$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/EDAA86E4AD6D11EE83DA6253C4F9AE02.roa File: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (raw, json) Hash identifier: lAFnFIzcRDVgDsSYcjZRPgQLtWezbOK+1/I57oP5hYQ= Subject key identifier: EA:B8:4C:0E:8F:4D:1E:B3:31:11:19:C0:1B:39:AE:2B:E8:C7:F0:D8 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: FB Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/EDAA86E4AD6D11EE83DA6253C4F9AE02.roa Signing time: Fri 03 Jan 2025 04:07:31 +0000 ROA not before: Fri 03 Jan 2025 04:07:31 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 40065 IP address blocks: 103.94.185.0/24 maxlen: 24 103.99.115.0/24 maxlen: 24 103.99.178.0/24 maxlen: 24 103.99.179.0/24 maxlen: 24 202.91.33.0/24 maxlen: 24 202.91.34.0/24 maxlen: 24 202.91.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C Validity Not Before: Jan 3 04:07:31 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67776283-0442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:27:24:99:0a:65:23:f0:c9:3e:30:c5:a0: c3:2c:e9:67:8b:24:64:6f:04:af:f3:3e:aa:53:15: 4d:76:04:50:c1:b2:e6:7b:9b:44:4f:09:6e:2f:1d: a3:a7:44:7c:b7:b2:a3:6e:87:ec:b7:54:c6:4b:86: 9d:43:4d:d1:b1:59:5d:2c:b9:76:55:87:8a:d9:0b: 47:0b:13:29:95:07:8f:00:b6:7c:84:ca:a7:c7:bf: e2:a6:82:26:8f:2e:a8:f4:e6:47:d4:0c:1b:1c:4b: c8:3c:ba:ec:ea:5f:ae:26:b3:5e:fe:26:1a:17:bb: 82:4e:52:83:fd:ae:62:f4:7b:b2:47:4e:38:1c:c9: 9c:fe:f1:1c:ea:20:c6:a2:41:7c:8e:c2:a2:de:37: 65:34:9b:2c:1c:86:16:a3:48:b9:41:79:49:d4:28: 5c:e8:d6:44:c8:7d:19:b3:1d:a5:64:1b:e4:c5:e8: a6:cd:5b:ce:fc:67:f0:a8:d4:04:c6:2a:5c:b8:13: 7c:58:95:4b:52:45:b3:2a:c4:8c:62:af:ee:90:da: 60:e7:ac:43:7b:20:af:cc:cc:b0:0e:21:2c:d0:82: 74:9e:02:f8:2c:c1:24:51:4b:ce:3f:47:3d:1a:75: 47:83:05:f1:b8:00:93:0e:75:51:0d:2d:0c:c9:c4: 6b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B8:4C:0E:8F:4D:1E:B3:31:11:19:C0:1B:39:AE:2B:E8:C7:F0:D8 X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/EDAA86E4AD6D11EE83DA6253C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.94.185.0/24 103.99.115.0/24 103.99.178.0/23 202.91.33.0-202.91.35.255 Signature Algorithm: sha256WithRSAEncryption 6c:2a:18:2e:97:b2:87:a7:af:0a:a7:5e:2a:0a:4c:34:20:67: 68:c3:6d:a4:3a:5d:3f:51:be:44:ea:93:dd:89:1c:18:75:d6: 8d:0e:94:d3:32:7e:00:e1:7e:87:b7:93:06:98:1a:6f:24:39: 09:68:6c:5f:05:f6:f2:b2:d2:34:15:c3:3d:e0:84:5f:af:ed: 10:4c:df:e1:48:bf:15:a0:60:82:fd:53:06:a7:83:4c:38:13: 02:11:6b:a1:4c:6f:a1:db:15:5a:bd:c7:96:ab:37:a3:dd:75: fe:96:e7:0c:b2:e1:f4:7f:e1:cb:f0:ac:d4:62:4f:3b:a5:42: 0e:4f:74:8c:68:4b:c2:7f:48:34:cf:89:a2:17:ad:c9:15:b6: 0f:d5:af:b4:ba:22:8a:0a:d5:e4:54:97:50:cf:04:80:34:26: ef:bc:94:71:bc:af:47:3e:30:7b:69:c1:74:ae:fa:72:bf:ab: 5d:34:ac:93:dd:7f:63:5a:9c:3c:f1:61:b3:e0:4e:5b:6b:c4: 58:e3:5e:56:74:5d:91:c2:54:5f:7e:a6:e5:e5:be:6a:d6:75: f7:94:87:32:e3:1d:ec:12:16:ae:7a:e4:31:94:41:49:29:26: bb:87:ce:36:b0:f6:b9:4b:a0:b6:db:ca:34:43:22:85:33:d6: a4:30:8f:cc -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjUwMTAzMDQwNzMxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc3NjI4My0wNDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWonJJkKZSPwyT4wxaDDLOlniyRkbwSv8z6qUxVNdgRQwbLme5tETwluLx2j p0R8t7Kjbofst1TGS4adQ03RsVldLLl2VYeK2QtHCxMplQePALZ8hMqnx7/ipoIm jy6o9OZH1AwbHEvIPLrs6l+uJrNe/iYaF7uCTlKD/a5i9HuyR044HMmc/vEc6iDG okF8jsKi3jdlNJssHIYWo0i5QXlJ1Chc6NZEyH0Zsx2lZBvkxeimzVvO/GfwqNQE xipcuBN8WJVLUkWzKsSMYq/ukNpg56xDeyCvzMywDiEs0IJ0ngL4LMEkUUvOP0c9 GnVHgwXxuACTDnVRDS0MycRrawIDAQABo4ICrzCCAqswHQYDVR0OBBYEFOq4TA6P TR6zMREZwBs5rivox/DYMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUVEMkMvMDAzNzNDNkM5QkJDMTFFRTg1MUFERDUwQzRGOUFFMDIvRURBQTg2RTRB RDZEMTFFRTgzREE2MjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBABnXrkDBABnY3MDBAFnY7IwDAMEAMpbIQMEAspbIDANBgkq hkiG9w0BAQsFAAOCAQEAbCoYLpeyh6evCqdeKgpMNCBnaMNtpDpdP1G+ROqT3Ykc GHXWjQ6U0zJ+AOF+h7eTBpgabyQ5CWhsXwX28rLSNBXDPeCEX6/tEEzf4Ui/FaBg gv1TBqeDTDgTAhFroUxvodsVWr3Hlqs3o911/pbnDLLh9H/hy/Cs1GJPO6VCDk90 jGhLwn9INM+JohetyRW2D9WvtLoiigrV5FSXUM8EgDQm77yUcbyvRz4we2nBdK76 cr+rXTSsk91/Y1qcPPFhs+BOW2vEWONeVnRdkcJUX36m5eW+atZ195SHMuMd7BIW rnrkMZRBSSkmu4fONrD2uUugttvKNEMihTPWpDCPzA== -----END CERTIFICATE-----Generated at Sun Feb 16 21:55:21 2025 by rpki-client