$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/073C2C80C4C411EEA7C8041DC4F9AE02.roa File: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (raw, json) Hash identifier: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow= Subject key identifier: 9F:5F:CA:97:87:B4:68:A5:2F:38:DC:A3:BA:75:5D:AC:AC:2F:87:6B Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0D02 Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/073C2C80C4C411EEA7C8041DC4F9AE02.roa Signing time: Thu 26 Dec 2024 18:16:30 +0000 ROA not before: Thu 26 Dec 2024 18:16:30 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 151629 IP address blocks: 103.89.24.0/24 maxlen: 24 103.89.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 18:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3330 (0xd02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44 Validity Not Before: Dec 26 18:16:30 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676d9d7e-cb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:97:2c:df:0e:18:79:7b:75:4b:da:ff:e1: de:20:2e:8d:b7:3d:a3:3b:ca:82:63:54:4a:64:9d: 4d:2c:41:91:d0:ab:6a:f7:b5:7e:ae:97:e0:c9:65: d3:73:a3:03:56:2a:bb:4d:5f:2b:8e:e3:6a:3a:9a: 99:04:55:cb:2a:3c:ea:ba:2b:ee:f1:74:c4:53:7a: f8:5b:5f:4d:df:30:1d:fc:53:c9:24:07:6e:19:64: c1:09:34:2a:fe:37:6c:49:e8:bc:7c:d3:e8:99:6f: ae:f1:0d:51:d3:51:35:b0:f8:3a:85:80:b4:7b:e6: b6:72:96:b4:9d:12:cd:1e:62:07:fc:95:53:de:a7: d4:f7:2e:4d:07:1f:e6:6b:c1:0a:0e:85:ad:8d:c6: ec:67:6c:85:23:39:04:ea:cf:e2:41:2f:c1:52:d7: 72:3e:86:f3:6b:44:a6:27:d0:a4:81:de:f5:cf:e8: a3:de:9b:02:02:30:e5:27:3a:2b:7f:30:29:0c:95: 25:1a:bf:03:d4:56:fa:48:55:aa:be:0f:5d:c9:03: cd:a6:5c:86:d4:80:a3:29:69:a6:23:55:11:5d:91: b2:5c:43:e2:04:d1:e4:42:ca:5e:01:15:0f:45:6d: e0:55:83:97:8f:b1:95:27:85:47:89:6d:2c:53:f1: 18:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5F:CA:97:87:B4:68:A5:2F:38:DC:A3:BA:75:5D:AC:AC:2F:87:6B X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/073C2C80C4C411EEA7C8041DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.89.24.0/23 Signature Algorithm: sha256WithRSAEncryption 26:64:a0:57:0a:c3:0c:51:dc:3e:a2:d7:3f:44:d4:6b:d1:0b: a8:b7:69:2f:71:8d:46:f7:8b:eb:56:c3:cf:cb:c7:02:dc:48: 98:6d:cc:ba:a9:07:5e:0e:24:47:bf:48:85:57:e0:8d:37:15: 8d:c4:9c:f2:fc:6c:94:0e:14:61:00:da:5c:6d:fa:82:e1:fb: 71:c7:65:40:f9:9a:f8:3c:84:a8:ce:60:05:7d:29:8e:ed:90: 2d:d1:66:6b:f5:59:b4:8a:75:41:85:20:d7:43:18:ec:db:c7: 4d:50:8d:de:17:5d:aa:7a:09:f3:2a:6b:cd:ed:18:8e:d2:ac: 8f:3a:8e:9a:49:95:c1:a3:b2:cb:6d:9a:af:ab:f3:38:70:d8: 22:2c:3e:64:53:39:ed:c0:21:aa:a4:cd:81:cb:96:3b:2d:2b: e8:fb:86:dd:19:f2:72:12:77:8e:8d:20:50:8d:49:63:bb:c5: 93:6d:89:81:da:5d:bc:34:2a:0d:78:c9:ab:80:95:84:f2:af: 8d:b2:5c:34:6c:b3:d3:87:9f:75:21:9b:ef:45:92:ac:94:08: f3:53:34:41:f7:de:eb:dc:66:42:62:46:f9:e2:6a:8f:22:f3: 96:8a:6c:a2:e4:a6:a8:4c:51:51:2d:2a:49:29:fe:ed:94:da: 87:fe:3d:0b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjQxMjI2MTgxNjMwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZkOWQ3ZS1jYjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YKXLN8OGHl7dUva/+HeIC6Ntz2jO8qCY1RKZJ1NLEGR0Ktq97V+rpfgyWXT c6MDViq7TV8rjuNqOpqZBFXLKjzquivu8XTEU3r4W19N3zAd/FPJJAduGWTBCTQq /jdsSei8fNPomW+u8Q1R01E1sPg6hYC0e+a2cpa0nRLNHmIH/JVT3qfU9y5NBx/m a8EKDoWtjcbsZ2yFIzkE6s/iQS/BUtdyPobza0SmJ9Ckgd71z+ij3psCAjDlJzor fzApDJUlGr8D1Fb6SFWqvg9dyQPNplyG1ICjKWmmI1URXZGyXEPiBNHkQspeARUP RW3gVYOXj7GVJ4VHiW0sU/EYpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ9fypeH tGilLzjco7p1XaysL4drMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRDNDQvMjlCNkJFREFFNEZDMTFFOUIxM0I0ODYwQzRGOUFFMDIvMDczQzJDODBD NEM0MTFFRUE3QzgwNDFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnWRgwDQYJKoZIhvcNAQELBQADggEBACZkoFcKwwxR3D6i 1z9E1GvRC6i3aS9xjUb3i+tWw8/LxwLcSJhtzLqpB14OJEe/SIVX4I03FY3EnPL8 bJQOFGEA2lxt+oLh+3HHZUD5mvg8hKjOYAV9KY7tkC3RZmv1WbSKdUGFINdDGOzb x01Qjd4XXap6CfMqa83tGI7SrI86jppJlcGjssttmq+r8zhw2CIsPmRTOe3AIaqk zYHLljstK+j7ht0Z8nISd46NIFCNSWO7xZNtiYHaXbw0Kg14yauAlYTyr42yXDRs s9OHn3Uhm+9FkqyUCPNTNEH33uvcZkJiRvniao8i85aKbKLkpqhMUVEtKkkp/u2U 2of+PQs= -----END CERTIFICATE-----Generated at Thu Mar 13 21:49:51 2025 by rpki-client