$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/261A2BA2F39611EDA98C5D4DC4F9AE02.roa File: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (raw, json) Hash identifier: NmSN6VJwUZ9ydFpM44jw4neBA26CzfMXA6i3a7+JHjs= Subject key identifier: B0:7C:37:26:A0:08:27:13:AE:23:4A:08:75:2B:13:B3:1F:E0:90:0F Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0B34 Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/261A2BA2F39611EDA98C5D4DC4F9AE02.roa Signing time: Wed 02 Apr 2025 19:50:35 +0000 ROA not before: Wed 02 Apr 2025 19:50:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63139 IP address blocks: 103.84.109.0/24 maxlen: 24 175.176.194.0/24 maxlen: 24 2404:a140:31::/48 maxlen: 48 2404:a140:34::/48 maxlen: 48 2404:a140:35::/48 maxlen: 48 2404:a140:36::/48 maxlen: 48 2404:a140:37::/48 maxlen: 48 2404:a140:4e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2868 (0xb34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Validity Not Before: Apr 2 19:50:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67ed950b-6b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4f:36:2e:cc:7d:9f:ed:a9:87:c8:81:1a:35: fe:7c:31:15:47:ed:14:ab:e9:f4:a5:77:95:3a:69: 56:85:a2:fb:58:89:9a:7b:a6:1c:59:82:70:15:cf: d0:2b:cc:d0:1d:70:ed:12:85:04:28:25:b8:ec:db: ca:9c:e2:2c:90:4a:e1:76:b9:0a:d8:cd:88:6b:0f: 41:3f:15:a3:41:b1:3e:80:d7:f1:89:47:be:ae:20: 6c:6a:00:3f:2a:37:2c:bf:e2:2a:6d:2c:eb:41:78: ea:34:8d:f8:4c:69:e7:d6:19:15:cf:d2:cc:74:a0: ab:a8:5f:68:d8:39:b9:ce:c7:d2:ff:04:70:d0:28: 4d:35:26:df:2b:17:63:92:b8:76:1a:00:93:59:78: 1f:48:5e:21:a9:a6:8a:2e:c2:63:e5:29:14:39:bc: 46:8f:20:1f:e0:7c:4d:a0:84:a9:14:08:ea:11:f2: a9:dd:74:c7:46:24:56:73:65:c9:0b:5e:27:7c:df: a3:8d:81:f0:3a:62:b0:a7:6b:c4:aa:e8:b6:b2:01: 66:7e:05:43:3e:76:0c:99:b2:f1:16:e1:7f:44:eb: 4d:08:ea:9e:dd:0d:79:d1:6d:97:3d:af:7c:35:da: 66:d9:46:b2:b4:eb:49:55:63:2a:e2:69:83:aa:a9: c5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7C:37:26:A0:08:27:13:AE:23:4A:08:75:2B:13:B3:1F:E0:90:0F X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/261A2BA2F39611EDA98C5D4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.109.0/24 175.176.194.0/24 IPv6: 2404:a140:31::/48 2404:a140:34::/46 2404:a140:4e::/48 Signature Algorithm: sha256WithRSAEncryption 01:4e:ab:4f:a4:87:db:5b:94:5e:79:d7:95:6c:6d:a1:d5:b4: dc:37:f5:14:39:ee:3d:68:b8:45:6c:3b:de:bb:ce:66:d2:7c: 21:86:1e:2b:59:70:00:13:14:8c:8b:97:df:07:e8:0b:a7:2f: 63:d4:39:e7:10:23:91:75:2a:2b:84:0f:12:51:e4:c3:06:cb: b3:96:cb:88:d6:b6:34:28:9f:c7:04:b3:b9:d1:11:cd:bd:02: c2:71:50:f4:9c:1b:f4:09:68:c3:e1:f1:9a:56:6f:b2:ff:7d: fc:e4:1f:fc:38:06:b8:0a:4f:ca:84:b7:cb:7a:d4:74:38:99: 6c:36:27:f7:e5:19:87:15:f4:a3:37:51:f9:f5:29:35:0c:5d: 3b:85:02:b4:ab:21:2d:b2:5e:00:56:a4:0d:3d:34:ff:3a:14: eb:48:bb:2e:d8:88:d8:37:f7:fd:bf:a7:1a:d6:47:75:0c:c5: c5:a2:49:52:73:aa:8d:c4:89:31:90:0c:88:02:a3:af:7b:a0: a4:21:cc:79:58:7f:7c:63:71:10:6b:12:0f:5f:9f:e1:41:b0: 2d:3d:e6:fc:6a:6c:e6:e8:89:bc:93:10:ca:65:f7:78:70:8e: 31:f6:c3:32:0f:90:e9:62:7d:8f:80:3c:5a:fd:30:31:72:79: d8:43:bc:9c -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgICCzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjUwNDAyMTk1MDM1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkOTUwYi02Yjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxk82Lsx9n+2ph8iBGjX+fDEVR+0Uq+n0pXeVOmlWhaL7WImae6YcWYJwFc/Q K8zQHXDtEoUEKCW47NvKnOIskErhdrkK2M2Iaw9BPxWjQbE+gNfxiUe+riBsagA/ Kjcsv+IqbSzrQXjqNI34TGnn1hkVz9LMdKCrqF9o2Dm5zsfS/wRw0ChNNSbfKxdj krh2GgCTWXgfSF4hqaaKLsJj5SkUObxGjyAf4HxNoISpFAjqEfKp3XTHRiRWc2XJ C14nfN+jjYHwOmKwp2vEqui2sgFmfgVDPnYMmbLxFuF/ROtNCOqe3Q150W2XPa98 Ndpm2UaytOtJVWMq4mmDqqnF7QIDAQABo4ICvjCCArowHQYDVR0OBBYEFLB8Nyag CCcTriNKCHUrE7Mf4JAPMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM4QUYvRDFGNjRFNzI1RUVGMTFFQUE1NEU2QzZDQzRGOUFFMDIvMjYxQTJCQTJG Mzk2MTFFREE5OEM1RDREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSAYIKwYBBQUHAQcBAf8E OTA3MBIEAgABMAwDBABnVG0DBACvsMIwIQQCAAIwGwMHACQEoUAAMQMHAiQEoUAA NAMHACQEoUAATjANBgkqhkiG9w0BAQsFAAOCAQEAAU6rT6SH21uUXnnXlWxtodW0 3Df1FDnuPWi4RWw73rvOZtJ8IYYeK1lwABMUjIuX3wfoC6cvY9Q55xAjkXUqK4QP ElHkwwbLs5bLiNa2NCifxwSzudERzb0CwnFQ9Jwb9Alow+HxmlZvsv99/OQf/DgG uApPyoS3y3rUdDiZbDYn9+UZhxX0ozdR+fUpNQxdO4UCtKshLbJeAFakDT00/zoU 60i7LtiI2Df3/b+nGtZHdQzFxaJJUnOqjcSJMZAMiAKjr3ugpCHMeVh/fGNxEGsS D1+f4UGwLT3m/Gps5uiJvJMQymX3eHCOMfbDMg+Q6WJ9j4A8Wv0wMXJ52EO8nA== -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:08 2025 by rpki-client