$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/D4811B86EDB011EF8DFB1285C4F9AE02.roa File: D4811B86EDB011EF8DFB1285C4F9AE02.roa (raw, json) Hash identifier: UANLL/DIhHAE6oC8FAukWCm16igdFVnOAgYy/cB4YuA= Subject key identifier: 25:2C:C7:62:24:F0:9D:2A:68:B1:A9:DC:BB:2F:50:51:64:B2:28:77 Certificate issuer: /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A Certificate serial: 045A Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/D4811B86EDB011EF8DFB1285C4F9AE02.roa Signing time: Tue 18 Feb 2025 04:28:41 +0000 ROA not before: Tue 18 Feb 2025 04:28:41 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 7586 IP address blocks: 103.177.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113066, serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A Validity Not Before: Feb 18 04:28:41 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67b40c79-da51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:2c:51:37:d4:2c:41:a8:74:3b:5a:56:06: 41:3d:0f:f2:63:e2:e7:ea:53:e6:f6:64:94:f8:00: 09:d3:01:d7:d6:33:59:5a:e6:dc:8e:d2:d5:dc:b0: 40:83:fb:9a:7b:c5:22:d0:72:30:81:0d:af:5c:ba: 14:9e:ae:7e:02:da:05:d1:5a:04:b7:6e:16:11:ac: 82:54:23:74:e1:1d:1e:99:8d:73:07:39:24:2f:f3: b0:81:4e:d5:d2:da:20:2b:19:23:b0:28:b4:7a:56: 2c:ce:06:4c:c8:73:74:10:3d:84:09:4c:df:74:2a: 4c:6e:e9:16:e7:2d:67:9a:19:56:c5:ea:f0:63:22: 2f:cf:56:4d:e3:80:1f:bf:70:64:5b:72:10:e1:60: 96:22:29:db:db:9f:2a:3e:48:ef:53:c2:53:da:dd: 21:55:9b:43:df:b1:6a:f9:31:6e:d0:41:97:b2:98: 79:84:1a:4a:75:8b:31:bb:6d:c0:ba:11:60:08:90: b1:2e:e1:6f:c4:15:6e:3f:e0:61:c0:50:d3:0a:06: c0:27:57:61:e6:b9:67:ee:c7:16:37:e8:0c:84:50: 8d:26:9d:d2:84:d6:4e:9e:bf:f5:40:73:8d:f1:78: 6e:c5:50:b9:ce:12:33:f7:6f:aa:4a:9d:2b:b2:c3: f8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2C:C7:62:24:F0:9D:2A:68:B1:A9:DC:BB:2F:50:51:64:B2:28:77 X509v3 Authority Key Identifier: keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/D4811B86EDB011EF8DFB1285C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.44.0/24 Signature Algorithm: sha256WithRSAEncryption 52:ea:d0:87:0c:cb:dc:8c:7e:e9:96:b0:ea:97:51:ca:85:6a: b4:90:a6:72:59:0e:0a:c1:07:1f:1c:11:e2:86:af:91:ce:51: 59:f9:b4:bf:80:20:eb:4b:5e:4c:52:1d:62:ef:2c:cc:f1:82: 46:19:ad:53:dd:e2:cf:c8:e3:0d:8c:7a:1c:0a:ae:e0:af:01: 23:15:ad:b4:a7:2d:fd:83:1f:e8:24:fe:e7:86:7a:93:2a:30: 12:a1:15:4a:41:ef:40:2a:cb:14:0b:e8:e8:b5:c2:b5:7f:da: b4:58:ee:0f:95:6b:39:56:25:61:30:d0:49:79:7c:76:05:a4: 9e:24:59:62:7c:10:4a:e8:54:1a:14:b6:4e:fa:22:22:4b:2a: d3:cb:e9:1f:a4:f7:92:e5:34:ff:2c:09:52:77:c9:a7:2e:ee: 3c:ea:70:9f:5e:85:63:26:13:8c:d5:a6:3b:cb:fb:66:74:aa: 56:ff:56:62:11:61:91:0c:43:e6:4a:20:76:42:5a:02:64:84: 7f:49:58:fc:97:c2:14:f9:5a:3f:be:5c:82:1d:a3:69:e8:61: 89:ab:86:7b:35:07:5c:5f:5f:d7:4d:e0:85:2b:c2:f7:1e:ad: 2a:1b:da:45:60:2c:28:2f:51:88:0f:56:59:fa:4a:11:d4:0e: f5:e5:2a:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMwNjYxMTAvBgNVBAUTKDExQkU5MzUwMDJGMDI4QzE3Q0VGQ0I1RjBBNTg2ODM5 OTI1QjUzNEEwHhcNMjUwMjE4MDQyODQxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I0MGM3OS1kYTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUosUTfULEGodDtaVgZBPQ/yY+Ln6lPm9mSU+AAJ0wHX1jNZWubcjtLV3LBA g/uae8Ui0HIwgQ2vXLoUnq5+AtoF0VoEt24WEayCVCN04R0emY1zBzkkL/OwgU7V 0togKxkjsCi0elYszgZMyHN0ED2ECUzfdCpMbukW5y1nmhlWxerwYyIvz1ZN44Af v3BkW3IQ4WCWIinb258qPkjvU8JT2t0hVZtD37Fq+TFu0EGXsph5hBpKdYsxu23A uhFgCJCxLuFvxBVuP+BhwFDTCgbAJ1dh5rln7scWN+gMhFCNJp3ShNZOnr/1QHON 8XhuxVC5zhIz92+qSp0rssP4CwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCUsx2Ik 8J0qaLGp3LsvUFFksih3MB8GA1UdIwQYMBaAFBG+k1AC8CjBfO/LXwpYaDmSW1NK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzA2Ni82NzgyRTJEQTRF M0YxMUVDQTJCNTJCMzFDNEY5QUUwMi9FYjZUVUFMd0tNRjg3OHRmQ2xob09aSmJV MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ViNlRVQUx3S01GODc4dGZDbGhvT1pKYlUwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTMwNjYvNjc4MkUyREE0RTNGMTFFQ0EyQjUyQjMxQzRGOUFFMDIvRDQ4MTFCODZF REIwMTFFRjhERkIxMjg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnsSwwDQYJKoZIhvcNAQELBQADggEBAFLq0IcMy9yMfumW sOqXUcqFarSQpnJZDgrBBx8cEeKGr5HOUVn5tL+AIOtLXkxSHWLvLMzxgkYZrVPd 4s/I4w2MehwKruCvASMVrbSnLf2DH+gk/ueGepMqMBKhFUpB70AqyxQL6Oi1wrV/ 2rRY7g+VazlWJWEw0El5fHYFpJ4kWWJ8EEroVBoUtk76IiJLKtPL6R+k95LlNP8s CVJ3yacu7jzqcJ9ehWMmE4zVpjvL+2Z0qlb/VmIRYZEMQ+ZKIHZCWgJkhH9JWPyX whT5Wj++XIIdo2noYYmrhns1B1xfX9dN4IUrwvcerSob2kVgLCgvUYgPVln6ShHU DvXlKjk= -----END CERTIFICATE-----Generated at Sat Apr 26 08:06:37 2025 by rpki-client