$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/CA364B681A1711F0A1D93523C4F9AE02.roa File: CA364B681A1711F0A1D93523C4F9AE02.roa (raw, json) Hash identifier: H7vVzWCwUc4gHrSDyxvt/Abb/5bSd+LGYG3bv6YBZ6Q= Subject key identifier: 1D:47:CA:28:D1:AD:9F:DE:81:FF:9D:53:91:63:C8:F4:3B:5A:CD:E0 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 013F Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/CA364B681A1711F0A1D93523C4F9AE02.roa Signing time: Tue 15 Apr 2025 16:36:33 +0000 ROA not before: Tue 15 Apr 2025 16:36:33 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 199959 IP address blocks: 103.79.76.0/22 maxlen: 22 103.79.76.0/24 maxlen: 24 103.79.77.0/24 maxlen: 24 103.79.78.0/24 maxlen: 24 103.79.79.0/24 maxlen: 24 103.79.118.0/24 maxlen: 24 103.91.144.0/24 maxlen: 24 103.91.145.0/24 maxlen: 24 202.91.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Apr 15 16:36:33 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67fe8b11-d464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:be:3b:c7:4c:1b:d5:82:0e:9b:aa:3c:d5:c1: 57:4c:1f:1a:2c:ca:b0:7d:d0:7e:93:01:d9:c8:1e: 73:ec:5c:fb:e7:3a:9f:8b:70:cd:b1:fd:a7:22:d9: f2:ae:4b:5e:46:a5:d5:db:24:ec:57:3c:96:10:41: 5d:c4:50:82:e1:04:91:f6:13:e7:5a:a8:3e:b4:08: 71:8d:43:49:5c:c3:40:71:7c:17:f1:55:56:33:b7: 8b:3e:29:70:e8:ac:92:4b:8c:00:80:85:8b:ab:20: a9:d6:91:38:ab:fa:59:2b:03:2a:55:90:5b:2f:1a: c2:0f:56:22:6c:5d:e4:73:18:ff:23:ea:32:a2:96: 55:d8:23:f4:a4:c7:d6:a2:97:d9:e1:c9:67:51:23: 98:c0:0e:7b:3c:4b:fd:61:a1:5a:da:2d:eb:61:1b: c4:53:e4:67:40:61:35:71:8c:a1:f8:d6:42:d4:ad: 3f:0e:14:8a:be:05:73:2f:da:38:55:d0:06:bc:04: 59:bd:27:a9:b3:3d:54:af:bc:69:4d:28:04:e4:ec: bd:88:ae:96:e4:fd:2f:52:97:77:da:99:80:e1:23: ed:a6:6d:72:2b:ab:aa:dd:d2:3a:c1:8b:ab:c2:0d: a2:9c:fb:12:c9:fe:b6:80:8e:e5:0d:f9:9c:2f:29: a7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:47:CA:28:D1:AD:9F:DE:81:FF:9D:53:91:63:C8:F4:3B:5A:CD:E0 X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/CA364B681A1711F0A1D93523C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.79.76.0/22 103.79.118.0/24 103.91.144.0/23 202.91.32.0/24 Signature Algorithm: sha256WithRSAEncryption 58:99:67:56:8b:d1:e4:ce:d1:19:cb:7b:f2:c7:91:e8:d1:c5: 19:0a:e0:43:49:df:bf:8e:3e:68:d4:41:d1:31:eb:10:7b:3e: 5b:ba:27:f8:81:3b:c8:8e:e7:a3:5a:0a:68:9f:ef:3b:75:b3: 97:7f:85:99:d0:2b:94:2e:99:96:75:60:b8:15:74:85:ba:0a: a1:08:92:50:47:11:9b:ba:27:2b:3f:5d:df:10:2f:16:e7:08: 2a:a2:26:f2:76:02:3a:5b:b1:c4:d5:3c:32:ee:2f:20:1a:4a: d1:f5:ab:16:71:12:20:b2:09:2d:cf:40:6c:13:71:0e:ef:cf: 4c:6d:1f:d0:fb:51:cf:96:7e:10:53:38:8a:86:d2:5d:87:67: f8:12:29:3c:5c:70:57:51:23:2e:0a:e2:e6:2b:c3:4a:9e:f2: 1a:93:52:4f:9b:2d:8f:54:4a:c6:7a:e9:80:3f:cf:cd:bc:8d: 47:44:96:b4:19:28:89:f4:18:2d:42:b7:f2:e3:ef:06:5e:78: 2c:1a:a5:9b:5e:db:1f:f6:52:9e:9c:51:f9:15:db:db:73:05: e0:68:ff:fc:95:1b:1b:a9:bc:31:73:bb:23:7b:df:7c:91:e7: 78:dd:1c:c4:6d:df:83:63:b2:cc:51:69:ae:5f:62:27:15:11: 09:15:a2:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjUwNDE1MTYzNjMzWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZlOGIxMS1kNDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyr47x0wb1YIOm6o81cFXTB8aLMqwfdB+kwHZyB5z7Fz75zqfi3DNsf2nItny rkteRqXV2yTsVzyWEEFdxFCC4QSR9hPnWqg+tAhxjUNJXMNAcXwX8VVWM7eLPilw 6KySS4wAgIWLqyCp1pE4q/pZKwMqVZBbLxrCD1YibF3kcxj/I+oyopZV2CP0pMfW opfZ4clnUSOYwA57PEv9YaFa2i3rYRvEU+RnQGE1cYyh+NZC1K0/DhSKvgVzL9o4 VdAGvARZvSepsz1Ur7xpTSgE5Oy9iK6W5P0vUpd32pmA4SPtpm1yK6uq3dI6wYur wg2inPsSyf62gI7lDfmcLymnbQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFB1HyijR rZ/egf+dU5FjyPQ7Ws3gMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUVEMkMvMDAzNzNDNkM5QkJDMTFFRTg1MUFERDUwQzRGOUFFMDIvQ0EzNjRCNjgx QTE3MTFGMEExRDkzNTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAJnT0wDBABnT3YDBAFnW5ADBADKWyAwDQYJKoZIhvcNAQEL BQADggEBAFiZZ1aL0eTO0RnLe/LHkejRxRkK4ENJ37+OPmjUQdEx6xB7Plu6J/iB O8iO56NaCmif7zt1s5d/hZnQK5QumZZ1YLgVdIW6CqEIklBHEZu6Jys/Xd8QLxbn CCqiJvJ2AjpbscTVPDLuLyAaStH1qxZxEiCyCS3PQGwTcQ7vz0xtH9D7Uc+WfhBT OIqG0l2HZ/gSKTxccFdRIy4K4uYrw0qe8hqTUk+bLY9USsZ66YA/z828jUdElrQZ KIn0GC1Ct/Lj7wZeeCwapZte2x/2Up6cUfkV29tzBeBo//yVGxupvDFzuyN733yR 53jdHMRt34NjssxRaa5fYicVEQkVomw= -----END CERTIFICATE-----Generated at Sat Apr 26 08:07:43 2025 by rpki-client