$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/3C880EBABEEF11EF9178186BC4F9AE02.roa File: 3C880EBABEEF11EF9178186BC4F9AE02.roa (raw, json) Hash identifier: iJAvuEQuZJZzuKlMozj/voZPn9Nd6pZK++lpcpudEMw= Subject key identifier: 52:EF:1E:E5:E6:75:75:1E:4F:BD:26:FF:85:E3:7D:E1:71:BD:02:F9 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 0109 Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/3C880EBABEEF11EF9178186BC4F9AE02.roa Signing time: Fri 24 Jan 2025 09:07:04 +0000 ROA not before: Fri 24 Jan 2025 09:07:04 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 3258 IP address blocks: 36.50.84.0/23 maxlen: 23 103.47.186.0/24 maxlen: 24 103.53.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C Validity Not Before: Jan 24 09:07:04 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67935837-6ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:17:27:63:3c:e2:5b:d3:55:1b:19:86:ae: 6f:88:dd:04:4e:92:bb:07:7e:12:92:42:17:dd:16: 22:ff:3b:a6:8e:69:a2:4a:c3:73:7f:42:04:df:a8: 25:71:5f:02:09:c0:96:f4:e2:28:a6:80:46:da:e3: 7a:06:62:b8:c0:db:e2:90:e6:f0:09:a8:16:77:14: 5c:4d:48:c7:7c:2d:45:b4:c9:0b:d5:1b:4d:61:d0: 57:e1:2f:45:9d:44:8b:8c:f2:8d:6a:e4:00:ca:a7: 8f:19:e3:7a:a1:60:70:f1:64:05:90:93:e8:7f:97: f2:ae:79:6e:49:cf:29:d5:60:da:6f:92:65:b3:22: 17:9b:91:3e:03:a7:9d:64:a4:65:81:4f:f0:b3:a7: b1:3d:c4:fe:95:1d:1c:9f:ad:38:a4:91:a7:ae:36: bd:f2:cc:19:18:4e:5e:51:83:1c:05:68:c7:75:6c: 44:03:b6:3f:3d:c1:9f:1c:31:39:72:b1:15:90:c1: f4:19:65:e2:44:f7:34:d4:8b:4c:5b:6c:c3:34:c7: 0b:11:2b:61:0d:bd:d6:b3:d5:7f:ac:e9:ad:3c:ea: 3c:de:59:79:2e:77:70:11:b8:ba:b9:e7:1b:ba:c5: 15:48:d2:76:4e:e1:b2:1b:a0:e6:cf:92:e4:74:79: 79:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EF:1E:E5:E6:75:75:1E:4F:BD:26:FF:85:E3:7D:E1:71:BD:02:F9 X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/3C880EBABEEF11EF9178186BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.84.0/23 103.47.186.0/24 103.53.80.0/23 Signature Algorithm: sha256WithRSAEncryption 57:75:8f:ad:95:55:44:5c:87:cb:19:9c:41:7a:2c:50:4e:e8: 48:ac:40:c9:cb:46:58:12:87:3e:8c:50:a3:84:3e:4c:8b:6f: 55:5a:04:c0:93:d8:cf:a6:28:d6:30:79:e6:d9:94:ec:8c:f6: b2:cf:50:df:af:2a:62:83:5e:41:3e:b1:e5:6f:05:4a:05:57: 50:9c:0e:ad:1d:de:c7:c9:63:75:72:bb:8d:f0:85:b9:1f:6e: fd:ac:d6:a8:bb:8a:88:51:c4:7b:ac:fe:d8:ae:87:be:28:a2: 3d:80:20:4f:19:22:fa:e4:cd:e5:47:9a:5e:67:7e:ae:96:26: ce:f4:09:2b:c1:96:cd:62:c1:c3:5c:1e:a3:30:d0:72:9a:f7: 03:be:28:80:89:b3:48:51:79:8d:46:5a:2a:40:a9:d1:87:2f: 87:6c:eb:9a:2d:55:a7:b9:72:71:01:db:ce:dc:74:12:e8:9f: 44:d4:1a:a8:ca:37:ce:30:99:78:dd:5c:ba:37:3a:ff:78:25: b9:bc:6c:a7:35:b6:6b:c5:d8:2c:fc:bf:22:6b:4d:7d:9b:2c: df:33:5a:62:30:55:6b:49:53:1a:3c:ed:86:17:0c:63:9d:4d: b4:5a:fe:7a:51:f5:89:62:e5:cf:cd:42:bf:c1:cf:20:1b:6d: b9:2c:6c:a7 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjUwMTI0MDkwNzA0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkzNTgzNy02Y2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArq0XJ2M84lvTVRsZhq5viN0ETpK7B34SkkIX3RYi/zumjmmiSsNzf0IE36gl cV8CCcCW9OIopoBG2uN6BmK4wNvikObwCagWdxRcTUjHfC1FtMkL1RtNYdBX4S9F nUSLjPKNauQAyqePGeN6oWBw8WQFkJPof5fyrnluSc8p1WDab5JlsyIXm5E+A6ed ZKRlgU/ws6exPcT+lR0cn604pJGnrja98swZGE5eUYMcBWjHdWxEA7Y/PcGfHDE5 crEVkMH0GWXiRPc01ItMW2zDNMcLESthDb3Ws9V/rOmtPOo83ll5LndwEbi6uecb usUVSNJ2TuGyG6Dmz5LkdHl5hwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFFLvHuXm dXUeT70m/4XjfeFxvQL5MB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUVEMkMvMDAzNzNDNkM5QkJDMTFFRTg1MUFERDUwQzRGOUFFMDIvM0M4ODBFQkFC RUVGMTFFRjkxNzgxODZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAEkMlQDBABnL7oDBAFnNVAwDQYJKoZIhvcNAQELBQADggEB AFd1j62VVURch8sZnEF6LFBO6EisQMnLRlgShz6MUKOEPkyLb1VaBMCT2M+mKNYw eebZlOyM9rLPUN+vKmKDXkE+seVvBUoFV1CcDq0d3sfJY3Vyu43whbkfbv2s1qi7 iohRxHus/tiuh74ooj2AIE8ZIvrkzeVHml5nfq6WJs70CSvBls1iwcNcHqMw0HKa 9wO+KICJs0hReY1GWipAqdGHL4ds65otVae5cnEB287cdBLon0TUGqjKN84wmXjd XLo3Ov94Jbm8bKc1tmvF2Cz8vyJrTX2bLN8zWmIwVWtJUxo87YYXDGOdTbRa/npR 9Yli5c/NQr/BzyAbbbksbKc= -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:05 2025 by rpki-client