$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/DCB2531AC75911EF979D593BC4F9AE02.roa File: DCB2531AC75911EF979D593BC4F9AE02.roa (raw, json) Hash identifier: az5u8maauMT/Sx2+Phgo1Z/ovh8gwvsYIRukSLKNLEQ= Subject key identifier: 72:82:77:7A:2B:68:3F:81:E5:53:4F:2A:99:9A:E7:BC:54:DD:E6:85 Certificate issuer: /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9 Certificate serial: 0E6B Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/DCB2531AC75911EF979D593BC4F9AE02.roa Signing time: Tue 31 Dec 2024 09:30:24 +0000 ROA not before: Tue 31 Dec 2024 09:30:24 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 134715 IP address blocks: 103.197.176.0/22 maxlen: 24 220.158.236.0/22 maxlen: 24 2403:580::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3691 (0xe6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919631C Validity Not Before: Dec 31 09:30:24 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6773b9b0-d188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f7:2c:3f:92:38:1c:c6:00:b1:b4:07:9c:45: 08:5c:39:b7:99:40:26:aa:d2:fc:d1:2e:51:1d:9c: 2f:66:cd:65:4f:ac:a1:c5:fa:be:b0:7d:f2:c9:65: 5d:56:58:99:51:9e:dd:50:20:a9:b4:6e:dc:8b:ec: 1c:b3:ce:81:ea:8b:ff:7a:49:08:31:34:af:f8:c9: d9:fe:f9:32:8e:05:11:af:26:f5:12:38:55:3e:93: e1:da:fb:ef:b2:17:c7:ae:5e:7f:0d:fb:4f:0d:5a: 99:31:63:ac:69:8c:69:3b:52:bf:7e:da:7b:9c:91: f3:1c:07:e1:d1:e7:e1:23:bc:4e:fb:ff:11:41:52: 5c:ba:ac:41:65:a7:72:00:cb:b7:bf:1b:a5:b7:79: e0:47:8b:b0:16:1e:4c:b5:53:e5:da:c4:c8:8a:74: 3f:89:33:dc:f0:90:e7:8b:5f:4c:77:0b:f1:d6:23: d5:fa:6f:33:ae:03:00:ba:6d:bb:8a:83:7a:da:a7: 6b:89:2f:04:ac:7c:ea:ef:3b:91:42:ce:3d:f5:78: 37:d5:13:9d:84:d7:ea:68:bd:1c:ff:96:bf:81:aa: 3a:4b:ff:bd:88:e5:ce:b4:c9:2e:b4:93:15:27:33: 83:b6:cf:98:2d:bf:25:71:ef:a1:ff:c6:52:a5:a9: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:82:77:7A:2B:68:3F:81:E5:53:4F:2A:99:9A:E7:BC:54:DD:E6:85 X509v3 Authority Key Identifier: keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/DCB2531AC75911EF979D593BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.176.0/22 220.158.236.0/22 IPv6: 2403:580::/32 Signature Algorithm: sha256WithRSAEncryption 7a:6f:cd:01:e5:2b:a6:86:33:ba:91:61:5c:24:e3:62:c4:6b: 03:cb:e7:a6:74:ea:0b:f4:a7:6a:12:48:9d:df:17:11:d7:1c: 34:6f:0b:de:94:ec:53:91:63:87:9c:ab:b8:5a:5a:04:90:27: 77:ce:6a:e3:cf:34:84:b7:52:11:c6:83:6a:1d:c3:7d:a3:a5: 15:21:3a:e8:9e:cf:8c:12:cb:f0:70:46:d3:b8:39:b8:b8:6b: ab:1b:08:fe:6b:57:83:f2:55:9f:35:c8:cb:48:a8:df:4c:76: 23:cf:0a:cf:a8:49:26:77:fd:fd:09:cc:58:c8:fb:88:31:fe: 9f:5b:40:d9:45:cc:51:6e:f0:d5:ff:47:00:56:cc:ea:17:53: 24:5c:e0:41:bf:06:99:5b:f5:b5:49:ab:41:74:07:eb:a0:4c: ca:e1:55:cf:af:4e:91:ae:9b:44:de:ef:9d:05:a4:74:87:e8: 0e:32:8e:74:30:1c:65:67:64:35:01:9e:f1:b0:4c:49:15:a0: 18:e9:02:57:c1:65:89:d2:10:f9:7c:65:e7:1b:87:4b:ca:02: f5:31:db:7d:59:3b:fb:27:87:7a:c1:13:2d:0e:6d:8d:e1:c2: 6f:25:39:c7:ad:2c:f5:a7:ee:42:0f:4b:fb:45:3f:0c:6e:e0: 0f:74:50:5a -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYzMUMxMTAvBgNVBAUTKEY3MkU3RDVFMUJCNDU0MkFCN0ZGNzc3MzY1ODgzQzE2 MDEwMzRERTkwHhcNMjQxMjMxMDkzMDI0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzczYjliMC1kMTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmfcsP5I4HMYAsbQHnEUIXDm3mUAmqtL80S5RHZwvZs1lT6yhxfq+sH3yyWVd VliZUZ7dUCCptG7ci+wcs86B6ov/ekkIMTSv+MnZ/vkyjgURryb1EjhVPpPh2vvv shfHrl5/DftPDVqZMWOsaYxpO1K/ftp7nJHzHAfh0efhI7xO+/8RQVJcuqxBZady AMu3vxult3ngR4uwFh5MtVPl2sTIinQ/iTPc8JDni19Mdwvx1iPV+m8zrgMAum27 ioN62qdriS8ErHzq7zuRQs499Xg31ROdhNfqaL0c/5a/gao6S/+9iOXOtMkutJMV JzODts+YLb8lce+h/8ZSpanIiwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFHKCd3or aD+B5VNPKpma57xU3eaFMB8GA1UdIwQYMBaAFPcufV4btFQqt/93c2WIPBYBA03p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjMxQy9BOUMzMTcwNDhD MjMxMUU5OUY4NDVENzJDNEY5QUUwMi85eTU5WGh1MFZDcTNfM2R6WllnOEZnRURU ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl5NTlYaHUwVkNxM18zZHpaWWc4RmdFRFRlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTYzMUMvQTlDMzE3MDQ4QzIzMTFFOTlGODQ1RDcyQzRGOUFFMDIvRENCMjUzMUFD NzU5MTFFRjk3OUQ1OTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnxbADBALcnuwwDQQCAAIwBwMFACQDBYAwDQYJKoZIhvcN AQELBQADggEBAHpvzQHlK6aGM7qRYVwk42LEawPL56Z06gv0p2oSSJ3fFxHXHDRv C96U7FORY4ecq7haWgSQJ3fOauPPNIS3UhHGg2odw32jpRUhOuiez4wSy/BwRtO4 Obi4a6sbCP5rV4PyVZ81yMtIqN9MdiPPCs+oSSZ3/f0JzFjI+4gx/p9bQNlFzFFu 8NX/RwBWzOoXUyRc4EG/Bplb9bVJq0F0B+ugTMrhVc+vTpGum0Te750FpHSH6A4y jnQwHGVnZDUBnvGwTEkVoBjpAlfBZYnSEPl8Zecbh0vKAvUx231ZO/snh3rBEy0O bY3hwm8lOcetLPWn7kIPS/tFPwxu4A90UFo= -----END CERTIFICATE-----Generated at Thu Feb 20 03:16:45 2025 by rpki-client