$ rpki-client -vvf rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/59AA22D06FFD11EA9160902DC4F9AE02.roa File: 59AA22D06FFD11EA9160902DC4F9AE02.roa (raw, json) Hash identifier: FFN4hO+BD0+aFl8/ZDC9OYQdd66UMk5Uncgv5z8RJvA= Subject key identifier: F6:08:19:82:9C:F9:48:E8:B4:B6:20:6D:C3:5C:74:90:76:35:DB:8B Certificate issuer: /CN=A9118309/serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9 Certificate serial: 0A09 Authority key identifier: B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/59AA22D06FFD11EA9160902DC4F9AE02.roa Signing time: Mon 31 Mar 2025 20:19:57 +0000 ROA not before: Mon 31 Mar 2025 20:19:57 +0000 ROA not after: Fri 01 Aug 2025 00:00:00 +0000 asID: 140042 IP address blocks: 103.147.200.0/23 maxlen: 23 103.147.200.0/24 maxlen: 24 103.147.201.0/24 maxlen: 24 2405:bfc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2569 (0xa09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118309 Validity Not Before: Mar 31 20:19:57 2025 GMT Not After : Aug 1 00:00:00 2025 GMT Subject: CN=67eaf8ed-3fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:17:cf:15:c8:bf:d9:4a:d1:d3:c8:77:60:2a: 73:d4:b5:59:29:eb:c6:b9:52:05:1f:c6:cb:93:70: 5d:9b:79:1e:c8:68:27:ec:d4:f3:ab:c4:c9:3d:2d: 42:a3:cd:63:bc:84:1d:a0:5e:81:93:56:26:54:55: 9e:85:3a:29:fe:4c:31:f0:17:fb:54:96:26:38:05: 4c:21:b9:cc:80:b1:c2:07:ed:97:0a:90:e3:57:53: 8e:5b:63:66:60:6f:45:ec:b8:e6:7d:b2:77:e3:ac: fd:7b:9b:22:41:97:22:6b:ec:d5:61:07:42:49:b3: ec:69:ad:7d:03:b8:1b:de:47:91:c5:0f:7e:f7:61: 51:43:f0:2f:5b:ee:aa:b5:b8:e5:b1:90:96:1f:cb: 25:06:f9:78:8c:5f:9b:7f:cd:89:5c:3e:95:ce:7f: 2b:60:92:62:28:40:37:46:63:53:3e:f6:f7:21:24: 33:a0:04:2e:3e:51:80:1b:68:b3:0f:3c:f3:3b:5e: f5:d6:33:9e:40:1b:70:7f:78:d8:36:7e:6d:29:cb: d6:c7:d7:72:73:ab:e3:f3:8d:47:02:a2:90:c6:cf: 1c:48:2f:6a:16:8c:d4:88:cd:cc:26:eb:ff:ce:94: 35:20:35:07:aa:f0:a9:62:37:87:15:6c:27:84:aa: d0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:08:19:82:9C:F9:48:E8:B4:B6:20:6D:C3:5C:74:90:76:35:DB:8B X509v3 Authority Key Identifier: keyid:B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/59AA22D06FFD11EA9160902DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.200.0/23 IPv6: 2405:bfc0::/32 Signature Algorithm: sha256WithRSAEncryption 8d:56:f1:7b:94:d4:69:14:e0:d7:10:ed:65:e6:2f:36:41:56: 90:d3:96:1b:08:17:29:dc:34:0d:4c:07:df:8c:92:59:bd:8d: ae:31:a1:bd:90:f1:d3:63:dc:2b:67:2b:3d:89:ac:d8:7e:3c: 0e:61:62:3b:19:a1:1a:c0:9f:bf:5f:46:9a:04:6a:cb:70:e9: bc:ea:81:88:dd:68:79:a3:6c:72:e9:13:d1:9a:46:46:33:5e: d2:5b:bc:cf:1f:bd:0d:08:7d:ee:e4:7c:a3:be:4f:5c:43:cf: 83:8d:12:0b:a2:63:e0:28:3e:84:bd:33:c1:df:1f:bd:ce:e5: 54:8e:ec:e7:4e:e3:f2:4c:39:70:e9:b1:e1:c4:d4:34:9e:84: 5e:e6:5c:15:42:ec:e5:81:3b:2e:53:8e:57:3c:8a:3c:f6:d1: 2e:20:5d:a2:ab:6a:d5:a2:7b:9d:a1:22:f7:2f:c4:8e:e7:d4: 53:2e:44:d7:87:ae:0b:9e:63:29:b8:81:fa:fd:78:28:78:04: 24:23:93:b1:1e:ab:1a:29:92:a0:dc:7f:a5:c6:73:ad:02:da: 38:30:41:d6:99:8d:cb:f3:5c:7a:64:f3:f1:87:ac:fc:66:20: 6d:80:5a:0b:14:c5:ac:4d:70:43:91:ae:19:fe:3f:a2:88:0f: 95:7e:bf:74 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgzMDkxMTAvBgNVBAUTKEI2MEQ1QTdDMzYzRjBGNEQ5MzJGRTMxN0I5MENFNkNG ODBEMjgzQzkwHhcNMjUwMzMxMjAxOTU3WhcNMjUwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhZjhlZC0zZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphfPFci/2UrR08h3YCpz1LVZKevGuVIFH8bLk3Bdm3keyGgn7NTzq8TJPS1C o81jvIQdoF6Bk1YmVFWehTop/kwx8Bf7VJYmOAVMIbnMgLHCB+2XCpDjV1OOW2Nm YG9F7LjmfbJ346z9e5siQZcia+zVYQdCSbPsaa19A7gb3keRxQ9+92FRQ/AvW+6q tbjlsZCWH8slBvl4jF+bf82JXD6Vzn8rYJJiKEA3RmNTPvb3ISQzoAQuPlGAG2iz DzzzO1711jOeQBtwf3jYNn5tKcvWx9dyc6vj841HAqKQxs8cSC9qFozUiM3MJuv/ zpQ1IDUHqvCpYjeHFWwnhKrQSwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPYIGYKc +UjotLYgbcNcdJB2NduLMB8GA1UdIwQYMBaAFLYNWnw2Pw9Nky/jF7kM5s+A0oPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODMwOS8xQTQ4REM4NjZG RkMxMUVBODhGM0QyMkJDNEY5QUUwMi90ZzFhZkRZX0QwMlRMLU1YdVF6bXo0RFNn OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnMWFmRFlfRDAyVEwtTVh1UXptejREU2c4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTgzMDkvMUE0OERDODY2RkZDMTFFQTg4RjNEMjJCQzRGOUFFMDIvNTlBQTIyRDA2 RkZEMTFFQTkxNjA5MDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnk8gwDQQCAAIwBwMFACQFv8AwDQYJKoZIhvcNAQELBQAD ggEBAI1W8XuU1GkU4NcQ7WXmLzZBVpDTlhsIFyncNA1MB9+Mklm9ja4xob2Q8dNj 3CtnKz2JrNh+PA5hYjsZoRrAn79fRpoEastw6bzqgYjdaHmjbHLpE9GaRkYzXtJb vM8fvQ0Ife7kfKO+T1xDz4ONEguiY+AoPoS9M8HfH73O5VSO7OdO4/JMOXDpseHE 1DSehF7mXBVC7OWBOy5Tjlc8ijz20S4gXaKratWie52hIvcvxI7n1FMuRNeHrgue Yym4gfr9eCh4BCQjk7EeqxopkqDcf6XGc60C2jgwQdaZjcvzXHpk8/GHrPxmIG2A WgsUxaxNcEORrhn+P6KID5V+v3Q= -----END CERTIFICATE-----Generated at Sat Apr 5 03:33:05 2025 by rpki-client