$ rpki-client -vvf rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/188F1CDC1FFD11EBAB33D75FC4F9AE02.roa File: 188F1CDC1FFD11EBAB33D75FC4F9AE02.roa (raw, json) Hash identifier: NO1EJh2qKLFO5ebkuXSnG9nCqgcYg/T5QnNIaPx24Xs= Subject key identifier: 0D:9D:1A:91:B1:5C:94:E7:68:36:DA:5B:8A:8D:AE:4F:DE:0D:86:EE Certificate issuer: /CN=A919B7ED/serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20 Certificate serial: 0731 Authority key identifier: 8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/188F1CDC1FFD11EBAB33D75FC4F9AE02.roa Signing time: Mon 30 Dec 2024 21:40:28 +0000 ROA not before: Mon 30 Dec 2024 21:40:28 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 141403 IP address blocks: 103.158.51.0/24 maxlen: 24 103.175.233.0/24 maxlen: 24 2001:df5:4880::/48 maxlen: 48 2400:cba0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1841 (0x731) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B7ED Validity Not Before: Dec 30 21:40:28 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6773134b-1d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2b:f4:6f:65:cf:34:d4:d4:17:a6:a3:c4:23: ff:d0:0b:1e:d6:3f:6d:f3:40:bf:67:a2:e2:e8:74: fe:cd:08:fb:e2:d9:3a:de:93:87:82:e2:f7:eb:11: 4c:af:71:d8:9e:27:d4:b5:65:53:25:1f:7b:f5:4c: 65:a5:0d:15:dd:5a:32:0d:7b:53:ad:88:94:9f:69: cf:65:83:76:d7:5c:47:46:c4:7e:75:c2:c6:82:09: 46:6d:b3:c5:68:c1:03:75:8e:55:05:f8:f1:fb:94: a1:b3:e7:d0:45:68:4a:52:b9:2a:1c:a2:3c:51:c9: 87:28:f7:89:85:ee:5a:5a:38:32:57:85:56:e5:87: 90:6e:61:7c:fd:bd:02:b5:53:06:86:d4:4f:1f:66: 3d:6a:82:4c:32:13:a7:a2:e6:b2:dd:1c:a0:f4:a4: 3b:58:3a:93:67:38:02:bc:2b:08:d9:56:05:55:fc: 60:0e:14:bc:bd:4d:57:b6:54:e9:ba:c7:7c:3c:3f: 8e:24:e1:31:31:6b:39:71:e3:22:bf:da:47:8c:0c: fc:82:e3:4c:24:a5:5c:ec:f8:47:20:44:de:e3:4c: df:54:44:f5:6d:55:0e:c8:23:a4:39:af:5c:b5:67: ca:ed:93:eb:cd:43:6b:e0:4c:fd:6c:82:ed:02:cf: 09:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9D:1A:91:B1:5C:94:E7:68:36:DA:5B:8A:8D:AE:4F:DE:0D:86:EE X509v3 Authority Key Identifier: keyid:8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/188F1CDC1FFD11EBAB33D75FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.51.0/24 103.175.233.0/24 IPv6: 2001:df5:4880::/48 2400:cba0::/32 Signature Algorithm: sha256WithRSAEncryption 74:a8:c1:46:7e:8d:66:78:2d:93:3c:28:ac:29:72:53:96:85: f2:fc:6d:ee:9f:b0:cd:3d:8e:a9:3c:d0:38:0b:ce:dd:3d:6d: 