$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa File: F8769F9AA4B111EF8F61B261C4F9AE02.roa (raw, json) Hash identifier: 2XBJFF0uFQZ8WRTpcwsb0rfYdVxkVxW6PF5N28R/87M= Subject key identifier: 8F:21:2C:69:3A:6F:15:B9:18:50:FC:FC:1C:CD:72:46:D1:E6:6E:01 Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5 Certificate serial: 056E Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa Signing time: Mon 24 Feb 2025 08:15:41 +0000 ROA not before: Mon 24 Feb 2025 08:15:41 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 396073 IP address blocks: 103.172.134.0/24 maxlen: 24 103.172.135.0/24 maxlen: 24 2407:d340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1390 (0x56e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5 Validity Not Before: Feb 24 08:15:41 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67bc2aad-be2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9c:3a:d5:2b:12:6c:16:54:aa:95:8e:40:01: a6:8a:c4:9d:f8:64:c5:b1:43:f2:d1:8b:d4:94:91: bc:1c:cb:02:3a:23:0a:43:38:52:72:57:32:7d:b9: 82:f2:06:11:3f:dd:c8:88:f6:27:59:21:9f:af:f0: 17:b7:e8:b5:a8:28:22:5f:e6:48:1c:e2:a4:81:38: 03:57:b5:77:38:54:c8:42:7a:35:ae:25:b8:e4:38: 06:8f:14:a0:40:67:cb:b6:e0:84:e3:39:15:83:60: c9:61:21:a6:80:00:69:fc:c5:b5:27:0b:dd:cd:de: 0b:4a:15:1b:a8:e3:29:1a:92:17:0f:15:8d:ee:49: 13:f7:ea:f9:21:bc:3a:c0:1f:50:c5:b5:28:de:9d: c7:42:20:e7:f1:b4:de:1d:9f:5a:3c:6d:83:3d:1c: 61:3e:d7:88:85:b9:38:87:39:cf:6c:c5:31:9f:d5: 38:e1:3b:d2:61:d4:3e:21:4d:39:e6:9d:44:83:b4: 1b:46:c6:ef:44:27:ce:a3:4b:96:97:08:97:9a:bb: ae:7c:7b:8d:aa:e2:aa:01:91:43:28:e9:54:77:21: 64:4f:72:42:66:9f:4a:27:6e:98:36:6e:99:13:1b: 74:b0:6f:3d:ba:e5:1a:f7:47:84:67:96:9c:72:62: 9c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:21:2C:69:3A:6F:15:B9:18:50:FC:FC:1C:CD:72:46:D1:E6:6E:01 X509v3 Authority Key Identifier: keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.134.0/23 IPv6: 2407:d340::/32 Signature Algorithm: sha256WithRSAEncryption 60:8e:88:89:19:e5:4d:88:72:38:5a:c2:8a:45:82:84:20:d5: b8:05:da:f4:8b:ae:9f:af:1e:8c:7c:32:48:79:e5:4c:b4:de: 7d:28:35:20:b8:b6:78:f8:14:d3:de:68:d3:81:40:8f:ea:55: c5:71:90:ad:da:1c:a6:45:c6:c1:db:bd:55:56:df:c3:a2:92: 2e:b8:32:30:94:96:c2:d6:01:fb:85:cf:bf:23:bc:b3:0e:92: 28:f6:c6:cd:5b:03:78:fc:a9:05:fb:aa:74:3b:ca:90:e1:a6: fe:86:04:05:e0:f8:b9:c7:22:4d:17:08:b0:b4:17:8f:f1:6f: ec:73:2b:4d:4a:12:3a:4c:6b:10:62:d4:43:05:42:75:54:36: 6b:27:05:07:fa:05:4e:00:4c:0a:8f:3d:ba:33:9d:34:5d:1b: f2:b2:43:0e:29:90:3a:8d:4d:6c:ca:e6:09:8f:91:da:b4:6b: 15:b4:31:b3:3c:29:eb:e8:a1:c7:33:28:51:8e:78:0b:9a:db: f1:51:49:3a:81:46:91:93:24:6b:96:b9:8a:f3:7b:d0:79:c7: f6:4d:02:9c:4c:e6:18:4d:7c:bd:7c:6d:5b:ee:67:7b:60:6b: b2:c5:03:f3:0e:61:e8:84:7c:4d:3f:52:d0:52:89:fa:9b:b7: fd:89:38:74 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxOUUxMTAvBgNVBAUTKDE0NDU0ODlGREQ1MEFBNDRBQzFEMkEzQzNBMTY2RTA2 QzY2MkFGRDUwHhcNMjUwMjI0MDgxNTQxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JjMmFhZC1iZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJw61SsSbBZUqpWOQAGmisSd+GTFsUPy0YvUlJG8HMsCOiMKQzhSclcyfbmC 8gYRP93IiPYnWSGfr/AXt+i1qCgiX+ZIHOKkgTgDV7V3OFTIQno1riW45DgGjxSg QGfLtuCE4zkVg2DJYSGmgABp/MW1Jwvdzd4LShUbqOMpGpIXDxWN7kkT9+r5Ibw6 wB9QxbUo3p3HQiDn8bTeHZ9aPG2DPRxhPteIhbk4hznPbMUxn9U44TvSYdQ+IU05 5p1Eg7QbRsbvRCfOo0uWlwiXmruufHuNquKqAZFDKOlUdyFkT3JCZp9KJ26YNm6Z Ext0sG89uuUa90eEZ5accmKc0QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFI8hLGk6 bxW5GFD8/BzNckbR5m4BMB8GA1UdIwQYMBaAFBRFSJ/dUKpErB0qPDoWbgbGYq/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE5RS85ODFFRTk4NjBC MjExMUVDODQyMTQ5NERDNEY5QUUwMi9GRVZJbjkxUXFrU3NIU284T2hadUJzWmly OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZFVkluOTFRcWtTc0hTbzhPaFp1QnNaaXI5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzQxOUUvOTgxRUU5ODYwQjIxMTFFQzg0MjE0OTREQzRGOUFFMDIvRjg3NjlGOUFB NEIxMTFFRjhGNjFCMjYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnrIYwDQQCAAIwBwMFACQH00AwDQYJKoZIhvcNAQELBQAD ggEBAGCOiIkZ5U2IcjhawopFgoQg1bgF2vSLrp+vHox8Mkh55Uy03n0oNSC4tnj4 FNPeaNOBQI/qVcVxkK3aHKZFxsHbvVVW38Oiki64MjCUlsLWAfuFz78jvLMOkij2 xs1bA3j8qQX7qnQ7ypDhpv6GBAXg+LnHIk0XCLC0F4/xb+xzK01KEjpMaxBi1EMF QnVUNmsnBQf6BU4ATAqPPboznTRdG/KyQw4pkDqNTWzK5gmPkdq0axW0MbM8Kevo occzKFGOeAua2/FRSTqBRpGTJGuWuYrze9B5x/ZNApxM5hhNfL18bVvuZ3tga7LF A/MOYeiEfE0/UtBSifqbt/2JOHQ= -----END CERTIFICATE-----Generated at Sat Apr 26 08:11:43 2025 by rpki-client