$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/83595478B65E11EF8DB85B32C4F9AE02.roa File: 83595478B65E11EF8DB85B32C4F9AE02.roa (raw, json) Hash identifier: 8tjvkR4DoTk7UtvsWE0jDhrG+DVKY6Vhv3UaWUDUXuE= Subject key identifier: 41:FE:B6:E6:7C:3A:33:F7:10:79:19:34:7B:5F:17:41:A8:B6:D1:9D Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Certificate serial: 0465 Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/83595478B65E11EF8DB85B32C4F9AE02.roa Signing time: Mon 09 Dec 2024 21:05:06 +0000 ROA not before: Mon 09 Dec 2024 21:05:06 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 150683 IP address blocks: 103.174.4.0/24 maxlen: 24 103.174.5.0/24 maxlen: 24 2400:7360::/32 maxlen: 32 2400:7360::/40 maxlen: 48 2400:7360:100::/40 maxlen: 48 2400:7360:200::/40 maxlen: 48 2400:7360:300::/40 maxlen: 48 2400:7360:400::/40 maxlen: 48 2400:7360:500::/40 maxlen: 48 2400:7360:600::/40 maxlen: 48 2400:7360:700::/40 maxlen: 48 2400:7360:800::/40 maxlen: 48 2400:7360:900::/40 maxlen: 48 2400:7360:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1125 (0x465) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E791, serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Validity Not Before: Dec 9 21:05:06 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67575b82-a7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:f1:cd:fa:bf:c0:5b:ed:d9:84:0f:9b:03: de:a9:ee:cc:c1:1c:c7:fd:74:60:44:24:24:c3:d2: 39:a4:19:36:9d:a2:62:5b:a3:c9:ce:93:0f:0d:79: 8f:0b:56:33:16:ca:c9:d1:84:ad:e9:5b:c2:00:17: c6:07:ad:47:b8:c9:20:bd:d7:20:9b:f5:ca:e1:7d: cb:a2:e1:9a:e7:9b:fb:fb:14:21:15:42:fe:c0:b4: 31:f9:f7:0c:cc:d5:7e:9b:8e:c7:bf:4c:45:19:00: 06:63:fe:f1:5c:c7:ed:14:58:82:28:02:47:07:36: 8b:6c:82:dc:a1:90:38:e9:32:88:8b:55:a8:0d:01: 96:a5:9e:05:3f:67:97:ca:ba:aa:ac:eb:86:6d:75: f0:9c:9c:25:cc:61:c3:22:fb:8f:e7:d0:39:ab:b2: e2:28:a2:9b:3e:38:87:d5:d6:86:84:7b:9a:92:42: ab:76:b3:7a:3d:89:56:28:8a:0f:ed:02:a1:3a:8e: ae:ff:02:b3:a9:e5:e4:46:77:ad:d1:f8:0d:be:6c: 14:c7:21:0c:f1:3b:6d:03:b8:ec:9b:4c:4b:20:ab: d9:32:19:1e:c3:70:0c:b3:70:83:8a:40:c4:fa:12: 5c:c7:0d:6e:f7:e2:31:81:ea:59:c4:0f:0b:3f:8a: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FE:B6:E6:7C:3A:33:F7:10:79:19:34:7B:5F:17:41:A8:B6:D1:9D X509v3 Authority Key Identifier: keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/83595478B65E11EF8DB85B32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.4.0/23 IPv6: 2400:7360::/32 Signature Algorithm: