$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/EBC0BF3A843411EFA205900AC4F9AE02.roa File: EBC0BF3A843411EFA205900AC4F9AE02.roa (raw, json) Hash identifier: 1lTg3C6avyOXyGgdRKyCJEw/4DfSTwcprqQ9ajZX1oM= Subject key identifier: 78:8A:B6:DC:BF:7A:68:6E:5D:58:CC:86:A2:9C:4D:75:B9:B3:CB:3D Certificate issuer: /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17 Certificate serial: 29 Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/EBC0BF3A843411EFA205900AC4F9AE02.roa Signing time: Tue 03 Dec 2024 06:40:25 +0000 ROA not before: Tue 03 Dec 2024 06:40:25 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 45179 IP address blocks: 103.103.44.0/22 maxlen: 22 103.103.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 05:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B736 Validity Not Before: Dec 3 06:40:25 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674ea7d8-02d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:92:ae:8e:4e:54:b2:92:19:51:90:92:cd:2d: 35:c1:c5:38:2c:e2:75:cb:32:95:9d:7b:a4:64:8d: 87:4d:a8:4d:08:c4:cc:e4:b8:bc:6e:2f:6a:fe:8e: dd:66:b1:a7:2f:a6:98:26:d4:fc:42:43:cf:9b:6a: 21:c7:52:c8:fc:0f:03:bf:8a:39:4c:34:7f:a8:c1: f8:62:65:a4:51:ac:28:65:59:f4:7a:3a:80:11:7d: a4:2f:64:71:17:83:0c:c7:50:0f:71:3e:96:c5:b6: 1b:06:03:ae:76:3d:70:bc:66:ef:2e:6e:02:73:1d: 58:20:c1:ed:a0:da:b3:95:67:0f:64:bd:07:8f:19: ea:19:0d:af:f5:71:cd:1e:62:41:20:93:ed:48:08: 7e:4c:80:74:e7:7c:d3:7a:81:2e:c8:42:01:03:57: 5d:ce:45:45:9c:11:af:31:3c:cd:29:87:ea:3c:8e: f3:ff:c0:48:04:13:fc:f0:ab:a5:b4:59:4f:f9:e9: c0:a3:00:f7:0f:3e:07:9f:7d:38:e3:9b:0b:c5:07: ef:64:5d:27:da:a2:22:54:72:a7:59:f4:08:3b:0d: b2:1f:e6:80:d9:27:e0:c4:eb:a8:e0:c2:dd:39:5f: 6a:63:bf:39:85:7f:3f:f7:24:36:09:c8:ad:ec:bc: 5c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8A:B6:DC:BF:7A:68:6E:5D:58:CC:86:A2:9C:4D:75:B9:B3:CB:3D X509v3 Authority Key Identifier: keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/EBC0BF3A843411EFA205900AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.103.44.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:0c:ff:1e:93:ed:4c:b4:08:b2:75:e9:e8:4f:42:39:7b:e0: fb:3e:2e:d5:65:a1:00:0f:9a:ea:c2:a7:27:2a:25:c6:81:97: 68:2a:ac:14:db:38:1f:fa:b1:aa:e4:3f:17:61:3a:f2:cf:61: 98:8a:3d:87:ea:7b:63:b7:fb:39:5e:9d:b5:82:73:36:9a:3e: 6d:af:6a:46:75:39:14:ff:db:b8:f2:b6:a0:89:cb:2c:39:cf: 88:74:a2:55:26:8c:ad:fb:72:eb:4b:90:c2:c2:44:71:03:da: 94:aa:21:30:f1:c9:9d:1d:72:19:d4:fd:a7:28:2c:a8:f2:67: d5:cd:2c:4d:d8:7f:f6:dc:58:80:f3:fc:1e:d1:13:4a:09:cd: 28:47:07:e0:a0:62:75:29:68:c9:ed:00:fc:c8:f9:19:92:56: 0e:2f:da:73:ca:7e:aa:5f:7f:80:9e:08:85:6f:7b:70:3a:48: 16:96:32:c0:9e:cf:72:3e:7b:2c:f1:08:7e:a7:90:67:16:01: cd:c5:32:cb:c9:53:45:8e:54:67:c6:51:22:e0:8e:b7:44:00: 1b:1e:60:7a:45:d6:9a:11:62:66:95:2a:07:bf:68:8a:72:6a: 68:1f:ae:93:0a:41:b7:5e:00:21:a4:50:22:e7:2e:a1:c3:76: 61:e0:07:7d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjczNjExMC8GA1UEBRMoMzBCRTFFQjlEM0FDNDlEMEFGRUUxMzUzQzNGOUQxMTY3 QTAwN0IxNzAeFw0yNDEyMDMwNjQwMjVaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NGVhN2Q4LTAyZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZkq6OTlSykhlRkJLNLTXBxTgs4nXLMpWde6RkjYdNqE0IxMzkuLxuL2r+jt1m sacvppgm1PxCQ8+baiHHUsj8DwO/ijlMNH+owfhiZaRRrChlWfR6OoARfaQvZHEX gwzHUA9xPpbFthsGA652PXC8Zu8ubgJzHVggwe2g2rOVZw9kvQePGeoZDa/1cc0e YkEgk+1ICH5MgHTnfNN6gS7IQgEDV13ORUWcEa8xPM0ph+o8jvP/wEgEE/zwq6W0 WU/56cCjAPcPPgeffTjjmwvFB+9kXSfaoiJUcqdZ9Ag7DbIf5oDZJ+DE66jgwt05 X2pjvzmFfz/3JDYJyK3svFzdAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUeIq23L96 aG5dWMyGopxNdbmzyz0wHwYDVR0jBBgwFoAUML4eudOsSdCv7hNTw/nRFnoAexcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNzM2L0YxMzNFRjBDODQy RDExRUY5OUU4M0Q4NEM0RjlBRTAyL01MNGV1ZE9zU2RDdjdoTlR3X25SRm5vQWV4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTUw0ZXVkT3NTZEN2N2hOVHdfblJGbm9BZXhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjczNi9GMTMzRUYwQzg0MkQxMUVGOTlFODNEODRDNEY5QUUwMi9FQkMwQkYzQTg0 MzQxMUVGQTIwNTkwMEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmdnLDANBgkqhkiG9w0BAQsFAAOCAQEAjgz/HpPtTLQIsnXp 6E9COXvg+z4u1WWhAA+a6sKnJyolxoGXaCqsFNs4H/qxquQ/F2E68s9hmIo9h+p7 Y7f7OV6dtYJzNpo+ba9qRnU5FP/buPK2oInLLDnPiHSiVSaMrfty60uQwsJEcQPa lKohMPHJnR1yGdT9pygsqPJn1c0sTdh/9txYgPP8HtETSgnNKEcH4KBidSloye0A /Mj5GZJWDi/ac8p+ql9/gJ4IhW97cDpIFpYywJ7Pcj57LPEIfqeQZxYBzcUyy8lT RY5UZ8ZRIuCOt0QAGx5gekXWmhFiZpUqB79oinJqaB+ukwpBt14AIaRQIucuocN2 YeAHfQ== -----END CERTIFICATE-----Generated at Thu Mar 13 21:48:59 2025 by rpki-client