$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5EDC5882D3BB11EF80C3AF80C4F9AE02.roa File: 5EDC5882D3BB11EF80C3AF80C4F9AE02.roa (raw, json) Hash identifier: PJbzNrEkpbuhikAan3mFGxS/ZJai+blTb1hTbzhhLXc= Subject key identifier: 05:E8:C5:D7:CF:4D:31:C4:65:2A:46:30:F8:AF:E5:CB:CB:25:AE:42 Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Certificate serial: 17 Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5EDC5882D3BB11EF80C3AF80C4F9AE02.roa Signing time: Tue 11 Feb 2025 07:20:23 +0000 ROA not before: Tue 11 Feb 2025 07:20:23 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 60781 IP address blocks: 103.49.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EEB Validity Not Before: Feb 11 07:20:23 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67aafa36-4b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:9e:89:96:88:6f:a1:d0:56:1e:f0:26:08: c8:96:84:d1:ab:c9:ea:44:32:6f:09:b0:48:d1:33: a3:5f:da:40:c5:df:fa:77:5e:82:e6:bc:c1:ec:50: 16:fc:68:04:a4:6e:f6:3b:d0:d7:5c:5f:a9:4f:e4: 7b:3f:3a:c5:7c:23:e7:96:98:7e:e9:86:7f:47:87: f0:88:f3:75:41:fb:0c:ec:d9:ae:d1:27:e4:e6:be: 52:65:45:2c:43:80:5f:ae:61:c7:33:97:96:fa:21: b4:15:d5:78:97:f8:67:6b:b4:c4:f8:48:56:16:ab: 07:7a:32:72:2b:6b:5a:5d:52:9b:fa:5d:fd:39:34: 82:be:f9:55:c3:fc:8e:c3:b1:69:fb:c4:e3:80:ee: c6:5f:ce:b5:67:d4:ab:de:c6:bf:04:5b:63:d2:fc: 08:a5:81:13:cb:2f:55:6c:61:36:3f:9c:59:53:4d: a6:6e:37:f1:92:06:3e:a7:ae:c9:1b:4b:16:81:08: 0f:e4:55:05:7d:13:07:63:ec:64:e8:28:2e:b7:b2: 27:bb:ae:73:f6:b9:ac:06:03:30:72:a3:50:e2:d0: ee:50:28:aa:5a:f6:ea:41:17:38:82:38:2e:d0:05: 32:79:60:6a:38:34:d1:90:b4:68:3f:c3:7d:b5:8f: 6a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E8:C5:D7:CF:4D:31:C4:65:2A:46:30:F8:AF:E5:CB:CB:25:AE:42 X509v3 Authority Key Identifier: keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5EDC5882D3BB11EF80C3AF80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.49.40.0/24 Signature Algorithm: sha256WithRSAEncryption b1:65:1e:65:f3:a2:41:ae:96:2a:98:90:e6:5d:fd:7b:c9:70: ec:a0:53:06:af:3a:0c:b3:bc:ba:b9:5e:a9:42:1c:ce:f4:2e: fc:52:77:5c:00:54:63:3f:db:a0:15:23:3c:be:de:a4:8b:95: 06:95:99:4f:be:17:2e:4f:e8:0a:27:3b:bf:3e:a5:eb:b5:3d: 16:cb:1e:b7:e1:60:51:b6:33:61:ea:e1:b3:32:4f:c2:f5:ef: 4c:66:f8:50:36:41:7a:2f:7f:fb:4c:0e:f4:b1:9d:c6:e4:f1: 9d:bc:62:29:6d:4f:a6:4f:9a:fe:90:2a:59:b5:f2:a2:26:ba: 8d:d3:a8:62:48:26:b4:e3:d3:2a:a6:5e:84:85:16:b7:be:98: 4b:57:41:4a:c0:ce:32:d4:1d:d7:25:94:b5:32:5a:88:a3:76: 93:c5:cf:03:3c:2d:4a:a2:98:08:53:e2:5b:77:59:c1:ed:9c: 6f:6e:fc:2c:dc:88:be:fd:c0:03:a5:ef:f2:fb:3c:34:38:25: cc:1e:00:b3:70:e9:3f:ff:af:d3:d8:a6:17:ae:e6:a7:18:b9: af:f9:a6:d3:3c:52:60:c8:54:f9:86:dc:65:87:f3:00:96:2b: 18:69:2e:bd:5a:4d:1e:75:47:b0:cd:01:2d:96:9f:34:de:2d: 30:a2:94:43 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0VFQjExMC8GA1UEBRMoREVGMzMxN0NCRDE0RDdEQkFBMjdCRkZFM0ZFNUE3QjhB NkVEQ0ZCOTAeFw0yNTAyMTEwNzIwMjNaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YWFmYTM2LTRiODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOe56JlohvodBWHvAmCMiWhNGryepEMm8JsEjRM6Nf2kDF3/p3XoLmvMHsUBb8 aASkbvY70NdcX6lP5Hs/OsV8I+eWmH7phn9Hh/CI83VB+wzs2a7RJ+TmvlJlRSxD gF+uYcczl5b6IbQV1XiX+GdrtMT4SFYWqwd6MnIra1pdUpv6Xf05NIK++VXD/I7D sWn7xOOA7sZfzrVn1Kvexr8EW2PS/AilgRPLL1VsYTY/nFlTTaZuN/GSBj6nrskb SxaBCA/kVQV9Ewdj7GToKC63sie7rnP2uawGAzByo1Di0O5QKKpa9upBFziCOC7Q BTJ5YGo4NNGQtGg/w321j2plAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUBejF189N McRlKkYw+K/ly8slrkIwHwYDVR0jBBgwFoAU3vMxfL0U19uqJ7/+P+WnuKbtz7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RUVCL0Y1N0M5NEIwRDNC QTExRUY5NDdCMDU4MEM0RjlBRTAyLzN2TXhmTDBVMTl1cUo3Xy1QLVdudUtidHo3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3ZNeGZMMFUxOXVxSjdfLVAtV251S2J0ejdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0VFQi9GNTdDOTRCMEQzQkExMUVGOTQ3QjA1ODBDNEY5QUUwMi81RURDNTg4MkQz QkIxMUVGODBDM0FGODBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGcxKDANBgkqhkiG9w0BAQsFAAOCAQEAsWUeZfOiQa6WKpiQ 5l39e8lw7KBTBq86DLO8urleqUIczvQu/FJ3XABUYz/boBUjPL7epIuVBpWZT74X Lk/oCic7vz6l67U9Fsset+FgUbYzYerhszJPwvXvTGb4UDZBei9/+0wO9LGdxuTx nbxiKW1Ppk+a/pAqWbXyoia6jdOoYkgmtOPTKqZehIUWt76YS1dBSsDOMtQd1yWU tTJaiKN2k8XPAzwtSqKYCFPiW3dZwe2cb278LNyIvv3AA6Xv8vs8NDglzB4As3Dp P/+v09imF67mpxi5r/mm0zxSYMhU+YbcZYfzAJYrGGkuvVpNHnVHsM0BLZafNN4t MKKUQw== -----END CERTIFICATE-----Generated at Fri Apr 4 19:38:20 2025 by rpki-client