sha256WithRSAEncryption 99:e1:fa:f2:29:c4:37:af:25:bf:6d:02:4a:fe:25:f7:b9:be: 7a:63:7e:59:99:85:71:ed:cc:b7:f0:ed:0e:cc:6b:45:68:7e: c6:b4:0d:bf:3b:b6:46:72:33:72:52:ff:51:a0:a6:a0:0a:27: 1f:dc:54:7c:9d:d7:3b:c3:76:6a:7b:c2:e0:95:e6:58:27:ed: 76:09:4e:43:9d:47:8a:3b:ed:83:ee:55:b1:60:64:45:fa:b0: 4a:3d:71:b0:b6:16:41:53:77:e5:94:a7:19:f6:13:d1:7b:b7: 88:2b:31:e7:78:8b:07:d6:a0:e8:f3:8b:97:92:53:29:e4:b0: ab:53:8d:6d:0f:10:9d:55:56:67:6a:ac:98:90:0c:f1:94:7f: eb:63:79:91:f8:7b:2c:fb:18:13:72:17:98:d9:ef:28:f0:58: d2:86:da:a3:62:52:3d:c1:f3:2b:be:1c:27:d7:a7:b7:37:0c: d6:b9:b1:9d:fb:31:a0:56:af:c1:27:c3:45:c8:07:74:b9:7c: 5f:1b:7b:4a:3a:5e:9b:c5:38:4b:ae:e6:3b:ff:f4:b6:4f:0d: 2d:82:2e:70:d8:74:49:d9:1c:cf:46:22:e5:aa:3a:c6:ed:65: 0d:32:a4:7d:53:0c:44:44:db:d2:eb:48:fa:5b:4e:41:0a:33: bc:39:b3:29 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU3OTExMTAvBgNVBAUTKEM0RDdCOTRCOURGQjY0RjVDMTg5MjcyMzMwREJEQ0FE MkE3RDAxNkUwHhcNMjQxMjA5MjEwNTA2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU3NWI4Mi1hN2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1t3xzfq/wFvt2YQPmwPeqe7MwRzH/XRgRCQkw9I5pBk2naJiW6PJzpMPDXmP C1YzFsrJ0YSt6VvCABfGB61HuMkgvdcgm/XK4X3LouGa55v7+xQhFUL+wLQx+fcM zNV+m47Hv0xFGQAGY/7xXMftFFiCKAJHBzaLbILcoZA46TKIi1WoDQGWpZ4FP2eX yrqqrOuGbXXwnJwlzGHDIvuP59A5q7LiKKKbPjiH1daGhHuakkKrdrN6PYlWKIoP 7QKhOo6u/wKzqeXkRnet0fgNvmwUxyEM8TttA7jsm0xLIKvZMhkew3AMs3CDikDE +hJcxw1u9+IxgepZxA8LP4qkoQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEH+tuZ8 OjP3EHkZNHtfF0GottGdMB8GA1UdIwQYMBaAFMTXuUud+2T1wYknIzDb3K0qfQFu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTc5MS8xOUM2OEQwNjNB MDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQWEJpU2NqTU52Y3JTcDlB VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZTVTNTM3WlBYQmlTY2pNTnZjclNwOUFXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU3OTEvMTlDNjhEMDYzQTA1MTFFQ0E5NDQwNTFCQzRGOUFFMDIvODM1OTU0NzhC NjVFMTFFRjhEQjg1QjMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnrgQwDQQCAAIwBwMFACQAc2AwDQYJKoZIhvcNAQELBQAD ggEBAJnh+vIpxDevJb9tAkr+Jfe5vnpjflmZhXHtzLfw7Q7Ma0Vofsa0Db87tkZy M3JS/1GgpqAKJx/cVHyd1zvDdmp7wuCV5lgn7XYJTkOdR4o77YPuVbFgZEX6sEo9 cbC2FkFTd+WUpxn2E9F7t4grMed4iwfWoOjzi5eSUynksKtTjW0PEJ1VVmdqrJiQ DPGUf+tjeZH4eyz7GBNyF5jZ7yjwWNKG2qNiUj3B8yu+HCfXp7c3DNa5sZ37MaBW r8Enw0XIB3S5fF8be0o6XpvFOEuu5jv/9LZPDS2CLnDYdEnZHM9GIuWqOsbtZQ0y pH1TDERE29LrSPpbTkEKM7w5syk= -----END CERTIFICATE-----Generated at Sat Apr 26 08:16:33 2025 by rpki-client