$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/DD9876F4B19911EFA6C3FD55C4F9AE02.roa File: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (raw, json) Hash identifier: jI8x+nsZP4P5+Lp//1d0h3kgd/U6B4j1xlc/fhuOkh4= Subject key identifier: 47:9D:49:B7:25:22:EB:4C:B6:6C:32:F6:D9:D2:44:9A:F6:84:D3:B7 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 06A4 Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/DD9876F4B19911EFA6C3FD55C4F9AE02.roa Signing time: Tue 03 Dec 2024 17:13:08 +0000 ROA not before: Tue 03 Dec 2024 17:13:08 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 151330 IP address blocks: 103.152.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1700 (0x6a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: Dec 3 17:13:08 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=674f3c24-308f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5c:bd:2c:d8:3b:9b:8c:43:9b:f7:3b:ed:91: 23:2e:be:31:75:b8:96:65:68:5b:26:e1:17:58:b7: 20:e3:fd:c5:48:40:50:20:06:15:63:a9:a1:bb:81: ea:2d:e3:24:5f:13:9e:8d:39:0a:e1:35:90:9d:c1: b2:7c:f4:da:54:4f:d6:08:30:55:8e:01:51:68:2d: 29:43:80:ea:3c:f4:d8:80:56:9d:e9:72:b5:68:31: 83:7e:4b:db:cd:b2:48:20:03:e1:a6:6b:47:e3:09: da:c3:0e:bb:ac:9f:34:6e:1b:43:4e:8b:43:85:89: 12:44:fc:e7:f3:f1:6b:de:e9:0d:42:e9:40:bd:9f: bd:83:16:25:f8:9e:13:2d:24:da:fc:ae:10:a3:8f: 04:a3:ee:7e:7b:11:a9:d4:79:a3:53:9e:32:13:ba: 78:51:db:a0:62:0c:0f:f0:c2:35:34:75:7b:8a:24: 5c:59:9d:a0:db:5b:9f:c0:0a:2b:2a:34:4f:c0:a2: ff:82:b1:10:f5:1b:7a:32:70:6b:0b:89:d9:2a:25: f1:db:8b:fe:db:ab:68:b0:ff:f7:ab:ee:62:ee:60: 49:c2:a5:d0:58:62:34:60:a7:77:df:c2:ac:24:ff: 1a:7d:1c:4e:d1:4f:53:d9:b6:6b:a9:a8:50:a3:e5: 89:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9D:49:B7:25:22:EB:4C:B6:6C:32:F6:D9:D2:44:9A:F6:84:D3:B7 X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/DD9876F4B19911EFA6C3FD55C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.100.0/23 Signature Algorithm: sha256WithRSAEncryption b6:5f:88:c6:d9:b8:80:87:1b:4d:4a:29:9f:41:e0:89:f6:36: 10:42:7a:4b:c7:54:6e:91:87:2a:ed:90:62:f4:ac:eb:cb:d1: 5c:e4:b8:98:6d:81:5f:a2:21:57:d1:07:04:81:67:05:08:3a: f7:eb:dd:f1:fc:7e:9c:b9:65:18:ef:43:16:8d:b9:41:8b:af: e7:be:ab:53:04:cd:46:f9:22:25:b5:c2:10:9d:9f:85:af:4b: a5:e2:a7:d0:e6:ea:cc:22:ba:86:9c:76:3e:50:9c:1e:6e:3e: a5:44:89:c4:94:42:b1:6d:5e:72:5d:7c:9d:ab:f1:46:d1:96: c4:82:9a:1f:58:46:66:3c:8e:03:f2:09:7f:b7:90:d1:af:d8: b9:15:9d:3f:a3:b8:7a:ba:27:60:36:b0:72:fb:af:5c:cc:07: dc:4c:de:c5:48:3b:65:e7:1a:41:cf:51:cc:b2:65:58:df:73: f4:1e:de:58:9e:fa:b7:56:80:b3:9e:6c:aa:52:60:72:c8:d7: c4:16:49:9e:c8:86:26:f8:b1:87:f9:0b:51:e9:66:2e:ea:e8: 8a:9e:47:27:e5:66:c7:7a:c7:0f:0c:98:50:2f:0d:b9:96:e0: f2:58:d9:62:e8:49:6e:c2:e5:0e:ea:df:e9:25:e2:ec:89:3a: 48:79:c0:c6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjQxMjAzMTcxMzA4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRmM2MyNC0zMDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFy9LNg7m4xDm/c77ZEjLr4xdbiWZWhbJuEXWLcg4/3FSEBQIAYVY6mhu4Hq LeMkXxOejTkK4TWQncGyfPTaVE/WCDBVjgFRaC0pQ4DqPPTYgFad6XK1aDGDfkvb zbJIIAPhpmtH4wnaww67rJ80bhtDTotDhYkSRPzn8/Fr3ukNQulAvZ+9gxYl+J4T LSTa/K4Qo48Eo+5+exGp1HmjU54yE7p4UdugYgwP8MI1NHV7iiRcWZ2g21ufwAor KjRPwKL/grEQ9Rt6MnBrC4nZKiXx24v+26tosP/3q+5i7mBJwqXQWGI0YKd338Ks JP8afRxO0U9T2bZrqahQo+WJ/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEedSbcl IutMtmwy9tnSRJr2hNO3MB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU5OUIvNzMzREE0RTg1QjMzMTFFQjgwMENCODBDQzRGOUFFMDIvREQ5ODc2RjRC MTk5MTFFRkE2QzNGRDU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmGQwDQYJKoZIhvcNAQELBQADggEBALZfiMbZuICHG01K KZ9B4In2NhBCekvHVG6RhyrtkGL0rOvL0VzkuJhtgV+iIVfRBwSBZwUIOvfr3fH8 fpy5ZRjvQxaNuUGLr+e+q1MEzUb5IiW1whCdn4WvS6Xip9Dm6swiuoacdj5QnB5u PqVEicSUQrFtXnJdfJ2r8UbRlsSCmh9YRmY8jgPyCX+3kNGv2LkVnT+juHq6J2A2 sHL7r1zMB9xM3sVIO2XnGkHPUcyyZVjfc/Qe3lie+rdWgLOebKpSYHLI18QWSZ7I hib4sYf5C1HpZi7q6IqeRyflZsd6xw8MmFAvDbmW4PJY2WLoSW7C5Q7q3+kl4uyJ Okh5wMY= -----END CERTIFICATE-----Generated at Sat Apr 26 12:34:30 2025 by rpki-client