$ rpki-client -vvf rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/E816DFFAA90111ED867DA161C4F9AE02.roa File: E816DFFAA90111ED867DA161C4F9AE02.roa (raw, json) Hash identifier: J+hbcg1f000uZywitLiVEmVwojqXye5u/Ee0tXQliec= Subject key identifier: AA:7A:B2:08:15:62:13:63:2D:F9:15:13:6F:26:83:22:02:29:F4:86 Certificate issuer: /CN=A911A828/serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001 Certificate serial: 0169 Authority key identifier: 22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/E816DFFAA90111ED867DA161C4F9AE02.roa Signing time: Thu 09 Jan 2025 02:47:37 +0000 ROA not before: Thu 09 Jan 2025 02:47:37 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 150431 IP address blocks: 103.39.146.0/23 maxlen: 23 103.39.146.0/24 maxlen: 24 103.39.147.0/24 maxlen: 24 2001:df1:8cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A828 Validity Not Before: Jan 9 02:47:37 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=677f38c9-70d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:60:53:8e:da:26:6a:3b:eb:b6:9f:50:0d:a0: bf:e6:10:33:b1:ed:6a:22:e5:73:1f:00:14:75:07: 42:eb:41:86:18:65:f8:0f:a2:7a:5e:a8:2b:e6:c5: 48:33:60:48:65:3d:84:2e:2b:d7:8a:f0:45:0a:3e: 49:1c:9a:c0:f4:3a:11:89:ac:f9:24:4d:42:9e:4a: 8f:7e:b8:a7:42:0c:06:d2:38:34:52:e9:72:3c:94: e2:bc:83:0a:62:6c:cf:88:0d:7b:bb:fe:5f:05:92: 4e:64:73:95:45:1e:30:c1:8f:dd:8d:c4:71:fd:24: 53:ec:05:81:26:8b:e0:a3:f2:08:71:07:8f:ed:61: ae:c1:95:b3:f8:84:03:91:f3:04:02:0d:bc:1f:28: fb:c9:27:0d:42:c4:91:42:48:c3:a0:9d:01:01:96: 57:d9:a8:af:13:63:a6:e1:2f:81:31:7b:ed:38:4b: 06:89:31:0d:38:12:f4:66:c0:65:6d:a3:ee:11:42: 43:4b:ce:fe:4a:1b:35:1e:97:77:a8:a1:7c:6c:58: 63:41:90:05:21:3d:2f:68:12:74:91:4c:c9:19:2e: 83:92:9c:ff:90:e8:d8:2e:2a:e0:10:59:fa:e1:c4: 95:89:ce:28:33:b0:9f:68:8f:f1:97:5c:12:98:25: e9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7A:B2:08:15:62:13:63:2D:F9:15:13:6F:26:83:22:02:29:F4:86 X509v3 Authority Key Identifier: keyid:22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/E816DFFAA90111ED867DA161C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.39.146.0/23 IPv6: 2001:df1:8cc0::/48 Signature Algorithm: sha256WithRSAEncryption b4:55:6b:f1:21:41:0b:fe:96:7c:39:1b:32:b7:b9:a3:b7:81: 04:ec:e0:18:d7:fc:f0:19:2c:6b:85:d2:17:8d:e4:3a:46:95: f1:13:41:2f:e6:ba:54:34:0c:97:83:dc:ca:94:e2:36:d0:4f: 97:b7:07:81:11:8e:38:01:75:a5:33:1b:15:64:dd:b5:5b:47: 39:55:36:fd:0d:69:3f:48:51:49:b5:00:83:33:7e:43:6a:8b: b2:da:17:cd:1b:2e:a5:3e:d3:92:dc:2b:74:d6:6f:47:11:e4: 0b:a6:6b:c9:b3:14:ad:44:4f:e0:1b:4b:64:99:c6:48:56:c6: d8:f5:31:6b:77:21:ef:6b:0e:0d:12:4b:2e:ad:d4:9a:69:d9: 25:eb:55:fc:b5:81:af:f4:b9:44:eb:2a:1d:10:1c:4f:2a:68: 56:ab:73:02:14:18:5a:40:21:f7:c9:b4:ff:90:be:2d:87:ac: cd:2a:7d:03:9d:86:54:ef:f2:ac:8c:d9:a6:f3:1d:5a:f5:98: 8f:3a:b5:7d:3b:7f:88:36:c3:52:b5:a8:fc:45:03:45:ca:bb: 77:3d:d8:9f:98:3e:fa:f0:70:85:95:67:0d:c3:33:4b:82:6c: 4a:15:a8:2d:50:c8:1b:92:da:53:6a:d7:99:85:41:05:b9:e9: b0:6e:76:5b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE4MjgxMTAvBgNVBAUTKDIyNjAzRDZBMzNGMDZFMEE5RDEwRkJCMUVEOUUxRDM3 NDkyNDcwMDEwHhcNMjUwMTA5MDI0NzM3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdmMzhjOS03MGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mBTjtomajvrtp9QDaC/5hAzse1qIuVzHwAUdQdC60GGGGX4D6J6Xqgr5sVI M2BIZT2ELivXivBFCj5JHJrA9DoRiaz5JE1CnkqPfrinQgwG0jg0UulyPJTivIMK YmzPiA17u/5fBZJOZHOVRR4wwY/djcRx/SRT7AWBJovgo/IIcQeP7WGuwZWz+IQD kfMEAg28Hyj7yScNQsSRQkjDoJ0BAZZX2aivE2Om4S+BMXvtOEsGiTENOBL0ZsBl baPuEUJDS87+Shs1Hpd3qKF8bFhjQZAFIT0vaBJ0kUzJGS6Dkpz/kOjYLirgEFn6 4cSVic4oM7CfaI/xl1wSmCXpkQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKp6sggV YhNjLfkVE28mgyICKfSGMB8GA1UdIwQYMBaAFCJgPWoz8G4KnRD7se2eHTdJJHAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTgyOC9EREY5MDA1QUE4 RkUxMUVEOUQ1MDEwNURDNEY5QUUwMi9JbUE5YWpQd2JncWRFUHV4N1o0ZE4wa2tj QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ltQTlhalB3YmdxZEVQdXg3WjRkTjBra2NBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUE4MjgvRERGOTAwNUFBOEZFMTFFRDlENTAxMDVEQzRGOUFFMDIvRTgxNkRGRkFB OTAxMTFFRDg2N0RBMTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnJ5IwDwQCAAIwCQMHACABDfGMwDANBgkqhkiG9w0BAQsF AAOCAQEAtFVr8SFBC/6WfDkbMre5o7eBBOzgGNf88Bksa4XSF43kOkaV8RNBL+a6 VDQMl4PcypTiNtBPl7cHgRGOOAF1pTMbFWTdtVtHOVU2/Q1pP0hRSbUAgzN+Q2qL stoXzRsupT7TktwrdNZvRxHkC6ZrybMUrURP4BtLZJnGSFbG2PUxa3ch72sODRJL Lq3UmmnZJetV/LWBr/S5ROsqHRAcTypoVqtzAhQYWkAh98m0/5C+LYeszSp9A52G VO/yrIzZpvMdWvWYjzq1fTt/iDbDUrWo/EUDRcq7dz3Yn5g++vBwhZVnDcMzS4Js ShWoLVDIG5LaU2rXmYVBBbnpsG52Ww== -----END CERTIFICATE-----Generated at Sat Apr 5 03:55:09 2025 by rpki-client