$ rpki-client -vvf rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/DD3109D66C6C11EB92CE744BC4F9AE02.roa File: DD3109D66C6C11EB92CE744BC4F9AE02.roa (raw, json) Hash identifier: Q6KB/kezFn+0maPMaSXmf71FjW9THCnG/ycviixRgRs= Subject key identifier: 87:5D:DB:E6:F7:FB:04:4A:33:11:08:B4:F5:1F:12:47:88:68:D4:8D Certificate issuer: /CN=A915FBEA/serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35 Certificate serial: 0652 Authority key identifier: DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/DD3109D66C6C11EB92CE744BC4F9AE02.roa Signing time: Sun 22 Dec 2024 22:10:46 +0000 ROA not before: Sun 22 Dec 2024 22:10:46 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 133173 IP address blocks: 103.254.50.0/24 maxlen: 24 2001:df0:c800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FBEA, serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35 Validity Not Before: Dec 22 22:10:46 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67688e66-c722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:b9:de:b6:0b:ee:e2:28:ea:42:7b:90:b6: 2c:5c:b7:a0:3c:2e:46:e5:f6:6d:e1:0e:e1:16:e8: 13:3c:c9:32:d6:1c:2c:93:dd:f6:16:84:b6:92:91: 6b:37:91:10:05:54:23:9a:03:be:59:57:7f:c9:eb: 08:37:4a:a8:98:ff:ba:16:50:32:35:23:35:b4:fa: 10:95:ad:51:a7:8f:d4:6a:d0:4f:64:2f:ed:da:5b: 29:8a:54:eb:3f:f7:1a:39:ba:be:98:be:da:8a:cd: d8:46:b5:8c:52:0d:76:7d:6c:76:b6:ca:f6:e2:f0: 51:c5:4f:5f:8e:db:e3:77:de:86:28:29:75:42:dc: ff:62:e3:63:f7:5d:84:8f:eb:5d:ec:d8:7b:ff:8b: 32:96:f1:fa:fa:b2:3f:c8:41:7d:fc:11:b0:32:55: 5b:10:ce:eb:5a:3e:f7:f9:d5:eb:30:89:2c:b4:48: 08:36:f3:1f:a7:13:80:3e:e4:56:29:34:1c:ee:63: 00:21:b1:db:dc:c0:2f:32:35:5b:ed:88:44:bd:eb: 78:b0:7f:0f:49:14:2d:e4:7a:65:dd:88:fc:ad:6c: 98:b4:0c:a5:8c:30:8e:75:f0:ae:bf:0f:37:58:97: 8c:64:3f:02:ae:b5:95:e2:a5:10:93:3a:96:67:92: 53:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5D:DB:E6:F7:FB:04:4A:33:11:08:B4:F5:1F:12:47:88:68:D4:8D X509v3 Authority Key Identifier: keyid:DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/DD3109D66C6C11EB92CE744BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.254.50.0/24 IPv6: 2001:df0:c800::/48 Signature Algorithm: sha256WithRSAEncryption 9f:3a:fb:9d:c8:b0:43:db:a7:aa:4e:48:3e:61:9c:00:8f:ca: be:7b:b2:b6:3f:83:4d:94:aa:ef:8b:73:e5:c5:36:1c:6a:be: ed:fe:a6:5f:a2:da:06:c5:66:2e:57:91:b8:6f:a3:df:59:73: fd:1a:cc:e4:b1:b1:9f:23:97:dd:bb:ce:ba:5f:f7:18:13:4b: 0a:3f:b9:5b:b4:a2:94:4f:07:3b:a3:aa:c9:4b:ae:93:e4:f8: df:9f:34:8e:18:c4:b6:ed:8b:6f:a1:f1:53:68:d3:7c:25:0d: ae:f9:6b:77:db:2c:4a:9e:c6:f8:ff:16:03:40:55:d3:01:aa: 93:47:e1:5d:81:31:6f:c7:f2:a2:3b:4d:6e:b0:7c:1d:31:e7: 6c:60:4f:49:42:cc:10:33:ad:37:13:63:55:45:da:f0:95:e8: 93:a2:9e:4e:48:14:e2:8b:cc:7b:23:8d:a8:08:b2:03:db:28: dd:40:6e:f9:18:28:ea:9d:fb:a0:dd:95:57:b9:7c:49:21:9b: 8a:21:78:f0:4f:22:30:12:29:1a:68:46:32:7b:59:29:4f:fd: fc:2d:eb:52:73:c6:05:c3:56:8d:e7:a7:76:fe:c8:8f:76:95: 8c:31:25:6a:b4:d2:b9:4e:ae:db:f6:d5:12:d1:da:42:6b:aa: 56:18:9f:e4 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZCRUExMTAvBgNVBAUTKERGNTE1QjU5MTVFODMzRUVEQjQ0NEQxOUMzMEEwMEYw OTc4MTVBMzUwHhcNMjQxMjIyMjIxMDQ2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY4OGU2Ni1jNzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsE253rYL7uIo6kJ7kLYsXLegPC5G5fZt4Q7hFugTPMky1hwsk932FoS2kpFr N5EQBVQjmgO+WVd/yesIN0qomP+6FlAyNSM1tPoQla1Rp4/UatBPZC/t2lspilTr P/caObq+mL7ais3YRrWMUg12fWx2tsr24vBRxU9fjtvjd96GKCl1Qtz/YuNj912E j+td7Nh7/4sylvH6+rI/yEF9/BGwMlVbEM7rWj73+dXrMIkstEgINvMfpxOAPuRW KTQc7mMAIbHb3MAvMjVb7YhEvet4sH8PSRQt5Hpl3Yj8rWyYtAyljDCOdfCuvw83 WJeMZD8CrrWV4qUQkzqWZ5JTLQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIdd2+b3 +wRKMxEItPUfEkeIaNSNMB8GA1UdIwQYMBaAFN9RW1kV6DPu20RNGcMKAPCXgVo1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkJFQS9BQTdFMzkxQTZD NkIxMUVCOEZFRjE5NEJDNEY5QUUwMi8zMUZiV1JYb00tN2JSRTBad3dvQThKZUJX alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMxRmJXUlhvTS03YlJFMFp3d29BOEplQldqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUZCRUEvQUE3RTM5MUE2QzZCMTFFQjhGRUYxOTRCQzRGOUFFMDIvREQzMTA5RDY2 QzZDMTFFQjkyQ0U3NDRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABn/jIwDwQCAAIwCQMHACABDfDIADANBgkqhkiG9w0BAQsF AAOCAQEAnzr7nciwQ9unqk5IPmGcAI/Kvnuytj+DTZSq74tz5cU2HGq+7f6mX6La BsVmLleRuG+j31lz/RrM5LGxnyOX3bvOul/3GBNLCj+5W7SilE8HO6OqyUuuk+T4 3580jhjEtu2Lb6HxU2jTfCUNrvlrd9ssSp7G+P8WA0BV0wGqk0fhXYExb8fyojtN brB8HTHnbGBPSULMEDOtNxNjVUXa8JXok6KeTkgU4ovMeyONqAiyA9so3UBu+Rgo 6p37oN2VV7l8SSGbiiF48E8iMBIpGmhGMntZKU/9/C3rUnPGBcNWjeendv7Ij3aV jDElarTSuU6u2/bVEtHaQmuqVhif5A== -----END CERTIFICATE-----Generated at Sat Apr 26 10:00:25 2025 by rpki-client