$ rpki-client -vvf rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/C1AA9588FB5B11EF9D5B421BC4F9AE02.roa File: C1AA9588FB5B11EF9D5B421BC4F9AE02.roa (raw, json) Hash identifier: iG1+i+/h5uPBH8czu/MsD7AGiWboXVjY7acUxjpESco= Subject key identifier: 87:EA:F1:3C:E5:98:EE:9A:6E:F6:6B:DE:E5:3C:20:41:7D:E4:7A:F8 Certificate issuer: /CN=A9123CB8/serialNumber=BC1E232190D1C63169D7F4FD176155975649B8DF Certificate serial: 02 Authority key identifier: BC:1E:23:21:90:D1:C6:31:69:D7:F4:FD:17:61:55:97:56:49:B8:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/C1AA9588FB5B11EF9D5B421BC4F9AE02.roa Signing time: Fri 07 Mar 2025 13:54:58 +0000 ROA not before: Fri 07 Mar 2025 13:54:58 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 135357 IP address blocks: 103.27.176.0/22 maxlen: 22 103.27.176.0/24 maxlen: 24 103.27.177.0/24 maxlen: 24 103.27.178.0/24 maxlen: 24 103.27.179.0/24 maxlen: 24 202.8.120.0/22 maxlen: 22 202.8.120.0/24 maxlen: 24 202.8.121.0/24 maxlen: 24 202.8.122.0/24 maxlen: 24 202.8.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123CB8 Validity Not Before: Mar 7 13:54:58 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67cafab2-a2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:1f:27:82:5d:7e:28:04:c1:37:cc:a0:aa: c4:fb:87:61:67:51:16:8a:bb:4d:02:ec:0a:7c:a1: 32:d6:ad:df:24:50:ac:4f:60:e8:a5:6f:48:47:85: a7:04:3d:48:30:bb:dd:f7:41:a2:b1:83:02:da:3e: b8:e9:b2:30:b6:d7:82:82:85:6b:8d:96:23:ef:a4: d1:d2:06:bb:00:3b:85:2a:f3:a7:b6:3c:da:e6:3d: d7:2a:96:4f:51:f8:0e:7b:99:3f:85:66:79:75:bb: 04:f7:4b:12:09:16:0d:e1:88:43:7a:fb:60:a4:c9: c1:73:6b:48:74:4e:18:39:1b:f4:aa:4b:e6:43:30: 21:07:14:a1:75:1b:f2:26:de:c8:0d:48:ee:1d:a2: 45:ea:86:b7:ed:74:d2:81:00:b6:dc:7b:3f:0f:fb: fd:f1:31:d3:1f:46:2e:36:f5:f7:56:df:11:78:fd: 50:75:89:5a:b5:a9:9d:65:d1:0c:03:b6:c4:13:bf: 0d:c4:69:2f:9a:11:c6:e3:70:5e:f9:93:5a:5b:b3: 83:fe:16:78:5d:65:80:5c:5f:52:4e:8b:fd:93:a4: b8:0c:ba:68:a9:b7:5c:d9:93:cf:73:f8:d2:e8:d0: 89:34:34:47:48:78:68:c7:ed:03:46:8c:e5:99:6c: c4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EA:F1:3C:E5:98:EE:9A:6E:F6:6B:DE:E5:3C:20:41:7D:E4:7A:F8 X509v3 Authority Key Identifier: keyid:BC:1E:23:21:90:D1:C6:31:69:D7:F4:FD:17:61:55:97:56:49:B8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/C1AA9588FB5B11EF9D5B421BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.27.176.0/22 202.8.120.0/22 Signature Algorithm: sha256WithRSAEncryption