$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/D11C8B12DB7111E981104A54C4F9AE02.roa File: D11C8B12DB7111E981104A54C4F9AE02.roa (raw, json) Hash identifier: b+YvMULskW1aqcLGiau9z7PDlxuascZM6xtTvuLKH/M= Subject key identifier: 62:22:26:E7:AC:60:92:05:2C:D4:E0:06:31:4F:02:FE:E8:0B:5C:6A Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Certificate serial: 0D0F Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/D11C8B12DB7111E981104A54C4F9AE02.roa Signing time: Fri 02 May 2025 18:26:23 +0000 ROA not before: Fri 02 May 2025 18:26:23 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139011 IP address blocks: 103.138.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3343 (0xd0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Validity Not Before: May 2 18:26:23 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68150e4f-a800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:93:a5:e6:84:81:85:10:5e:7b:14:40:5a: 95:ec:bd:ff:c2:87:15:79:da:87:1c:9f:31:37:5e: 2b:84:c0:36:fb:33:36:e2:c4:80:dc:98:a1:32:3a: b7:b1:36:1f:a3:4b:34:7c:81:7d:fd:f4:48:95:db: 3b:0a:92:4f:e9:d2:19:e4:f8:3e:8c:1e:4d:70:2f: 8b:0d:93:8c:4a:6e:87:22:60:7e:06:4d:1c:67:65: 89:bb:f2:72:d9:9d:9b:06:77:19:bc:54:f6:e1:18: 0b:a5:4a:97:91:c6:92:5d:13:4a:be:51:b6:ba:ba: a0:51:88:82:81:68:34:f3:f2:6b:93:51:1b:37:f2: 18:0d:ab:32:d6:f6:24:d6:ee:de:d4:db:6b:b7:a5: 79:dc:79:a2:7a:fc:31:69:02:0c:b3:f4:ab:1b:51: 6e:2f:df:eb:f4:0c:a1:30:ee:a4:ff:8b:23:15:dc: 7e:af:f9:6f:5e:f3:ba:85:4d:05:91:6f:e7:d0:81: 9d:3c:3a:32:26:37:31:db:83:60:3c:e6:d0:e0:2a: 9a:4f:ed:da:39:e0:ac:09:e3:3a:e1:4f:56:b2:50: 74:e1:c0:ea:9e:98:34:ab:33:5f:2c:2b:0d:ee:f4: 75:cf:36:d8:49:8f:ab:40:8d:98:1e:d3:8c:9d:71: e1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:22:26:E7:AC:60:92:05:2C:D4:E0:06:31:4F:02:FE:E8:0B:5C:6A X509v3 Authority Key Identifier: keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/D11C8B12DB7111E981104A54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.142.0/24 Signature Algorithm: sha256WithRSAEncryption e3:4b:03:4b:41:48:e6:d6:6f:c9:00:d7:24:49:f1:55:60:a5: 2c:97:77:0a:55:69:0a:09:e4:b0:b6:28:b4:09:68:b7:f4:31: 95:d6:d9:67:7a:a2:06:43:9b:55:f3:7b:34:2f:e6:e0:3c:52: 1d:fc:3f:09:b4:ad:5f:18:c0:af:27:53:8d:19:24:cd:e0:2f: b1:e6:3c:06:58:88:64:c7:62:14:95:ce:43:29:0e:d1:96:5a: 2f:ce:d0:c0:55:3a:3c:51:75:52:e8:5f:e7:45:05:f0:8e:5f: dc:de:0c:bc:1a:a6:b9:6d:e0:ba:28:15:da:25:b5:f9:6f:2f: 05:3c:54:fd:a2:48:3a:f2:94:f7:7d:f6:f2:51:62:de:1c:cb: fe:f2:fb:9f:20:70:2d:1f:b7:28:07:81:38:89:1a:b8:3b:a0: 02:e3:14:c1:74:7d:18:be:ab:b4:a1:81:24:bb:bf:26:f3:fc: 22:77:07:bb:52:58:28:bf:4f:3b:f5:33:09:c2:ec:36:ca:98: 3b:76:95:13:7c:83:29:f0:3a:c4:e7:ef:b9:d0:91:ea:e8:ef: 66:cf:74:c6:28:14:43:4d:5e:fb:2b:dd:fe:16:b0:59:a1:71: 90:4f:07:ba:6f:fe:72:74:0c:36:d6:f3:99:3a:28:b2:09:5a: c2:af:78:76 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2 REFBMzU1NzIwHhcNMjUwNTAyMTgyNjIzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1MGU0Zi1hODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTWTpeaEgYUQXnsUQFqV7L3/wocVedqHHJ8xN14rhMA2+zM24sSA3JihMjq3 sTYfo0s0fIF9/fRIlds7CpJP6dIZ5Pg+jB5NcC+LDZOMSm6HImB+Bk0cZ2WJu/Jy 2Z2bBncZvFT24RgLpUqXkcaSXRNKvlG2urqgUYiCgWg08/Jrk1EbN/IYDasy1vYk 1u7e1Ntrt6V53HmievwxaQIMs/SrG1FuL9/r9AyhMO6k/4sjFdx+r/lvXvO6hU0F kW/n0IGdPDoyJjcx24NgPObQ4CqaT+3aOeCsCeM64U9WslB04cDqnpg0qzNfLCsN 7vR1zzbYSY+rQI2YHtOMnXHhqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGIiJues YJIFLNTgBjFPAv7oC1xqMB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0MwRjUvMUVDNEUwOUFEQjcxMTFFOUI2MTA1MzUzQzRGOUFFMDIvRDExQzhCMTJE QjcxMTFFOTgxMTA0QTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnio4wDQYJKoZIhvcNAQELBQADggEBAONLA0tBSObWb8kA 1yRJ8VVgpSyXdwpVaQoJ5LC2KLQJaLf0MZXW2Wd6ogZDm1XzezQv5uA8Uh38Pwm0 rV8YwK8nU40ZJM3gL7HmPAZYiGTHYhSVzkMpDtGWWi/O0MBVOjxRdVLoX+dFBfCO X9zeDLwaprlt4LooFdoltflvLwU8VP2iSDrylPd99vJRYt4cy/7y+58gcC0ftygH gTiJGrg7oALjFMF0fRi+q7ShgSS7vybz/CJ3B7tSWCi/Tzv1MwnC7DbKmDt2lRN8 gynwOsTn77nQkero72bPdMYoFENNXvsr3f4WsFmhcZBPB7pv/nJ0DDbW85k6KLIJ WsKveHY= -----END CERTIFICATE-----Generated at Wed May 14 06:34:38 2025 by rpki-client