$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/7AC3594AC42C11EFBE188D53C4F9AE02.roa File: 7AC3594AC42C11EFBE188D53C4F9AE02.roa (raw, json) Hash identifier: naq7Y2e3SdjfPZY/qLsywWR5BqSXyvjx1MtYt1DDaXo= Subject key identifier: F7:98:8A:9C:D9:08:B9:E3:5D:9B:28:72:50:F1:3C:9E:5A:DF:67:0A Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: F9 Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/7AC3594AC42C11EFBE188D53C4F9AE02.roa Signing time: Fri 03 Jan 2025 04:07:29 +0000 ROA not before: Fri 03 Jan 2025 04:07:29 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 215384 IP address blocks: 36.50.84.0/23 maxlen: 23 103.47.186.0/24 maxlen: 24 103.91.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 06:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C Validity Not Before: Jan 3 04:07:29 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67776280-b2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1c:ca:0c:97:cf:11:78:40:a2:bc:15:3d:35: f1:88:a8:3b:e7:53:6d:94:06:ab:79:f1:e2:41:3d: 57:43:85:6c:92:71:17:27:ab:84:63:8b:ac:00:be: f5:02:56:c4:c7:e9:9e:78:e8:3c:81:87:2e:0d:3f: 1a:fe:2b:56:44:65:99:26:60:29:aa:c5:05:73:76: eb:02:7d:d7:5a:f4:b3:4b:22:2f:4f:1e:58:1f:7e: dd:b2:06:b1:25:2d:b2:94:5b:53:c3:48:e9:a9:49: 8e:e7:c9:8d:7e:a7:18:57:67:35:5b:7f:b1:c5:82: f2:8d:db:86:27:06:16:79:9f:db:37:29:62:72:0a: f1:56:e7:c8:14:0c:54:82:40:ef:7b:80:ac:3f:79: 7d:ac:fd:2b:ff:c8:52:f1:07:93:4b:43:0c:49:90: 2c:82:a1:13:e1:50:80:65:c6:bf:c4:5d:b2:32:1c: 8d:37:0c:2e:2d:56:99:e0:03:50:84:a1:a0:e1:0a: 63:90:23:a6:de:de:23:a4:97:89:61:54:85:67:fc: 0b:58:98:6b:e6:1a:06:00:18:e6:e6:5c:e6:2f:51: 12:4c:b0:39:57:fe:e9:a8:37:29:39:52:ed:64:49: 60:af:2e:83:b9:4b:59:66:b9:97:32:b6:25:ef:06: e6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:98:8A:9C:D9:08:B9:E3:5D:9B:28:72:50:F1:3C:9E:5A:DF:67:0A X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/7AC3594AC42C11EFBE188D53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.84.0/23 103.47.186.0/24 103.91.144.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:d2:3c:30:56:f8:ee:d3:27:1c:4d:eb:56:30:5d:a9:6a:2d: a1:ac:27:f6:8c:a4:06:62:64:cb:bf:d5:bf:e4:1c:4b:1d:1c: 82:c7:d9:e5:66:a0:54:87:46:b5:7d:22:39:40:99:94:fa:0c: 96:ab:28:9f:cb:9c:98:11:61:ef:ec:b6:a6:10:ba:10:0b:5b: 24:c0:89:16:0d:75:e4:0a:2d:64:0d:cb:87:d6:89:55:c0:20: 21:cb:c8:99:5f:a1:30:97:96:da:1d:42:1d:6c:03:7b:14:89: 90:1a:e6:62:49:1b:ba:bf:41:13:d5:1d:98:fe:55:47:f4:31: 7a:a6:cd:9a:6c:e7:cb:83:5d:a3:c8:55:08:82:f0:8d:18:b5: 65:28:2e:f5:b4:eb:bb:da:58:a5:97:e9:48:b6:39:e3:be:62: 02:1b:c0:83:ba:30:df:e3:0d:97:61:31:a1:80:3e:a6:ac:30: d0:95:f6:75:5f:db:a4:d3:66:c9:67:7a:29:74:a5:56:39:bb: 33:8d:3c:60:e3:43:96:a0:e8:0a:2c:30:79:c7:20:c4:47:53: 8f:92:9b:15:69:b8:f6:8f:3f:01:15:6c:d3:26:f6:59:d1:fb: 5a:07:dc:c6:e1:57:61:28:44:0b:31:3f:e8:8f:4d:41:ae:e8: 31:3b:36:6b -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjUwMTAzMDQwNzI5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc3NjI4MC1iMmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhzKDJfPEXhAorwVPTXxiKg751NtlAarefHiQT1XQ4VsknEXJ6uEY4usAL71 AlbEx+meeOg8gYcuDT8a/itWRGWZJmApqsUFc3brAn3XWvSzSyIvTx5YH37dsgax JS2ylFtTw0jpqUmO58mNfqcYV2c1W3+xxYLyjduGJwYWeZ/bNylicgrxVufIFAxU gkDve4CsP3l9rP0r/8hS8QeTS0MMSZAsgqET4VCAZca/xF2yMhyNNwwuLVaZ4ANQ hKGg4QpjkCOm3t4jpJeJYVSFZ/wLWJhr5hoGABjm5lzmL1ESTLA5V/7pqDcpOVLt ZElgry6DuUtZZrmXMrYl7wbmcQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPeYipzZ CLnjXZsoclDxPJ5a32cKMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUVEMkMvMDAzNzNDNkM5QkJDMTFFRTg1MUFERDUwQzRGOUFFMDIvN0FDMzU5NEFD NDJDMTFFRkJFMTg4RDUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAEkMlQDBABnL7oDBAFnW5AwDQYJKoZIhvcNAQELBQADggEB AF7SPDBW+O7TJxxN61YwXalqLaGsJ/aMpAZiZMu/1b/kHEsdHILH2eVmoFSHRrV9 IjlAmZT6DJarKJ/LnJgRYe/stqYQuhALWyTAiRYNdeQKLWQNy4fWiVXAICHLyJlf oTCXltodQh1sA3sUiZAa5mJJG7q/QRPVHZj+VUf0MXqmzZps58uDXaPIVQiC8I0Y tWUoLvW067vaWKWX6Ui2OeO+YgIbwIO6MN/jDZdhMaGAPqasMNCV9nVf26TTZsln eil0pVY5uzONPGDjQ5ag6AosMHnHIMRHU4+SmxVpuPaPPwEVbNMm9lnR+1oH3Mbh V2EoRAsxP+iPTUGu6DE7Nms= -----END CERTIFICATE-----Generated at Wed Feb 19 22:45:33 2025 by rpki-client