$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/2A7A051EB54B11EA85EE266DC4F9AE02.roa File: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (raw, json) Hash identifier: vv1GYbA2AyqRD7ZSBeebG8Ws0r4NHNq0J0Vkh/R0ypw= Subject key identifier: D7:16:8D:CF:89:94:AF:05:2C:FC:05:8D:58:8E:49:17:70:D0:69:F4 Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Certificate serial: 087B Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/2A7A051EB54B11EA85EE266DC4F9AE02.roa Signing time: Thu 02 Jan 2025 20:19:42 +0000 ROA not before: Thu 02 Jan 2025 20:19:42 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.149.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2171 (0x87b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919123C Validity Not Before: Jan 2 20:19:42 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6776f4de-71c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:0e:c1:55:28:af:ac:83:46:12:03:e8:7a: f0:1c:b5:f7:9e:35:71:07:34:e3:f9:6f:42:ca:23: 76:b2:07:ac:89:ca:d5:8d:d7:83:94:3f:7a:f5:11: 35:5a:35:78:d5:b1:fd:20:20:4d:f6:98:c1:10:17: 8b:75:a5:26:52:78:36:58:d5:e4:64:f8:45:1e:00: f3:58:9a:93:c8:a6:5f:60:78:06:e4:c0:be:6d:8b: 0c:66:5a:ef:90:bc:f5:cf:86:28:6e:c1:1c:66:73: 67:74:f8:33:9a:61:75:5d:31:32:e0:1c:4d:66:3f: 10:dc:80:c8:b4:e9:cc:c1:58:f3:01:d0:1c:75:8e: 9d:a6:00:1d:fc:af:8c:f7:31:3a:2d:6d:72:c6:5f: 88:49:83:d1:47:21:a2:f8:c5:4b:5f:6a:b8:1a:7e: 76:c0:2d:04:3b:24:b9:7e:ea:5f:8a:48:44:ad:ec: a9:8c:89:07:e3:6b:fc:f4:43:3c:aa:b1:ca:16:c8: 1a:0a:87:6c:72:a2:27:dc:42:e5:5d:d7:29:53:8f: 94:c1:96:bf:83:85:57:ad:4f:e5:d2:6e:be:0a:92: 3f:75:0c:b8:a8:5f:22:dd:f9:0b:3d:d0:d9:4a:91: 1f:c6:d5:90:57:84:35:ac:e0:ae:83:21:56:97:be: 1a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:16:8D:CF:89:94:AF:05:2C:FC:05:8D:58:8E:49:17:70:D0:69:F4 X509v3 Authority Key Identifier: keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/2A7A051EB54B11EA85EE266DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.112.0/24 Signature Algorithm: sha256WithRSAEncryption 45:d0:40:fd:f3:58:ae:a8:cc:4c:80:29:d0:98:57:b7:ec:c2: dc:b8:3f:53:be:9f:85:d7:36:b5:c5:ed:63:d6:53:55:2e:b1: fe:e1:d4:15:26:d1:12:e9:ef:b4:66:e2:16:a7:06:58:9d:05: 38:76:ca:9c:0e:f3:59:58:8b:6b:66:e6:4b:c1:b6:04:4c:28: 3d:2a:c0:d2:f6:a9:aa:c1:6a:78:88:ed:bd:bc:8c:8b:72:26: 23:6f:99:07:64:62:ea:6f:24:61:ae:c0:62:75:98:01:f0:69: 20:88:78:38:25:e8:61:ac:bb:41:6b:b8:25:66:81:fe:be:0b: 86:18:13:57:37:ec:0f:c0:2a:58:e5:74:b8:17:07:0e:af:9e: c1:b4:98:57:26:95:28:10:81:55:26:6f:45:26:5f:97:66:20: fa:33:1f:e4:0f:d6:fa:7e:1c:c8:bc:47:41:c9:44:dc:fe:5b: 02:02:02:e7:2c:d0:cb:61:8d:53:30:1b:f6:b0:db:92:3f:ee: b6:c1:21:25:fe:e6:e8:89:5d:3e:bb:04:80:ca:83:aa:7e:07: cd:44:96:e4:95:8f:30:e6:78:d6:b8:85:c8:8f:88:69:f0:87: 6b:4d:38:1e:d2:33:3b:a2:b7:c6:70:a5:0c:89:05:3c:55:90: 02:c1:58:8c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5 RTBERTg1MTcwHhcNMjUwMTAyMjAxOTQyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc2ZjRkZS03MWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqQOwVUor6yDRhID6HrwHLX3njVxBzTj+W9CyiN2sgesicrVjdeDlD969RE1 WjV41bH9ICBN9pjBEBeLdaUmUng2WNXkZPhFHgDzWJqTyKZfYHgG5MC+bYsMZlrv kLz1z4YobsEcZnNndPgzmmF1XTEy4BxNZj8Q3IDItOnMwVjzAdAcdY6dpgAd/K+M 9zE6LW1yxl+ISYPRRyGi+MVLX2q4Gn52wC0EOyS5fupfikhEreypjIkH42v89EM8 qrHKFsgaCodscqIn3ELlXdcpU4+UwZa/g4VXrU/l0m6+CpI/dQy4qF8i3fkLPdDZ SpEfxtWQV4Q1rOCugyFWl74axwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNcWjc+J lK8FLPwFjViOSRdw0Gn0MB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1 NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTEyM0MvRTU2MjFBNjhCNTQ4MTFFQUIxRjU0MDY2QzRGOUFFMDIvMkE3QTA1MUVC NTRCMTFFQTg1RUUyNjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnlXAwDQYJKoZIhvcNAQELBQADggEBAEXQQP3zWK6ozEyA KdCYV7fswty4P1O+n4XXNrXF7WPWU1Uusf7h1BUm0RLp77Rm4hanBlidBTh2ypwO 81lYi2tm5kvBtgRMKD0qwNL2qarBaniI7b28jItyJiNvmQdkYupvJGGuwGJ1mAHw aSCIeDgl6GGsu0FruCVmgf6+C4YYE1c37A/AKljldLgXBw6vnsG0mFcmlSgQgVUm b0UmX5dmIPozH+QP1vp+HMi8R0HJRNz+WwICAucs0MthjVMwG/aw25I/7rbBISX+ 5uiJXT67BIDKg6p+B81EluSVjzDmeNa4hciPiGnwh2tNOB7SMzuit8ZwpQyJBTxV kALBWIw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:17 2025 by rpki-client