1b:32:65:16:5c:d8:82:c7:79:8e:ad:7b:64:4f:74:82:e3:3b: dc:6f:38:d6:c2:57:ba:06:63:be:16:78:5a:be:8d:8a:6d:80: bc:1e:1d:6f:15:1f:df:0e:d5:25:1b:13:96:6f:4d:b1:8d:e5: 7c:8b:88:d5:07:97:06:87:79:86:a8:27:b5:1e:72:a0:89:1c: f4:25:22:59:e6:3a:4a:21:8a:45:ec:2f:81:ce:b4:72:67:58: 20:e9:5a:5d:bf:f3:42:fd:2f:45:b4:70:62:00:24:c0:82:aa: 41:e0:66:30:12:61:1e:b9:90:a9:b1:49:98:dc:43:b0:eb:42: bb:86:13:89:f1:94:22:6d:01:e1:ed:1d:2c:0d:66:44:e9:b3: 04:c6:6e:8e:0b:a2:6d:1d:b2:f4:e7:8d:21:c7:db:f5:ec:62: 2a:4a:ec:92:9a:41:d3:30:58:d8:b3:ac:a9:6d:7a:1e:22:51: d8:ba:d0:97:d5:97:e2:9f:c7:8c:ea:d8:aa:d4:ad:af:de:82: 96:9b:64:26:57:7c:e5:a9:2d:b5:2e:30:2c:3a:e4:2a:70:ec: 2f:3f:83:d8 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICBzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI3RUQxMTAvBgNVBAUTKDhGMUJGN0U3NDcyN0ExREU0MjAxQzRDMDUzNTVGRUIx N0YyMUJFMjAwHhcNMjQxMjMwMjE0MDI4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzczMTM0Yi0xZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCv0b2XPNNTUF6ajxCP/0Ase1j9t80C/Z6Li6HT+zQj74tk63pOHguL36xFM r3HYnifUtWVTJR979UxlpQ0V3VoyDXtTrYiUn2nPZYN211xHRsR+dcLGgglGbbPF aMEDdY5VBfjx+5Shs+fQRWhKUrkqHKI8UcmHKPeJhe5aWjgyV4VW5YeQbmF8/b0C tVMGhtRPH2Y9aoJMMhOnouay3Ryg9KQ7WDqTZzgCvCsI2VYFVfxgDhS8vU1XtlTp usd8PD+OJOExMWs5ceMiv9pHjAz8guNMJKVc7PhHIETe40zfVET1bVUOyCOkOa9c tWfK7ZPrzUNr4Ez9bILtAs8JewIDAQABo4ICszCCAq8wHQYDVR0OBBYEFA2dGpGx XJTnaDbaW4qNrk/eDYbuMB8GA1UdIwQYMBaAFI8b9+dHJ6HeQgHEwFNV/rF/Ib4g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjdFRC8zMDg4Nzg5ODFG M0UxMUVCQUEwMjJBMjFDNEY5QUUwMi9qeHYzNTBjbm9kNUNBY1RBVTFYLXNYOGh2 aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4djM1MGNub2Q1Q0FjVEFVMVgtc1g4aHZpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUI3RUQvMzA4ODc4OTgxRjNFMTFFQkFBMDIyQTIxQzRGOUFFMDIvMTg4RjFDREMx RkZEMTFFQkFCMzNENzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMBIEAgABMAwDBABnnjMDBABnr+kwFgQCAAIwEAMHACABDfVIgAMFACQAy6Aw DQYJKoZIhvcNAQELBQADggEBAHSowUZ+jWZ4LZM8KKwpclOWhfL8be6fsM09jqk8 0DgLzt09bRsyZRZc2ILHeY6te2RPdILjO9xvONbCV7oGY74WeFq+jYptgLweHW8V H98O1SUbE5ZvTbGN5XyLiNUHlwaHeYaoJ7UecqCJHPQlIlnmOkohikXsL4HOtHJn WCDpWl2/80L9L0W0cGIAJMCCqkHgZjASYR65kKmxSZjcQ7DrQruGE4nxlCJtAeHt HSwNZkTpswTGbo4Lom0dsvTnjSHH2/XsYipK7JKaQdMwWNizrKlteh4iUdi60JfV l+Kfx4zq2KrUra/egpabZCZXfOWpLbUuMCw65Cpw7C8/g9g= -----END CERTIFICATE-----Generated at Sun Apr 6 01:28:51 2025 by rpki-client