5:dd: ef:31:0f:c4:66:e6:dc:94:a7:a6:6d:c4:49:16:32: 10:73:03:a1:cc:6a:d9:fa:e1:14:54:73:eb:4c:20: 1c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:54:03:69:28:D1:04:FA:82:83:2F:A6:07:9B:E4:9C:38:BF:4A:66 X509v3 Authority Key Identifier: keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/FE01F520B20011EFB577317FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.112.0/22 103.5.124.0/22 103.206.200.0/22 116.214.24.0/23 116.214.30.0/23 IPv6: 2407:8180::/32 Signature Algorithm: sha256WithRSAEncryption 27:6e:46:73:2b:ff:25:3e:ea:3e:8b:fe:41:0f:1a:14:dd:af: 2e:43:88:81:b6:55:33:d9:04:92:b3:30:73:a5:31:93:67:73: b1:f0:f0:0b:a3:91:19:57:8e:45:b5:c4:cb:64:95:46:11:66: a7:c2:af:62:d2:3b:8e:02:9d:16:a7:3d:b3:f6:f1:3d:32:de: 69:b7:ca:c2:49:d9:ff:76:78:a3:d6:d2:d1:14:36:89:2e:b1: ee:04:1c:32:15:00:f5:69:ef:89:e7:1b:e5:53:f0:bd:ff:00: 41:91:1c:02:9f:48:29:e5:cc:c4:c8:77:be:4a:91:cc:7b:47: 49:a5:51:68:1a:36:d1:8c:6f:5b:c8:54:f4:57:41:11:59:85: b2:a7:18:83:18:41:e7:9f:37:33:0e:03:2d:91:f6:f3:22:5d: eb:90:ab:a2:c2:3f:60:54:d2:ef:95:d6:03:d8:6c:ea:20:f5: 7d:20:95:ad:36:00:f7:e8:34:df:f0:c3:5e:db:fd:06:70:f6: dd:d4:a7:f1:c3:50:f2:c8:c3:88:e6:42:41:dd:c7:b1:6e:a3: c0:51:8d:a8:02:22:eb:5b:20:49:2f:63:06:03:f4:21:cd:84: cb:fd:35:6d:d7:e5:7c:fa:81:8f:9f:10:1b:54:eb:9e:a7:cd: a1:b0:fa:7f -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICHcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzQkMxMTAvBgNVBAUTKEM0RkI5MTgxM0U3QkEwOTlEOTFFOUM0ODE3MjA5NEI5 OTA1QzBGMTEwHhcNMjQxMjA0MDUzMTIxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRmZTkyOC1mZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKs668ESm3KYDJZd0I/XWMWQxBsZ8XaobPoTiDsSzCv/1vy73caCiYzLbFoC cjyhgLTBcnMakizcS07+pX+ze7V33jX7P8X1Cs24vpoJ7dQJwGmYkVTUQTxdbSc8 0TCFye243Ssgi77PX+GllYoZtRp22mquVP3tcrA7XuhVLsKlmb12wepN5d+Nm+jV ILxmDFB0PsGRu4AkTut6Lw8RzkUL6MdUZP9/iuvgZBFWzVyCgjZBtdIhRENeW0Jc h18qNjLZo+LT1o9EgLjTUomwB1mKudO03R3qoAYwJ+0J1d3vMQ/EZubclKembcRJ FjIQcwOhzGrZ+uEUVHPrTCAcAQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFONUA2ko 0QT6goMvpgeb5Jw4v0pmMB8GA1UdIwQYMBaAFMT7kYE+e6CZ2R6cSBcglLmQXA8R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjNCQy8zODEyNDRGRThG OUIxMUU2QkVDNUNCMjVDNEY5QUUwMi94UHVSZ1Q1N29KblpIcHhJRnlDVXVaQmNE eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQdVJnVDU3b0puWkhweElGeUNVdVpCY0R4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUIzQkMvMzgxMjQ0RkU4RjlCMTFFNkJFQzVDQjI1QzRGOUFFMDIvRkUwMUY1MjBC MjAwMTFFRkI1NzczMTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAIr/3ADBAJnBXwDBAJnzsgDBAF01hgDBAF01h4wDQQCAAIw BwMFACQHgYAwDQYJKoZIhvcNAQELBQADggEBACduRnMr/yU+6j6L/kEPGhTdry5D iIG2VTPZBJKzMHOlMZNnc7Hw8AujkRlXjkW1xMtklUYRZqfCr2LSO44CnRanPbP2 8T0y3mm3ysJJ2f92eKPW0tEUNokuse4EHDIVAPVp74nnG+VT8L3/AEGRHAKfSCnl zMTId75Kkcx7R0mlUWgaNtGMb1vIVPRXQRFZhbKnGIMYQeefNzMOAy2R9vMiXeuQ q6LCP2BU0u+V1gPYbOog9X0gla02APfoNN/ww17b/QZw9t3Up/HDUPLIw4jmQkHd x7Fuo8BRjagCIutbIEkvYwYD9CHNhMv9NW3X5Xz6gY+fEBtU656nzaGw+n8= -----END CERTIFICATE-----Generated at Sun Apr 6 19:52:12 2025 by rpki-client