a7:9c:e1:e8:ba:e5:e3:8c:a7:8f:1c:3b:88:b0:2d:c4:f4:d9: 70:02:5e:06:01:22:39:9e:31:7d:63:bd:2a:1b:50:6c:98:f9: 8f:e5:11:a1:64:31:8e:04:83:c0:e4:5a:8f:fb:46:03:7d:db: c9:cf:dd:f1:29:5f:71:20:fe:92:f9:94:28:36:b4:40:cd:b0: 45:99:1b:dc:43:bc:51:4e:7f:7f:b1:a0:f6:bc:e1:86:15:52: 11:bf:b4:76:65:94:8f:98:cf:de:17:6b:f8:4f:1e:af:fa:34: 1f:0d:ac:e5:4f:b3:96:a9:45:bd:d0:27:81:47:c6:bf:43:4b: ca:42:97:98:8f:5f:ab:7a:56:c6:a3:30:eb:58:c3:f2:9e:15: cd:06:7f:b9:bf:7d:13:36:1c:3b:11:5f:af:85:d8:b8:98:5f: 4d:1c:82:16:a6:af:6e:f2:5f:8b:0d:ab:66:f5:5d:77:54:9a: 14:d0:83:a4:6b:4b:de:7b:68:20:53:c9:0a:db:e5:c0:7c:3c: 85:9b:aa:f6:2b:3a:30:c6:94:52:8f:8a:f4:d4:fb:f3:f8:db: d0:03:e6:97:b8:bf:9c:d3:18:68:15:1e:7f:d8:b9:a1:39:11: 11:9f:d7:3f:0a:a8:03:39:b5:fb:88:c7:c7:d4:cf:4e:ca:c8: b1:08:4e:65 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy M0NCODExMC8GA1UEBRMoQkMxRTIzMjE5MEQxQzYzMTY5RDdGNEZEMTc2MTU1OTc1 NjQ5QjhERjAeFw0yNTAzMDcxMzU0NThaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3Y2FmYWIyLWEyYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEGR8ngl1+KATBN8ygqsT7h2FnURaKu00C7Ap8oTLWrd8kUKxPYOilb0hHhacE PUgwu933QaKxgwLaPrjpsjC214KChWuNliPvpNHSBrsAO4Uq86e2PNrmPdcqlk9R +A57mT+FZnl1uwT3SxIJFg3hiEN6+2CkycFza0h0Thg5G/SqS+ZDMCEHFKF1G/Im 3sgNSO4dokXqhrftdNKBALbcez8P+/3xMdMfRi429fdW3xF4/VB1iVq1qZ1l0QwD tsQTvw3EaS+aEcbjcF75k1pbs4P+FnhdZYBcX1JOi/2TpLgMumipt1zZk89z+NLo 0Ik0NEdIeGjH7QNGjOWZbMQ9AgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUh+rxPOWY 7ppu9mve5TwgQX3kevgwHwYDVR0jBBgwFoAUvB4jIZDRxjFp1/T9F2FVl1ZJuN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzQ0I4LzRDNzY5RkYwRkI1 QjExRUY4NjY4N0UxQUM0RjlBRTAyL3ZCNGpJWkRSeGpGcDFfVDlGMkZWbDFaSnVO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkI0aklaRFJ4akZwMV9UOUYyRlZsMVpKdU44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0NCOC80Qzc2OUZGMEZCNUIxMUVGODY2ODdFMUFDNEY5QUUwMi9DMUFBOTU4OEZC NUIxMUVGOUQ1QjQyMUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmcbsAMEAsoIeDANBgkqhkiG9w0BAQsFAAOCAQEAp5zh6Lrl 44ynjxw7iLAtxPTZcAJeBgEiOZ4xfWO9KhtQbJj5j+URoWQxjgSDwORaj/tGA33b yc/d8SlfcSD+kvmUKDa0QM2wRZkb3EO8UU5/f7Gg9rzhhhVSEb+0dmWUj5jP3hdr +E8er/o0Hw2s5U+zlqlFvdAngUfGv0NLykKXmI9fq3pWxqMw61jD8p4VzQZ/ub99 EzYcOxFfr4XYuJhfTRyCFqavbvJfiw2rZvVdd1SaFNCDpGtL3ntoIFPJCtvlwHw8 hZuq9is6MMaUUo+K9NT78/jb0APml7i/nNMYaBUef9i5oTkREZ/XPwqoAzm1+4jH x9TPTsrIsQhOZQ== -----END CERTIFICATE-----Generated at Sun Apr 6 01:56:55 2025 by rpki-client