$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/C0E4A11270EF11EFA9113E35C4F9AE02.roa File: C0E4A11270EF11EFA9113E35C4F9AE02.roa (raw, json) Hash identifier: VfCdmQ/X3zww3cAEOvzsdLP4ylfmjt95PfZFCQi6HBE= Subject key identifier: E9:70:62:A5:EA:3C:22:BF:5C:E5:15:1C:9C:D3:35:80:A1:75:2F:EB Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Certificate serial: 021F Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/C0E4A11270EF11EFA9113E35C4F9AE02.roa Signing time: Fri 13 Sep 2024 04:49:34 +0000 ROA not before: Fri 13 Sep 2024 04:49:34 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 151106 IP address blocks: 103.227.210.0/24 maxlen: 24 103.227.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DFFA Validity Not Before: Sep 13 04:49:34 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66e3c45e-a9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:a6:65:70:d2:89:a0:77:9f:c2:cb:4f:80: 2c:18:c9:bf:94:06:6d:b9:69:75:92:1c:e4:8c:c5: 60:45:80:97:db:57:21:97:87:b4:f0:45:8e:5f:36: 54:73:00:99:0f:98:9e:a3:31:28:3d:56:4d:0e:63: 2a:1d:fd:f5:05:39:77:2a:63:cb:5d:08:f2:2c:fe: 91:87:82:24:c3:5e:46:83:a5:77:7b:7c:36:4a:ac: 37:3b:69:9c:f9:00:c7:8f:c7:67:b7:8e:9d:48:92: fa:15:26:21:38:8a:b3:f7:60:34:2b:cd:d9:e9:5d: 4e:b8:f2:40:ec:5b:b3:26:11:72:8f:c2:1d:fc:64: 57:71:2c:94:b9:74:42:64:af:ee:a5:80:68:10:96: 83:b9:24:67:ba:b0:57:14:24:df:53:25:94:b2:a8: 30:eb:c7:12:78:9a:1e:aa:f7:58:88:43:bd:44:7c: 38:7f:a9:ec:e2:b1:00:6c:6c:7e:94:a4:99:ab:3b: b4:60:a4:e5:87:d6:03:5e:8b:5d:a6:2b:2d:92:c3: 89:15:e9:1d:e2:02:7d:8c:c4:41:a6:2c:5d:48:1c: ad:61:0d:97:e4:0d:cc:dc:70:0f:7e:20:ec:c9:1d: 77:be:f2:e8:c5:57:98:f6:78:0d:ac:cd:87:87:30: d1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:70:62:A5:EA:3C:22:BF:5C:E5:15:1C:9C:D3:35:80:A1:75:2F:EB X509v3 Authority Key Identifier: keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/C0E4A11270EF11EFA9113E35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.227.210.0/23 Signature Algorithm: sha256WithRSAEncryption b4:5a:0d:02:d9:f5:6b:6b:5a:09:ac:30:d7:0f:63:7c:5d:12: dc:74:bb:e3:0d:7b:37:a5:e3:f2:f1:74:25:b9:63:81:d3:6c: 07:bc:86:3f:1f:97:7c:f4:90:41:70:5e:62:da:24:91:52:87: f7:d9:5c:b7:f3:ab:8e:43:29:d5:5c:b5:61:42:9e:42:da:ab: a6:04:b8:dc:6e:50:ba:dd:03:24:a3:e8:a3:6e:41:13:ad:42: 97:8e:5d:3b:93:38:d7:28:f1:c9:2b:51:36:80:9e:b9:8b:cb: 4e:64:68:b4:e1:a3:44:d2:77:e8:8a:16:fd:b0:cd:2e:58:5f: f8:98:7f:dc:d1:1a:1b:1a:30:a2:c7:15:d5:a7:50:28:de:08: 61:57:90:7b:2b:c9:f0:9d:d6:3f:f1:d0:6b:91:e8:10:4d:22: 88:2d:c2:c7:be:a8:26:da:ee:d9:55:66:94:32:7e:ca:a8:8c: 9c:2e:fa:38:79:ef:f3:da:84:6e:6e:1a:93:b7:9c:50:cb:bd: 58:4f:18:ec:f9:b8:17:bb:92:9d:b1:b1:11:ec:23:3a:30:3e: d6:12:e2:63:8b:9c:10:ec:fa:f0:75:60:b1:3d:cb:07:db:63: 15:00:4d:2d:b7:b2:77:71:8f:52:53:91:5e:c2:36:17:01:e3: 35:ff:fb:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGRkExMTAvBgNVBAUTKEY5RjdFOUI0Q0MzMUYzOTVDNUNEQjhGQUM5RjUyRkNB NTc1MjRERTEwHhcNMjQwOTEzMDQ0OTM0WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUzYzQ1ZS1hOWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYOmZXDSiaB3n8LLT4AsGMm/lAZtuWl1khzkjMVgRYCX21chl4e08EWOXzZU cwCZD5ieozEoPVZNDmMqHf31BTl3KmPLXQjyLP6Rh4Ikw15Gg6V3e3w2Sqw3O2mc +QDHj8dnt46dSJL6FSYhOIqz92A0K83Z6V1OuPJA7FuzJhFyj8Id/GRXcSyUuXRC ZK/upYBoEJaDuSRnurBXFCTfUyWUsqgw68cSeJoeqvdYiEO9RHw4f6ns4rEAbGx+ lKSZqzu0YKTlh9YDXotdpistksOJFekd4gJ9jMRBpixdSBytYQ2X5A3M3HAPfiDs yR13vvLoxVeY9ngNrM2HhzDRPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOlwYqXq PCK/XOUVHJzTNYChdS/rMB8GA1UdIwQYMBaAFPn36bTMMfOVxc24+sn1L8pXUk3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZGQS9DRTgxQTUxNDAz MkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1WEZ6Ymo2eWZVdnlsZFNU ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mZnB0TXd4ODVYRnpiajZ5ZlV2eWxkU1RlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRGRkEvQ0U4MUE1MTQwMzJDMTFFREE4Q0I0MDZFQzRGOUFFMDIvQzBFNEExMTI3 MEVGMTFFRkE5MTEzRTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn49IwDQYJKoZIhvcNAQELBQADggEBALRaDQLZ9WtrWgms MNcPY3xdEtx0u+MNezel4/LxdCW5Y4HTbAe8hj8fl3z0kEFwXmLaJJFSh/fZXLfz q45DKdVctWFCnkLaq6YEuNxuULrdAySj6KNuQROtQpeOXTuTONco8ckrUTaAnrmL y05kaLTho0TSd+iKFv2wzS5YX/iYf9zRGhsaMKLHFdWnUCjeCGFXkHsryfCd1j/x 0GuR6BBNIogtwse+qCba7tlVZpQyfsqojJwu+jh57/PahG5uGpO3nFDLvVhPGOz5 uBe7kp2xsRHsIzowPtYS4mOLnBDs+vB1YLE9ywfbYxUATS23sndxj1JTkV7CNhcB 4zX/+10= -----END CERTIFICATE-----Generated at Sun Feb 16 21:08:23 2025 by rpki-client