$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/6602AEE2CD7411EFB3DC8110C4F9AE02.roa File: 6602AEE2CD7411EFB3DC8110C4F9AE02.roa (raw, json) Hash identifier: o30eNhjoxZ8FSPolycjRhI/R0tGnW0OcwMartfSl8R0= Subject key identifier: EE:1F:B5:E3:38:47:A0:F8:66:E8:95:8A:CE:D5:68:85:78:35:3A:15 Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25 Certificate serial: 090D Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/6602AEE2CD7411EFB3DC8110C4F9AE02.roa Signing time: Tue 04 Mar 2025 21:28:47 +0000 ROA not before: Tue 04 Mar 2025 21:28:47 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137199 IP address blocks: 103.101.234.0/23 maxlen: 23 103.115.12.0/23 maxlen: 23 103.115.13.0/24 maxlen: 24 2401:d6c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2317 (0x90d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25 Validity Not Before: Mar 4 21:28:47 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c7708e-3901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:72:31:f1:ed:db:0a:11:8f:2e:67:9d:21:e6: 72:19:16:f4:48:f0:02:a0:9e:0d:38:94:72:8d:8d: 18:9c:06:4f:e4:26:0f:7e:d7:c6:30:31:67:4a:e5: 47:ab:83:d5:86:32:46:6e:23:ed:0f:53:aa:e1:3e: 8d:9a:fe:e7:39:a5:d5:b6:83:41:51:4b:0a:10:80: 90:a4:07:c5:35:fa:19:f7:59:c5:39:e3:be:db:22: e8:33:6b:45:45:14:b2:b3:66:ad:26:ff:27:b5:36: e0:1e:ec:48:8d:0b:fe:61:e8:9a:8f:06:47:01:2e: b8:9d:c8:40:dc:ab:d3:20:c8:78:19:86:20:a8:28: 67:3e:3d:08:53:ef:95:86:23:26:bb:c9:fc:bd:d5: 09:16:1b:a0:de:0d:c4:b1:5f:7f:a5:12:7f:47:28: 20:33:10:ee:95:12:5b:c6:52:34:ca:07:41:4c:10: bd:6a:9a:3f:c1:d4:a3:7b:de:ec:6f:44:51:2d:4a: 55:94:cc:83:71:a3:a8:c0:33:32:af:a8:4f:69:28: 02:f0:a0:04:12:43:ff:b2:c3:28:4f:36:e0:7a:cd: 82:73:73:22:5b:3c:11:5d:8a:45:40:8b:3b:49:38: 7d:d5:62:d8:73:f8:f5:80:7c:d8:04:8c:e3:d7:78: 1f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1F:B5:E3:38:47:A0:F8:66:E8:95:8A:CE:D5:68:85:78:35:3A:15 X509v3 Authority Key Identifier: keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/6602AEE2CD7411EFB3DC8110C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.234.0/23 103.115.12.0/23 IPv6: 2401:d6c0::/32 Signature Algorithm: sha256WithRSAEncryption 34:2a:4f:92:c0:2a:00:3d:de:6f:46:2d:82:cb:18:ff:87:a9: ba:dd:ba:b7:00:8e:6b:9f:ec:56:0f:19:ae:03:d9:d8:25:f1: 1a:ef:b0:f6:e8:18:38:5b:d9:fe:e9:b3:cd:03:8c:cb:ec:88: 5a:d0:d6:83:3f:a6:6a:d3:38:e6:36:8c:37:d4:ec:52:24:2a: 43:f0:9d:82:86:f9:1b:7c:96:8b:14:51:d5:36:40:33:aa:83: b1:51:50:98:d2:4a:24:46:29:06:68:e6:5c:12:b2:6e:94:17: 53:eb:22:50:dc:a0:0c:c7:65:7b:39:f3:4a:ba:68:78:ff:7b: f6:53:41:6c:48:3d:de:fb:8a:78:c7:4c:de:82:2f:bc:41:d6: 02:e2:d8:7a:71:f7:68:50:13:13:df:19:6b:e0:58:68:3d:8f: a2:dc:ee:25:d9:e4:be:d8:64:33:ed:87:b4:66:de:b4:66:3f: 33:41:93:9e:16:2c:dc:58:bf:bf:ea:96:b9:a2:14:b5:97:98: d6:a4:d2:7a:25:59:87:78:f5:ef:d9:84:8d:f1:57:8b:61:83: e3:7f:10:02:24:5d:da:29:f5:d1:9b:86:e3:61:4a:b2:c6:33: 9e:29:3a:2b:48:31:7e:1a:2b:48:db:1f:93:f3:b9:f9:62:50: 34:f1:c9:ed -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGQTQxMTAvBgNVBAUTKDUxOTQyRDI1RURCQ0E1MURGQTU2Q0UwOUVEMzYxRUI3 QTI2REJEMjUwHhcNMjUwMzA0MjEyODQ3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3NzA4ZS0zOTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XIx8e3bChGPLmedIeZyGRb0SPACoJ4NOJRyjY0YnAZP5CYPftfGMDFnSuVH q4PVhjJGbiPtD1Oq4T6Nmv7nOaXVtoNBUUsKEICQpAfFNfoZ91nFOeO+2yLoM2tF RRSys2atJv8ntTbgHuxIjQv+YeiajwZHAS64nchA3KvTIMh4GYYgqChnPj0IU++V hiMmu8n8vdUJFhug3g3EsV9/pRJ/RyggMxDulRJbxlI0ygdBTBC9apo/wdSje97s b0RRLUpVlMyDcaOowDMyr6hPaSgC8KAEEkP/ssMoTzbges2Cc3MiWzwRXYpFQIs7 STh91WLYc/j1gHzYBIzj13gfSwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFO4fteM4 R6D4ZuiVis7VaIV4NToVMB8GA1UdIwQYMBaAFFGULSXtvKUd+lbOCe02Hreibb0l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUZBNC9CNjc4NjJGQUFC OTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBSMzZWczRKN1RZZXQ2SnR2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VaUXRKZTI4cFIzNlZzNEo3VFlldDZKdHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFGQTQvQjY3ODYyRkFBQjk1MTFFQUIyNTU5QzVCQzRGOUFFMDIvNjYwMkFFRTJD RDc0MTFFRkIzREM4MTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnZeoDBAFncwwwDQQCAAIwBwMFACQB1sAwDQYJKoZIhvcN AQELBQADggEBADQqT5LAKgA93m9GLYLLGP+HqbrdurcAjmuf7FYPGa4D2dgl8Rrv sPboGDhb2f7ps80DjMvsiFrQ1oM/pmrTOOY2jDfU7FIkKkPwnYKG+Rt8losUUdU2 QDOqg7FRUJjSSiRGKQZo5lwSsm6UF1PrIlDcoAzHZXs580q6aHj/e/ZTQWxIPd77 injHTN6CL7xB1gLi2Hpx92hQExPfGWvgWGg9j6Lc7iXZ5L7YZDPth7Rm3rRmPzNB k54WLNxYv7/qlrmiFLWXmNak0nolWYd49e/ZhI3xV4thg+N/EAIkXdop9dGbhuNh SrLGM54pOitIMX4aK0jbH5PzufliUDTxye0= -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:25 2025 by rpki-client