$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2BB36B4E0F7F11F0B174675DC4F9AE02.roa File: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (raw, json) Hash identifier: B3UEiEYw2WKPOdrQO2wqkgon16D3Efz81MuIIEKCBB8= Subject key identifier: 2F:26:A3:97:D0:87:30:D5:9B:1F:97:CE:3A:09:60:D3:86:1E:3B:04 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 076A Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2BB36B4E0F7F11F0B174675DC4F9AE02.roa Signing time: Wed 02 Apr 2025 06:08:36 +0000 ROA not before: Wed 02 Apr 2025 06:08:36 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 149014 IP address blocks: 103.20.220.0/23 maxlen: 23 103.20.220.0/24 maxlen: 24 103.20.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 15:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1898 (0x76a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412 Validity Not Before: Apr 2 06:08:36 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67ecd463-53bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a9:f1:00:75:17:73:67:dc:68:66:db:00:9c: 59:1a:ec:95:2c:bd:6e:a0:cf:bc:4b:33:4c:8b:56: be:71:a1:fa:8f:94:ca:94:1e:56:0b:ce:62:0d:21: 5c:2c:2f:5a:65:cc:d9:b9:82:c9:e7:96:97:a4:2c: 6c:19:6b:51:f1:75:b4:2e:3b:e3:3e:15:0c:b4:a7: cc:08:5f:e3:c2:af:ca:d8:ec:7e:e4:09:44:78:e2: f4:28:64:4b:be:ec:52:3a:2d:0c:9f:91:8c:b0:ce: 2a:2a:f0:59:aa:6a:b9:c8:b3:1a:0b:fb:16:f4:14: 85:ff:4a:5f:a9:d9:50:69:2a:70:88:63:d6:70:a6: b6:4e:09:97:d5:44:65:ab:ea:17:69:22:ee:92:f2: 1c:06:08:ab:9d:5c:96:76:14:12:9c:b9:cc:ab:22: ee:08:eb:a3:ff:86:ed:bd:65:9b:a0:51:b3:4a:a6: de:a2:0b:a3:d1:ec:82:7f:d0:18:04:07:2e:04:88: 88:cc:a2:50:ff:00:42:5c:83:f0:94:ff:77:0c:8f: d3:16:ae:9b:46:54:84:87:e0:a9:1a:a9:b2:aa:10: f8:9d:0c:ef:bf:09:e4:fd:68:61:4b:05:7c:7e:f0: 1a:45:a3:20:f3:89:63:68:fb:23:01:81:45:12:a3: 2f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:26:A3:97:D0:87:30:D5:9B:1F:97:CE:3A:09:60:D3:86:1E:3B:04 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2BB36B4E0F7F11F0B174675DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.220.0/23 Signature Algorithm: sha256WithRSAEncryption 50:69:75:c2:c5:67:a6:fa:31:34:7e:54:48:15:3f:5a:c2:9e: 54:40:8a:12:82:f1:4f:46:f2:bc:a1:94:91:47:0b:00:e1:76: 2f:0c:45:b8:9a:cd:24:77:5c:6f:d0:7f:b1:12:be:2a:c4:07: 7f:6b:fb:a1:b6:14:63:c4:fb:88:bf:cc:05:90:e1:2e:9e:ce: 95:09:1f:b0:13:4f:f2:c0:48:de:09:ef:7e:7f:80:22:ee:f1: fc:32:93:5d:44:ad:1c:33:0b:e2:00:18:62:17:cd:e0:91:a8: ec:6f:0c:d0:dc:03:97:4f:83:2c:5a:63:b5:9d:e2:af:e8:45: 35:79:66:b2:c3:e1:60:3a:b5:25:c7:a2:48:47:9d:ab:8e:55: b2:85:ce:f5:3e:6a:07:48:1c:54:d8:09:d1:54:3e:f4:9e:a6: 85:06:3f:7e:d3:a6:9e:db:00:48:1a:0e:17:5f:9c:58:f2:48: 2a:a5:79:8e:c0:69:db:c5:31:9e:5d:04:da:6c:b3:d4:0c:6e: 0e:f7:07:d4:08:40:02:ea:1a:49:75:1f:0f:9e:89:93:3f:86: 61:f2:f5:a8:b9:1d:71:6d:6c:6d:56:05:72:7f:74:f5:84:24: 3c:65:7f:1d:a9:45:90:7b:52:1a:c5:2d:a7:db:93:a2:fa:94: c7:38:e4:04 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUwNDAyMDYwODM2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VjZDQ2My01M2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtanxAHUXc2fcaGbbAJxZGuyVLL1uoM+8SzNMi1a+caH6j5TKlB5WC85iDSFc LC9aZczZuYLJ55aXpCxsGWtR8XW0LjvjPhUMtKfMCF/jwq/K2Ox+5AlEeOL0KGRL vuxSOi0Mn5GMsM4qKvBZqmq5yLMaC/sW9BSF/0pfqdlQaSpwiGPWcKa2TgmX1URl q+oXaSLukvIcBgirnVyWdhQSnLnMqyLuCOuj/4btvWWboFGzSqbeoguj0eyCf9AY BAcuBIiIzKJQ/wBCXIPwlP93DI/TFq6bRlSEh+CpGqmyqhD4nQzvvwnk/WhhSwV8 fvAaRaMg84ljaPsjAYFFEqMvWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFC8mo5fQ hzDVmx+XzjoJYNOGHjsEMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvMkJCMzZCNEUw RjdGMTFGMEIxNzQ2NzVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnFNwwDQYJKoZIhvcNAQELBQADggEBAFBpdcLFZ6b6MTR+ VEgVP1rCnlRAihKC8U9G8ryhlJFHCwDhdi8MRbiazSR3XG/Qf7ESvirEB39r+6G2 FGPE+4i/zAWQ4S6ezpUJH7ATT/LASN4J735/gCLu8fwyk11ErRwzC+IAGGIXzeCR qOxvDNDcA5dPgyxaY7Wd4q/oRTV5ZrLD4WA6tSXHokhHnauOVbKFzvU+agdIHFTY CdFUPvSepoUGP37Tpp7bAEgaDhdfnFjySCqleY7AadvFMZ5dBNpss9QMbg73B9QI QALqGkl1Hw+eiZM/hmHy9ai5HXFtbG1WBXJ/dPWEJDxlfx2pRZB7UhrFLafbk6L6 lMc45AQ= -----END CERTIFICATE-----Generated at Fri Apr 11 13:32:31 2025 by rpki-client