$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/710A095EB62A11EF9D01E53DC4F9AE02.roa File: 710A095EB62A11EF9D01E53DC4F9AE02.roa (raw, json) Hash identifier: 5lEL9eS9yJhHrkaY87CyfNgKHrW5Wh6Msg6SUfVkO2Q= Subject key identifier: 0D:9D:93:80:67:72:B6:C2:45:6A:21:A6:A5:D3:64:E4:3E:50:1A:AD Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Certificate serial: 01B1 Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/710A095EB62A11EF9D01E53DC4F9AE02.roa Signing time: Mon 09 Dec 2024 12:38:08 +0000 ROA not before: Mon 09 Dec 2024 12:38:08 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 395793 IP address blocks: 103.62.1.0/24 maxlen: 24 103.62.2.0/24 maxlen: 24 103.62.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Validity Not Before: Dec 9 12:38:08 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6756e4af-2f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f6:43:50:f3:5d:5d:d6:1f:88:25:ad:95:fc: 10:8e:bd:4d:1f:48:22:f9:78:57:4b:52:47:30:40: a5:72:0e:0a:b6:e0:b2:d4:86:65:22:7f:7a:98:53: c7:ac:78:a2:ad:5c:c2:0a:1d:8f:05:d9:51:c4:be: 68:67:c8:db:25:15:a2:ae:84:9e:f1:85:e8:5e:d5: 1b:df:90:f4:7e:aa:90:b3:11:37:37:bb:c9:de:8b: 5a:4e:7d:5b:5e:ce:88:74:fa:52:87:c0:98:24:5f: 9f:03:6e:5a:e1:a8:eb:d1:cd:f5:71:ec:5d:c5:cd: 4c:ad:18:9b:56:c6:b1:f1:48:d4:5d:6a:46:bd:d6: ae:cc:2c:ca:c2:e4:3b:5f:56:8b:47:12:ec:bd:e8: fc:0a:70:03:0e:3c:0d:7b:05:8e:49:10:7d:fa:0b: 83:10:00:67:f5:f3:ac:c1:1e:df:06:da:4f:23:4d: ff:28:f1:10:2b:84:17:20:59:af:ae:d5:4d:13:7f: 79:03:64:60:7d:72:90:bd:bf:f9:57:7b:7c:e1:dd: c8:83:83:2e:1b:c3:1b:00:a4:a8:fa:0f:d7:4c:0c: 4f:ee:a9:c9:4d:28:f1:e4:ec:de:97:4f:99:c6:8a: 06:ef:09:ba:ba:05:f6:22:84:f5:cf:48:cd:e6:d1: e3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9D:93:80:67:72:B6:C2:45:6A:21:A6:A5:D3:64:E4:3E:50:1A:AD X509v3 Authority Key Identifier: keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/710A095EB62A11EF9D01E53DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.62.1.0-103.62.3.255 Signature Algorithm: sha256WithRSAEncryption af:02:9a:7e:ee:c6:81:a9:66:fa:84:e5:e9:a9:db:38:a2:0d: 92:c3:8a:9e:34:d1:ae:89:6e:6d:9e:00:6b:66:68:b6:98:d4: aa:b5:92:f8:23:81:44:14:73:a9:98:7f:0e:14:b8:5a:46:e1: 1c:1b:b7:bf:54:b8:c3:3a:02:86:6f:a2:13:3c:9f:7f:5a:27: c3:53:1b:52:ac:92:71:29:2b:cd:af:77:d2:e3:7b:99:5a:ea: 58:d4:1d:bf:3f:d4:b9:00:60:b7:d5:d4:c8:25:6c:b3:77:47: 30:bc:3d:c8:84:5c:83:bb:2a:e9:d1:b3:b1:f8:70:f4:12:2e: 4b:73:c4:be:cb:59:d8:9d:e3:ef:ea:3d:5f:a4:ea:ff:50:43: ab:c9:5c:62:21:06:87:ed:bb:81:df:18:1a:e3:45:67:9f:d9: db:29:e4:f6:54:58:a6:69:b1:66:fa:2d:19:fd:5a:f3:7f:bd: 25:fc:83:aa:a4:28:f2:ea:81:42:17:23:02:7a:88:20:8c:f2: 9b:65:0c:87:fe:86:44:31:2a:d9:0a:1d:1e:71:58:7f:26:65: 03:d2:e8:c0:89:85:a6:f8:83:c9:a3:0d:3e:6a:5f:fe:6a:20: d1:81:4a:34:15:dc:0a:fd:e7:e2:37:94:f9:d6:c6:ed:b7:50: fb:3e:fb:49 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2 MTM2MTRCQ0EwHhcNMjQxMjA5MTIzODA4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU2ZTRhZi0yZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/ZDUPNdXdYfiCWtlfwQjr1NH0gi+XhXS1JHMEClcg4KtuCy1IZlIn96mFPH rHiirVzCCh2PBdlRxL5oZ8jbJRWiroSe8YXoXtUb35D0fqqQsxE3N7vJ3otaTn1b Xs6IdPpSh8CYJF+fA25a4ajr0c31cexdxc1MrRibVsax8UjUXWpGvdauzCzKwuQ7 X1aLRxLsvej8CnADDjwNewWOSRB9+guDEABn9fOswR7fBtpPI03/KPEQK4QXIFmv rtVNE395A2RgfXKQvb/5V3t84d3Ig4MuG8MbAKSo+g/XTAxP7qnJTSjx5Ozel0+Z xooG7wm6ugX2IoT1z0jN5tHjEwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFA2dk4Bn crbCRWohpqXTZOQ+UBqtMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0 NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEE4MTQvRDM4QTE5MTI3NDVFMTFFREJBNjg4NTE0QzRGOUFFMDIvNzEwQTA5NUVC NjJBMTFFRjlEMDFFNTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGc+AQMEAmc+ADANBgkqhkiG9w0BAQsFAAOCAQEArwKa fu7Ggalm+oTl6anbOKINksOKnjTRrolubZ4Aa2ZotpjUqrWS+COBRBRzqZh/DhS4 WkbhHBu3v1S4wzoChm+iEzyff1onw1MbUqyScSkrza930uN7mVrqWNQdvz/UuQBg t9XUyCVss3dHMLw9yIRcg7sq6dGzsfhw9BIuS3PEvstZ2J3j7+o9X6Tq/1BDq8lc YiEGh+27gd8YGuNFZ5/Z2ynk9lRYpmmxZvotGf1a83+9JfyDqqQo8uqBQhcjAnqI IIzym2UMh/6GRDEq2QodHnFYfyZlA9LowImFpviDyaMNPmpf/mog0YFKNBXcCv3n 4jeU+dbG7bdQ+z77SQ== -----END CERTIFICATE-----Generated at Sat Apr 26 08:11:39 2025 by rpki-client