$ rpki-client -vvf rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/5FF4FD52704C11ED97935E7DC4F9AE02.roa File: 5FF4FD52704C11ED97935E7DC4F9AE02.roa (raw, json) Hash identifier: C5+qR+xwM5riTT+23t/1tPZQq66L4etzO1hAZvNu09M= Subject key identifier: 69:3D:6F:96:B3:CD:1B:23:DF:E1:BB:48:93:44:55:37:4C:6E:08:7B Certificate issuer: /CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277 Certificate serial: 017B Authority key identifier: E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/5FF4FD52704C11ED97935E7DC4F9AE02.roa Signing time: Thu 05 Dec 2024 02:17:04 +0000 ROA not before: Thu 05 Dec 2024 02:17:04 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 7600 IP address blocks: 203.20.226.0/23 maxlen: 23 203.20.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E5CB, serialNumber=E1733B970FDDF767FF195428437E1242A3769277 Validity Not Before: Dec 5 02:17:04 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67510d1f-4a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:22:df:30:a1:f4:75:e8:d5:64:d9:cc:6e:72: 94:09:a1:b6:46:3a:0f:40:ff:0c:47:7e:aa:07:12: 89:f9:13:47:59:49:4b:a8:cc:eb:1b:97:a2:f0:52: 45:ac:8b:05:07:18:09:5b:f8:d3:fd:82:54:58:6e: 3d:22:44:cc:d7:7a:e5:07:3c:5f:ea:a8:16:fc:d1: 0a:c7:6d:94:c5:1d:84:99:9b:f6:b0:85:55:3e:94: 9c:4a:42:91:8a:53:75:43:e9:2a:9f:c6:23:49:72: 6c:e5:59:20:05:e9:c3:a2:7c:f9:c7:10:a1:8c:20: 1e:d7:ca:33:af:f9:15:4a:ef:1c:c3:a3:35:68:67: a6:9e:80:45:05:f5:6b:c5:42:d5:f2:72:72:11:56: 2f:f8:b5:22:06:95:50:8c:c3:86:b3:a7:85:57:72: da:06:87:ca:76:b1:9a:4c:2f:08:0d:9d:a0:67:36: af:91:f8:10:55:63:be:f7:f7:d3:60:66:eb:18:83: 22:23:f8:f0:cd:86:f9:1b:c9:8e:31:98:99:14:1a: 1f:dc:07:14:30:05:75:2b:ed:52:a0:f7:ce:35:a6: ba:44:89:9f:a4:79:a2:89:ff:d3:c5:bd:33:5c:04: c8:47:39:b7:ff:e9:de:3e:a2:4e:f9:9d:53:b3:34: fa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3D:6F:96:B3:CD:1B:23:DF:E1:BB:48:93:44:55:37:4C:6E:08:7B X509v3 Authority Key Identifier: keyid:E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/5FF4FD52704C11ED97935E7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.226.0/23 203.20.247.0/24 Signature Algorithm: sha256WithRSAEncryption 59:21:cd:e1:d7:8e:0c:c1:be:b2:40:62:6f:c8:64:f3:5d:0c: 81:38:b2:2e:7d:7f:3f:5f:af:78:4c:28:5b:1f:d4:81:d0:b6: 71:ea:1b:74:cf:8b:96:92:e0:89:ca:d5:97:b1:20:25:65:e2: d1:08:fe:27:fb:7b:29:9a:54:34:a4:27:3e:a2:a7:8b:83:e5: 54:4f:47:6a:08:88:8a:1e:b5:5e:1b:d8:a6:23:d6:af:de:08: 06:40:11:b4:07:75:6f:e6:fc:13:3d:2b:27:94:3b:3f:27:87: 5d:27:3f:cf:77:c9:f6:b6:70:f4:18:c8:b6:b3:ac:22:e8:1a: 4d:b0:0e:0d:ca:26:9d:fb:18:ff:e7:71:92:e3:ba:68:c9:7f: bc:36:59:62:84:dc:8d:03:e6:f2:29:a5:6a:ae:83:bd:6d:95: da:17:c2:55:12:d0:1e:94:46:4f:a3:ec:15:5b:bc:c0:4b:a8: 80:03:26:6f:a2:13:07:88:01:fc:fe:32:df:6a:17:60:25:6f: 16:0a:96:ee:44:ee:d5:bc:6c:ab:21:bf:a1:e4:89:72:ab:37: 68:9d:31:4f:ba:28:bd:87:3b:95:6e:44:d5:56:1a:2d:cf:9d: c6:35:6e:ea:6f:cd:ec:de:35:d6:3b:c8:cb:e6:ee:d3:fd:cb: c9:7c:eb:eb -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1Q0IxMTAvBgNVBAUTKEUxNzMzQjk3MEZEREY3NjdGRjE5NTQyODQzN0UxMjQy QTM3NjkyNzcwHhcNMjQxMjA1MDIxNzA0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUxMGQxZi00YTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yLfMKH0dejVZNnMbnKUCaG2RjoPQP8MR36qBxKJ+RNHWUlLqMzrG5ei8FJF rIsFBxgJW/jT/YJUWG49IkTM13rlBzxf6qgW/NEKx22UxR2EmZv2sIVVPpScSkKR ilN1Q+kqn8YjSXJs5VkgBenDonz5xxChjCAe18ozr/kVSu8cw6M1aGemnoBFBfVr xULV8nJyEVYv+LUiBpVQjMOGs6eFV3LaBofKdrGaTC8IDZ2gZzavkfgQVWO+9/fT YGbrGIMiI/jwzYb5G8mOMZiZFBof3AcUMAV1K+1SoPfONaa6RImfpHmiif/Txb0z XATIRzm3/+nePqJO+Z1TszT6twIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGk9b5az zRsj3+G7SJNEVTdMbgh7MB8GA1UdIwQYMBaAFOFzO5cP3fdn/xlUKEN+EkKjdpJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTVDQi81Mjg4RENFMDcw NDkxMUVEQjZFMUZCNzhDNEY5QUUwMi80WE03bHdfZDkyZl9HVlFvUTM0U1FxTjJr bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYTTdsd19kOTJmX0dWUW9RMzRTUXFOMmtuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU1Q0IvNTI4OERDRTA3MDQ5MTFFREI2RTFGQjc4QzRGOUFFMDIvNUZGNEZENTI3 MDRDMTFFRDk3OTM1RTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAHLFOIDBADLFPcwDQYJKoZIhvcNAQELBQADggEBAFkhzeHX jgzBvrJAYm/IZPNdDIE4si59fz9fr3hMKFsf1IHQtnHqG3TPi5aS4InK1ZexICVl 4tEI/if7eymaVDSkJz6ip4uD5VRPR2oIiIoetV4b2KYj1q/eCAZAEbQHdW/m/BM9 KyeUOz8nh10nP893yfa2cPQYyLazrCLoGk2wDg3KJp37GP/ncZLjumjJf7w2WWKE 3I0D5vIppWqug71tldoXwlUS0B6URk+j7BVbvMBLqIADJm+iEweIAfz+Mt9qF2Al bxYKlu5E7tW8bKshv6HkiXKrN2idMU+6KL2HO5VuRNVWGi3PncY1bupvzezeNdY7 yMvm7tP9y8l86+s= -----END CERTIFICATE-----Generated at Sat Apr 26 09:19:49 2025 by rpki-client