$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/27F7A40AE4FD11E990830B62C4F9AE02.roa File: 27F7A40AE4FD11E990830B62C4F9AE02.roa (raw, json) Hash identifier: 0CwL/9pIHvX1NQjOju2K8M/8kw+TsmpQ+hJ5ObtVylo= Subject key identifier: EE:AC:48:ED:93:64:90:65:89:21:5A:AE:A0:8B:D1:06:44:8C:6D:1E Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0D00 Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/27F7A40AE4FD11E990830B62C4F9AE02.roa Signing time: Thu 26 Dec 2024 18:16:28 +0000 ROA not before: Thu 26 Dec 2024 18:16:28 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 138482 IP address blocks: 103.126.216.0/22 maxlen: 24 103.200.36.0/22 maxlen: 22 103.200.36.0/23 maxlen: 23 103.200.36.0/24 maxlen: 24 103.200.37.0/24 maxlen: 24 103.200.38.0/23 maxlen: 23 103.200.38.0/24 maxlen: 24 103.200.39.0/24 maxlen: 24 123.253.64.0/22 maxlen: 22 123.253.64.0/24 maxlen: 24 123.253.65.0/24 maxlen: 24 123.253.66.0/23 maxlen: 23 123.253.66.0/24 maxlen: 24 123.253.67.0/24 maxlen: 24 2401:1040::/32 maxlen: 32 2401:1040::/40 maxlen: 40 2401:1040:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3328 (0xd00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44 Validity Not Before: Dec 26 18:16:28 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676d9d7c-5b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:f0:52:bb:78:8d:4f:17:a0:82:82:2b:d8: 35:de:31:4c:16:84:88:fb:63:79:dd:30:26:69:0a: 95:b6:58:de:06:7c:60:b3:75:d6:25:db:91:b5:f7: 32:35:29:13:6b:cf:57:19:e0:7f:f6:ae:36:03:a4: 62:63:bf:11:76:32:08:1e:cf:12:0b:ae:92:e1:44: aa:16:74:91:54:c0:c6:bc:88:81:9a:61:c8:0b:11: fe:71:fa:08:99:e8:32:5c:e5:a0:6c:a7:c8:71:76: 57:e8:e7:87:3c:bb:4c:c4:76:ce:50:3e:84:91:61: f9:e1:36:69:28:59:1d:00:0d:99:a4:59:8a:a0:59: 19:42:91:20:e6:d1:e2:f9:f7:86:7a:65:a1:fe:a8: 05:ad:e1:44:b9:6e:19:ad:66:eb:2e:3c:1d:a1:98: b7:d2:18:e1:eb:ab:85:a3:c2:6a:81:83:30:05:8b: 4e:f9:45:bf:af:6c:cf:d8:90:ad:d4:3f:a3:68:6e: 44:d7:1a:19:19:42:94:9b:cc:3b:0d:e9:e8:57:bc: 94:20:47:ac:ad:25:b9:88:52:9a:6a:21:4d:45:4b: 50:54:cb:5a:05:bf:8c:77:d0:c6:e7:2f:66:ac:0f: 86:a6:c1:ce:20:b7:d6:07:91:d3:5b:f0:1b:e7:29: 84:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AC:48:ED:93:64:90:65:89:21:5A:AE:A0:8B:D1:06:44:8C:6D:1E X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/27F7A40AE4FD11E990830B62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.216.0/22 103.200.36.0/22 123.253.64.0/22 IPv6: 2401:1040::/32 Signature Algorithm: sha256WithRSAEncryption 6c:62:a5:d2:88:3f:77:f6:87:f6:dc:0f:d6:8c:63:0d:f2:39: a3:d5:22:37:4b:34:55:cf:b2:e4:53:8f:74:ee:a0:07:36:bc: bb:23:b1:01:cd:13:4e:85:a1:11:c6:fb:ea:2c:b9:60:cb:24: 9e:7d:a0:7e:f6:89:18:17:8b:2e:18:41:a9:84:06:84:4d:af: a7:51:e4:c3:de:04:ec:e8:05:bc:d7:6a:95:ab:5c:e4:c9:a8: 49:60:52:6b:0d:8e:31:46:7e:b1:df:7b:7b:6d:f8:0d:48:dd: 83:a6:74:db:56:af:53:c1:40:e8:10:94:7c:16:48:fa:4d:9d: 2f:4b:be:20:e7:d0:7c:28:67:51:d9:3f:94:40:c9:0d:b1:21: fc:7a:04:e9:a3:7c:0f:fd:60:a4:35:d3:89:b0:9e:2a:bb:82: 4b:0b:43:07:45:c2:13:33:94:9d:cf:27:8e:33:df:54:af:e7: b9:84:c1:eb:3e:30:e9:5a:7a:ef:83:02:d0:c5:e2:0d:8b:3c: ee:cf:54:76:3c:ce:c8:a9:fc:74:00:24:cf:00:e2:76:1e:83: 85:31:cf:c0:ff:08:e7:8b:dc:d6:5d:99:46:e7:95:86:a7:a6: ce:f0:63:e4:00:bb:a5:8a:54:6d:c1:ab:bb:56:41:14:71:7f: 83:69:05:64 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjQxMjI2MTgxNjI4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZkOWQ3Yy01YjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5bwUrt4jU8XoIKCK9g13jFMFoSI+2N53TAmaQqVtljeBnxgs3XWJduRtfcy NSkTa89XGeB/9q42A6RiY78RdjIIHs8SC66S4USqFnSRVMDGvIiBmmHICxH+cfoI megyXOWgbKfIcXZX6OeHPLtMxHbOUD6EkWH54TZpKFkdAA2ZpFmKoFkZQpEg5tHi +feGemWh/qgFreFEuW4ZrWbrLjwdoZi30hjh66uFo8JqgYMwBYtO+UW/r2zP2JCt 1D+jaG5E1xoZGUKUm8w7DenoV7yUIEesrSW5iFKaaiFNRUtQVMtaBb+Md9DG5y9m rA+GpsHOILfWB5HTW/Ab5ymE+QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFO6sSO2T ZJBliSFarqCL0QZEjG0eMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRDNDQvMjlCNkJFREFFNEZDMTFFOUIxM0I0ODYwQzRGOUFFMDIvMjdGN0E0MEFF NEZEMTFFOTkwODMwQjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnftgDBAJnyCQDBAJ7/UAwDQQCAAIwBwMFACQBEEAwDQYJ KoZIhvcNAQELBQADggEBAGxipdKIP3f2h/bcD9aMYw3yOaPVIjdLNFXPsuRTj3Tu oAc2vLsjsQHNE06FoRHG++osuWDLJJ59oH72iRgXiy4YQamEBoRNr6dR5MPeBOzo BbzXapWrXOTJqElgUmsNjjFGfrHfe3tt+A1I3YOmdNtWr1PBQOgQlHwWSPpNnS9L viDn0HwoZ1HZP5RAyQ2xIfx6BOmjfA/9YKQ104mwniq7gksLQwdFwhMzlJ3PJ44z 31Sv57mEwes+MOlaeu+DAtDF4g2LPO7PVHY8zsip/HQAJM8A4nYeg4Uxz8D/COeL 3NZdmUbnlYanps7wY+QAu6WKVG3Bq7tWQRRxf4NpBWQ= -----END CERTIFICATE-----Generated at Mon Feb 17 08:17:36 2025 by rpki-client