$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/18CA7386E35511EDA63D5182C4F9AE02.roa File: 18CA7386E35511EDA63D5182C4F9AE02.roa (raw, json) Hash identifier: dvi0NiJsfBapKtj0ISklbEMBQ4R3yCT+QGTIlcMVI/A= Subject key identifier: 27:10:75:35:94:E2:43:76:0A:2D:41:EA:8C:EA:65:0E:98:67:1F:D1 Certificate issuer: /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Certificate serial: 0C0D Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/18CA7386E35511EDA63D5182C4F9AE02.roa Signing time: Sun 24 Nov 2024 18:36:44 +0000 ROA not before: Sun 24 Nov 2024 18:36:44 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 134437 IP address blocks: 103.77.60.0/22 maxlen: 22 103.77.60.0/24 maxlen: 24 103.77.61.0/24 maxlen: 24 103.77.62.0/24 maxlen: 24 103.77.63.0/24 maxlen: 24 2407:8a80::/32 maxlen: 32 2407:8a80::/48 maxlen: 48 2407:8a80:1::/48 maxlen: 48 2407:8a80:2::/48 maxlen: 48 2407:8a80:3::/48 maxlen: 48 2407:8a80:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3085 (0xc0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Validity Not Before: Nov 24 18:36:44 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6743723c-14c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:89:50:8c:b9:12:d2:3e:ee:07:ce:a2:fd:a3: 3c:bc:d7:de:65:47:b3:8a:83:e0:c2:35:fc:78:3f: 4f:27:93:5f:d5:fe:0a:2a:79:48:79:4e:6e:86:18: a9:69:7d:3b:87:8f:01:2e:b7:ae:e8:8d:a2:70:b7: c8:bb:14:12:bd:a0:10:54:66:3f:75:83:cc:23:eb: 0e:a2:4a:07:37:fa:c1:12:43:9d:58:7d:ed:06:ff: cc:32:76:99:5d:79:42:22:53:28:9a:8d:ae:72:d5: 81:04:6b:a4:91:eb:48:90:b9:74:ae:08:68:86:14: ca:7a:30:a7:93:d8:97:cb:e7:98:26:e4:1c:82:8c: 08:e5:cc:52:0c:87:6f:f1:da:96:96:43:69:88:2c: 29:c5:56:5e:c9:a5:7c:95:6e:45:f9:92:f5:e1:0a: 2b:db:b0:6f:15:23:8e:3a:2d:c6:04:48:38:5e:03: 19:b4:5f:0d:5c:f7:48:bc:28:be:39:35:0c:fb:79: c6:3f:c8:87:11:e1:66:ba:a0:e5:dc:7c:16:7f:f3: 8b:f3:be:ae:d6:47:84:85:47:f1:5b:fb:4f:38:2a: da:b9:5d:e1:98:94:66:45:32:07:ec:24:aa:79:97: 0f:16:de:66:ec:8e:87:8c:f6:7d:c4:3d:b0:9b:49: 8a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:10:75:35:94:E2:43:76:0A:2D:41:EA:8C:EA:65:0E:98:67:1F:D1 X509v3 Authority Key Identifier: keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/18CA7386E35511EDA63D5182C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.77.60.0/22 IPv6: 2407:8a80::/32 Signature Algorithm: sha256WithRSAEncryption 3e:84:1c:cb:7a:2a:d5:72:4f:97:c2:67:4d:ff:4a:9f:1d:6d: a2:d4:9d:4c:57:d8:f5:2b:19:c1:de:ed:70:8e:b0:76:4d:b2: 46:f2:99:22:28:32:cb:b5:37:cc:18:be:f4:10:9d:17:b1:37: c6:73:d4:a9:80:fb:61:22:68:ec:63:04:66:e5:fd:e6:e0:10: d3:7e:44:b3:18:63:62:40:bc:a4:75:2b:dd:bd:45:b4:34:ee: c3:11:42:a6:64:80:a3:be:2b:aa:a4:a9:92:c7:f1:fd:f2:86: 3e:72:2b:a4:a5:2d:c9:da:1b:6c:df:d8:15:c4:af:e0:6f:ab: e8:1f:ae:09:b8:c0:5b:fa:fa:5c:14:66:95:ba:52:ff:99:7f: 73:28:a2:93:de:0c:bc:2d:03:14:0e:70:6c:6a:74:0f:5a:38: 19:7b:00:4a:f0:de:23:46:a4:92:c8:08:09:43:38:a4:24:58: aa:93:f9:4c:c2:4e:f4:87:e7:54:9a:07:e8:30:64:33:de:c2: 60:46:cb:30:8f:ea:4d:e9:13:68:7c:74:c4:ec:90:b5:8d:ef: cb:34:54:e4:b6:ae:3a:48:1c:63:4a:0c:37:63:bf:4a:8e:42: a8:d5:bb:99:d9:d1:0b:26:f3:ae:65:77:92:ce:b9:6e:d3:8b: 4d:19:67:17 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVEQjcxMTAvBgNVBAUTKDkzMTU5QzlCNjEzM0Y0ODA2RkJCMjhDNjIyNUU5NDM5 NjNBNkIwMDEwHhcNMjQxMTI0MTgzNjQ0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQzNzIzYy0xNGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIlQjLkS0j7uB86i/aM8vNfeZUezioPgwjX8eD9PJ5Nf1f4KKnlIeU5uhhip aX07h48BLreu6I2icLfIuxQSvaAQVGY/dYPMI+sOokoHN/rBEkOdWH3tBv/MMnaZ XXlCIlMomo2uctWBBGukketIkLl0rghohhTKejCnk9iXy+eYJuQcgowI5cxSDIdv 8dqWlkNpiCwpxVZeyaV8lW5F+ZL14Qor27BvFSOOOi3GBEg4XgMZtF8NXPdIvCi+ OTUM+3nGP8iHEeFmuqDl3HwWf/OL876u1keEhUfxW/tPOCrauV3hmJRmRTIH7CSq eZcPFt5m7I6HjPZ9xD2wm0mKewIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCcQdTWU 4kN2Ci1B6ozqZQ6YZx/RMB8GA1UdIwQYMBaAFJMVnJthM/SAb7soxiJelDljprAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRURCNy80NjE2MkFEQUZF RDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJQnZ1eWpHSWw2VU9XT21z QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t4V2NtMkV6OUlCdnV5akdJbDZVT1dPbXNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkVEQjcvNDYxNjJBREFGRUQyMTFFOTg3RkZDMjE3QzRGOUFFMDIvMThDQTczODZF MzU1MTFFREE2M0Q1MTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnTTwwDQQCAAIwBwMFACQHioAwDQYJKoZIhvcNAQELBQAD ggEBAD6EHMt6KtVyT5fCZ03/Sp8dbaLUnUxX2PUrGcHe7XCOsHZNskbymSIoMsu1 N8wYvvQQnRexN8Zz1KmA+2EiaOxjBGbl/ebgENN+RLMYY2JAvKR1K929RbQ07sMR QqZkgKO+K6qkqZLH8f3yhj5yK6SlLcnaG2zf2BXEr+Bvq+gfrgm4wFv6+lwUZpW6 Uv+Zf3MoopPeDLwtAxQOcGxqdA9aOBl7AErw3iNGpJLICAlDOKQkWKqT+UzCTvSH 51SaB+gwZDPewmBGyzCP6k3pE2h8dMTskLWN78s0VOS2rjpIHGNKDDdjv0qOQqjV u5nZ0Qsm865ld5LOuW7Ti00ZZxc= -----END CERTIFICATE-----Generated at Thu May 15 00:47:54 2025 by rpki-client