$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/B5CD0B4A7E9911EFA0499366C4F9AE02.roa File: B5CD0B4A7E9911EFA0499366C4F9AE02.roa (raw, json) Hash identifier: 28hMG3cjCpxNcowPwmPrRX+d2rPppFIIvSs9qF4JX48= Subject key identifier: 54:CC:25:4A:3A:13:7E:8F:B7:DF:40:E0:4C:37:4B:B4:06:51:09:BB Certificate issuer: /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A Certificate serial: 072F Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/B5CD0B4A7E9911EFA0499366C4F9AE02.roa Signing time: Sun 08 Dec 2024 21:20:19 +0000 ROA not before: Sun 08 Dec 2024 21:20:19 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 141023 IP address blocks: 103.156.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1839 (0x72f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A Validity Not Before: Dec 8 21:20:19 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=67560d93-8c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e2:32:e3:e5:6c:8c:c6:49:73:f2:3f:40:fe: d2:86:4c:d9:c7:5e:52:d5:78:8f:ca:cc:75:ae:0c: 49:b0:90:ce:1f:f0:be:a1:f4:62:72:10:9d:1c:c0: 4a:49:ad:d2:67:0d:70:0f:de:08:f7:5a:62:94:5b: 1c:2c:e3:03:3e:1f:56:9b:ac:60:e5:fc:87:6d:d8: 50:87:20:66:00:92:ce:b6:80:8d:6b:db:17:92:3f: 85:2b:68:05:f0:18:a7:26:77:42:72:1c:e0:ed:d1: cb:09:71:e0:f3:78:8b:74:67:ba:24:10:4b:26:d3: 42:53:78:4d:2f:16:50:23:62:32:c6:27:30:b4:92: f6:af:0e:51:0e:d6:a6:a1:02:ed:cb:50:14:c3:56: 76:e0:b2:5e:78:8f:2e:fa:96:9e:eb:49:d7:7d:54: 2d:8d:81:86:d0:98:5b:f0:b4:e2:b5:f6:e1:bb:62: c0:f7:2b:a2:fb:dc:e4:ab:c8:b8:25:47:8b:57:e3: da:fb:c7:54:6a:3d:9e:4c:86:56:7e:bd:2e:eb:0e: 3e:af:95:34:7f:13:76:a1:25:15:97:ab:b5:92:cd: 09:8c:70:94:5d:a9:ea:0a:34:f5:74:5f:82:86:24: 72:50:bf:27:40:98:89:06:1d:d2:58:10:f0:8f:78: 35:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CC:25:4A:3A:13:7E:8F:B7:DF:40:E0:4C:37:4B:B4:06:51:09:BB X509v3 Authority Key Identifier: keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/B5CD0B4A7E9911EFA0499366C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.245.0/24 Signature Algorithm: sha256WithRSAEncryption 35:f4:87:a1:5e:c1:10:a3:cc:6b:77:75:c7:e1:85:05:f0:2e: 9c:02:e6:c8:6b:49:37:b3:8f:36:f1:11:0a:6f:fb:85:f6:b4: 82:3a:f2:a2:43:9d:1d:f0:8e:92:d2:7f:ce:13:85:8b:a5:24: 1c:27:08:82:84:f4:64:ed:e6:a9:1a:9b:31:c9:d6:26:65:8d: f1:44:47:ae:c4:54:a0:04:a1:e3:61:ec:d0:25:6b:87:35:b6: da:e1:91:6c:22:a6:71:70:47:58:8f:97:2b:54:4d:16:39:64: 5a:ce:29:35:9d:32:5b:1f:32:c4:f7:2b:b1:ea:a5:68:68:7e: ac:28:25:fe:f3:0a:4f:da:f6:0f:7b:f7:31:a1:bd:aa:b8:1f: a6:a3:cd:ff:ac:f7:21:a9:23:b3:15:bc:da:75:f6:95:d4:35: 1e:7b:5b:a1:f0:c2:ea:9e:bf:e7:4b:c1:67:ba:4e:52:05:67: e5:c6:0f:32:b9:3f:5a:43:af:2b:2d:5d:a4:f6:8a:bb:1c:97: 34:3d:c0:55:eb:04:bb:8a:a2:94:6a:98:96:6c:29:f7:04:e5: 55:3b:27:13:d2:03:b0:83:35:51:4f:73:76:ac:bf:f3:10:ad: d7:b8:69:76:af:11:31:2f:91:b6:d6:3b:23:26:c2:e6:26:97: 1f:4a:5d:8d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwN0UxMTAvBgNVBAUTKDcwQTQ1Q0NDMDU5M0M0NzEyMzYzNTA1QTBBNjRERDNC NzM1NzZFOEEwHhcNMjQxMjA4MjEyMDE5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU2MGQ5My04YzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOIy4+VsjMZJc/I/QP7ShkzZx15S1XiPysx1rgxJsJDOH/C+ofRichCdHMBK Sa3SZw1wD94I91pilFscLOMDPh9Wm6xg5fyHbdhQhyBmAJLOtoCNa9sXkj+FK2gF 8BinJndCchzg7dHLCXHg83iLdGe6JBBLJtNCU3hNLxZQI2IyxicwtJL2rw5RDtam oQLty1AUw1Z24LJeeI8u+pae60nXfVQtjYGG0Jhb8LTitfbhu2LA9yui+9zkq8i4 JUeLV+Pa+8dUaj2eTIZWfr0u6w4+r5U0fxN2oSUVl6u1ks0JjHCUXanqCjT1dF+C hiRyUL8nQJiJBh3SWBDwj3g1gwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFTMJUo6 E36Pt99A4Ew3S7QGUQm7MB8GA1UdIwQYMBaAFHCkXMwFk8RxI2NQWgpk3TtzV26K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODA3RS9DNEI0RTJDNjE3 OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhIRWpZMUJhQ21UZE8zTlhi b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NLUmN6QVdUeEhFalkxQmFDbVRkTzNOWGJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTgwN0UvQzRCNEUyQzYxNzkyMTFFQjkwQkZBMDg0QzRGOUFFMDIvQjVDRDBCNEE3 RTk5MTFFRkEwNDk5MzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnnPUwDQYJKoZIhvcNAQELBQADggEBADX0h6FewRCjzGt3 dcfhhQXwLpwC5shrSTezjzbxEQpv+4X2tII68qJDnR3wjpLSf84ThYulJBwnCIKE 9GTt5qkamzHJ1iZljfFER67EVKAEoeNh7NAla4c1ttrhkWwipnFwR1iPlytUTRY5 ZFrOKTWdMlsfMsT3K7HqpWhofqwoJf7zCk/a9g979zGhvaq4H6ajzf+s9yGpI7MV vNp19pXUNR57W6Hwwuqev+dLwWe6TlIFZ+XGDzK5P1pDrystXaT2irsclzQ9wFXr BLuKopRqmJZsKfcE5VU7JxPSA7CDNVFPc3asv/MQrde4aXavETEvkbbWOyMmwuYm lx9KXY0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:16:14 2025 by rpki-client