$ rpki-client -vvf rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/504E3B04911911E9BEF5F94EC4F9AE02.roa File: 504E3B04911911E9BEF5F94EC4F9AE02.roa (raw, json) Hash identifier: XFUDQ5YpEwqHQdCoCuZZOQlERoKAxzu3Gpexl3i5/54= Subject key identifier: BC:E8:F0:72:F6:35:DE:3F:9E:94:BD:E6:4F:B1:2E:2B:59:20:AC:64 Certificate issuer: /CN=A914275E/serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F Certificate serial: 0E72 Authority key identifier: 62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/504E3B04911911E9BEF5F94EC4F9AE02.roa Signing time: Fri 14 Feb 2025 18:36:37 +0000 ROA not before: Fri 14 Feb 2025 18:36:37 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 131447 IP address blocks: 103.208.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3698 (0xe72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914275E Validity Not Before: Feb 14 18:36:37 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67af8d35-cd7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:57:6e:3c:a3:89:45:eb:99:af:fc:fd:98:bb: 58:5d:3c:7e:e7:29:c6:22:91:21:0d:4e:4d:61:59: 22:1e:a6:02:be:58:b2:3a:99:c5:d2:28:1b:ff:9c: b7:da:9e:44:c6:78:ce:e0:e4:47:1b:f2:0e:aa:01: 0c:34:e4:de:4e:db:bc:dd:5c:c9:c2:46:e1:56:14: 1b:fa:23:7e:a5:b3:f4:1a:2a:f8:52:52:4e:2e:a9: f5:24:d2:b8:86:91:b6:bd:27:2f:f7:6f:84:95:3c: 4b:79:86:ab:98:9c:de:c3:20:90:d1:b6:4d:28:f2: 02:f4:bc:5b:fb:86:7c:60:93:e9:54:71:cf:d1:a9: e3:69:c2:37:33:3b:2c:07:1a:d0:35:37:26:f5:96: 3a:20:e6:66:59:e0:d1:65:9e:d6:26:88:8b:66:cb: 8e:a0:b5:ce:82:4c:7a:90:02:81:ea:50:d5:1e:ae: 01:47:0b:a2:08:3b:56:da:bd:62:34:0b:19:e3:2a: 68:39:7c:b3:62:83:6e:da:45:ed:5d:17:bb:27:0e: 41:05:c2:bf:64:72:2d:c8:d5:1f:b3:12:51:6e:01: 6b:e5:33:0e:bc:fa:76:13:67:41:13:19:04:e1:bf: 0f:da:02:34:ea:2f:1c:78:c7:2b:04:24:83:24:e8: 3b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E8:F0:72:F6:35:DE:3F:9E:94:BD:E6:4F:B1:2E:2B:59:20:AC:64 X509v3 Authority Key Identifier: keyid:62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/504E3B04911911E9BEF5F94EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.208.24.0/22 Signature Algorithm: sha256WithRSAEncryption b3:f0:cd:b1:ac:fa:a7:72:79:40:cb:52:e2:af:80:cf:65:2c: 9f:b5:26:50:c3:7e:ac:44:51:1a:d0:d4:4c:b4:67:28:dc:db: 34:0c:27:9f:5a:82:82:2f:1d:21:f3:fb:97:9f:93:18:a2:50: a0:ab:06:41:db:c0:97:08:bc:cf:8c:93:32:04:7e:0f:d0:b7: 03:38:b6:a6:dc:27:58:85:d3:15:b5:db:ac:d3:e6:87:1f:e4: 9c:11:7f:29:c3:a7:61:a8:c4:53:63:f3:79:7b:c1:de:ff:f7: 37:c8:ef:03:2b:19:2b:d9:89:e3:f6:7c:9f:f1:1e:b8:8e:e1: 84:11:fe:35:69:71:59:4a:df:e2:ae:7d:13:0c:83:98:1a:72: 1e:85:bf:22:ca:c1:83:e0:da:01:54:e5:13:af:46:51:cf:66: 91:3b:6e:20:a5:98:37:ae:93:03:4e:50:0c:4e:93:33:1b:0e: e9:9f:db:6f:27:51:54:19:c8:33:1a:68:47:7b:82:72:0a:d5: a3:a6:e3:78:2f:04:50:2d:cd:df:1d:e3:4e:57:f1:2c:99:20: e2:0c:bb:4e:dc:37:9d:af:ed:21:8d:db:b4:9f:5f:f0:45:d8: 49:58:a9:22:df:ec:e5:c5:d4:db:d9:4f:d2:c9:b1:23:09:09: 9e:e3:ec:77 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NUUxMTAvBgNVBAUTKDYyODQyMDdEMEQyN0EyRThCRjREMkVCMTRGQjEyOUNB RDRGNkNDM0YwHhcNMjUwMjE0MTgzNjM3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FmOGQzNS1jZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FduPKOJReuZr/z9mLtYXTx+5ynGIpEhDU5NYVkiHqYCvliyOpnF0igb/5y3 2p5ExnjO4ORHG/IOqgEMNOTeTtu83VzJwkbhVhQb+iN+pbP0Gir4UlJOLqn1JNK4 hpG2vScv92+ElTxLeYarmJzewyCQ0bZNKPIC9Lxb+4Z8YJPpVHHP0anjacI3Mzss BxrQNTcm9ZY6IOZmWeDRZZ7WJoiLZsuOoLXOgkx6kAKB6lDVHq4BRwuiCDtW2r1i NAsZ4ypoOXyzYoNu2kXtXRe7Jw5BBcK/ZHItyNUfsxJRbgFr5TMOvPp2E2dBExkE 4b8P2gI06i8ceMcrBCSDJOg7UQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLzo8HL2 Nd4/npS95k+xLitZIKxkMB8GA1UdIwQYMBaAFGKEIH0NJ6Lov00usU+xKcrU9sw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc1RS80REY3REIwNDkx MTgxMUU5OTQ3OTNDNERDNEY5QUUwMi9Zb1FnZlEwbm91aV9UUzZ4VDdFcHl0VDJ6 RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lvUWdmUTBub3VpX1RTNnhUN0VweXRUMnpEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI3NUUvNERGN0RCMDQ5MTE4MTFFOTk0NzkzQzREQzRGOUFFMDIvNTA0RTNCMDQ5 MTE5MTFFOUJFRjVGOTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn0BgwDQYJKoZIhvcNAQELBQADggEBALPwzbGs+qdyeUDL UuKvgM9lLJ+1JlDDfqxEURrQ1Ey0Zyjc2zQMJ59agoIvHSHz+5efkxiiUKCrBkHb wJcIvM+MkzIEfg/QtwM4tqbcJ1iF0xW126zT5ocf5JwRfynDp2GoxFNj83l7wd7/ 9zfI7wMrGSvZieP2fJ/xHriO4YQR/jVpcVlK3+KufRMMg5gach6FvyLKwYPg2gFU 5ROvRlHPZpE7biClmDeukwNOUAxOkzMbDumf228nUVQZyDMaaEd7gnIK1aOm43gv BFAtzd8d405X8SyZIOIMu07cN52v7SGN27SfX/BF2ElYqSLf7OXF1NvZT9LJsSMJ CZ7j7Hc= -----END CERTIFICATE-----Generated at Mon Feb 17 07:17:46 2025 by rpki-client