$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/AF57B9EC2F7811EABC011040C4F9AE02.roa File: AF57B9EC2F7811EABC011040C4F9AE02.roa (raw, json) Hash identifier: 7clxci5sYL0ZKeUn3xOVCzgzac7VXWrYaajUILDcB+8= Subject key identifier: 23:04:27:2A:03:CD:FD:BD:C5:0E:AE:E5:C1:BC:AC:41:7D:E1:A8:B7 Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Certificate serial: 0B60 Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/AF57B9EC2F7811EABC011040C4F9AE02.roa Signing time: Thu 24 Apr 2025 19:18:36 +0000 ROA not before: Thu 24 Apr 2025 19:18:36 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138904 IP address blocks: 103.136.236.0/22 maxlen: 24 2001:df0:f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2912 (0xb60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912614B, serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Validity Not Before: Apr 24 19:18:36 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=680a8e8c-0e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b8:07:84:9e:a8:36:7f:29:61:21:5f:63:85: 00:75:07:2a:c9:92:46:1c:66:65:d4:8e:e9:bc:78: 6b:e4:7e:c6:f1:2f:50:e9:0b:f5:5c:11:49:09:d2: ec:63:1e:1a:2f:99:bf:d9:66:a9:8c:d2:3c:b4:ba: e6:d3:a6:6a:42:e6:09:f2:65:49:cc:9c:60:d5:fa: 3d:44:72:90:be:de:3d:a6:3e:d5:dd:58:5f:de:30: 01:71:3b:74:f4:4c:bc:6b:52:20:b9:24:87:82:b2: 01:67:6b:22:cc:04:f1:a3:2f:7b:05:09:f6:ce:e8: c5:20:fb:01:81:55:ed:21:4c:cc:29:d2:43:5b:3b: c9:60:1c:f5:6e:c1:ca:51:bb:65:0e:e4:e2:23:e6: 7f:c0:ef:ad:aa:f2:c9:17:60:28:71:89:92:3b:81: c4:99:ae:87:aa:2f:86:d4:71:37:31:df:3d:d1:5e: 8e:b3:1e:e7:36:cc:d7:60:37:d1:a8:b5:ca:43:00: c4:1a:36:4f:b1:10:97:78:90:3d:d7:53:6a:a4:80: 1a:53:7d:29:a2:e0:97:96:ac:8a:f1:11:81:5b:d4: ba:0d:51:6d:7e:3b:f6:f6:05:74:84:6b:24:db:11: c7:7e:b7:c6:7e:09:fc:0d:57:66:3a:27:46:09:82: ed:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:04:27:2A:03:CD:FD:BD:C5:0E:AE:E5:C1:BC:AC:41:7D:E1:A8:B7 X509v3 Authority Key Identifier: keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/AF57B9EC2F7811EABC011040C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.236.0/22 IPv6: 2001:df0:f80::/48 Signature Algorithm: sha256WithRSAEncryption 9b:14:5b:02:c0:69:3a:56:06:b3:b3:43:06:7a:b5:ac:f8:55: 5e:37:d8:ba:a0:a4:e4:9a:0e:12:69:4b:5e:37:b6:61:02:fe: 13:81:95:7a:b5:d6:a8:26:0d:75:80:e5:bd:75:f7:a4:62:18: bb:f8:aa:14:37:b6:b1:b9:e7:b9:e3:78:da:7d:26:20:2c:67: 42:a1:94:6c:97:d9:11:26:b2:54:d0:88:d6:7d:19:86:6d:d6: 0b:98:68:de:36:be:4a:d0:85:63:72:6d:12:25:af:1a:d4:34: 8b:5b:5c:f8:ac:9b:3a:03:15:34:a2:eb:39:2d:82:e3:53:d0: 02:c9:5d:7a:d8:67:8d:f7:fa:4b:12:3d:e3:02:17:51:43:3c: 48:8a:35:54:b4:26:c5:c2:bc:f6:86:91:9e:43:51:5d:7f:28: 04:d4:ab:bb:18:12:db:99:1f:74:a0:b1:67:73:b6:34:c3:a6: 3e:65:ba:68:1a:1a:49:f1:5f:0c:ca:83:81:3a:02:4f:6f:56: d6:be:a2:de:d7:0b:6d:dc:c1:b9:77:b5:68:63:ba:ee:33:c4: 1a:07:03:43:f6:96:e7:0f:24:d5:31:94:ed:24:72:39:2e:52: d9:8e:55:9c:98:a6:1c:c1:b2:f1:c2:e9:0e:7d:e3:00:2b:e5: 51:e2:fc:90 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICC2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxNEIxMTAvBgNVBAUTKDNEQkNDQkJFN0JFOTE2Qzk2RUVBRUNEOThCRjVENTNF MUMzOTBFQTEwHhcNMjUwNDI0MTkxODM2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhOGU4Yy0wZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7gHhJ6oNn8pYSFfY4UAdQcqyZJGHGZl1I7pvHhr5H7G8S9Q6Qv1XBFJCdLs Yx4aL5m/2WapjNI8tLrm06ZqQuYJ8mVJzJxg1fo9RHKQvt49pj7V3Vhf3jABcTt0 9Ey8a1IguSSHgrIBZ2sizATxoy97BQn2zujFIPsBgVXtIUzMKdJDWzvJYBz1bsHK UbtlDuTiI+Z/wO+tqvLJF2AocYmSO4HEma6Hqi+G1HE3Md890V6Osx7nNszXYDfR qLXKQwDEGjZPsRCXeJA911NqpIAaU30pouCXlqyK8RGBW9S6DVFtfjv29gV0hGsk 2xHHfrfGfgn8DVdmOidGCYLtawIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCMEJyoD zf29xQ6u5cG8rEF94ai3MB8GA1UdIwQYMBaAFD28y7576RbJburs2Yv11T4cOQ6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjE0Qi9GMkE0OTI0RTJG NzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZzbHU2dXpaaV9YVlBodzVE cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Biekx2bnZwRnNsdTZ1elppX1hWUGh3NURxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYxNEIvRjJBNDkyNEUyRjc2MTFFQTkxRkRDQjNDQzRGOUFFMDIvQUY1N0I5RUMy Rjc4MTFFQUJDMDExMDQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJniOwwDwQCAAIwCQMHACABDfAPgDANBgkqhkiG9w0BAQsF AAOCAQEAmxRbAsBpOlYGs7NDBnq1rPhVXjfYuqCk5JoOEmlLXje2YQL+E4GVerXW qCYNdYDlvXX3pGIYu/iqFDe2sbnnueN42n0mICxnQqGUbJfZESayVNCI1n0Zhm3W C5ho3ja+StCFY3JtEiWvGtQ0i1tc+KybOgMVNKLrOS2C41PQAsldethnjff6SxI9 4wIXUUM8SIo1VLQmxcK89oaRnkNRXX8oBNSruxgS25kfdKCxZ3O2NMOmPmW6aBoa SfFfDMqDgToCT29W1r6i3tcLbdzBuXe1aGO67jPEGgcDQ/aW5w8k1TGU7SRyOS5S 2Y5VnJimHMGy8cLpDn3jACvlUeL8kA== -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:41 2025 by rpki-client