$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/6C27C19E4BFA11ECA6797F6DC4F9AE02.roa File: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (raw, json) Hash identifier: 9zlcNMp71CcrKhJ6RcgbQ3pW8nUmE/ShM6R3qPGEpIM= Subject key identifier: 3A:53:D5:F8:97:DD:21:CD:78:9F:4A:43:E9:A9:CA:40:30:DE:7C:81 Certificate issuer: /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Certificate serial: 042B Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/6C27C19E4BFA11ECA6797F6DC4F9AE02.roa Signing time: Tue 07 Jan 2025 00:15:28 +0000 ROA not before: Tue 07 Jan 2025 00:15:28 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 4764 IP address blocks: 103.176.60.0/24 maxlen: 24 2400:3120::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1067 (0x42b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119B43 Validity Not Before: Jan 7 00:15:28 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=677c7220-4815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:b5:b2:90:97:84:bc:47:95:2f:10:3c:ef: c4:49:13:e5:84:b9:f3:d8:a1:0c:6c:33:bd:a8:48: f7:99:ad:aa:0e:6d:c9:e4:fc:1a:9b:bb:91:2a:64: 88:fe:cb:73:8b:b9:26:84:5c:26:63:08:59:10:78: f6:85:fa:d5:68:42:78:fb:90:d1:07:1c:28:6c:5c: 52:4a:7e:42:0c:e9:b4:b3:7c:c0:56:4d:92:dc:3a: a2:07:bb:9f:53:40:da:cc:a3:47:a1:0e:ba:ee:0d: 2c:1d:02:59:2b:c2:c2:28:15:97:39:4d:51:7c:e2: 25:d9:37:24:4b:0a:65:c8:a1:f1:f3:cd:bd:87:43: 33:d1:10:bc:f4:b5:a6:4a:87:24:15:92:3b:57:c0: 0a:c5:b2:8e:fb:5c:a9:f0:84:af:ab:0b:95:d8:6c: 24:d1:4b:46:c6:ce:3c:aa:61:05:40:65:77:cb:89: 84:8d:cb:29:49:9f:53:3e:4a:44:1f:ec:71:3a:63: a6:2c:a0:c4:69:48:2a:56:6c:e0:e5:84:32:ee:ae: 77:36:fe:7c:bb:50:fa:61:ee:71:2b:5f:c6:69:41: 8d:df:99:6f:0c:9f:02:a0:78:ec:ae:34:47:9b:1e: 78:a7:ff:2f:d2:a5:b4:10:7c:0e:b2:e5:50:8e:f8: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:53:D5:F8:97:DD:21:CD:78:9F:4A:43:E9:A9:CA:40:30:DE:7C:81 X509v3 Authority Key Identifier: keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/6C27C19E4BFA11ECA6797F6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.60.0/24 IPv6: 2400:3120::/36 Signature Algorithm: sha256WithRSAEncryption 55:e6:8f:42:34:fe:7f:6c:03:45:84:02:e6:63:1a:11:ac:77: c9:ed:13:c1:f0:5a:c2:b6:dd:c0:c6:41:5a:fd:16:80:6a:9d: be:c1:1f:1e:2b:ab:8c:cd:56:c3:a2:a2:e6:16:87:9f:fd:53: 34:5b:91:0a:ec:c1:56:56:91:74:79:29:76:29:b5:df:0c:8c: c6:3d:e5:16:13:fe:d5:b9:75:a4:33:92:d6:50:1e:20:c9:03: 95:3b:98:75:97:50:fc:82:27:9c:bb:77:96:f6:ca:5c:31:22: 20:ba:2b:9f:02:31:87:8a:67:bc:00:a3:26:39:48:54:b8:23: f8:c9:cb:3b:d4:14:98:44:82:38:83:ab:95:c0:bb:a5:3b:1a: ff:4d:53:52:e6:52:f1:b9:59:92:77:76:fb:cd:47:f0:d1:b8: e3:cb:1e:47:a7:be:bf:06:64:27:fe:48:bf:2d:be:fd:cd:72: 96:30:df:7b:d2:0c:0c:f1:e0:1d:5e:8b:e0:21:f2:a8:81:60: b7:7a:63:ae:8f:9f:4c:59:4b:0c:45:43:d8:59:3b:69:b0:64: 57:f3:d0:7c:13:d7:d9:72:b7:ac:b7:87:cb:b3:86:07:ae:c0: 38:46:91:bf:1d:26:b8:a5:28:4a:18:ce:d3:2e:50:b3:ee:ed: fc:f4:e7:af -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICBCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlCNDMxMTAvBgNVBAUTKDVFRDg2OERBODcyQUY4RDY5NkE1QzFBOUZBNzgyOUY2 NTI3M0NBNzkwHhcNMjUwMTA3MDAxNTI4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdjNzIyMC00ODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooW1spCXhLxHlS8QPO/ESRPlhLnz2KEMbDO9qEj3ma2qDm3J5Pwam7uRKmSI /stzi7kmhFwmYwhZEHj2hfrVaEJ4+5DRBxwobFxSSn5CDOm0s3zAVk2S3DqiB7uf U0DazKNHoQ667g0sHQJZK8LCKBWXOU1RfOIl2TckSwplyKHx8829h0Mz0RC89LWm SockFZI7V8AKxbKO+1yp8ISvqwuV2Gwk0UtGxs48qmEFQGV3y4mEjcspSZ9TPkpE H+xxOmOmLKDEaUgqVmzg5YQy7q53Nv58u1D6Ye5xK1/GaUGN35lvDJ8CoHjsrjRH mx54p/8v0qW0EHwOsuVQjvjX8QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDpT1fiX 3SHNeJ9KQ+mpykAw3nyBMB8GA1UdIwQYMBaAFF7YaNqHKvjWlqXBqfp4KfZSc8p5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUI0My9FNUI4Mzk4MjRC M0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1OYVdwY0dwLW5ncDlsSnp5 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h0aG8yb2NxLU5hV3BjR3AtbmdwOWxKenluay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTlCNDMvRTVCODM5ODI0QjNBMTFFQzk5MkU4MTUwQzRGOUFFMDIvNkMyN0MxOUU0 QkZBMTFFQ0E2Nzk3RjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBABnsDwwDgQCAAIwCAMGBCQAMSAAMA0GCSqGSIb3DQEBCwUA A4IBAQBV5o9CNP5/bANFhALmYxoRrHfJ7RPB8FrCtt3AxkFa/RaAap2+wR8eK6uM zVbDoqLmFoef/VM0W5EK7MFWVpF0eSl2KbXfDIzGPeUWE/7VuXWkM5LWUB4gyQOV O5h1l1D8giecu3eW9spcMSIguiufAjGHime8AKMmOUhUuCP4ycs71BSYRII4g6uV wLulOxr/TVNS5lLxuVmSd3b7zUfw0bjjyx5Hp76/BmQn/ki/Lb79zXKWMN970gwM 8eAdXovgIfKogWC3emOuj59MWUsMRUPYWTtpsGRX89B8E9fZcrest4fLs4YHrsA4 RpG/HSa4pShKGM7TLlCz7u389Oev -----END CERTIFICATE-----Generated at Sun Apr 6 01:29:31 2025 by rpki-client