$ rpki-client -vvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/1D3589E875AF11EC866EEF53C4F9AE02.roa File: 1D3589E875AF11EC866EEF53C4F9AE02.roa (raw, json) Hash identifier: pJsd3auztkAG0ZglRxVSFOGCBnUaQsBNRyP6xIkzkvA= Subject key identifier: C0:CB:49:1E:3E:E2:B7:00:65:A7:4C:68:76:4D:33:46:69:94:C2:9F Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 075E Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/1D3589E875AF11EC866EEF53C4F9AE02.roa Signing time: Tue 04 Feb 2025 21:11:09 +0000 ROA not before: Tue 04 Feb 2025 21:11:09 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 7575 IP address blocks: 103.84.224.0/24 maxlen: 24 103.84.225.0/24 maxlen: 24 103.84.226.0/23 maxlen: 24 2400:a4c0::/48 maxlen: 48 2400:a4c0:e025::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1886 (0x75e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6, serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: Feb 4 21:11:09 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a2826d-ad98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:30:b7:89:0b:d6:b7:21:69:cf:37:b9:97:bd: 97:4c:66:29:cf:15:52:05:c6:f9:45:10:c4:91:7a: ff:a6:85:5e:6a:56:d5:43:e4:0f:9c:3a:a6:55:ea: c9:11:5f:e4:4c:be:4d:89:0f:29:9c:34:ba:25:1f: 19:aa:f8:ec:9e:af:41:9c:d7:9c:44:e6:44:3c:72: 40:68:21:ca:7a:ae:99:aa:97:30:c0:46:dd:17:19: a6:0e:7f:7c:d1:cf:57:8d:e7:c2:59:4f:86:ad:b4: cf:7d:20:d9:0e:a1:ed:af:44:47:bc:29:fc:80:e4: 63:dd:f8:f5:23:97:ab:90:30:d3:63:80:ed:6f:05: ec:13:39:81:72:fb:38:75:7d:72:f0:b3:a8:a0:e8: b2:dd:59:07:62:21:3c:e7:ac:95:10:6b:92:03:f8: 8b:5a:b1:2f:e6:0b:d6:2e:65:bf:92:51:6c:73:28: e0:5e:80:2b:f4:ae:4c:fd:ff:02:3e:48:46:81:94: bc:94:6d:5a:9a:93:c2:c7:aa:c1:f5:c7:79:f0:dc: cf:93:14:e4:fc:51:da:1a:40:0d:d6:0f:1e:0f:ad: 9e:37:0b:99:ed:d8:0b:90:2f:9a:d1:28:2a:67:4a: 2d:51:ab:c1:4b:f8:d4:2f:e6:f4:94:e6:f2:ae:5e: ee:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CB:49:1E:3E:E2:B7:00:65:A7:4C:68:76:4D:33:46:69:94:C2:9F X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/1D3589E875AF11EC866EEF53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.224.0/22 IPv6: 2400:a4c0::/48 2400:a4c0:e025::/48 Signature Algorithm: sha256WithRSAEncryption 8c:1f:7e:ac:98:ca:3a:6a:23:3f:08:42:b1:8e:31:43:6c:71: c4:78:41:bf:a3:c1:b3:59:b9:55:9f:76:2a:f6:a2:2a:f6:16: ca:69:75:d7:44:08:83:35:48:59:b3:38:6c:7d:fe:2a:00:35: 98:75:62:3d:74:f9:9b:4b:c5:28:09:a8:89:69:d9:5c:69:09: be:26:b8:5f:1a:04:b0:b1:c2:0b:4e:d8:dd:b6:b0:92:27:42: 44:dd:02:64:fe:0d:28:a0:44:45:c7:b1:11:1a:93:11:30:10: 58:70:9a:27:df:5c:9e:38:a8:ae:50:cb:88:7d:de:83:54:46: 04:74:a6:b8:69:49:07:ff:f5:38:6e:c1:be:ed:31:49:21:03: 99:8c:81:8c:28:6d:a1:95:9b:2c:d3:bc:32:cd:ed:df:e6:3c: b7:94:6a:86:b6:b0:3b:39:ac:87:a7:da:69:32:6b:6b:e2:f0: a1:98:a4:4f:2e:d1:b5:49:87:bf:32:e6:cb:aa:d4:ec:d9:27: 02:88:75:35:7e:e3:36:eb:65:c7:87:99:42:b3:1d:e6:f2:0a: 00:8b:c9:78:65:75:b8:a2:6b:a6:b6:e2:28:d5:f1:c9:73:f0: 8e:0b:64:d4:b4:e0:22:26:d8:8e:0b:6c:34:df:da:db:1d:87: ce:99:d7:3f -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICB14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjUwMjA0MjExMTA5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyODI2ZC1hZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDC3iQvWtyFpzze5l72XTGYpzxVSBcb5RRDEkXr/poVealbVQ+QPnDqmVerJ EV/kTL5NiQ8pnDS6JR8Zqvjsnq9BnNecROZEPHJAaCHKeq6ZqpcwwEbdFxmmDn98 0c9XjefCWU+GrbTPfSDZDqHtr0RHvCn8gORj3fj1I5erkDDTY4DtbwXsEzmBcvs4 dX1y8LOooOiy3VkHYiE856yVEGuSA/iLWrEv5gvWLmW/klFscyjgXoAr9K5M/f8C PkhGgZS8lG1ampPCx6rB9cd58NzPkxTk/FHaGkAN1g8eD62eNwuZ7dgLkC+a0Sgq Z0otUavBS/jUL+b0lObyrl7u4wIDAQABo4ICrzCCAqswHQYDVR0OBBYEFMDLSR4+ 4rcAZadMaHZNM0ZplMKfMB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTlFRDYvRDMxNzA5MkMwRTZDMTFFQkI1NDE0RDIwQzRGOUFFMDIvMUQzNTg5RTg3 NUFGMTFFQzg2NkVFRjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBAJnVOAwGAQCAAIwEgMHACQApMAAAAMHACQApMDgJTANBgkq hkiG9w0BAQsFAAOCAQEAjB9+rJjKOmojPwhCsY4xQ2xxxHhBv6PBs1m5VZ92Kvai KvYWyml110QIgzVIWbM4bH3+KgA1mHViPXT5m0vFKAmoiWnZXGkJvia4XxoEsLHC C07Y3bawkidCRN0CZP4NKKBERcexERqTETAQWHCaJ99cnjiorlDLiH3eg1RGBHSm uGlJB//1OG7Bvu0xSSEDmYyBjChtoZWbLNO8Ms3t3+Y8t5RqhrawOzmsh6faaTJr a+LwoZikTy7RtUmHvzLmy6rU7NknAoh1NX7jNutlx4eZQrMd5vIKAIvJeGV1uKJr prbiKNXxyXPwjgtk1LTgIibYjgtsNN/a2x2HzpnXPw== -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:34 2025 by rpki-client