$ rpki-client -vvf rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa File: DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa (raw, json) Hash identifier: fSJH1SOLPO4NysKX51na/qXDmlPOAQyyNuZ41eZmd8c= Subject key identifier: 3B:D0:EB:2D:11:65:E0:17:AC:01:12:E5:0D:5D:A0:11:9D:62:51:50 Certificate issuer: /CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21 Certificate serial: 30 Authority key identifier: 40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa Signing time: Wed 29 Jan 2025 10:08:28 +0000 ROA not before: Wed 29 Jan 2025 10:08:28 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 137562 IP address blocks: 103.110.142.0/24 maxlen: 24 103.110.143.0/24 maxlen: 24 203.19.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E8DB, serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21 Validity Not Before: Jan 29 10:08:28 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6799fe1c-c72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5e:9c:86:e3:d0:7b:a4:00:35:8d:22:41:13: 9a:48:1b:39:2e:ca:2e:04:15:6d:ec:43:ac:ad:94: 21:d6:d7:22:59:4e:c7:01:1a:7a:28:09:b9:82:af: f4:7a:6c:4a:39:7d:17:bb:24:99:8c:d8:e2:00:7e: 3d:80:8b:49:4c:45:55:84:13:e9:be:d2:b9:cb:0c: 9c:3f:ae:dc:01:57:2e:70:b4:f6:3a:13:de:1d:f3: 47:da:b1:56:70:1c:d7:fa:02:b1:7d:99:f9:48:93: ab:0a:fb:3f:79:a1:72:0c:64:e3:79:c0:f6:4b:9a: 5e:4e:82:ba:2f:85:2a:02:bd:14:0b:a8:dd:a4:68: 2a:a2:fe:ef:b1:11:73:64:7a:66:9c:6b:f4:38:f4: 81:2f:fe:02:51:6d:3c:a3:59:61:3e:77:99:4e:dd: 7d:02:72:2e:fd:e3:6d:77:87:ea:87:73:57:dc:13: b8:f0:29:91:c5:b0:9d:bc:b0:5f:b1:88:e4:0c:11: a4:26:40:20:33:55:ef:e1:9e:5e:df:7c:1b:4c:91: a8:f8:b4:50:25:b3:d7:e5:1e:53:3c:69:bd:d2:d1: d6:76:a7:28:f6:a1:8a:36:b5:b6:43:e6:6c:e5:b8: 3d:58:81:a0:e4:be:6a:49:81:d4:c9:e4:e9:3f:a9: 22:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D0:EB:2D:11:65:E0:17:AC:01:12:E5:0D:5D:A0:11:9D:62:51:50 X509v3 Authority Key Identifier: keyid:40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.142.0/23 203.19.2.0/24 Signature Algorithm: sha256WithRSAEncryption 32:5b:59:05:89:7c:af:56:24:0b:7d:45:bf:8e:64:3f:23:7f: c7:6e:38:27:bc:c4:6d:c8:b6:f7:a6:c4:bf:ad:e8:a5:0a:ed: bf:15:83:40:05:12:bc:d8:a8:1d:4c:3e:ba:41:83:19:a7:ed: 0d:0b:68:e7:6d:1a:67:59:d1:8c:84:73:20:81:d9:ea:44:50: 8e:d6:a6:69:c2:1e:b9:fc:83:54:b9:45:12:fa:35:08:ed:c5: 09:21:a5:bc:de:4c:8e:0e:a7:1c:0a:80:db:9d:c3:01:a0:bc: b5:23:bf:d1:ca:76:0b:bd:8e:f3:05:19:27:9b:9c:b6:1b:9e: fe:72:36:6d:4a:99:ef:c4:5a:cf:2e:e8:85:45:df:b5:e3:18: 93:54:29:98:f2:96:af:b7:16:9d:95:64:30:76:e8:33:07:6a: 6f:c4:87:9e:f1:7e:b1:67:82:0f:b8:87:bf:8d:7e:7f:5d:be: ce:d3:18:a0:51:2f:35:c2:a2:ab:00:b5:14:10:e1:aa:98:34: ce:21:c6:2b:c7:35:be:ca:44:68:e9:c7:6d:4a:3d:d8:e6:02: dd:46:8f:b4:9d:1d:54:3c:f2:8d:3f:b1:59:dc:72:1e:30:f8: b5:e9:f2:82:1a:0e:8c:f3:b6:74:a9:95:2d:46:38:79:45:13: a5:ad:4a:d2 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RThEQjExMC8GA1UEBRMoNDA2MTg2M0RERjQzRTdCM0IxODlFM0M5QzMyMTdCQzEy QkIzNUYyMTAeFw0yNTAxMjkxMDA4MjhaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3OTlmZTFjLWM3MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIXpyG49B7pAA1jSJBE5pIGzkuyi4EFW3sQ6ytlCHW1yJZTscBGnooCbmCr/R6 bEo5fRe7JJmM2OIAfj2Ai0lMRVWEE+m+0rnLDJw/rtwBVy5wtPY6E94d80fasVZw HNf6ArF9mflIk6sK+z95oXIMZON5wPZLml5OgrovhSoCvRQLqN2kaCqi/u+xEXNk emaca/Q49IEv/gJRbTyjWWE+d5lO3X0Cci794213h+qHc1fcE7jwKZHFsJ28sF+x iOQMEaQmQCAzVe/hnl7ffBtMkaj4tFAls9flHlM8ab3S0dZ2pyj2oYo2tbZD5mzl uD1YgaDkvmpJgdTJ5Ok/qSLLAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUO9DrLRFl 4BesARLlDV2gEZ1iUVAwHwYDVR0jBBgwFoAUQGGGPd9D57OxiePJwyF7wSuzXyEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFOERCL0I0OEUyNUY0Qjc2 MzExRUY4MkREOEYzM0M0RjlBRTAyL1FHR0dQZDlENTdPeGllUEp3eUY3d1N1elh5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUdHR1BkOUQ1N094aWVQSnd5Rjd3U3V6WHlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RThEQi9CNDhFMjVGNEI3NjMxMUVGODJERDhGMzNDNEY5QUUwMi9EQ0FBNDRENkJG MkExMUVGQkFBRjFGMTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAWdujgMEAMsTAjANBgkqhkiG9w0BAQsFAAOCAQEAMltZBYl8 r1YkC31Fv45kPyN/x244J7zEbci296bEv63opQrtvxWDQAUSvNioHUw+ukGDGaft DQto520aZ1nRjIRzIIHZ6kRQjtamacIeufyDVLlFEvo1CO3FCSGlvN5Mjg6nHAqA 253DAaC8tSO/0cp2C72O8wUZJ5ucthue/nI2bUqZ78Razy7ohUXfteMYk1QpmPKW r7cWnZVkMHboMwdqb8SHnvF+sWeCD7iHv41+f12+ztMYoFEvNcKiqwC1FBDhqpg0 ziHGK8c1vspEaOnHbUo92OYC3UaPtJ0dVDzyjT+xWdxyHjD4tenyghoOjPO2dKmV LUY4eUUTpa1K0g== -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:48 2025 by rpki-client