$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/C7D74E2CB9EA11EFBCC89752C4F9AE02.roa File: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (raw, json) Hash identifier: 3zCR20o/KfK/K9C/wTlGB6P7rn/kp0/zxFVVdoqdb8g= Subject key identifier: 8F:68:EC:34:0F:05:21:B6:A3:CE:87:E8:5A:49:59:C9:0B:34:81:7A Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Certificate serial: 0113 Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/C7D74E2CB9EA11EFBCC89752C4F9AE02.roa Signing time: Sat 14 Dec 2024 07:12:30 +0000 ROA not before: Sat 14 Dec 2024 07:12:30 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 400342 IP address blocks: 103.135.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E8BF Validity Not Before: Dec 14 07:12:30 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=675d2fde-00e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:90:cc:09:55:17:55:47:48:43:7d:09:39:40: 88:a6:63:70:cf:50:9a:1d:db:94:71:9c:9b:65:6b: 75:95:0f:fd:b2:7d:11:4e:76:aa:8a:95:2a:6a:5b: 75:ab:db:d3:d6:22:a9:20:4a:0d:d3:1a:77:54:b8: 80:06:4c:15:e8:93:62:41:1c:83:31:46:8e:98:8a: 6e:4f:bd:fb:b4:ef:ce:31:ba:98:85:07:5f:f6:e3: dd:12:c2:4d:17:ce:e0:4a:e0:72:e6:a2:ef:a2:5f: 98:b6:22:de:fa:8d:fc:d0:fb:41:db:d6:93:fa:9b: 29:2c:4b:4f:4d:f7:db:98:49:30:2b:54:ca:72:96: 5e:6f:db:81:7a:9e:a8:ac:74:8b:eb:85:23:f1:c3: 73:90:fc:5a:04:bb:f5:83:93:d9:49:87:9e:e5:c3: 50:97:26:b6:80:47:c5:ea:73:e8:cc:91:16:15:c9: 37:aa:ce:e3:ff:6c:28:a7:4a:f4:76:15:9f:96:22: a1:08:ad:ed:51:8d:7d:e2:92:d2:2f:7f:66:4f:c7: 87:23:c8:07:81:e4:11:1f:dd:21:9a:6f:d1:56:ba: 8f:f7:6c:22:3f:02:fa:58:b8:cc:86:fe:45:e3:b9: db:34:df:88:3a:86:23:57:76:98:67:a2:e8:99:e0: 91:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:68:EC:34:0F:05:21:B6:A3:CE:87:E8:5A:49:59:C9:0B:34:81:7A X509v3 Authority Key Identifier: keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/C7D74E2CB9EA11EFBCC89752C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.44.0/24 Signature Algorithm: sha256WithRSAEncryption 32:c7:f8:53:1a:c9:92:0c:e7:bf:42:80:e3:6d:be:b1:9b:e8: ba:ed:88:8b:cc:b8:ab:ff:b1:2d:2a:a5:12:19:f2:1d:65:9d: e9:ae:53:13:0e:75:85:32:cf:c3:ac:91:d7:89:ae:0c:9c:9c: 08:9e:7f:e5:67:73:de:f1:e0:bb:38:79:f1:f6:5b:7d:92:67: ea:d1:2d:90:55:33:22:87:6d:04:8e:7a:b9:46:cc:aa:bb:14: 5c:5b:48:e6:95:b5:4a:8c:c4:e6:43:19:cb:a0:21:fe:bb:91: 19:4f:8b:56:14:ae:52:2c:cb:41:58:3b:b8:5d:ea:b5:b2:1d: de:dd:c1:ff:7d:17:e8:06:c2:b5:e5:4f:14:ff:97:50:93:cb: 90:be:21:a9:f3:86:84:51:66:81:5a:e6:cd:c7:40:b4:b9:6a: 9a:6f:bc:f5:7b:d2:08:4c:a6:64:97:78:b8:47:50:00:45:13: d9:72:a3:4a:21:c7:ed:4b:d1:ec:3f:bb:5e:bc:9f:16:e4:e5: a0:71:ac:58:6a:98:0d:3a:05:28:0a:fb:1b:68:61:5e:cc:d5: 3f:e0:7b:f1:4d:50:de:e3:e2:a2:68:3a:5a:7a:6f:8b:cb:84: f1:3c:1e:e3:83:25:3e:18:b0:46:e9:1e:bb:70:45:58:40:c0: 13:f3:98:b5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz RTk5MDM5QTMwHhcNMjQxMjE0MDcxMjMwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzVkMmZkZS0wMGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZDMCVUXVUdIQ30JOUCIpmNwz1CaHduUcZybZWt1lQ/9sn0RTnaqipUqalt1 q9vT1iKpIEoN0xp3VLiABkwV6JNiQRyDMUaOmIpuT737tO/OMbqYhQdf9uPdEsJN F87gSuBy5qLvol+YtiLe+o380PtB29aT+pspLEtPTffbmEkwK1TKcpZeb9uBep6o rHSL64Uj8cNzkPxaBLv1g5PZSYee5cNQlya2gEfF6nPozJEWFck3qs7j/2wop0r0 dhWfliKhCK3tUY194pLSL39mT8eHI8gHgeQRH90hmm/RVrqP92wiPwL6WLjMhv5F 47nbNN+IOoYjV3aYZ6LomeCRRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI9o7DQP BSG2o86H6FpJWckLNIF6MB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEU4QkYvQjM4OUNGMzg0MUE3MTFFRTkyRTVCMzc4QzRGOUFFMDIvQzdENzRFMkNC OUVBMTFFRkJDQzg5NzUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnhywwDQYJKoZIhvcNAQELBQADggEBADLH+FMayZIM579C gONtvrGb6LrtiIvMuKv/sS0qpRIZ8h1lnemuUxMOdYUyz8OskdeJrgycnAief+Vn c97x4Ls4efH2W32SZ+rRLZBVMyKHbQSOerlGzKq7FFxbSOaVtUqMxOZDGcugIf67 kRlPi1YUrlIsy0FYO7hd6rWyHd7dwf99F+gGwrXlTxT/l1CTy5C+IanzhoRRZoFa 5s3HQLS5appvvPV70ghMpmSXeLhHUABFE9lyo0ohx+1L0ew/u168nxbk5aBxrFhq mA06BSgK+xtoYV7M1T/ge/FNUN7j4qJoOlp6b4vLhPE8HuODJT4YsEbpHrtwRVhA wBPzmLU= -----END CERTIFICATE-----Generated at Wed Feb 19 22:32:35 2025 by rpki-client