$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/61EE7C6C281211EA881CC32DC4F9AE02.roa File: 61EE7C6C281211EA881CC32DC4F9AE02.roa (raw, json) Hash identifier: HvkNMYRpxj5Pjk2b6IdbHOGMu5kf16FTiNfirlOJwkA= Subject key identifier: FC:F9:58:90:7C:A3:00:14:1A:7C:F1:DF:4E:EE:F4:D5:27:14:05:EF Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Certificate serial: 0B21 Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/61EE7C6C281211EA881CC32DC4F9AE02.roa Signing time: Thu 16 May 2024 20:28:56 +0000 ROA not before: Thu 16 May 2024 20:28:56 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 14618 IP address blocks: 103.229.8.0/24 maxlen: 24 103.229.9.0/24 maxlen: 24 103.229.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2849 (0xb21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D70A Validity Not Before: May 16 20:28:56 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66466c88-2938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:af:f6:3f:2d:29:0d:1b:56:1d:c5:e4:61:5f: 29:8e:4a:8c:ea:a5:34:71:19:e3:43:17:ca:fd:b8: 0a:12:2e:29:de:32:b8:58:cd:60:31:ec:9d:ee:0a: 39:36:a9:05:a3:4d:8a:dd:ea:06:b6:5d:8f:99:a2: b8:4c:b4:39:52:4b:97:26:0f:f6:24:17:d0:fe:7b: ca:32:50:38:5e:73:19:a7:fa:f1:34:c5:57:9b:63: 67:9f:c8:4a:66:a2:cd:00:cb:57:4d:51:a6:cd:b1: 5e:36:00:16:3b:7c:d3:1b:2f:27:a7:26:bc:97:4d: f3:7d:e2:f8:63:2f:d6:b5:ea:5f:41:fd:6d:52:93: e9:c7:22:8c:b3:31:79:51:31:a1:64:71:be:34:60: 3a:b6:b3:74:d5:0e:e3:ff:0f:6f:92:36:33:89:e3: 1d:8a:f3:6d:06:2a:2f:52:21:22:c3:06:15:43:0a: 58:c8:13:12:70:8a:d4:61:e9:d1:95:a7:a0:c6:03: e4:f6:40:84:0e:70:98:f7:27:6f:d9:9c:5e:97:c1: 02:72:20:db:19:f8:6d:90:28:9b:ee:1f:65:66:94: f4:a0:87:73:fe:42:38:a7:09:2e:7f:8d:fc:c2:fa: 76:82:43:a0:2e:6f:7d:06:c3:76:2c:71:e6:7a:93: 31:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F9:58:90:7C:A3:00:14:1A:7C:F1:DF:4E:EE:F4:D5:27:14:05:EF X509v3 Authority Key Identifier: keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/61EE7C6C281211EA881CC32DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.8.0-103.229.10.255 Signature Algorithm: sha256WithRSAEncryption 90:f4:45:0a:58:8b:0a:94:24:26:2c:54:bd:50:48:3b:15:32: e4:b3:ac:d6:91:24:b9:08:01:97:3a:24:03:88:fb:79:89:ac: f5:c0:34:ae:86:a6:64:e4:9a:7c:f4:9b:a8:f4:f6:40:42:82: 7c:97:8b:b3:10:b7:dd:dc:d6:43:c3:f9:cf:ab:e9:5d:01:62: a8:e9:67:b5:06:80:6a:a1:46:11:b9:89:28:06:4d:02:c8:a6: 78:ed:d4:2b:78:f2:c4:97:ad:06:58:59:49:01:33:0c:85:04: a2:15:60:55:22:76:bc:4b:6d:b2:23:26:8a:33:83:f2:6e:2b: 16:52:28:ef:62:31:73:7f:cc:21:81:dd:db:c4:e8:48:9d:b3: 46:9e:3c:75:58:76:ca:12:f3:be:e2:77:3a:d9:ee:68:32:e3: d5:38:c7:ff:24:c8:35:ff:7a:94:23:c4:7d:dd:eb:2d:1c:c7: 82:73:cd:1b:87:9c:ad:b1:43:0a:5d:c1:28:26:d0:37:73:d5: 01:01:b8:7d:43:e7:f3:46:18:9f:5c:1c:60:fc:23:f4:7c:83: 55:ec:b2:e4:0b:bd:01:12:e8:a6:a5:39:4a:85:1d:dc:66:36: 59:f6:66:74:96:b3:cc:ff:0a:5c:91:23:39:ea:52:7a:f7:5e: 13:e6:c4:d5 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICCyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ3MEExMTAvBgNVBAUTKEVEMzMwODIwRkZBQkQwQUIyODQxQkE5M0U5MDJFQTY4 Mjk5MkRBQTkwHhcNMjQwNTE2MjAyODU2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ2NmM4OC0yOTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6/2Py0pDRtWHcXkYV8pjkqM6qU0cRnjQxfK/bgKEi4p3jK4WM1gMeyd7go5 NqkFo02K3eoGtl2PmaK4TLQ5UkuXJg/2JBfQ/nvKMlA4XnMZp/rxNMVXm2Nnn8hK ZqLNAMtXTVGmzbFeNgAWO3zTGy8npya8l03zfeL4Yy/WtepfQf1tUpPpxyKMszF5 UTGhZHG+NGA6trN01Q7j/w9vkjYzieMdivNtBiovUiEiwwYVQwpYyBMScIrUYenR laegxgPk9kCEDnCY9ydv2Zxel8ECciDbGfhtkCib7h9lZpT0oIdz/kI4pwkuf438 wvp2gkOgLm99BsN2LHHmepMxAwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFPz5WJB8 owAUGnzx307u9NUnFAXvMB8GA1UdIwQYMBaAFO0zCCD/q9CrKEG6k+kC6mgpktqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcwQS80MUFCRDI5RTFC ODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBLc29RYnFUNlFMcWFDbVMy cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUTUlJUC1yMEtzb1FicVQ2UUxxYUNtUzJxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQ3MEEvNDFBQkQyOUUxQjg2MTFFQTlDOUFGMjQzQzRGOUFFMDIvNjFFRTdDNkMy ODEyMTFFQTg4MUNDMzJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEA2flCAMEAGflCjANBgkqhkiG9w0BAQsFAAOCAQEAkPRF CliLCpQkJixUvVBIOxUy5LOs1pEkuQgBlzokA4j7eYms9cA0roamZOSafPSbqPT2 QEKCfJeLsxC33dzWQ8P5z6vpXQFiqOlntQaAaqFGEbmJKAZNAsimeO3UK3jyxJet BlhZSQEzDIUEohVgVSJ2vEttsiMmijOD8m4rFlIo72Ixc3/MIYHd28ToSJ2zRp48 dVh2yhLzvuJ3OtnuaDLj1TjH/yTINf96lCPEfd3rLRzHgnPNG4ecrbFDCl3BKCbQ N3PVAQG4fUPn80YYn1wcYPwj9HyDVeyy5Au9ARLopqU5SoUd3GY2WfZmdJazzP8K XJEjOepSevdeE+bE1Q== -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:29 2025 by rpki-client