$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/F5E4AAFA2A2711F0A842B012C4F9AE02.roa File: F5E4AAFA2A2711F0A842B012C4F9AE02.roa (raw, json) Hash identifier: H1nmQizGEmHz5b1T7forLlMV8zzneRcv/1eW8nb3RPQ= Subject key identifier: BB:CC:88:49:AD:04:13:C5:32:6F:9E:5F:28:EC:C5:91:A5:24:3A:2D Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Certificate serial: 0152 Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/F5E4AAFA2A2711F0A842B012C4F9AE02.roa Signing time: Tue 06 May 2025 03:12:37 +0000 ROA not before: Tue 06 May 2025 03:12:36 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153517 IP address blocks: 103.122.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Validity Not Before: May 6 03:12:36 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68197e24-344b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:b1:73:a6:0f:a9:d0:f7:7f:cd:8d:e9:90: d5:2a:b2:53:a6:0f:d8:cd:f9:57:ed:88:fb:36:8f: 62:f0:30:3b:f5:91:ee:8c:2b:7a:02:62:42:3f:15: 61:a0:27:04:7c:97:51:6d:45:9d:0e:aa:2b:25:5c: 45:7b:01:35:0a:ba:42:1c:cb:25:45:5f:48:6e:48: 76:4c:3f:c1:02:48:f2:f1:e4:bc:8d:48:37:cb:c3: 20:bd:a7:23:b7:56:f4:25:ca:5f:42:26:1f:5f:08: 9d:53:1b:da:39:e4:7a:2c:f1:1e:63:5b:7d:2f:79: 59:98:06:7c:dd:f3:4b:8c:c6:5e:bd:5b:7a:18:9f: fb:60:42:3f:d1:82:11:5a:ef:e2:42:31:59:e6:da: 70:95:bb:16:b5:5d:f1:65:6f:c6:83:8a:50:e0:77: 4e:94:99:c6:16:27:9a:48:17:3d:61:b6:24:c0:0e: 13:52:64:d9:5d:32:d2:d8:75:24:65:2d:bf:26:ec: f1:41:d5:ad:ea:68:b2:2f:b4:3e:28:53:81:8f:fc: 70:81:36:9b:76:f0:b3:c8:72:da:e9:e4:ee:6b:81: 1d:a6:f3:c4:35:f2:ea:5f:d1:e4:4f:6f:15:93:2d: 38:1c:0c:d1:a8:d6:cf:1f:de:fc:6e:63:3f:25:bf: a8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CC:88:49:AD:04:13:C5:32:6F:9E:5F:28:EC:C5:91:A5:24:3A:2D X509v3 Authority Key Identifier: keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/F5E4AAFA2A2711F0A842B012C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.20.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:00:02:a0:75:51:aa:28:c5:34:be:ad:f1:06:52:0c:06:9c: 77:23:c5:28:43:b4:99:b8:4b:0a:da:c4:d5:a8:fb:68:49:03: 83:96:fa:24:17:1b:cf:da:85:97:1b:98:c1:ae:30:b2:2b:f9: ba:b8:87:95:c5:4a:f9:41:38:af:64:f7:91:f3:17:d0:72:ba: 05:c2:f4:96:38:7b:77:81:9b:09:8d:a4:ed:0e:17:3d:30:54: 84:10:4c:c8:f6:65:08:00:9e:24:67:fd:6c:d7:19:f9:0e:b4: 02:46:ca:6e:cb:0f:88:22:8d:a7:cf:8f:90:52:86:49:46:74: e2:c3:92:9d:de:63:45:7d:14:48:05:b4:11:af:b6:ff:16:d1: 6a:47:a1:8d:7b:e8:38:8f:54:2e:25:3f:36:07:76:ea:7a:52: 55:e6:e6:36:c9:11:f8:62:c9:cb:be:51:f6:85:68:ba:60:86: 88:22:89:b2:a5:1a:a4:02:11:c2:ae:8f:fd:17:1b:36:e2:f2: 24:95:97:11:a8:ef:f8:31:8d:38:7c:56:a1:85:5a:47:01:b8: 6c:a9:0d:69:29:c4:a7:96:ef:5e:d4:bb:c4:ff:4b:53:72:b6: b2:ec:2b:b3:f2:06:cc:47:70:ab:ce:89:69:55:da:77:9c:70: 33:1a:0f:46 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKDkzODc5QjAwRTRCN0ZCQzAxMjYwNzA3Qjc2RDVEMTIw RjQ1QjUzNUIwHhcNMjUwNTA2MDMxMjM2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE5N2UyNC0zNDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseuxc6YPqdD3f82N6ZDVKrJTpg/YzflX7Yj7No9i8DA79ZHujCt6AmJCPxVh oCcEfJdRbUWdDqorJVxFewE1CrpCHMslRV9Ibkh2TD/BAkjy8eS8jUg3y8Mgvacj t1b0JcpfQiYfXwidUxvaOeR6LPEeY1t9L3lZmAZ83fNLjMZevVt6GJ/7YEI/0YIR Wu/iQjFZ5tpwlbsWtV3xZW/Gg4pQ4HdOlJnGFieaSBc9YbYkwA4TUmTZXTLS2HUk ZS2/JuzxQdWt6miyL7Q+KFOBj/xwgTabdvCzyHLa6eTua4EdpvPENfLqX9HkT28V ky04HAzRqNbPH978bmM/Jb+oQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLvMiEmt BBPFMm+eXyjsxZGlJDotMB8GA1UdIwQYMBaAFJOHmwDkt/vAEmBwe3bV0SD0W1Nb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8yODIzMTVEMDUy MDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04QVNZSEI3ZHRYUklQUmJV MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s0ZWJBT1MzLThBU1lIQjdkdFhSSVBSYlUxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY3OEMvMjgyMzE1RDA1MjAwMTFFRUFBODY2QjY5QzRGOUFFMDIvRjVFNEFBRkEy QTI3MTFGMEE4NDJCMDEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnehQwDQYJKoZIhvcNAQELBQADggEBAGoAAqB1UaooxTS+ rfEGUgwGnHcjxShDtJm4SwraxNWo+2hJA4OW+iQXG8/ahZcbmMGuMLIr+bq4h5XF SvlBOK9k95HzF9ByugXC9JY4e3eBmwmNpO0OFz0wVIQQTMj2ZQgAniRn/WzXGfkO tAJGym7LD4gijafPj5BShklGdOLDkp3eY0V9FEgFtBGvtv8W0WpHoY176DiPVC4l PzYHdup6UlXm5jbJEfhiycu+UfaFaLpghogiibKlGqQCEcKuj/0XGzbi8iSVlxGo 7/gxjTh8VqGFWkcBuGypDWkpxKeW717Uu8T/S1NytrLsK7PyBsxHcKvOiWlV2nec cDMaD0Y= -----END CERTIFICATE-----Generated at Mon May 12 08:18:48 2025 by rpki-client