$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/1DBF3F2E69BF11EF9B52775AC4F9AE02.roa File: 1DBF3F2E69BF11EF9B52775AC4F9AE02.roa (raw, json) Hash identifier: oEcJmw9GBlLPpcX10UQcg9xp3RCQZJ+XOY7mrRgn4Bk= Subject key identifier: 87:25:49:63:86:84:8A:68:02:3C:FF:C0:E7:DD:D5:62:FC:D1:4D:D4 Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Certificate serial: 038F Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/1DBF3F2E69BF11EF9B52775AC4F9AE02.roa Signing time: Thu 05 Dec 2024 01:15:14 +0000 ROA not before: Thu 05 Dec 2024 01:15:14 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 21859 IP address blocks: 43.255.116.0/24 maxlen: 24 103.103.246.0/24 maxlen: 24 103.103.247.0/24 maxlen: 24 103.239.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 00:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 911 (0x38f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916557B Validity Not Before: Dec 5 01:15:14 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6750fea2-e132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b1:bd:b2:b5:e5:cf:a8:77:ed:54:6a:09:36: 3a:5b:a4:b7:e4:00:2c:ca:9d:7c:ae:a2:7c:40:ba: ac:0e:bb:9a:26:f7:15:d0:b1:39:16:1d:9b:11:05: b2:dd:e5:fc:ff:f5:08:6c:00:5a:54:c5:7e:93:21: 3c:3a:8b:8a:31:fe:e2:3f:25:c1:72:01:be:16:93: de:29:11:20:54:77:ef:08:8a:34:21:15:67:10:e5: 53:66:e7:aa:64:cb:1c:f3:8b:e5:e9:99:fd:ff:3f: ac:ce:68:38:63:6f:7b:61:f4:08:1c:27:8d:f3:db: 70:fc:77:ad:57:c4:32:9e:51:7b:05:d2:86:0e:4c: 5d:a3:26:78:8a:e3:63:09:42:cb:84:3a:8d:03:e9: 03:0f:89:d6:bb:f3:f6:c9:83:3d:73:aa:a3:09:28: 56:69:1a:03:af:6a:bc:3f:67:d4:a6:f4:08:bd:12: 50:fc:fb:3d:c6:c9:4b:78:34:e6:3b:fc:b4:e1:a7: 59:15:6f:99:31:fb:e9:ba:3e:91:e0:e7:47:c6:68: f6:68:4b:14:ba:9f:47:0f:54:49:88:af:5f:12:07: 20:cc:e5:72:55:af:8e:c4:b1:4b:79:eb:e8:fc:0d: cb:18:60:3a:65:6d:db:07:a3:24:51:cb:26:87:d0: d3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:25:49:63:86:84:8A:68:02:3C:FF:C0:E7:DD:D5:62:FC:D1:4D:D4 X509v3 Authority Key Identifier: keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/1DBF3F2E69BF11EF9B52775AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.116.0/24 103.103.246.0/23 103.239.103.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:b7:8e:16:37:0f:3b:93:24:a0:cb:e6:5d:51:40:31:d7:cc: c5:24:fd:80:ab:ee:4d:8b:79:f9:a0:d5:68:7a:e8:fb:33:f6: 6a:53:c3:d6:3e:21:b3:27:70:a6:6b:5c:3f:11:46:bc:89:af: 52:9c:ae:24:45:f0:10:9c:7a:01:9b:b9:a8:9e:47:58:47:e1: 78:e4:3d:05:4c:43:a9:b1:8c:ff:ed:29:79:a3:e6:5e:1b:52: 2d:8f:50:13:75:6f:9c:8f:d1:a5:f4:90:31:2d:15:a6:0d:1a: 62:64:d4:48:6c:09:31:15:5e:19:98:98:eb:87:b2:57:eb:38: 2a:26:1a:34:97:22:4d:f2:c8:7a:7b:20:65:dd:03:01:d5:a1: f2:74:af:70:26:9b:dd:54:c6:a8:9a:12:b2:5f:8f:12:f9:f4: 3f:3a:aa:a0:4e:9b:93:1b:5f:4c:15:27:22:c0:ad:b3:c0:a1: 0f:3d:a4:30:5a:88:af:1a:7b:dc:93:1e:bb:d0:79:c9:09:e5: 5e:7b:f1:4a:f5:59:68:c5:19:6e:ac:5a:01:01:ed:29:4b:ca: 48:5e:91:61:20:5e:49:1f:63:27:90:db:75:2e:db:68:ee:3f: b8:be:1a:15:38:7e:58:ee:db:24:a5:4c:d3:29:ef:2f:56:f2: 5c:0f:7a:03 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICA48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE MjYwQUE5NzgwHhcNMjQxMjA1MDExNTE0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwZmVhMi1lMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7G9srXlz6h37VRqCTY6W6S35AAsyp18rqJ8QLqsDruaJvcV0LE5Fh2bEQWy 3eX8//UIbABaVMV+kyE8OouKMf7iPyXBcgG+FpPeKREgVHfvCIo0IRVnEOVTZueq ZMsc84vl6Zn9/z+szmg4Y297YfQIHCeN89tw/HetV8QynlF7BdKGDkxdoyZ4iuNj CULLhDqNA+kDD4nWu/P2yYM9c6qjCShWaRoDr2q8P2fUpvQIvRJQ/Ps9xslLeDTm O/y04adZFW+ZMfvpuj6R4OdHxmj2aEsUup9HD1RJiK9fEgcgzOVyVa+OxLFLeevo /A3LGGA6ZW3bB6MkUcsmh9DT2wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIclSWOG hIpoAjz/wOfd1WL80U3UMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1N0IvOERBNzI2NDBDMUZBMTFFQ0IzMEVFMjFBQzRGOUFFMDIvMURCRjNGMkU2 OUJGMTFFRjlCNTI3NzVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAAr/3QDBAFnZ/YDBABn72cwDQYJKoZIhvcNAQELBQADggEB AH63jhY3DzuTJKDL5l1RQDHXzMUk/YCr7k2Lefmg1Wh66Psz9mpTw9Y+IbMncKZr XD8RRryJr1KcriRF8BCcegGbuaieR1hH4XjkPQVMQ6mxjP/tKXmj5l4bUi2PUBN1 b5yP0aX0kDEtFaYNGmJk1EhsCTEVXhmYmOuHslfrOComGjSXIk3yyHp7IGXdAwHV ofJ0r3Amm91UxqiaErJfjxL59D86qqBOm5MbX0wVJyLArbPAoQ89pDBaiK8ae9yT HrvQeckJ5V578Ur1WWjFGW6sWgEB7SlLykhekWEgXkkfYyeQ23Uu22juP7i+GhU4 flju2ySlTNMp7y9W8lwPegM= -----END CERTIFICATE-----Generated at Mon Apr 7 04:29:47 2025 by rpki-client