$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/319543069BBF11EDBFB6EE5DC4F9AE02.roa File: 319543069BBF11EDBFB6EE5DC4F9AE02.roa (raw, json) Hash identifier: cfEKqO3Kkr1IOuK1m9tr5GbLcR8ThlytGN+8R5F5cKc= Subject key identifier: 9D:EC:65:8C:B6:0C:5C:40:F4:CC:A0:38:7D:7B:03:52:0E:06:AC:A8 Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Certificate serial: 01DE Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/319543069BBF11EDBFB6EE5DC4F9AE02.roa Signing time: Tue 01 Apr 2025 02:58:31 +0000 ROA not before: Tue 01 Apr 2025 02:58:31 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 211415 IP address blocks: 103.86.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C621 Validity Not Before: Apr 1 02:58:31 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67eb5657-ef0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:38:37:3b:1e:b9:78:db:93:a2:61:4b:07:5d: 46:42:39:dd:44:f1:8b:3b:b9:b8:1a:cb:b7:b8:47: 0a:70:70:06:24:8d:48:e3:d2:51:b1:24:2d:9f:28: c9:a7:22:7f:58:eb:df:e1:49:82:0d:d6:bf:91:49: b9:54:96:90:55:2b:48:75:80:ab:a1:c5:1f:ab:f1: 17:a8:20:2a:91:e7:3f:dc:94:80:c2:45:94:b4:86: 80:4b:46:8f:6c:15:3b:d6:97:57:78:58:0d:2c:33: 98:f5:23:69:10:7d:ed:ca:a6:4b:bd:6d:12:a2:1b: d2:d8:bd:b2:bf:55:f2:3d:72:36:27:e9:9e:17:cc: d8:ae:cc:e4:11:84:f9:83:95:49:7c:4c:27:44:e3: 1d:b0:ec:2e:ed:2f:e4:e7:3a:8d:ba:20:ea:58:74: 6b:69:bf:bc:f2:9d:7d:00:94:d3:ab:89:69:8e:ba: 41:b1:37:c6:4b:82:a3:7d:12:4b:7c:2d:71:de:94: 97:fa:7a:6a:85:6a:f1:85:4e:47:32:c8:12:ac:20: 4a:bd:f9:b9:55:a2:29:23:35:ed:d6:6d:af:72:ad: 0e:a3:8e:92:b8:82:7b:23:ec:be:f5:54:65:28:b3: 41:78:3d:8c:35:1c:e9:d5:8c:45:d8:81:85:58:61: 1c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EC:65:8C:B6:0C:5C:40:F4:CC:A0:38:7D:7B:03:52:0E:06:AC:A8 X509v3 Authority Key Identifier: keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/319543069BBF11EDBFB6EE5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.121.0/24 Signature Algorithm: sha256WithRSAEncryption a0:e9:4e:03:3b:e4:6f:8c:4c:16:a6:af:d3:5a:38:de:6c:25: 87:e4:92:4e:c5:a1:bd:a1:0d:15:3c:ee:c7:70:46:de:62:0d: 83:a6:8b:bb:a5:3b:39:92:99:a4:99:ff:d4:d1:02:6c:c9:1b: d7:5f:47:9a:ef:43:98:5b:26:d2:fb:dc:76:a9:70:9d:87:19: 88:a7:f7:8d:d6:38:21:65:9b:d9:09:28:bb:bd:ff:a4:d3:a3: 29:f3:0d:82:26:8d:be:b8:1c:67:8e:08:0b:38:e5:eb:c0:dc: 13:d2:44:42:3a:66:c1:17:06:fc:e4:3a:20:df:dd:c0:79:59: 48:4c:0f:54:de:c8:46:29:0c:ed:84:ff:08:49:4b:0d:e4:40: 78:40:26:6e:45:b1:93:91:04:75:c8:3c:bc:43:8d:df:6a:9c: c3:65:2c:78:58:25:96:bf:ca:18:bd:33:4d:bd:e0:1a:87:89: f3:b1:9c:ed:6a:bc:e8:a5:8a:be:7d:e8:02:70:bc:3a:9e:ed: a2:7a:cb:d1:e7:fc:2c:49:e3:fd:f7:3d:e9:3b:49:50:93:4b: 29:c3:44:bf:e0:95:66:81:37:32:db:04:16:4e:06:3c:db:86: f4:7f:6f:3c:e9:bc:ad:0d:75:34:15:a6:c0:69:9b:77:f1:3f: c2:1c:3a:ae -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0 ODJDNkY5QjQwHhcNMjUwNDAxMDI1ODMxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ViNTY1Ny1lZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjg3Ox65eNuTomFLB11GQjndRPGLO7m4Gsu3uEcKcHAGJI1I49JRsSQtnyjJ pyJ/WOvf4UmCDda/kUm5VJaQVStIdYCrocUfq/EXqCAqkec/3JSAwkWUtIaAS0aP bBU71pdXeFgNLDOY9SNpEH3tyqZLvW0SohvS2L2yv1XyPXI2J+meF8zYrszkEYT5 g5VJfEwnROMdsOwu7S/k5zqNuiDqWHRrab+88p19AJTTq4lpjrpBsTfGS4KjfRJL fC1x3pSX+npqhWrxhU5HMsgSrCBKvfm5VaIpIzXt1m2vcq0Oo46SuIJ7I+y+9VRl KLNBeD2MNRzp1YxF2IGFWGEcBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ3sZYy2 DFxA9MygOH17A1IOBqyoMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0 MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM2MjEvRjdEMDBCRUU3NDM5MTFFRDk4NkQ3Mzg1QzRGOUFFMDIvMzE5NTQzMDY5 QkJGMTFFREJGQjZFRTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnVnkwDQYJKoZIhvcNAQELBQADggEBAKDpTgM75G+MTBam r9NaON5sJYfkkk7Fob2hDRU87sdwRt5iDYOmi7ulOzmSmaSZ/9TRAmzJG9dfR5rv Q5hbJtL73HapcJ2HGYin943WOCFlm9kJKLu9/6TToynzDYImjb64HGeOCAs45evA 3BPSREI6ZsEXBvzkOiDf3cB5WUhMD1TeyEYpDO2E/whJSw3kQHhAJm5FsZORBHXI PLxDjd9qnMNlLHhYJZa/yhi9M0294BqHifOxnO1qvOilir596AJwvDqe7aJ6y9Hn /CxJ4/33Pek7SVCTSynDRL/glWaBNzLbBBZOBjzbhvR/bzzpvK0NdTQVpsBpm3fx P8IcOq4= -----END CERTIFICATE-----Generated at Fri Apr 4 19:38:12 2025 by rpki-client