$ rpki-client -vvf rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/1190361AAF1B11E7B89F3883C4F9AE02.roa File: 1190361AAF1B11E7B89F3883C4F9AE02.roa (raw, json) Hash identifier: Yhv6SLVoZ0lTl3VQ8oBTiyjwIMld5GdKG4lLfPu9iQU= Subject key identifier: A8:C5:B9:B3:FB:B8:DA:F6:4C:2D:91:9C:28:63:4A:AE:FE:E4:7B:84 Certificate issuer: /CN=A917CB63/serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587 Certificate serial: 3481 Authority key identifier: 66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/1190361AAF1B11E7B89F3883C4F9AE02.roa Signing time: Wed 02 Apr 2025 15:40:59 +0000 ROA not before: Wed 02 Apr 2025 15:40:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56172 IP address blocks: 103.1.5.0/24 maxlen: 24 103.98.134.0/24 maxlen: 24 103.136.52.0/23 maxlen: 23 103.136.52.0/24 maxlen: 24 103.136.53.0/24 maxlen: 24 2001:df0:400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13441 (0x3481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CB63, serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587 Validity Not Before: Apr 2 15:40:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67ed5a8b-140e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:38:af:dd:23:1c:04:97:e8:0b:3d:de:36: a1:3d:bc:12:ec:da:3e:d0:f8:b9:ae:ea:b1:b6:c2: c4:8d:c9:58:78:08:ed:50:30:db:5a:17:ed:8f:e1: ef:ae:8a:79:ab:3c:0b:e5:82:9a:c6:69:4c:ba:a8: f1:2f:1e:95:b5:55:3f:96:65:e7:6b:e5:1f:b7:43: f6:24:3a:54:29:e0:10:32:f2:3a:b3:ac:74:ec:a2: c5:d1:86:fe:69:da:0e:75:c8:c2:0b:89:3e:34:55: 7d:e4:9c:8d:3c:52:08:5a:6c:42:34:b8:3f:b2:57: f7:2a:ab:db:fa:83:f0:5c:c8:76:56:c7:0f:0b:9b: 9d:75:9c:2c:60:cf:ee:77:1d:ba:60:58:5f:f8:b6: 4a:3b:88:ef:a5:44:17:22:9f:14:a2:b0:e3:53:08: 93:94:ac:fa:08:e7:77:78:b1:e5:a1:db:b0:a4:ab: 69:40:3c:0f:2d:03:3f:87:d4:34:ff:7a:89:7c:05: 5f:56:a0:1c:61:3f:36:1a:01:a5:57:07:5d:dc:b1: 9e:23:db:dd:c2:d9:66:a5:4a:58:3a:be:04:4c:82: 44:e6:28:c2:65:c8:02:d7:32:f3:5b:ce:6e:20:dd: ea:1a:de:86:46:ea:5f:98:05:d6:c9:bc:ea:9a:6d: 94:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C5:B9:B3:FB:B8:DA:F6:4C:2D:91:9C:28:63:4A:AE:FE:E4:7B:84 X509v3 Authority Key Identifier: keyid:66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/1190361AAF1B11E7B89F3883C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.1.5.0/24 103.98.134.0/24 103.136.52.0/23 IPv6: 2001:df0:400::/48 Signature Algorithm: sha256WithRSAEncryption 82:e8:7e:96:bc:be:54:9d:9a:c1:ae:0c:24:0a:67:a5:34:b9: f5:46:43:56:fb:dd:e3:99:a6:39:99:86:bc:d1:23:2c:6f:45: e5:a6:18:03:12:37:07:62:73:ae:d3:d0:bd:93:dd:52:e0:aa: a1:35:f8:b5:59:60:28:0e:5f:e0:dd:07:fe:a5:ba:aa:c5:f1: 5d:d8:f3:5a:2d:27:64:36:5f:f8:35:4d:0b:db:0b:9d:2d:eb: b2:f8:b7:ac:4c:60:0b:fa:22:be:8c:0a:54:f8:77:52:4e:39: 3e:df:9f:f7:e6:62:fe:6f:88:0a:cb:86:cf:94:a4:6a:68:f4: 0b:e4:e9:0a:40:44:51:f2:c7:b2:ac:58:0c:cf:96:bc:f7:d6: 67:90:88:4f:cc:15:b5:66:b1:39:12:d1:81:b1:2d:fe:06:e1: 62:69:cf:d1:db:d1:c5:f9:66:50:34:13:82:7c:63:14:c6:c1: c2:7e:98:a5:40:0c:16:f2:d5:f7:19:32:9a:72:9a:85:d1:d8: 2d:db:74:70:1a:6c:96:78:9f:08:ed:5f:fe:41:b2:68:83:68: 50:bf:21:92:82:65:26:0c:11:d4:22:80:68:dc:f1:68:8b:10: 28:6c:a9:45:80:ef:20:b7:72:08:fa:b4:a0:fd:8f:af:48:04: 7f:e9:7b:61 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICNIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NCNjMxMTAvBgNVBAUTKDY2RUEwRjgzQkREMzYzMkJGRjE5NDAwQjNBMUJBNkZF REZGQzU1ODcwHhcNMjUwNDAyMTU0MDU5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkNWE4Yi0xNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4I4r90jHASX6As93jahPbwS7No+0Pi5ruqxtsLEjclYeAjtUDDbWhftj+Hv rop5qzwL5YKaxmlMuqjxLx6VtVU/lmXna+Uft0P2JDpUKeAQMvI6s6x07KLF0Yb+ adoOdcjCC4k+NFV95JyNPFIIWmxCNLg/slf3Kqvb+oPwXMh2VscPC5uddZwsYM/u dx26YFhf+LZKO4jvpUQXIp8UorDjUwiTlKz6COd3eLHloduwpKtpQDwPLQM/h9Q0 /3qJfAVfVqAcYT82GgGlVwdd3LGeI9vdwtlmpUpYOr4ETIJE5ijCZcgC1zLzW85u IN3qGt6GRupfmAXWybzqmm2UZQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFKjFubP7 uNr2TC2RnChjSq7+5HuEMB8GA1UdIwQYMBaAFGbqD4O902Mr/xlACzobpv7f/FWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0I2My9FMUIwNTRGQzFE QTcxMUUyQjY4OEVCQTEwOEIwMkNEMi9adW9QZzczVFl5dl9HVUFMT2h1bV90XzhW WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1b1BnNzNUWXl2X0dVQUxPaHVtX3RfOFZZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0NCNjMvRTFCMDU0RkMxREE3MTFFMkI2ODhFQkExMDhCMDJDRDIvMTE5MDM2MUFB RjFCMTFFN0I4OUYzODgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBABnAQUDBABnYoYDBAFniDQwDwQCAAIwCQMHACABDfAEADAN BgkqhkiG9w0BAQsFAAOCAQEAguh+lry+VJ2awa4MJApnpTS59UZDVvvd45mmOZmG vNEjLG9F5aYYAxI3B2JzrtPQvZPdUuCqoTX4tVlgKA5f4N0H/qW6qsXxXdjzWi0n ZDZf+DVNC9sLnS3rsvi3rExgC/oivowKVPh3Uk45Pt+f9+Zi/m+ICsuGz5Skamj0 C+TpCkBEUfLHsqxYDM+WvPfWZ5CIT8wVtWaxORLRgbEt/gbhYmnP0dvRxflmUDQT gnxjFMbBwn6YpUAMFvLV9xkymnKahdHYLdt0cBpslnifCO1f/kGyaINoUL8hkoJl JgwR1CKAaNzxaIsQKGypRYDvILdyCPq0oP2Pr0gEf+l7YQ== -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:06 2025 by rpki-client