$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/1D7E458ED3D011EFAF492E7BC4F9AE02.roa File: 1D7E458ED3D011EFAF492E7BC4F9AE02.roa (raw, json) Hash identifier: cfuG3Q6SxCv5NEHrNvBKgcm8n0lxZoatwiMQRslcJQQ= Subject key identifier: 60:B6:6C:2B:09:95:8A:6A:8C:E2:39:9D:16:A1:06:5E:A0:44:0D:BF Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E Certificate serial: 3495 Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/1D7E458ED3D011EFAF492E7BC4F9AE02.roa Signing time: Thu 16 Jan 2025 06:07:07 +0000 ROA not before: Thu 16 Jan 2025 06:07:07 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 215269 IP address blocks: 103.21.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13461 (0x3495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E Validity Not Before: Jan 16 06:07:07 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6788a20b-5457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:43:da:38:ee:63:42:ad:da:94:ae:d7:8d:c2: d0:70:f9:ba:36:fd:5e:b7:92:32:af:f3:fb:e0:42: 66:d5:a7:b8:36:10:39:cd:ad:6e:c6:90:3f:46:60: 45:11:a0:6e:75:46:93:77:0a:69:a1:dd:53:1b:f5: 67:ea:bb:43:af:93:cd:9f:c8:d1:a4:2e:93:46:a9: 44:89:c6:ab:80:24:1f:09:4b:f6:86:45:7a:ac:86: 92:32:51:24:45:39:8e:e2:65:6e:b8:95:fa:78:a3: 26:08:cb:1d:aa:ac:53:c3:6f:fe:21:75:1c:bc:08: b0:77:9a:5b:35:c4:43:32:57:68:48:c4:42:98:89: b1:6e:ec:20:a8:63:db:ec:d0:9b:75:50:e8:82:7e: d1:68:c6:28:fe:69:48:bb:ca:ea:68:54:0e:30:29: 5e:10:e3:93:fd:af:b0:dc:6f:fc:31:01:d5:8f:5c: 7b:8e:b9:e4:91:bb:e8:45:38:9a:84:b9:e5:4c:d1: 5c:31:5e:f7:03:7d:71:d1:01:ea:f5:08:47:3f:4b: 31:00:d9:c5:65:6f:9b:c2:cd:c2:72:65:2a:72:2b: f9:49:73:e5:ad:7b:04:a2:11:e8:4a:78:8b:93:dd: ad:95:5e:db:a6:a0:57:9b:5f:df:2a:02:0c:7e:1f: 76:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B6:6C:2B:09:95:8A:6A:8C:E2:39:9D:16:A1:06:5E:A0:44:0D:BF X509v3 Authority Key Identifier: keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/1D7E458ED3D011EFAF492E7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.21.137.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:f8:63:b5:5d:56:1e:80:00:59:46:03:9c:be:d8:85:5c:21: bc:fd:0d:17:55:ab:05:07:94:d3:de:75:f0:fe:f5:32:f7:de: 21:88:f1:de:cb:53:69:f9:1d:01:be:84:8a:41:de:53:be:84: a7:9b:de:b8:ad:b9:72:07:29:83:24:f4:2c:8e:3d:30:51:de: ca:43:f2:15:ac:d3:0f:9d:e4:7c:fc:08:1f:1b:00:b5:7a:71: a8:6c:a5:35:90:8e:e5:83:b5:1b:4e:1c:f5:54:bf:55:b3:23: 10:c0:d0:ee:d9:0c:ec:43:70:4b:d0:05:2f:3c:9d:04:eb:39: 46:58:e1:73:6c:54:01:8a:1e:72:99:eb:56:8b:2c:ef:90:22: e3:e9:7c:8e:1b:67:17:3b:16:c3:73:b1:d4:b4:f3:a2:81:e5: 49:b9:b1:30:22:0b:a8:bf:63:01:c8:6d:ae:71:4d:73:ad:72: 5d:c0:72:74:33:d7:fb:de:61:0b:90:11:6e:17:d4:ef:f9:a7: 4d:df:00:f7:63:c3:16:5d:ec:64:fd:b8:a9:eb:2d:8b:6f:40: ae:a0:60:bc:92:a9:be:fc:23:e7:34:93:4a:92:b2:44:08:06: f6:a8:0b:68:e5:42:ff:1a:f2:25:ae:dc:b0:bb:6b:f7:92:d1: e2:6d:83:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNzYxMTAvBgNVBAUTKDYzRUM0RTYzODBGQUFFQTUxMTA3RTlDNDBDMkYxMDU4 RTA4Rjg1NkUwHhcNMjUwMTE2MDYwNzA3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg4YTIwYi01NDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kPaOO5jQq3alK7XjcLQcPm6Nv1et5Iyr/P74EJm1ae4NhA5za1uxpA/RmBF EaBudUaTdwppod1TG/Vn6rtDr5PNn8jRpC6TRqlEicargCQfCUv2hkV6rIaSMlEk RTmO4mVuuJX6eKMmCMsdqqxTw2/+IXUcvAiwd5pbNcRDMldoSMRCmImxbuwgqGPb 7NCbdVDogn7RaMYo/mlIu8rqaFQOMCleEOOT/a+w3G/8MQHVj1x7jrnkkbvoRTia hLnlTNFcMV73A31x0QHq9QhHP0sxANnFZW+bws3CcmUqciv5SXPlrXsEohHoSniL k92tlV7bpqBXm1/fKgIMfh92mQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGC2bCsJ lYpqjOI5nRahBl6gRA2/MB8GA1UdIwQYMBaAFGPsTmOA+q6lEQfpxAwvEFjgj4Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY3Ni85NDRFMzg5MjFE QUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJxVVJCLW5FREM4UVdPQ1Bo VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kteE9ZNEQ2cnFVUkItbkVEQzhRV09DUGhXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJGNzYvOTQ0RTM4OTIxREFCMTFFMkJCMzBDQUE5MDhCMDJDRDIvMUQ3RTQ1OEVE M0QwMTFFRkFGNDkyRTdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnFYkwDQYJKoZIhvcNAQELBQADggEBAC74Y7VdVh6AAFlG A5y+2IVcIbz9DRdVqwUHlNPedfD+9TL33iGI8d7LU2n5HQG+hIpB3lO+hKeb3rit uXIHKYMk9CyOPTBR3spD8hWs0w+d5Hz8CB8bALV6cahspTWQjuWDtRtOHPVUv1Wz IxDA0O7ZDOxDcEvQBS88nQTrOUZY4XNsVAGKHnKZ61aLLO+QIuPpfI4bZxc7FsNz sdS086KB5Um5sTAiC6i/YwHIba5xTXOtcl3AcnQz1/veYQuQEW4X1O/5p03fAPdj wxZd7GT9uKnrLYtvQK6gYLySqb78I+c0k0qSskQIBvaoC2jlQv8a8iWu3LC7a/eS 0eJtgw0= -----END CERTIFICATE-----Generated at Sat Apr 26 13:46:33 2025 by rpki-client