$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/7DF47F46F95611E996377877C4F9AE02.roa File: 7DF47F46F95611E996377877C4F9AE02.roa (raw, json) Hash identifier: tyN6SyYObf2tdZtNgOBXF+pjOU8OjiIuifYvGe4SD3w= Subject key identifier: 25:CB:0B:29:AF:B8:F3:80:D2:07:8E:A1:E2:5D:B1:23:BE:F5:9E:A5 Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Certificate serial: 0C34 Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/7DF47F46F95611E996377877C4F9AE02.roa Signing time: Fri 20 Dec 2024 18:36:59 +0000 ROA not before: Fri 20 Dec 2024 18:36:59 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 138462 IP address blocks: 103.126.36.0/22 maxlen: 24 2404:3c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 18:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3124 (0xc34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Validity Not Before: Dec 20 18:36:59 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6765b94b-40e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d8:69:b8:a4:1b:bd:1e:9d:c3:65:c7:04:2b: 93:18:b3:18:8d:87:f0:b3:94:18:db:9c:ca:12:4c: b6:9e:48:33:2f:f6:5f:8d:26:6c:55:12:53:a3:45: de:01:e7:60:a4:ae:cf:9d:e4:fa:ee:79:37:6a:0c: b4:4a:05:c6:da:c2:12:2e:aa:af:ac:ed:cf:f2:6e: d5:00:40:8c:39:70:df:ae:d2:ba:66:13:96:21:45: de:38:48:a9:c6:00:ad:1f:d6:6c:5b:9d:85:75:55: c1:10:be:9b:d0:22:fc:57:0a:eb:44:b9:22:17:ae: 80:bf:05:78:a3:fe:0d:52:78:ad:a4:bf:8f:d5:91: d4:49:83:7c:15:9a:1e:e0:a5:dd:4d:e2:c3:0d:ba: 29:46:f4:20:7e:04:cb:27:09:59:5b:bd:ed:81:4f: 43:b4:b1:5d:71:55:75:51:02:7b:9d:9b:85:66:7b: 9e:81:c0:c7:0b:9c:4e:c8:68:d4:37:03:30:f5:e0: 3a:05:1a:c9:67:dd:bc:66:a6:0a:12:db:fd:44:b2: 0c:fb:f8:92:27:be:93:db:23:5a:90:5b:fa:b1:51: e3:1e:e1:fc:76:8f:12:6d:c9:57:b4:aa:cc:7c:ed: 03:c5:e4:cd:4a:b9:2a:c3:cd:f9:d0:68:dc:8f:5b: 45:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CB:0B:29:AF:B8:F3:80:D2:07:8E:A1:E2:5D:B1:23:BE:F5:9E:A5 X509v3 Authority Key Identifier: keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/7DF47F46F95611E996377877C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.36.0/22 IPv6: 2404:3c0::/32 Signature Algorithm: sha256WithRSAEncryption 1c:53:f3:40:a9:14:1a:d1:97:e7:b7:fa:46:1a:80:23:3a:bf: 28:3b:48:92:0a:0d:a8:9a:82:ce:84:7e:81:c7:3e:ea:07:9d: 02:51:a1:0b:73:3e:89:4f:d3:86:7b:7a:4c:95:21:f2:8d:27: 55:2a:9e:29:c7:a1:85:ce:68:bc:18:a7:f7:58:2d:89:23:a6: 3c:55:6a:b6:82:d6:d4:39:65:08:23:71:a9:ef:e4:1e:92:9a: 5d:e1:3c:b6:cd:df:05:de:1b:95:9a:d4:d6:32:e1:02:14:6e: 58:be:4b:2b:85:dd:fd:bc:40:9e:54:ce:a7:0e:18:7e:87:06: 75:18:8e:1a:e3:33:7f:d1:58:54:6c:9f:fc:8d:01:4b:c5:f1: 57:4a:60:bb:28:aa:68:f7:7c:8c:40:0d:0f:9a:aa:42:9f:77: 39:d4:82:f8:d7:ea:96:c2:14:8c:47:86:0b:d9:f8:46:78:72: 09:f5:ee:8c:de:b8:e8:b5:46:99:0f:ca:d6:45:55:12:22:18: 72:b8:f9:96:7a:d5:e8:b4:ac:65:df:12:e0:5c:b3:9f:c4:08: 87:18:c1:04:32:1c:46:21:1c:97:1e:5e:db:39:f1:3a:cd:a8: 77:73:3d:b1:a4:0a:29:92:5b:f3:86:77:e4:b2:18:d3:4e:e6: 33:f1:e3:2b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzREQUQxMTAvBgNVBAUTKDRGNkIxQzVCNDJCNjFERDVFMjgxOTM5NjdBNzBEMThB MjI4RkVGNzYwHhcNMjQxMjIwMTgzNjU5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY1Yjk0Yi00MGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dhpuKQbvR6dw2XHBCuTGLMYjYfws5QY25zKEky2nkgzL/ZfjSZsVRJTo0Xe AedgpK7PneT67nk3agy0SgXG2sISLqqvrO3P8m7VAECMOXDfrtK6ZhOWIUXeOEip xgCtH9ZsW52FdVXBEL6b0CL8VwrrRLkiF66AvwV4o/4NUnitpL+P1ZHUSYN8FZoe 4KXdTeLDDbopRvQgfgTLJwlZW73tgU9DtLFdcVV1UQJ7nZuFZnuegcDHC5xOyGjU NwMw9eA6BRrJZ928ZqYKEtv9RLIM+/iSJ76T2yNakFv6sVHjHuH8do8SbclXtKrM fO0DxeTNSrkqw8350Gjcj1tF1wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCXLCymv uPOA0geOoeJdsSO+9Z6lMB8GA1UdIwQYMBaAFE9rHFtCth3V4oGTlnpw0Yoij+92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NERBRC9GQzYwRTVCQUY5 NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhkWGlnWk9XZW5EUmlpS1A3 M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Qyc2NXMEsySGRYaWdaT1dlbkRSaWlLUDczWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzREQUQvRkM2MEU1QkFGOTU0MTFFOTgwM0JCOTcyQzRGOUFFMDIvN0RGNDdGNDZG OTU2MTFFOTk2Mzc3ODc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfiQwDQQCAAIwBwMFACQEA8AwDQYJKoZIhvcNAQELBQAD ggEBABxT80CpFBrRl+e3+kYagCM6vyg7SJIKDaiags6EfoHHPuoHnQJRoQtzPolP 04Z7ekyVIfKNJ1UqninHoYXOaLwYp/dYLYkjpjxVaraC1tQ5ZQgjcanv5B6Sml3h PLbN3wXeG5Wa1NYy4QIUbli+SyuF3f28QJ5UzqcOGH6HBnUYjhrjM3/RWFRsn/yN AUvF8VdKYLsoqmj3fIxADQ+aqkKfdznUgvjX6pbCFIxHhgvZ+EZ4cgn17ozeuOi1 RpkPytZFVRIiGHK4+ZZ61ei0rGXfEuBcs5/ECIcYwQQyHEYhHJceXts58TrNqHdz PbGkCimSW/OGd+SyGNNO5jPx4ys= -----END CERTIFICATE-----Generated at Tue May 6 00:20:43 2025 by rpki-client