$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/81C5BFF8192811EA9B88D87DC4F9AE02.roa File: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (raw, json) Hash identifier: ZawsauuQVy3/xITjsqsOJpATtDgEASJhh1tB3zSZBaE= Subject key identifier: 00:F9:3C:DC:BE:D9:11:C1:D3:A3:A4:10:31:8C:DF:2D:DE:6A:50:98 Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Certificate serial: 0B95 Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/81C5BFF8192811EA9B88D87DC4F9AE02.roa Signing time: Mon 30 Dec 2024 18:47:49 +0000 ROA not before: Mon 30 Dec 2024 18:47:49 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 139771 IP address blocks: 103.145.28.0/24 maxlen: 24 103.145.29.0/24 maxlen: 24 2001:df1:f180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2965 (0xb95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Validity Not Before: Dec 30 18:47:49 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6772ead5-9eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:36:e6:4e:7b:39:7f:b7:14:95:4c:1d:2e:e3: e8:be:00:d0:ca:09:2c:83:e0:4c:fe:eb:6c:83:77: fc:f5:f5:e6:da:c4:95:99:29:74:8d:03:3e:64:63: b8:81:10:b2:79:a7:ac:47:f2:a7:cb:d6:69:88:d9: a4:e9:a7:a9:7f:0f:0e:6a:21:c5:d3:5a:cf:93:d0: f2:18:6b:55:3e:0b:68:96:6d:14:cd:b0:b9:43:b5: 82:0f:2b:35:49:31:4b:7a:d0:94:d9:a5:6d:21:c3: f2:1d:02:b4:cc:22:7d:e4:e8:65:2a:c5:d6:b3:71: b5:44:df:eb:72:63:e7:06:33:6f:d1:c2:a3:85:e6: 56:dd:50:99:39:28:0e:cc:fa:ac:2d:5b:23:b3:c1: d0:ee:c9:2b:a0:63:05:4c:99:11:81:dc:3a:e3:40: 59:31:ae:13:fe:a2:e1:16:33:11:04:10:de:66:68: 7e:51:96:3f:2c:0f:34:0f:09:76:e1:88:0b:6a:2b: 45:9b:24:f2:a1:32:43:c2:40:64:8f:ba:46:fb:11: c4:d7:f5:a7:ce:aa:09:d7:4f:d6:a5:63:ae:74:d8: 58:69:d7:98:bd:1c:6d:61:d8:59:1b:39:a0:dc:c6: 2a:cc:62:45:c8:ff:26:11:a4:98:54:71:a1:51:ea: 6a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F9:3C:DC:BE:D9:11:C1:D3:A3:A4:10:31:8C:DF:2D:DE:6A:50:98 X509v3 Authority Key Identifier: keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/81C5BFF8192811EA9B88D87DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.28.0/23 IPv6: 2001:df1:f180::/48 Signature Algorithm: sha256WithRSAEncryption 79:8e:6c:e7:82:4a:df:0a:55:7d:ba:03:70:b1:80:9d:38:a7: c6:08:b7:13:d7:81:aa:e6:fe:10:8d:e9:24:8d:57:54:d7:7e: bd:68:93:0b:19:83:d7:63:c9:a8:ba:2e:ed:e0:fc:23:40:1f: 47:5d:2e:86:49:6b:6a:87:73:59:e9:3b:cc:2a:cf:b6:7f:63: a9:40:20:67:01:d6:4e:d6:72:53:20:a8:ff:7e:ca:e3:87:6b: 31:0c:6b:51:86:b0:ae:62:25:4b:6e:95:97:9d:6a:0c:34:03: 1d:74:d1:fb:46:43:7d:da:74:aa:92:06:3b:73:60:38:1c:34: 18:8b:1b:d0:3d:47:38:da:a0:72:fd:83:e5:d8:70:d8:1d:52: 9f:32:02:77:6d:84:81:b3:5e:c4:0e:19:93:49:a2:d3:07:df: 49:f1:b9:e1:ac:2d:97:b5:2d:93:79:92:56:f4:74:20:b8:55: 2e:20:0e:76:7f:d9:c2:be:bf:6e:5d:59:c1:cc:f4:fb:7f:bb: 5c:f9:b4:44:c1:1c:6d:e2:4b:0a:16:73:15:05:2f:6e:d6:4e: ac:26:e4:0c:5c:42:64:fb:66:08:5f:25:3c:fd:d1:cf:dd:27: 3f:74:2e:c0:fe:ff:94:05:dd:ce:1e:41:bf:03:ba:11:e4:9f: 72:71:33:2d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICC5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQ0IxMTAvBgNVBAUTKENDMzY5MEY4OTZFRjU2NzMxMTUzNUJDNDQ0REYxRUI3 NDFGRDhCQjQwHhcNMjQxMjMwMTg0NzQ5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzcyZWFkNS05ZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjbmTns5f7cUlUwdLuPovgDQygksg+BM/utsg3f89fXm2sSVmSl0jQM+ZGO4 gRCyeaesR/Kny9ZpiNmk6aepfw8OaiHF01rPk9DyGGtVPgtolm0UzbC5Q7WCDys1 STFLetCU2aVtIcPyHQK0zCJ95OhlKsXWs3G1RN/rcmPnBjNv0cKjheZW3VCZOSgO zPqsLVsjs8HQ7skroGMFTJkRgdw640BZMa4T/qLhFjMRBBDeZmh+UZY/LA80Dwl2 4YgLaitFmyTyoTJDwkBkj7pG+xHE1/WnzqoJ10/WpWOudNhYadeYvRxtYdhZGzmg 3MYqzGJFyP8mEaSYVHGhUepqSQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAD5PNy+ 2RHB06OkEDGM3y3ealCYMB8GA1UdIwQYMBaAFMw2kPiW71ZzEVNbxETfHrdB/Yu0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJDQi9FOEQ2OTVBQzE5 MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZuTVJVMXZFUk44ZXQwSDlp N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pEYVEtSmJ2Vm5NUlUxdkVSTjhldDBIOWk3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkVCQ0IvRThENjk1QUMxOTI2MTFFQUEzMzYxQzdCQzRGOUFFMDIvODFDNUJGRjgx OTI4MTFFQTlCODhEODdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnkRwwDwQCAAIwCQMHACABDfHxgDANBgkqhkiG9w0BAQsF AAOCAQEAeY5s54JK3wpVfboDcLGAnTinxgi3E9eBqub+EI3pJI1XVNd+vWiTCxmD 12PJqLou7eD8I0AfR10uhklraodzWek7zCrPtn9jqUAgZwHWTtZyUyCo/37K44dr MQxrUYawrmIlS26Vl51qDDQDHXTR+0ZDfdp0qpIGO3NgOBw0GIsb0D1HONqgcv2D 5dhw2B1SnzICd22EgbNexA4Zk0mi0wffSfG54awtl7Utk3mSVvR0ILhVLiAOdn/Z wr6/bl1Zwcz0+3+7XPm0RMEcbeJLChZzFQUvbtZOrCbkDFxCZPtmCF8lPP3Rz90n P3QuwP7/lAXdzh5BvwO6EeSfcnEzLQ== -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:28 2025 by rpki-client