$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/B49D829014F411EA96EC5874C4F9AE02.roa File: B49D829014F411EA96EC5874C4F9AE02.roa (raw, json) Hash identifier: V1tC0MfEENnmWJmQHsKngVqk62NvpQbP2E538Q1fAlM= Subject key identifier: 38:9C:84:34:20:97:BA:E2:CF:1C:F5:4E:A2:FC:34:23:52:CE:48:FF Certificate issuer: /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Certificate serial: 0BA7 Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/B49D829014F411EA96EC5874C4F9AE02.roa Signing time: Fri 20 Dec 2024 19:07:22 +0000 ROA not before: Fri 20 Dec 2024 19:07:22 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.145.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2983 (0xba7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BB5D Validity Not Before: Dec 20 19:07:22 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6765c06a-bbb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:d6:fd:ba:cd:8c:10:44:00:4b:7f:dc:11: d4:dc:a6:51:8a:92:09:d1:b5:78:b6:4b:aa:40:13: 3a:a4:32:19:7a:a7:fb:5f:76:cc:c3:b8:dc:08:75: 80:c2:51:57:3d:7b:12:ba:3d:ad:08:3c:53:86:2d: 0c:a4:37:ce:aa:51:d1:7d:fb:33:2c:05:81:93:8e: 8d:7d:93:58:8d:33:fd:5c:a1:a6:d8:20:27:74:41: 76:87:21:79:1b:d0:c0:7f:9e:a7:d0:46:1d:40:61: cf:cc:00:73:05:b6:2a:87:98:0a:e1:9f:00:e3:bb: 32:5c:d2:99:2d:49:70:d5:77:f4:fa:0d:92:6d:73: c3:be:f4:ec:3b:af:2b:81:6a:60:5a:d9:69:79:98: eb:0d:e6:49:cb:03:99:8d:fd:35:74:67:84:43:5c: 5f:23:65:57:4f:34:b5:12:99:c9:9d:c1:2a:1f:a7: bb:a0:15:c8:01:50:08:88:15:6a:d5:b5:85:58:0c: 2a:a6:b3:b3:24:b8:f9:7d:0f:66:ee:87:02:80:8d: 54:35:c9:97:0d:33:ba:10:a0:9e:d8:ce:c0:7e:22: 66:db:c2:8f:ae:46:6d:72:f0:06:94:d4:21:6c:87: 1f:b0:d1:be:4e:0c:60:b1:c2:65:0d:85:66:63:a6: d0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9C:84:34:20:97:BA:E2:CF:1C:F5:4E:A2:FC:34:23:52:CE:48:FF X509v3 Authority Key Identifier: keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/B49D829014F411EA96EC5874C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.192.0/24 Signature Algorithm: sha256WithRSAEncryption b4:55:2b:c0:97:5f:00:f5:f2:55:eb:f7:dd:97:dd:c3:89:17: 59:88:b8:00:57:5d:63:e3:93:64:f6:b8:7f:4a:fc:68:be:1f: a0:7e:0b:12:8d:5d:96:7c:77:0f:0e:53:6a:d2:cd:70:b2:36: 3b:7a:a6:43:ea:f1:4a:08:ef:08:0b:27:ae:c2:63:2d:3a:d4: fc:57:d9:f9:95:2f:b1:db:44:fa:64:63:b6:1e:97:12:f0:58: 8c:21:75:92:f5:25:55:80:3b:dd:4e:38:d1:cc:4d:d7:3f:2e: 82:b7:81:5e:59:91:a9:ec:81:14:a9:c5:f7:e9:90:59:0d:91: 00:1c:3b:9a:1a:61:97:b3:a2:76:a2:d2:aa:45:67:94:64:6c: 8c:15:f1:3e:61:2d:0e:3c:db:56:9c:15:90:16:67:8c:7e:a1: 6b:90:d2:f9:1a:28:ad:92:a4:b7:ea:ae:aa:9b:97:8a:12:b4: ef:c5:7c:44:19:a0:06:fe:a8:7a:98:9c:24:b6:58:a5:7c:fc: 06:ce:0d:09:1b:b8:0e:77:af:b7:58:50:a1:75:bb:fc:44:cc: 7e:ac:b5:e5:19:56:c7:06:43:1b:6a:d7:87:d6:b7:69:20:6c: 28:d4:e6:db:77:df:84:f7:39:38:38:ce:e9:41:36:05:06:a8: 37:a7:cf:98 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCNUQxMTAvBgNVBAUTKDkwRTgxNTQyMDY0M0I1REQ2MzkxMjgzRDY3NzQ0QTNB QkEzMDcyRDMwHhcNMjQxMjIwMTkwNzIyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY1YzA2YS1iYmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscnW/brNjBBEAEt/3BHU3KZRipIJ0bV4tkuqQBM6pDIZeqf7X3bMw7jcCHWA wlFXPXsSuj2tCDxThi0MpDfOqlHRffszLAWBk46NfZNYjTP9XKGm2CAndEF2hyF5 G9DAf56n0EYdQGHPzABzBbYqh5gK4Z8A47syXNKZLUlw1Xf0+g2SbXPDvvTsO68r gWpgWtlpeZjrDeZJywOZjf01dGeEQ1xfI2VXTzS1EpnJncEqH6e7oBXIAVAIiBVq 1bWFWAwqprOzJLj5fQ9m7ocCgI1UNcmXDTO6EKCe2M7AfiJm28KPrkZtcvAGlNQh bIcfsNG+TgxgscJlDYVmY6bQxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDichDQg l7rizxz1TqL8NCNSzkj/MB8GA1UdIwQYMBaAFJDoFUIGQ7XdY5EoPWd0Sjq6MHLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkI1RC9GMDI3Q0RCNDE0 RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRkMWprU2c5WjNSS09yb3dj dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tPZ1ZRZ1pEdGQxamtTZzlaM1JLT3Jvd2N0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEJCNUQvRjAyN0NEQjQxNEYxMTFFQTlBMDY4NDZCQzRGOUFFMDIvQjQ5RDgyOTAx NEY0MTFFQTk2RUM1ODc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkcAwDQYJKoZIhvcNAQELBQADggEBALRVK8CXXwD18lXr 992X3cOJF1mIuABXXWPjk2T2uH9K/Gi+H6B+CxKNXZZ8dw8OU2rSzXCyNjt6pkPq 8UoI7wgLJ67CYy061PxX2fmVL7HbRPpkY7YelxLwWIwhdZL1JVWAO91OONHMTdc/ LoK3gV5ZkansgRSpxffpkFkNkQAcO5oaYZezonai0qpFZ5RkbIwV8T5hLQ4821ac FZAWZ4x+oWuQ0vkaKK2SpLfqrqqbl4oStO/FfEQZoAb+qHqYnCS2WKV8/AbODQkb uA53r7dYUKF1u/xEzH6steUZVscGQxtq14fWt2kgbCjU5tt334T3OTg4zulBNgUG qDenz5g= -----END CERTIFICATE-----Generated at Fri Apr 4 23:54:19 2025 by rpki-client