$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/4CC86698C4FA11EE86A51C0EC4F9AE02.roa File: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (raw, json) Hash identifier: 1L1EbJoORDKgeElorwmyrU76/atwwCYpeCr4PPGihVE= Subject key identifier: CE:5D:80:BB:21:2E:6C:D8:AC:A0:B3:5E:31:41:FB:24:47:D8:4B:C4 Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Certificate serial: 0415 Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/4CC86698C4FA11EE86A51C0EC4F9AE02.roa Signing time: Thu 05 Dec 2024 00:03:44 +0000 ROA not before: Thu 05 Dec 2024 00:03:44 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 141731 IP address blocks: 103.159.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1045 (0x415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C19A Validity Not Before: Dec 5 00:03:44 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6750ede0-ccc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:84:3d:6c:bd:f0:d7:4a:ec:8b:4a:e0:a9:3d: 72:ad:18:b5:9d:ba:28:27:e5:d5:67:4a:ce:46:6a: 8e:11:72:b2:be:84:02:50:01:96:2e:bc:44:62:db: 96:be:98:ca:be:51:26:1c:6a:48:5f:89:f0:94:e7: 67:2f:c4:14:d8:79:68:59:f0:19:0b:50:f4:73:68: 3a:d0:a0:41:04:19:01:11:41:b6:cf:fc:e1:d8:e8: 96:8c:d9:0a:8e:9a:dd:f1:ba:e6:7a:d6:eb:59:d1: 0a:b9:c2:89:10:61:5c:5f:b0:c1:04:f2:cd:62:28: 1a:ee:19:3c:05:d9:28:0f:b2:23:de:72:cc:a7:59: b8:80:c8:7a:21:b1:09:72:c0:5b:83:31:e4:08:ad: 95:16:d9:12:0f:23:d7:2f:df:8a:02:29:37:87:44: e6:15:92:b0:29:f5:b6:ce:e6:25:70:53:5f:1a:3d: 31:99:53:a0:0d:dd:cb:76:55:c2:f7:71:15:d4:cb: ce:66:f0:15:de:d4:45:29:73:6a:36:4d:e2:ce:0f: 20:82:d1:96:e2:3b:e4:f0:2e:66:6e:bd:23:95:25: c8:ea:74:f4:ed:ee:81:c7:ac:bc:b5:e7:36:47:ce: 4e:18:cb:29:7c:7d:09:d8:fa:d6:d0:02:d3:c2:00: 14:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5D:80:BB:21:2E:6C:D8:AC:A0:B3:5E:31:41:FB:24:47:D8:4B:C4 X509v3 Authority Key Identifier: keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/4CC86698C4FA11EE86A51C0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.126.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:92:67:40:b7:c8:e2:fb:12:c5:0c:8b:25:fd:dd:5d:d2:dd: 29:a1:25:1f:cc:8c:4e:6e:d2:b1:d3:51:de:94:3d:27:b8:17: fc:49:9e:cf:c8:49:92:96:a4:3c:ce:ce:9d:44:ee:1e:38:df: f5:d3:6a:72:0a:1a:6c:a7:ee:c0:ed:02:32:17:9a:82:e4:39: 6f:29:79:82:3b:04:39:15:dc:e7:c5:d0:e4:c2:e4:f6:46:e1: 97:c0:12:b1:04:9e:49:c7:5f:76:75:5f:26:4d:ac:a3:25:11: 44:70:79:86:2b:3b:79:95:11:4e:42:7a:8e:54:83:37:e1:9b: 9a:b4:f1:e8:a5:4b:c3:9c:5a:7a:f6:e8:f4:d7:fc:8b:ae:5a: 06:5c:c8:e9:4e:94:ba:57:e1:5a:42:8b:4d:14:b7:76:fa:16: dd:60:99:23:49:82:ba:37:85:da:a3:bf:85:c8:5d:eb:e8:38: 10:9a:5f:51:cf:4c:ba:eb:42:e2:c6:d9:41:3b:e6:66:cf:0f: 23:ed:59:8d:43:78:5d:ca:9a:e2:b6:c1:59:79:a0:31:00:75: 04:9b:46:3b:30:56:72:47:cc:07:45:8f:07:f0:d9:fc:8f:d8: 9c:f5:b2:47:92:f8:44:20:6e:20:96:3f:50:9b:ef:27:ad:bc: a2:26:66:90 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMxOUExMTAvBgNVBAUTKEQ4OUNGRjZEN0Q5NTUxQUU3MDREOTNFOTc1NTM2MTZD OERCMTNGNUUwHhcNMjQxMjA1MDAwMzQ0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwZWRlMC1jY2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4Q9bL3w10rsi0rgqT1yrRi1nbooJ+XVZ0rORmqOEXKyvoQCUAGWLrxEYtuW vpjKvlEmHGpIX4nwlOdnL8QU2HloWfAZC1D0c2g60KBBBBkBEUG2z/zh2OiWjNkK jprd8brmetbrWdEKucKJEGFcX7DBBPLNYiga7hk8BdkoD7Ij3nLMp1m4gMh6IbEJ csBbgzHkCK2VFtkSDyPXL9+KAik3h0TmFZKwKfW2zuYlcFNfGj0xmVOgDd3LdlXC 93EV1MvOZvAV3tRFKXNqNk3izg8ggtGW4jvk8C5mbr0jlSXI6nT07e6Bx6y8tec2 R85OGMspfH0J2PrW0ALTwgAUCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFM5dgLsh LmzYrKCzXjFB+yRH2EvEMB8GA1UdIwQYMBaAFNic/219lVGucE2T6XVTYWyNsT9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzE5QS8yNEFCMkMzRTRG OEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVhNXdUWlBwZFZOaGJJMnhQ MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJKel9iWDJWVWE1d1RaUHBkVk5oYkkyeFAxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUMxOUEvMjRBQjJDM0U0RjhEMTFFQzgxNTcxMjVGQzRGOUFFMDIvNENDODY2OThD NEZBMTFFRTg2QTUxQzBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnn34wDQYJKoZIhvcNAQELBQADggEBAFySZ0C3yOL7EsUM iyX93V3S3SmhJR/MjE5u0rHTUd6UPSe4F/xJns/ISZKWpDzOzp1E7h443/XTanIK Gmyn7sDtAjIXmoLkOW8peYI7BDkV3OfF0OTC5PZG4ZfAErEEnknHX3Z1XyZNrKMl EURweYYrO3mVEU5Ceo5Ugzfhm5q08eilS8OcWnr26PTX/IuuWgZcyOlOlLpX4VpC i00Ut3b6Ft1gmSNJgro3hdqjv4XIXevoOBCaX1HPTLrrQuLG2UE75mbPDyPtWY1D eF3KmuK2wVl5oDEAdQSbRjswVnJHzAdFjwfw2fyP2Jz1skeS+EQgbiCWP1Cb7yet vKImZpA= -----END CERTIFICATE-----Generated at Sun Apr 6 12:58:14 2025 by rpki-client