$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/FB5C375499DB11EBBC50C376C4F9AE02.roa File: FB5C375499DB11EBBC50C376C4F9AE02.roa (raw, json) Hash identifier: 5Tmm0+rmyNGdrIMpYadnPDVCCaqTEqx1NCKBxNGJPGM= Subject key identifier: 0F:E2:B4:5A:BF:01:AB:95:C4:7B:BE:C7:D4:90:85:F9:CB:92:C5:22 Certificate issuer: /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167 Certificate serial: 0B5B Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/FB5C375499DB11EBBC50C376C4F9AE02.roa Signing time: Wed 08 Jan 2025 19:08:27 +0000 ROA not before: Wed 08 Jan 2025 19:08:27 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 139808 IP address blocks: 103.145.112.0/23 maxlen: 23 103.145.112.0/24 maxlen: 24 103.145.113.0/24 maxlen: 24 2001:df3:3180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2907 (0xb5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC79, serialNumber=76CD021E0C281DA5FE64D87803553808889A1167 Validity Not Before: Jan 8 19:08:27 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=677ecd2b-6b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:46:4b:d7:ca:10:96:34:11:00:82:fc:26:f5: 7d:94:52:56:35:7d:70:fc:d1:f7:e2:0a:71:9c:18: 43:7d:08:c2:45:18:4e:8b:9d:fb:77:7d:1b:22:93: 3b:b7:40:4e:c4:b6:c7:fc:cb:ed:c2:8f:02:dc:20: b1:ed:a9:06:88:30:52:88:03:f3:8e:61:fc:49:a1: d7:0b:c4:b2:bd:c9:87:7d:54:17:ed:97:c2:3b:2a: dd:fb:24:f9:b0:7b:cb:24:8d:4f:72:7c:b2:aa:89: fc:b2:6e:95:c5:f1:2c:d3:47:f9:04:28:9d:9a:19: 5f:3d:7c:c8:2e:1b:82:68:b4:32:25:05:78:87:16: dd:c3:23:02:96:86:4e:bd:f0:90:60:c5:e7:17:b3: cf:dd:39:c7:21:06:28:79:a7:94:d1:96:36:d6:a7: 68:97:80:09:1c:1c:dd:18:15:f4:14:0f:36:18:b8: 95:95:78:f4:39:d0:15:4f:25:5f:f1:d5:36:6e:e9: d4:b7:29:fe:46:1b:b6:c9:07:dd:0d:4e:77:ed:1c: 13:27:1f:57:81:ed:34:e2:1c:3a:a5:a5:87:ea:65: 04:3e:e7:a9:b0:47:bb:bb:54:12:9d:d5:90:8b:32: 2b:51:ae:be:b2:f2:39:d6:11:14:7a:8b:4d:c9:5d: 45:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E2:B4:5A:BF:01:AB:95:C4:7B:BE:C7:D4:90:85:F9:CB:92:C5:22 X509v3 Authority Key Identifier: keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/FB5C375499DB11EBBC50C376C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.112.0/23 IPv6: 2001:df3:3180::/48 Signature Algorithm: sha256WithRSAEncryption 81:2a:ac:2d:e8:72:88:c0:38:3e:58:12:dc:e9:e6:7a:61:8a: 37:7f:23:5c:c2:ad:df:e1:ac:d2:99:31:5b:51:91:c1:32:06: d5:a6:72:bf:38:43:e5:cb:f9:ef:fa:3e:0d:bc:8d:2a:30:02: 4d:81:95:24:07:e2:e5:9e:63:0d:46:09:10:e8:8d:e6:9d:43: ce:ed:34:c4:40:14:60:91:1d:ea:2f:f6:a9:e1:46:f0:ce:e4: 57:95:8d:dc:7a:bd:1f:c3:ee:9b:42:8f:9a:74:07:6a:27:1e: 45:b8:d4:c5:ab:8f:56:e8:22:ea:e7:11:fa:0b:64:3b:01:54: c7:35:4f:54:30:65:fc:ba:b9:6f:2f:8f:0d:a8:b4:62:58:df: 16:df:02:c6:08:5a:fe:cf:48:f8:cf:bb:69:93:f6:59:b1:f9: 30:d0:c5:94:78:1f:5f:e0:40:47:ef:32:36:db:2d:b4:e5:ba: ed:0d:80:b1:cd:f5:d5:58:60:55:7e:46:d7:77:09:c5:ca:e4: 74:cd:9e:58:aa:4b:6f:0e:d9:b5:bb:81:87:54:e9:3f:75:c7: 4b:82:26:d9:dd:e1:e7:c4:1e:62:ba:ad:be:82:ed:49:9b:9c: 0b:46:8d:0a:e2:0b:b5:74:af:60:81:73:7a:86:5e:f0:76:75: 7d:39:c8:2c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICC1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzkxMTAvBgNVBAUTKDc2Q0QwMjFFMEMyODFEQTVGRTY0RDg3ODAzNTUzODA4 ODg5QTExNjcwHhcNMjUwMTA4MTkwODI3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdlY2QyYi02YjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30ZL18oQljQRAIL8JvV9lFJWNX1w/NH34gpxnBhDfQjCRRhOi537d30bIpM7 t0BOxLbH/Mvtwo8C3CCx7akGiDBSiAPzjmH8SaHXC8SyvcmHfVQX7ZfCOyrd+yT5 sHvLJI1Pcnyyqon8sm6VxfEs00f5BCidmhlfPXzILhuCaLQyJQV4hxbdwyMCloZO vfCQYMXnF7PP3TnHIQYoeaeU0ZY21qdol4AJHBzdGBX0FA82GLiVlXj0OdAVTyVf 8dU2bunUtyn+Rhu2yQfdDU537RwTJx9Xge004hw6paWH6mUEPuepsEe7u1QSndWQ izIrUa6+svI51hEUeotNyV1FpQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFA/itFq/ AauVxHu+x9SQhfnLksUiMB8GA1UdIwQYMBaAFHbNAh4MKB2l/mTYeANVOAiImhFn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3OS9BNjNGOTNENjI3 Q0UxMUVBOEU0MDdFNUJDNEY5QUUwMi9kczBDSGd3b0hhWC1aTmg0QTFVNENJaWFF V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzMENIZ3dvSGFYLVpOaDRBMVU0Q0lpYUVXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OURDNzkvQTYzRjkzRDYyN0NFMTFFQThFNDA3RTVCQzRGOUFFMDIvRkI1QzM3NTQ5 OURCMTFFQkJDNTBDMzc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnkXAwDwQCAAIwCQMHACABDfMxgDANBgkqhkiG9w0BAQsF AAOCAQEAgSqsLehyiMA4PlgS3OnmemGKN38jXMKt3+Gs0pkxW1GRwTIG1aZyvzhD 5cv57/o+DbyNKjACTYGVJAfi5Z5jDUYJEOiN5p1Dzu00xEAUYJEd6i/2qeFG8M7k V5WN3Hq9H8Pum0KPmnQHaiceRbjUxauPVugi6ucR+gtkOwFUxzVPVDBl/Lq5by+P Dai0YljfFt8Cxgha/s9I+M+7aZP2WbH5MNDFlHgfX+BAR+8yNtsttOW67Q2Asc31 1VhgVX5G13cJxcrkdM2eWKpLbw7ZtbuBh1TpP3XHS4Im2d3h58QeYrqtvoLtSZuc C0aNCuILtXSvYIFzeoZe8HZ1fTnILA== -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:14 2025 by rpki-client