$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/D758E96CF8FF11ED98C6D45FC4F9AE02.roa File: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (raw, json) Hash identifier: ZQeH9s5GaYIk1ZxktX3ZDI1XyJXOlpVX7ljtVr42XF4= Subject key identifier: 68:DD:16:8D:70:42:D8:E3:6A:1C:43:50:61:1C:30:FA:F8:BA:EC:3E Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Certificate serial: 04AA Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/D758E96CF8FF11ED98C6D45FC4F9AE02.roa Signing time: Wed 11 Dec 2024 00:14:43 +0000 ROA not before: Wed 11 Dec 2024 00:14:43 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 134711 IP address blocks: 103.12.188.0/22 maxlen: 22 103.197.144.0/22 maxlen: 22 220.158.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1194 (0x4aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Validity Not Before: Dec 11 00:14:43 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6758d973-1a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:2b:cb:ef:3c:ea:07:20:8c:f4:f0:77:e3: 91:5d:99:74:a8:1e:d1:81:a8:28:cc:7a:de:ca:3e: 5e:f6:27:61:94:0b:dc:6d:d9:ac:ea:55:e1:7c:5a: a0:02:60:56:37:e7:84:1f:af:62:11:2d:02:39:3f: 1e:61:dc:7e:64:cc:66:d8:75:f0:65:4d:30:f7:8f: 9f:db:01:4c:11:37:19:a9:41:4c:69:1f:31:01:19: be:98:7d:4b:62:4f:53:4d:c7:3f:3b:d2:dc:73:60: c4:27:ee:f9:bc:88:92:30:eb:c0:2e:78:4f:c7:47: bc:70:c5:1d:c7:9b:24:75:d9:48:d0:60:0f:5c:c1: 01:94:8e:ea:b7:03:a1:c7:ac:2e:27:bb:30:84:92: 6b:6d:cc:52:d7:71:40:19:fa:77:ad:64:89:d7:1b: 58:35:cc:39:80:ae:b6:81:f7:2a:9f:28:13:64:ce: 53:30:59:3b:07:b2:b4:6a:c8:c7:5d:75:7a:65:bb: 69:08:c1:9b:55:f3:6f:b0:59:c3:10:d4:77:6e:cd: d9:f5:9c:7e:7a:71:d1:fd:11:6e:46:d9:2b:e4:97: ab:97:df:a8:fd:f0:24:b7:d1:e9:16:59:55:bb:b9: 68:58:27:2f:ab:42:c8:fe:3e:c0:b0:0f:51:d6:04: 0c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DD:16:8D:70:42:D8:E3:6A:1C:43:50:61:1C:30:FA:F8:BA:EC:3E X509v3 Authority Key Identifier: keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/D758E96CF8FF11ED98C6D45FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.12.188.0/22 103.197.144.0/22 220.158.188.0/22 Signature Algorithm: sha256WithRSAEncryption 93:08:67:79:c1:6d:07:52:48:2d:7c:b1:e7:86:30:af:53:b7: 8c:e0:f7:f9:67:01:b1:f6:f2:e7:ae:04:9a:60:42:bc:6c:2e: 79:e5:99:b8:93:47:69:4e:ec:92:07:92:bf:40:b8:23:da:5b: b4:83:be:ce:83:a8:d2:57:fc:5c:4a:38:9e:f4:fc:dd:08:65: fb:46:57:b0:7e:d4:e0:79:59:c4:5c:61:80:4d:63:be:36:eb: 1d:15:cd:4a:bf:1f:ca:e2:2d:73:4b:5c:bd:21:de:8e:c8:4a: 54:05:1a:10:fe:45:3e:ad:5c:20:3f:35:ed:a6:54:49:2c:bc: 43:dc:3e:ba:dd:39:62:89:aa:58:d1:34:8a:0d:e4:27:51:66: 6e:94:20:95:3e:b2:3f:08:6a:08:0d:13:8b:dd:d9:b3:77:db: 0e:a2:0e:0f:9c:1a:ab:d9:c6:8d:60:f9:49:0e:98:08:a6:a8: d5:20:1e:7f:4e:80:1a:84:7f:6d:d3:bb:4d:8a:d8:e8:69:3e: 39:bd:26:98:9f:77:d3:66:23:15:25:5e:bb:54:ad:fe:07:4a: 91:9a:cc:0a:91:3e:d0:8b:3d:c8:07:0c:c7:09:ff:2d:61:93: 92:72:0b:7a:55:d9:a9:d0:5e:aa:c9:70:d4:c7:4c:d7:58:61: 04:9c:da:a6 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMTMxMTAvBgNVBAUTKDg3RDNCRDdEMEFERTA2NTA5RUI4NUFDNkJBNTk0ODlE OTU0MDFGN0YwHhcNMjQxMjExMDAxNDQzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU4ZDk3My0xYTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6sry+886gcgjPTwd+ORXZl0qB7RgagozHreyj5e9idhlAvcbdms6lXhfFqg AmBWN+eEH69iES0COT8eYdx+ZMxm2HXwZU0w94+f2wFMETcZqUFMaR8xARm+mH1L Yk9TTcc/O9Lcc2DEJ+75vIiSMOvALnhPx0e8cMUdx5skddlI0GAPXMEBlI7qtwOh x6wuJ7swhJJrbcxS13FAGfp3rWSJ1xtYNcw5gK62gfcqnygTZM5TMFk7B7K0asjH XXV6ZbtpCMGbVfNvsFnDENR3bs3Z9Zx+enHR/RFuRtkr5Jerl9+o/fAkt9HpFllV u7loWCcvq0LI/j7AsA9R1gQMIQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFGjdFo1w QtjjahxDUGEcMPr4uuw+MB8GA1UdIwQYMBaAFIfTvX0K3gZQnrhaxrpZSJ2VQB9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUxMy84OTM2MzU3ODI2 RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJsQ2V1RnJHdWxsSW5aVkFI MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g5TzlmUXJlQmxDZXVGckd1bGxJblpWQUgzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0FFMTMvODkzNjM1NzgyNkZCMTFFQ0E3MTM1RDczQzRGOUFFMDIvRDc1OEU5NkNG OEZGMTFFRDk4QzZENDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnDLwDBAJnxZADBALcnrwwDQYJKoZIhvcNAQELBQADggEB AJMIZ3nBbQdSSC18seeGMK9Tt4zg9/lnAbH28ueuBJpgQrxsLnnlmbiTR2lO7JIH kr9AuCPaW7SDvs6DqNJX/FxKOJ70/N0IZftGV7B+1OB5WcRcYYBNY7426x0VzUq/ H8riLXNLXL0h3o7ISlQFGhD+RT6tXCA/Ne2mVEksvEPcPrrdOWKJqljRNIoN5CdR Zm6UIJU+sj8IaggNE4vd2bN32w6iDg+cGqvZxo1g+UkOmAimqNUgHn9OgBqEf23T u02K2OhpPjm9Jpifd9NmIxUlXrtUrf4HSpGazAqRPtCLPcgHDMcJ/y1hk5JyC3pV 2anQXqrJcNTHTNdYYQSc2qY= -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:57 2025 by rpki-client