$ rpki-client -vvf rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/2F38972E672B11EEBA84E00CC4F9AE02.roa File: 2F38972E672B11EEBA84E00CC4F9AE02.roa (raw, json) Hash identifier: F2m4EZaWhb+L+raUozQ7KqaAu1awnSWg4wSyn9tXN5g= Subject key identifier: A2:E6:50:9D:F1:42:7C:F0:59:C4:28:2D:CD:1C:8C:8A:93:5E:9B:A7 Certificate issuer: /CN=A913CDC4/serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E Certificate serial: 018F Authority key identifier: 52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/2F38972E672B11EEBA84E00CC4F9AE02.roa Signing time: Fri 27 Dec 2024 02:16:54 +0000 ROA not before: Fri 27 Dec 2024 02:16:54 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 141395 IP address blocks: 103.121.24.0/24 maxlen: 24 103.121.25.0/24 maxlen: 24 2001:df1:b640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CDC4, serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E Validity Not Before: Dec 27 02:16:54 2024 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=676e0e16-352f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6e:81:ee:4d:f0:d4:5e:ca:6c:32:b9:7c:30: 95:39:36:fc:c8:dc:25:83:1c:89:c0:af:d9:a2:a1: 72:a1:74:d5:27:6b:f1:23:51:86:ed:18:d3:fa:37: 52:d8:5c:af:98:36:b8:07:fd:7c:07:49:06:9e:6c: eb:c1:5d:c6:5c:0b:f3:df:1d:48:fc:07:e5:06:bf: ba:28:db:58:df:61:90:4c:e7:f2:cb:dd:ef:14:fb: ae:75:2d:e0:cb:3c:12:31:bd:8a:50:27:0f:4b:3d: 78:89:f0:56:57:66:bc:94:3c:76:9a:d6:45:33:22: 0d:0d:71:20:7b:a1:60:3e:9e:eb:c6:dd:1a:c1:03: 94:d4:8f:72:1a:9d:9b:05:e6:f7:4e:cd:e4:dd:4d: 3b:75:9f:9e:04:ff:5f:4c:48:e3:4d:6f:9d:b8:d5: 8e:67:f4:d8:af:03:bb:53:2b:52:1e:55:e3:5d:8b: fe:67:43:a5:c9:dd:96:0e:27:54:f0:9e:83:af:46: 31:bd:d2:81:0d:a2:84:2f:a9:33:29:b7:85:98:c7: 73:4c:35:99:12:87:c4:81:bb:f5:20:8d:c2:f3:13: 0d:0a:41:96:99:c2:bb:49:3b:bb:55:84:a8:ce:e2: 64:92:00:8c:64:95:ab:a2:4e:a5:ff:5f:24:b4:02: 3e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E6:50:9D:F1:42:7C:F0:59:C4:28:2D:CD:1C:8C:8A:93:5E:9B:A7 X509v3 Authority Key Identifier: keyid:52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/2F38972E672B11EEBA84E00CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.24.0/23 IPv6: 2001:df1:b640::/48 Signature Algorithm: sha256WithRSAEncryption 08:42:6b:86:da:8a:ce:b3:b3:1c:5c:43:77:b5:2a:41:e0:11: e4:89:a6:fd:15:2b:e1:17:0d:04:4a:1d:87:f6:b5:b9:85:b5: 9f:4f:08:07:54:77:e2:71:95:ca:52:b0:0f:b2:11:05:4a:09: b0:b6:fa:fa:e6:f1:6b:a5:d3:24:18:2d:b8:95:30:1f:63:b0: 2d:89:53:51:8f:01:07:ee:6e:57:1b:01:9f:db:ce:3d:09:a0: ef:e8:56:ba:a1:dc:a7:cc:eb:e7:fa:16:ff:9c:40:d6:07:f4: b0:d2:66:f3:f5:9e:78:92:f9:b7:76:ed:f5:42:b6:b3:18:69: 9e:d9:aa:2a:27:3b:2c:63:65:06:e4:7e:45:80:98:0e:47:c4: 1a:c2:bf:0e:9b:07:45:8d:f6:e3:69:72:cb:c2:8b:8f:ce:47: be:ae:be:0a:d4:13:6c:03:2b:88:93:2f:3d:78:4c:9e:5a:66: c5:46:72:6d:b7:30:a2:26:3b:75:43:65:32:ea:29:cb:54:37: 6b:47:d5:c0:67:97:3a:7a:dc:be:f4:d7:da:c0:24:ef:65:57: a7:35:d3:36:42:45:94:f1:08:b7:b9:7d:4d:e6:ef:e2:54:2e: 50:e9:9f:d5:02:1b:6d:3b:17:c5:17:ef:ce:d8:36:05:50:79: 37:d9:f4:b5 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NEQzQxMTAvBgNVBAUTKDUyOEY2RUNFMDgyQkVCM0REMEE2NkQ5MTQ3M0ZDQzY1 NjlDRDVGNEUwHhcNMjQxMjI3MDIxNjU0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZlMGUxNi0zNTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAum6B7k3w1F7KbDK5fDCVOTb8yNwlgxyJwK/ZoqFyoXTVJ2vxI1GG7RjT+jdS 2FyvmDa4B/18B0kGnmzrwV3GXAvz3x1I/AflBr+6KNtY32GQTOfyy93vFPuudS3g yzwSMb2KUCcPSz14ifBWV2a8lDx2mtZFMyINDXEge6FgPp7rxt0awQOU1I9yGp2b Beb3Ts3k3U07dZ+eBP9fTEjjTW+duNWOZ/TYrwO7UytSHlXjXYv+Z0Olyd2WDidU 8J6Dr0YxvdKBDaKEL6kzKbeFmMdzTDWZEofEgbv1II3C8xMNCkGWmcK7STu7VYSo zuJkkgCMZJWrok6l/18ktAI+pQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKLmUJ3x QnzwWcQoLc0cjIqTXpunMB8GA1UdIwQYMBaAFFKPbs4IK+s90KZtkUc/zGVpzV9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0RDNC9GODQ4NUY2Njgw Q0ExMUVEODVEQTkxM0RDNEY5QUUwMi9Vbzl1emdncjZ6M1FwbTJSUnpfTVpXbk5Y MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvOXV6Z2dyNnozUXBtMlJSel9NWlduTlgwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0NEQzQvRjg0ODVGNjY4MENBMTFFRDg1REE5MTNEQzRGOUFFMDIvMkYzODk3MkU2 NzJCMTFFRUJBODRFMDBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFneRgwDwQCAAIwCQMHACABDfG2QDANBgkqhkiG9w0BAQsF AAOCAQEACEJrhtqKzrOzHFxDd7UqQeAR5Imm/RUr4RcNBEodh/a1uYW1n08IB1R3 4nGVylKwD7IRBUoJsLb6+ubxa6XTJBgtuJUwH2OwLYlTUY8BB+5uVxsBn9vOPQmg 7+hWuqHcp8zr5/oW/5xA1gf0sNJm8/WeeJL5t3bt9UK2sxhpntmqKic7LGNlBuR+ RYCYDkfEGsK/DpsHRY3242lyy8KLj85Hvq6+CtQTbAMriJMvPXhMnlpmxUZybbcw oiY7dUNlMuopy1Q3a0fVwGeXOnrcvvTX2sAk72VXpzXTNkJFlPEIt7l9Tebv4lQu UOmf1QIbbTsXxRfvztg2BVB5N9n0tQ== -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:21 2025 by rpki-client