$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/F6EC251224E711F087B2F571C4F9AE02.roa File: F6EC251224E711F087B2F571C4F9AE02.roa (raw, json) Hash identifier: rZXgL5kOpfImkcfsz+rBbyNxQYniFCL4u4A94P2WOTQ= Subject key identifier: 55:FA:F8:78:93:31:4F:BD:60:BF:F4:1D:E6:D9:8E:9F:9D:74:34:C7 Certificate issuer: /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D Certificate serial: 087C Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/F6EC251224E711F087B2F571C4F9AE02.roa Signing time: Tue 29 Apr 2025 10:51:55 +0000 ROA not before: Tue 29 Apr 2025 10:51:55 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141209 IP address blocks: 103.137.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2172 (0x87c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D Validity Not Before: Apr 29 10:51:55 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6810af4a-ca2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:0e:c6:48:30:a5:1b:ba:36:72:4c:71:a9: f2:7d:5a:c9:0a:e8:92:9c:c6:0b:97:0f:de:f2:3b: d1:85:4e:f2:cf:78:ba:e1:c4:fe:c8:29:0d:08:c8: 47:2e:b3:74:e3:4a:d3:7a:1e:f9:d0:d5:7b:99:bc: a2:50:99:b2:b5:bc:b4:83:0b:5b:33:4c:13:fd:d0: 67:e1:bf:af:c2:14:aa:e4:4c:8e:49:cb:df:9f:b4: 9e:63:ce:b5:29:a9:07:da:f7:79:2d:27:8f:32:60: 2d:06:8a:a1:65:d8:c1:46:3d:bd:b7:5f:e6:f1:f9: 7c:94:11:41:25:42:b6:c7:90:f3:96:c3:0c:41:ed: ec:c3:2a:d5:66:e6:3d:dc:a7:2b:b1:14:c1:6e:b4: 93:a2:9b:6c:0e:07:e9:a8:9a:8d:74:6c:97:00:ea: 97:67:57:a2:7a:25:e0:bd:e3:35:37:e3:71:d0:00: 4d:96:6a:45:d7:e0:a9:7e:b6:ff:d6:0c:2a:27:ec: ba:56:cd:1b:ec:8c:1e:e2:81:84:8d:48:63:3d:fb: f7:1c:e5:98:8a:23:85:3e:ac:40:14:d2:67:7c:ad: b4:b6:c7:21:65:4f:01:22:7d:75:a0:44:30:26:4e: 5d:28:35:c9:cb:8e:80:8e:ce:7e:54:48:51:1d:ce: 1b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FA:F8:78:93:31:4F:BD:60:BF:F4:1D:E6:D9:8E:9F:9D:74:34:C7 X509v3 Authority Key Identifier: keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/F6EC251224E711F087B2F571C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.143.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:f2:fa:e3:6d:bc:cb:6b:11:7e:d7:0c:98:19:77:b4:61:95: 73:43:f1:ad:15:67:bd:0f:15:20:c0:23:c9:0a:89:4c:ac:ee: 4e:e9:c3:bf:a4:fd:0b:f3:9a:83:dc:52:31:28:ff:65:0f:44: 63:2a:d5:e0:83:3c:82:ef:d2:9c:29:b0:f0:d3:b8:69:9e:97: fc:58:1e:cf:96:99:e8:3a:1b:4d:3c:f1:2d:f4:f0:9d:65:39: d7:62:c0:e0:c3:86:e1:7a:bd:4e:42:cf:08:dd:e8:66:90:e5: 95:2a:f8:0b:68:c5:3c:1b:d4:bc:91:5c:25:d4:f5:a2:b0:3a: 4f:82:32:ae:ce:da:e3:38:67:db:12:b6:9d:d6:1a:f0:6b:ba: c6:94:9a:a6:38:d6:84:0c:44:23:60:09:40:ed:87:2b:a7:a0: 95:1e:60:8e:65:4b:ba:1d:29:da:97:f0:1f:d9:88:6a:77:03: 13:5a:a0:ba:ea:54:50:26:1c:fb:d3:46:96:dc:8b:23:9b:44: 12:cf:65:ca:68:3a:f7:19:d1:d4:83:2f:bb:3f:ec:97:a6:ee: 4a:5d:a8:92:87:67:3a:4c:48:ae:a2:2f:e3:6f:9f:9b:49:68: 7f:5b:0d:29:86:3e:e6:cf:71:93:2a:8a:b7:64:71:b9:13:bd: 97:e1:1f:5e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU0MTExMTAvBgNVBAUTKDM4ODgwREI5MzZBQ0NDOUJENzREM0RCOERGODg4N0Iz MjhFNTc4OEQwHhcNMjUwNDI5MTA1MTU1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEwYWY0YS1jYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5QOxkgwpRu6NnJMcanyfVrJCuiSnMYLlw/e8jvRhU7yz3i64cT+yCkNCMhH LrN040rTeh750NV7mbyiUJmytby0gwtbM0wT/dBn4b+vwhSq5EyOScvfn7SeY861 KakH2vd5LSePMmAtBoqhZdjBRj29t1/m8fl8lBFBJUK2x5DzlsMMQe3swyrVZuY9 3KcrsRTBbrSToptsDgfpqJqNdGyXAOqXZ1eieiXgveM1N+Nx0ABNlmpF1+Cpfrb/ 1gwqJ+y6Vs0b7Iwe4oGEjUhjPfv3HOWYiiOFPqxAFNJnfK20tschZU8BIn11oEQw Jk5dKDXJy46Ajs5+VEhRHc4bcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFX6+HiT MU+9YL/0HebZjp+ddDTHMB8GA1UdIwQYMBaAFDiIDbk2rMyb1009uN+Ih7Mo5XiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTQxMS9GMEIwMEVCNDE5 MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9PSWdOdVRhc3pKdlhUVDI0MzRpSHN5amxl STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JZ051VGFzekp2WFRUMjQzNGlIc3lqbGVJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU0MTEvRjBCMDBFQjQxOTE0MTFFQTg2RjI0ODFFQzRGOUFFMDIvRjZFQzI1MTIy NEU3MTFGMDg3QjJGNTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABniY8wDQYJKoZIhvcNAQELBQADggEBAEvy+uNtvMtrEX7X DJgZd7RhlXND8a0VZ70PFSDAI8kKiUys7k7pw7+k/QvzmoPcUjEo/2UPRGMq1eCD PILv0pwpsPDTuGmel/xYHs+Wmeg6G0088S308J1lOddiwODDhuF6vU5Czwjd6GaQ 5ZUq+AtoxTwb1LyRXCXU9aKwOk+CMq7O2uM4Z9sStp3WGvBrusaUmqY41oQMRCNg CUDthyunoJUeYI5lS7odKdqX8B/ZiGp3AxNaoLrqVFAmHPvTRpbciyObRBLPZcpo OvcZ0dSDL7s/7Jem7kpdqJKHZzpMSK6iL+Nvn5tJaH9bDSmGPubPcZMqirdkcbkT vZfhH14= -----END CERTIFICATE-----Generated at Wed May 14 19:58:40 2025 by rpki-client