$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/1C2EA330925011EE9571EE40C4F9AE02.roa File: 1C2EA330925011EE9571EE40C4F9AE02.roa (raw, json) Hash identifier: g1vuB/s+fKkz9lQDwgz7uwUHIIgwyYOpfROfbA+7Aro= Subject key identifier: F4:54:08:EA:2A:79:85:90:76:3F:6D:3F:54:5B:1F:D5:47:3C:C5:21 Certificate issuer: /CN=A917AC33/serialNumber=DEAF1C8DE4FE3C51C69153FCAF9FE8C2AD6F8E26 Certificate serial: 010C Authority key identifier: DE:AF:1C:8D:E4:FE:3C:51:C6:91:53:FC:AF:9F:E8:C2:AD:6F:8E:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/1C2EA330925011EE9571EE40C4F9AE02.roa Signing time: Thu 01 May 2025 04:11:09 +0000 ROA not before: Thu 01 May 2025 04:11:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136478 IP address blocks: 103.184.253.0/24 maxlen: 24 2001:df0:94c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.crl rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC33, serialNumber=DEAF1C8DE4FE3C51C69153FCAF9FE8C2AD6F8E26 Validity Not Before: May 1 04:11:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6812f45d-120c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:60:6a:3e:db:96:c9:ac:be:f1:f5:d7:3c:8c: 77:4c:4e:62:a4:37:4e:2f:79:94:d3:49:59:16:23: f7:a6:cb:26:c9:0b:4a:6f:d9:48:f0:df:66:9a:25: 93:47:1f:1d:05:46:81:85:9a:f8:fe:2c:e5:4c:d1: 85:c3:23:9e:2a:d1:63:da:2f:3a:ae:4a:5e:0a:57: 48:37:b2:b5:12:61:53:e8:a4:94:67:95:b9:aa:96: cc:3d:ec:af:06:f8:19:a5:f7:07:ad:d1:be:46:bc: 49:1a:7c:b7:e1:3a:f8:2f:70:a2:c4:1e:03:34:73: 90:72:e9:8e:5f:30:6c:bf:39:44:ea:39:45:0f:b6: b6:35:85:42:66:1f:33:0a:b7:e9:41:5c:78:f0:a4: 65:53:bd:40:7d:aa:3e:3b:68:fa:e3:8c:cd:43:f1: b1:0c:b1:6d:07:34:36:8c:97:46:a6:b2:56:c2:e2: fa:ce:bc:c5:23:bd:10:10:48:aa:b5:8a:49:d8:68: 85:57:b0:30:96:ef:89:7c:11:d6:e9:f2:42:4d:ef: 3e:95:c8:6d:45:72:2a:35:d3:43:df:bf:a5:71:90: 0d:aa:a5:54:63:a2:52:6a:2b:3d:f3:5f:55:d8:7c: 53:e2:19:55:31:23:01:9e:85:eb:33:da:f0:89:1c: 26:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:54:08:EA:2A:79:85:90:76:3F:6D:3F:54:5B:1F:D5:47:3C:C5:21 X509v3 Authority Key Identifier: keyid:DE:AF:1C:8D:E4:FE:3C:51:C6:91:53:FC:AF:9F:E8:C2:AD:6F:8E:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/1C2EA330925011EE9571EE40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.184.253.0/24 IPv6: 2001:df0:94c0::/48 Signature Algorithm: sha256WithRSAEncryption 63:94:c5:c6:42:d6:01:ab:d2:aa:23:57:cf:b3:13:c0:9e:8e: