$ rpki-client -vvf rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/13294E34F1F411EFA2B4CF73C4F9AE02.roa File: 13294E34F1F411EFA2B4CF73C4F9AE02.roa (raw, json) Hash identifier: DAtInmCwbWzQcrNZi58XkRTqQ2PUuny0QfI6d1fbYeI= Subject key identifier: 6B:CA:FB:89:57:63:8C:35:38:97:77:46:13:80:51:03:FE:27:17:5F Certificate issuer: /CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A Certificate serial: 9C Authority key identifier: D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/13294E34F1F411EFA2B4CF73C4F9AE02.roa Signing time: Sun 23 Feb 2025 14:40:07 +0000 ROA not before: Sun 23 Feb 2025 14:40:07 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 138023 IP address blocks: 103.54.108.0/24 maxlen: 24 103.54.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C776 Validity Not Before: Feb 23 14:40:07 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67bb3347-1cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bd:ff:93:63:97:34:14:76:57:a9:72:db:71: b3:11:4f:f1:7b:4b:ba:06:a3:32:99:a8:58:e8:cb: 26:13:49:89:c0:26:8e:9a:75:18:30:70:b7:89:f3: 82:f7:7c:65:bd:40:e3:2d:8d:bb:ac:2e:bb:1c:d5: 37:40:0e:d6:c8:7a:74:9b:7f:47:bc:0f:f8:fb:54: 0d:19:8d:e7:2d:4f:22:cb:26:6d:a3:2b:17:d5:c8: 2a:81:1c:91:69:5f:e5:0c:de:f0:5c:84:46:7c:75: 33:fa:c6:27:5c:0a:b2:a3:37:21:85:88:04:69:a9: c9:5e:c8:f8:0e:15:41:2e:9d:ad:05:eb:9c:ee:7b: 64:2a:52:cd:41:9e:0e:3d:26:cb:d0:25:20:ef:7c: 90:8e:ff:49:6c:c0:b4:06:c7:c9:3d:3e:b0:c1:14: 2b:92:2f:10:1e:b6:af:3a:d8:d5:b4:27:2b:98:27: c4:94:8d:de:b3:26:22:14:2b:28:f3:da:03:c7:e5: b1:34:55:ea:78:77:ac:19:12:10:55:5b:d3:f6:5a: 65:e8:9f:8c:34:a0:ed:8f:00:29:90:e9:82:f4:d3: 0c:4b:3a:7f:4f:42:5f:14:20:84:71:54:2f:6a:f3: 30:c3:ec:8c:22:b2:78:c9:fb:1e:cc:a3:75:fd:15: 66:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CA:FB:89:57:63:8C:35:38:97:77:46:13:80:51:03:FE:27:17:5F X509v3 Authority Key Identifier: keyid:D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/13294E34F1F411EFA2B4CF73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.54.108.0/23 Signature Algorithm: sha256WithRSAEncryption 80:46:67:73:13:62:1c:7b:ab:87:4d:c9:13:f0:2f:0e:0d:f4: 35:ec:ee:97:71:c3:13:85:36:7e:cf:fe:52:a4:af:2b:31:ec: 79:66:a1:4b:29:4e:e8:d5:09:4a:14:5e:f1:47:e9:09:43:ec: 0a:12:5d:a2:51:56:a4:33:70:66:1d:ac:c1:28:e8:b7:a5:a1: e6:73:98:91:e6:89:8f:ae:90:77:75:05:1f:0f:7c:7d:4b:79: eb:30:3e:e8:be:e8:6a:2f:14:83:8d:4d:7b:b7:22:e3:f8:bb: 3d:e3:64:39:42:0f:08:1f:e0:21:11:80:88:fe:07:5a:78:79: 4c:63:82:9d:fa:9a:5e:3e:fe:6e:33:15:dc:bd:fe:24:cb:9d: fb:4b:21:2f:09:b3:6f:8e:5d:aa:bc:45:cc:b2:98:d8:74:32: 49:e6:89:4c:a6:f1:2e:8a:c7:6b:00:6a:2c:ed:2b:68:56:cf: 0a:a2:61:40:ff:9a:20:9b:66:ae:d4:65:a6:ce:70:1c:12:73: 0f:84:a1:f0:c7:c6:bc:38:86:b3:64:99:33:71:99:23:f3:b5: 00:2d:1a:9e:78:24:8f:47:2b:e9:e7:b3:c7:a9:41:91:ca:1d: 5a:90:1a:81:f0:5a:3a:9e:0f:97:6a:35:e1:58:23:65:dc:1e: 35:f4:08:0c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3NzYxMTAvBgNVBAUTKEQ3QzRERTEzNjg2RjQzNTU4NTM2ODM5MTVFNTQxREVE NzUzQUVCM0EwHhcNMjUwMjIzMTQ0MDA3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JiMzM0Ny0xY2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA073/k2OXNBR2V6ly23GzEU/xe0u6BqMymahY6MsmE0mJwCaOmnUYMHC3ifOC 93xlvUDjLY27rC67HNU3QA7WyHp0m39HvA/4+1QNGY3nLU8iyyZtoysX1cgqgRyR aV/lDN7wXIRGfHUz+sYnXAqyozchhYgEaanJXsj4DhVBLp2tBeuc7ntkKlLNQZ4O PSbL0CUg73yQjv9JbMC0BsfJPT6wwRQrki8QHravOtjVtCcrmCfElI3esyYiFCso 89oDx+WxNFXqeHesGRIQVVvT9lpl6J+MNKDtjwApkOmC9NMMSzp/T0JfFCCEcVQv avMww+yMIrJ4yfsezKN1/RVm2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFGvK+4lX Y4w1OJd3RhOAUQP+JxdfMB8GA1UdIwQYMBaAFNfE3hNob0NVhTaDkV5UHe11Ous6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3Ni85Mjk3QzQ1MjA4 NkIxMUVGODI2RDNCMTRDNEY5QUUwMi8xOFRlRTJodlExV0ZOb09SWGxRZDdYVTY2 em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE4VGVFMmh2UTFXRk5vT1JYbFFkN1hVNjZ6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUM3NzYvOTI5N0M0NTIwODZCMTFFRjgyNkQzQjE0QzRGOUFFMDIvMTMyOTRFMzRG MUY0MTFFRkEyQjRDRjczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnNmwwDQYJKoZIhvcNAQELBQADggEBAIBGZ3MTYhx7q4dN yRPwLw4N9DXs7pdxwxOFNn7P/lKkrysx7HlmoUspTujVCUoUXvFH6QlD7AoSXaJR VqQzcGYdrMEo6LeloeZzmJHmiY+ukHd1BR8PfH1LeeswPui+6GovFIONTXu3IuP4 uz3jZDlCDwgf4CERgIj+B1p4eUxjgp36ml4+/m4zFdy9/iTLnftLIS8Js2+OXaq8 RcyymNh0MknmiUym8S6Kx2sAaiztK2hWzwqiYUD/miCbZq7UZabOcBwScw+EofDH xrw4hrNkmTNxmSPztQAtGp54JI9HK+nns8epQZHKHVqQGoHwWjqeD5dqNeFYI2Xc HjX0CAw= -----END CERTIFICATE-----Generated at Sun Apr 6 04:11:02 2025 by rpki-client