$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/287F42E4018011EF92ADDC7FC4F9AE02.roa File: 287F42E4018011EF92ADDC7FC4F9AE02.roa (raw, json) Hash identifier: FEK8EzXCQ/8MiufhcQyCAnkfxapHFXjscSrsdrF8TfA= Subject key identifier: D6:B2:12:96:C5:28:1A:DF:FB:51:48:58:01:03:A4:A6:BA:8C:EE:A6 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 0875 Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/287F42E4018011EF92ADDC7FC4F9AE02.roa Signing time: Fri 16 Aug 2024 22:10:29 +0000 ROA not before: Fri 16 Aug 2024 22:10:29 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 4755 IP address blocks: 103.225.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 20:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2165 (0x875) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E Validity Not Before: Aug 16 22:10:29 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66bfce55-d7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:7d:9e:36:1d:e0:ae:bc:6b:72:71:7d:cf: 1d:88:a6:75:fd:b8:11:d6:3b:e9:3a:91:cf:49:17: 3b:67:f0:86:cb:c8:82:31:f8:9a:36:53:41:ec:be: 08:6e:08:4c:90:9b:43:66:4d:71:02:90:47:d2:f8: 4c:69:7a:04:61:ed:23:1d:08:bb:12:4c:93:5f:68: 52:ce:37:4a:d7:27:46:d1:47:66:b1:ba:5e:85:bb: d0:d8:42:a5:53:47:77:d5:57:6c:96:89:ee:33:68: a9:8b:da:1b:9f:14:3b:5e:06:a6:d8:14:36:bb:5a: c1:59:39:92:eb:a6:45:92:7e:8f:9b:ad:83:c2:78: 4a:e4:6e:04:b5:25:cc:ce:fa:dd:8d:6b:7c:e4:37: 97:51:91:11:66:1e:0c:a0:72:4a:53:a8:ba:7b:4c: e0:86:13:37:ba:9b:a7:1e:6b:b0:fa:88:a1:ad:6a: 87:8f:b5:54:b5:d2:5e:dd:6c:5b:6a:a7:47:c1:1a: f2:9d:01:f5:20:16:a2:57:eb:ad:c1:8e:67:5b:d6: 9c:58:8e:38:93:bd:32:15:db:44:3e:eb:f3:fa:f9: 0a:ea:17:b7:e4:9f:13:70:78:d0:2e:0f:8c:df:38: 6b:d9:28:db:10:1a:34:79:3a:50:1e:69:d2:cc:ec: ef:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B2:12:96:C5:28:1A:DF:FB:51:48:58:01:03:A4:A6:BA:8C:EE:A6 X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/287F42E4018011EF92ADDC7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.225.176.0/24 Signature Algorithm: sha256WithRSAEncryption 00:e2:44:df:ac:3f:3a:a8:4d:52:27:70:3f:7b:80:e0:c4:b9: ea:e1:bd:e6:94:f9:04:4d:72:78:53:1a:68:67:1c:03:1b:a3: 1d:db:c6:26:15:a4:a6:13:f4:ef:dc:2a:09:92:9c:21:13:57: f0:7b:ca:bc:f2:19:6e:2b:92:9f:1e:2b:f1:00:28:2f:d3:51: 52:1f:32:1a:ec:6c:79:aa:73:b8:bc:08:76:cf:30:33:2d:05: 67:05:e8:78:03:d0:30:b8:19:d7:24:81:95:28:37:68:2c:13: ff:c2:82:c5:6f:24:31:6b:21:69:79:dd:78:70:5a:d9:7b:28: 6a:a8:bf:07:2d:29:15:e7:fa:45:48:ac:f2:20:89:77:cb:9f: 87:28:aa:63:ca:e6:d7:08:0f:53:d0:a9:5c:0a:bd:d5:53:50: 86:9d:1a:2b:52:1d:36:d4:1f:d3:ef:34:1e:25:5f:9a:e9:be: 32:5a:9a:93:eb:83:fc:5e:ca:be:21:84:18:6b:e2:11:aa:8e: a6:f8:94:2d:22:97:85:ec:34:40:88:cf:b3:b6:e9:2a:b3:3f: a8:3f:38:cb:c9:47:50:fa:57:26:73:f4:43:89:50:90:8b:b4: d4:39:e9:3a:90:f2:95:65:e2:eb:81:92:7a:95:86:1f:64:6e: 92:a3:39:3d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjQwODE2MjIxMDI5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJmY2U1NS1kN2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaF9njYd4K68a3Jxfc8diKZ1/bgR1jvpOpHPSRc7Z/CGy8iCMfiaNlNB7L4I bghMkJtDZk1xApBH0vhMaXoEYe0jHQi7EkyTX2hSzjdK1ydG0UdmsbpehbvQ2EKl U0d31VdslonuM2ipi9obnxQ7Xgam2BQ2u1rBWTmS66ZFkn6Pm62DwnhK5G4EtSXM zvrdjWt85DeXUZERZh4MoHJKU6i6e0zghhM3upunHmuw+oihrWqHj7VUtdJe3Wxb aqdHwRrynQH1IBaiV+utwY5nW9acWI44k70yFdtEPuvz+vkK6he35J8TcHjQLg+M 3zhr2SjbEBo0eTpQHmnSzOzvqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNayEpbF KBrf+1FIWAEDpKa6jO6mMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQwNEUvQkMwMzBDNzZGMURBMTFFQUFGQzZDNzBBQzRGOUFFMDIvMjg3RjQyRTQw MTgwMTFFRjkyQUREQzdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn4bAwDQYJKoZIhvcNAQELBQADggEBAADiRN+sPzqoTVIn cD97gODEuerhveaU+QRNcnhTGmhnHAMbox3bxiYVpKYT9O/cKgmSnCETV/B7yrzy GW4rkp8eK/EAKC/TUVIfMhrsbHmqc7i8CHbPMDMtBWcF6HgD0DC4GdckgZUoN2gs E//CgsVvJDFrIWl53XhwWtl7KGqovwctKRXn+kVIrPIgiXfLn4coqmPK5tcID1PQ qVwKvdVTUIadGitSHTbUH9PvNB4lX5rpvjJampPrg/xeyr4hhBhr4hGqjqb4lC0i l4XsNECIz7O26SqzP6g/OMvJR1D6VyZz9EOJUJCLtNQ56TqQ8pVl4uuBknqVhh9k bpKjOT0= -----END CERTIFICATE-----Generated at Thu Mar 13 21:52:32 2025 by rpki-client