$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/8144C55412E611E98A4A6A35C4F9AE02.roa File: 8144C55412E611E98A4A6A35C4F9AE02.roa (raw, json) Hash identifier: HcaovZ/E4LVI99vShwEF3DVWudHVhbjCDuMnNSp75nw= Subject key identifier: B3:E4:3D:C6:A5:F1:2B:EC:19:E4:57:EA:AC:50:DB:D4:F2:F9:9E:69 Certificate issuer: /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77 Certificate serial: 1DEB Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/8144C55412E611E98A4A6A35C4F9AE02.roa Signing time: Wed 12 Mar 2025 17:06:09 +0000 ROA not before: Wed 12 Mar 2025 17:06:09 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 133749 IP address blocks: 103.76.40.0/22 maxlen: 22 103.76.42.0/24 maxlen: 24 2407:6180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7659 (0x1deb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77 Validity Not Before: Mar 12 17:06:09 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67d1bf01-d0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0f:fd:7a:6e:13:93:05:85:5a:e2:53:03:28: 5c:71:f5:b9:7d:55:e8:b4:f2:bc:78:40:31:0a:40: 5c:24:55:f9:e0:3a:eb:17:85:19:41:30:f3:dd:72: 41:a2:4d:a8:d8:90:c2:a5:d9:d8:dd:e6:95:87:29: 2c:ae:28:37:2b:81:c5:f8:3c:e2:c9:53:38:c4:85: 62:7d:fa:36:cd:48:65:9b:3f:12:e4:17:f7:1f:ea: cf:ea:b8:17:7b:dc:5a:17:c3:97:19:5d:f5:2e:30: cd:3c:e6:bd:62:ab:0e:be:7d:2f:6c:0b:6b:30:c4: 46:d8:71:9d:59:9f:2c:88:30:f9:14:05:9c:e1:85: 56:92:5a:b2:f7:70:3e:c3:f6:24:1b:52:73:20:15: 41:7a:4d:cc:dd:64:04:6f:5a:90:7a:c5:c2:29:52: 26:8b:0f:72:44:22:b5:26:11:29:e7:b6:17:14:f7: ec:12:fd:41:b2:ba:41:42:a3:1b:db:a9:c4:fa:59: 26:70:08:97:98:9a:36:87:77:f8:f8:24:54:b6:f8: 2a:2e:4d:f3:76:05:17:d0:7a:2c:84:2b:91:a3:4f: be:d6:a8:4a:de:b1:ce:05:bf:71:36:90:74:8d:08: b2:a3:5a:ce:36:11:11:3a:6d:3d:a5:c6:16:93:9a: 45:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E4:3D:C6:A5:F1:2B:EC:19:E4:57:EA:AC:50:DB:D4:F2:F9:9E:69 X509v3 Authority Key Identifier: keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/8144C55412E611E98A4A6A35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.40.0/22 IPv6: 2407:6180::/32 Signature Algorithm: sha256WithRSAEncryption 88:36:f7:1a:cf:6d:55:72:5c:a2:2d:fc:b2:5f:0e:7f:3f:bd: 3b:eb:82:67:df:b5:01:a4:78:7d:aa:67:f2:aa:1c:12:c4:7e: b9:8a:d2:e8:29:28:1c:7b:68:05:ce:65:97:97:2f:85:96:0b: 01:eb:22:39:b4:36:24:45:2c:4d:8e:71:2d:d6:f6:db:89:7f: 2a:61:10:2c:18:78:35:80:32:8f:7d:69:98:53:d8:9e:b5:32: 86:68:0c:49:85:a7:0b:74:17:c1:e9:49:43:0c:87:1e:42:5b: 16:99:77:e3:ae:99:e5:81:16:3a:91:b7:eb:7b:6c:77:62:78: 23:b8:48:15:d7:8c:1a:a5:57:1c:e4:43:25:8d:ff:aa:ed:ad: 54:44:26:61:dc:38:c0:6c:47:29:f6:9c:01:fd:07:bb:4b:11: cd:4c:f9:f1:2c:b9:65:d0:2a:54:e0:d0:1a:81:0c:2d:1b:0a: 68:3a:f7:c0:63:17:10:df:3b:5f:7e:d8:e0:74:07:17:fc:f4: 85:5f:12:69:03:af:34:e4:40:35:5e:b3:44:91:3e:c3:6c:0c: 85:50:d9:6b:5c:d2:2e:05:63:01:60:ba:61:9e:8e:f3:07:e9: 70:f4:4d:db:49:b8:df:3c:ce:62:6d:8c:31:d0:3d:cd:a1:82: 4d:1e:c6:d6 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICHeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4NEIxMTAvBgNVBAUTKDczNDFGNjRFQUIyNTE3RUE5OTM4RERFNEZCMEE4MTRF NUNCQjdFNzcwHhcNMjUwMzEyMTcwNjA5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2QxYmYwMS1kMGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAog/9em4TkwWFWuJTAyhccfW5fVXotPK8eEAxCkBcJFX54DrrF4UZQTDz3XJB ok2o2JDCpdnY3eaVhyksrig3K4HF+DziyVM4xIViffo2zUhlmz8S5Bf3H+rP6rgX e9xaF8OXGV31LjDNPOa9YqsOvn0vbAtrMMRG2HGdWZ8siDD5FAWc4YVWklqy93A+ w/YkG1JzIBVBek3M3WQEb1qQesXCKVImiw9yRCK1JhEp57YXFPfsEv1BsrpBQqMb 26nE+lkmcAiXmJo2h3f4+CRUtvgqLk3zdgUX0HoshCuRo0++1qhK3rHOBb9xNpB0 jQiyo1rONhEROm09pcYWk5pFOwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLPkPcal 8SvsGeRX6qxQ29Ty+Z5pMB8GA1UdIwQYMBaAFHNB9k6rJRfqmTjd5PsKgU5cu353 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg0Qi8xMzY0ODdGQThD OEMxMUU2QjBCN0M1MjhDNEY5QUUwMi9jMEgyVHFzbEYtcVpPTjNrLXdxQlRseTdm bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwSDJUcXNsRi1xWk9OM2std3FCVGx5N2ZuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE4NEIvMTM2NDg3RkE4QzhDMTFFNkIwQjdDNTI4QzRGOUFFMDIvODE0NEM1NTQx MkU2MTFFOThBNEE2QTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnTCgwDQQCAAIwBwMFACQHYYAwDQYJKoZIhvcNAQELBQAD ggEBAIg29xrPbVVyXKIt/LJfDn8/vTvrgmfftQGkeH2qZ/KqHBLEfrmK0ugpKBx7 aAXOZZeXL4WWCwHrIjm0NiRFLE2OcS3W9tuJfyphECwYeDWAMo99aZhT2J61MoZo DEmFpwt0F8HpSUMMhx5CWxaZd+OumeWBFjqRt+t7bHdieCO4SBXXjBqlVxzkQyWN /6rtrVREJmHcOMBsRyn2nAH9B7tLEc1M+fEsuWXQKlTg0BqBDC0bCmg698BjFxDf O19+2OB0Bxf89IVfEmkDrzTkQDVes0SRPsNsDIVQ2Wtc0i4FYwFgumGejvMH6XD0 TdtJuN88zmJtjDHQPc2hgk0extY= -----END CERTIFICATE-----Generated at Sat Apr 26 08:12:27 2025 by rpki-client