f2:fa:bc:52:14:af:16:c1:9b:15:02:44:c4:a6:ae:20:04:c4: 3c:2a:57:fc:93:64:fa:6b:7f:43:8a:cb:d5:be:7a:4a:f0:3c: fb:9d:3a:81:bf:b3:47:f8:ae:4f:c3:5b:b9:13:a1:10:a7:79: 48:74:1c:0a:7b:11:06:fc:d6:b8:05:e1:65:e0:42:3e:d3:44: ea:4b:c7:86:43:74:50:99:90:4b:0d:29:7b:d7:07:15:03:05: 5e:ac:22:fe:be:6d:3b:75:9d:a4:80:1d:48:44:16:b9:4f:ca: c9:db:d6:46:0c:af:ad:9e:83:b5:e4:a8:64:d0:fc:7b:df:a0: 10:63:7c:4a:69:c8:07:d0:69:c6:e4:9e:54:76:a4:77:3d:78: 9d:03:98:11:47:7f:e0:38:9a:85:98:6c:96:b0:dd:78:55:2d: cf:ad:52:6c:36:67:9f:ec:7b:31:0d:1f:06:0c:10:10:fb:09: b7:33:cf:42:18:f1:0a:f1:73:75:4b:19:81:9b:eb:48:09:fd: eb:e5:5f:d7:25:59:89:cf:0b:0a:68:30:89:f7:24:2e:c9:55: f4:3d:7f:87:56:8e:81:24:79:2d:a3:f7:9a:e6:ad:ce:76:a0: ac:6a:96:c6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDMzMxMTAvBgNVBAUTKERFQUYxQzhERTRGRTNDNTFDNjkxNTNGQ0FGOUZFOEMy QUQ2RjhFMjYwHhcNMjUwNTAxMDQxMTA5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyZjQ1ZC0xMjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7mBqPtuWyay+8fXXPIx3TE5ipDdOL3mU00lZFiP3pssmyQtKb9lI8N9mmiWT Rx8dBUaBhZr4/izlTNGFwyOeKtFj2i86rkpeCldIN7K1EmFT6KSUZ5W5qpbMPeyv BvgZpfcHrdG+RrxJGny34Tr4L3CixB4DNHOQcumOXzBsvzlE6jlFD7a2NYVCZh8z CrfpQVx48KRlU71Afao+O2j644zNQ/GxDLFtBzQ2jJdGprJWwuL6zrzFI70QEEiq tYpJ2GiFV7Awlu+JfBHW6fJCTe8+lchtRXIqNdND37+lcZANqqVUY6JSais9819V 2HxT4hlVMSMBnoXrM9rwiRwmjwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPRUCOoq eYWQdj9tP1RbH9VHPMUhMB8GA1UdIwQYMBaAFN6vHI3k/jxRxpFT/K+f6MKtb44m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUMzMy9CMEJGQUMzNDky NEYxMUVFQThDMjI0NDBDNEY5QUUwMi8zcThjamVULVBGSEdrVlA4cjVfb3dxMXZq aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxOGNqZVQtUEZIR2tWUDhyNV9vd3ExdmppWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0FDMzMvQjBCRkFDMzQ5MjRGMTFFRUE4QzIyNDQwQzRGOUFFMDIvMUMyRUEzMzA5 MjUwMTFFRTk1NzFFRTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnuP0wDwQCAAIwCQMHACABDfCUwDANBgkqhkiG9w0BAQsF AAOCAQEAY5TFxkLWAavSqiNXz7MTwJ6O8vq8UhSvFsGbFQJExKauIATEPCpX/JNk +mt/Q4rL1b56SvA8+506gb+zR/iuT8NbuROhEKd5SHQcCnsRBvzWuAXhZeBCPtNE 6kvHhkN0UJmQSw0pe9cHFQMFXqwi/r5tO3WdpIAdSEQWuU/KydvWRgyvrZ6DteSo ZND8e9+gEGN8SmnIB9BpxuSeVHakdz14nQOYEUd/4DiahZhslrDdeFUtz61SbDZn n+x7MQ0fBgwQEPsJtzPPQhjxCvFzdUsZgZvrSAn96+Vf1yVZic8LCmgwifckLslV 9D1/h1aOgSR5LaP3muatznagrGqWxg== -----END CERTIFICATE-----Generated at Tue May 13 12:08:32 2025 by rpki-client