$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/41733D483DAC11EE8D884D6AC4F9AE02.roa File: 41733D483DAC11EE8D884D6AC4F9AE02.roa (raw, json) Hash identifier: XynjUTKTYazCZAgnFarsz0z7XLq0CMLJDFwXu2DvFy0= Subject key identifier: A9:A6:67:7C:1D:72:98:C2:36:04:98:DB:A3:21:4D:46:CD:CA:5D:BF Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1F3D Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/41733D483DAC11EE8D884D6AC4F9AE02.roa Signing time: Sat 12 Apr 2025 16:24:08 +0000 ROA not before: Sat 12 Apr 2025 16:24:08 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 0 IP address blocks: 103.247.139.0/24 maxlen: 24 2001:df0:296::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7997 (0x1f3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Apr 12 16:24:08 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67fa93a8-f169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:87:3d:34:6a:2e:00:21:43:9a:f7:3d:6c: cb:9b:14:6c:31:b5:2d:dd:a8:c8:95:a5:3b:ef:41: a4:01:d4:b3:08:60:ac:83:ca:e8:99:24:fe:57:f4: f4:c5:2a:14:de:ee:03:e8:df:69:63:bf:db:20:09: b4:4a:35:91:b4:fa:e5:d6:8b:71:05:b5:ff:33:fe: 5d:64:e4:bd:f7:ef:4f:db:df:c0:f7:4a:64:00:09: 20:b2:e0:ad:27:75:24:2d:73:b9:56:b2:7d:09:0a: a8:4e:10:63:47:23:4b:1c:88:a4:fe:f2:2e:f2:de: d6:ff:52:97:80:f7:a6:57:c1:1a:7a:d1:68:7e:45: 68:01:15:d4:e4:7d:77:56:81:b1:e3:cb:02:8d:00: b1:ca:00:bf:e3:57:47:b0:28:e7:0c:0c:39:f0:b2: 37:27:96:a9:c7:a0:0b:d9:b9:d8:54:b3:1d:9a:68: 4d:dc:d4:83:9c:91:08:02:f9:39:6c:ff:02:27:3b: 41:df:3d:9d:31:e8:d5:ea:fe:1e:47:17:cd:1e:66: 0c:0b:26:a1:75:2f:36:e4:6a:9d:3c:64:f7:3e:6a: 45:db:76:2d:73:e5:83:05:bb:7b:d6:d7:e4:ce:bd: 3c:cb:14:98:d3:73:77:0d:ee:d2:de:ef:ef:9d:62: 5f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A6:67:7C:1D:72:98:C2:36:04:98:DB:A3:21:4D:46:CD:CA:5D:BF X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/41733D483DAC11EE8D884D6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.247.139.0/24 IPv6: 2001:df0:296::/48 Signature Algorithm: sha256WithRSAEncryption 80:3e:b8:e7:e8:4b:45:80:cc:28:b1:de:89:01:2c:ab:b2:4a: ec:64:b8:62:51:88:92:f5:62:1e:69:35:ea:76:c8:04:9d:33: da:f1:13:7d:38:fe:8b:12:b4:5e:1c:1b:36:4e:ff:88:bd:0b: e8:5a:1e:4c:ff:a9:82:ca:e3:07:99:2e:4f:0b:1d:44:4c:af: a3:5c:f4:f8:dc:99:fd:cd:81:08:cb:18:fc:0b:16:4e:be:1d: 88:a7:75:d0:2f:07:7f:f0:cd:53:5e:f1:f5:95:f1:1f:0c:26: d6:52:9b:f0:f2:29:23:73:a5:6e:4f:a3:eb:68:e8:03:a4:ab: 15:eb:3e:9b:2e:24:bb:5a:a2:9c:53:46:87:73:73:75:da:39: c3:79:b1:61:d6:cd:e2:02:b1:37:e8:85:1d:6a:cc:3b:6a:c7: d7:2a:58:26:64:8b:a1:47:29:38:a6:d3:3e:42:a0:47:ca:8b: a7:b4:78:7f:d3:92:9c:55:5f:85:5e:33:9a:76:71:5c:bb:94: 00:bc:38:fd:4d:e2:9b:27:cf:39:dd:30:e9:9b:eb:d3:07:bb: 8c:be:98:f7:39:92:fb:d8:1c:ea:de:b0:b8:db:15:c1:0a:f1: a2:97:ac:e8:ea:7d:a2:74:6e:1e:1a:ad:05:43:0c:5f:d0:a4: 95:c1:57:c7 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICHz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjUwNDEyMTYyNDA4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZhOTNhOC1mMTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsM+HPTRqLgAhQ5r3PWzLmxRsMbUt3ajIlaU770GkAdSzCGCsg8romST+V/T0 xSoU3u4D6N9pY7/bIAm0SjWRtPrl1otxBbX/M/5dZOS99+9P29/A90pkAAkgsuCt J3UkLXO5VrJ9CQqoThBjRyNLHIik/vIu8t7W/1KXgPemV8EaetFofkVoARXU5H13 VoGx48sCjQCxygC/41dHsCjnDAw58LI3J5apx6AL2bnYVLMdmmhN3NSDnJEIAvk5 bP8CJztB3z2dMejV6v4eRxfNHmYMCyahdS825GqdPGT3PmpF23Ytc+WDBbt71tfk zr08yxSY03N3De7S3u/vnWJfpQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKmmZ3wd cpjCNgSY26MhTUbNyl2/MB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Q1ODYvOEYwMEM2QjY1NTJFMTFFNjg1MDQyMTQyQzRGOUFFMDIvNDE3MzNENDgz REFDMTFFRThEODg0RDZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABn94swDwQCAAIwCQMHACABDfACljANBgkqhkiG9w0BAQsF AAOCAQEAgD645+hLRYDMKLHeiQEsq7JK7GS4YlGIkvViHmk16nbIBJ0z2vETfTj+ ixK0XhwbNk7/iL0L6FoeTP+pgsrjB5kuTwsdREyvo1z0+NyZ/c2BCMsY/AsWTr4d iKd10C8Hf/DNU17x9ZXxHwwm1lKb8PIpI3Olbk+j62joA6SrFes+my4ku1qinFNG h3Nzddo5w3mxYdbN4gKxN+iFHWrMO2rH1ypYJmSLoUcpOKbTPkKgR8qLp7R4f9OS nFVfhV4zmnZxXLuUALw4/U3imyfPOd0w6Zvr0we7jL6Y9zmS+9gc6t6wuNsVwQrx opes6Op9onRuHhqtBUMMX9CklcFXxw== -----END CERTIFICATE-----Generated at Sat Apr 26 13:08:33 2025 by rpki-client