$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/8E3128B4837D11EDB082012FC4F9AE02.roa File: 8E3128B4837D11EDB082012FC4F9AE02.roa (raw, json) Hash identifier: pbCZups9CHpt8yF1jqE6eaTv1T+fEJy3uGbRYPbMwLg= Subject key identifier: D8:AA:D4:B5:D0:2B:D3:19:4D:BC:B4:B5:12:FF:4D:FB:F8:51:58:C0 Certificate issuer: /CN=A9134B2D/serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE Certificate serial: 0197 Authority key identifier: D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/8E3128B4837D11EDB082012FC4F9AE02.roa Signing time: Tue 11 Feb 2025 02:45:40 +0000 ROA not before: Tue 11 Feb 2025 02:45:40 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 150692 IP address blocks: 103.59.162.0/23 maxlen: 23 103.59.162.0/24 maxlen: 24 103.59.163.0/24 maxlen: 24 2400:cea0::/32 maxlen: 32 2400:cea0::/36 maxlen: 36 2400:cea0:1000::/36 maxlen: 36 2400:cea0:2000::/36 maxlen: 36 2400:cea0:3000::/36 maxlen: 36 2400:cea0:4000::/36 maxlen: 36 2400:cea0:5000::/36 maxlen: 36 2400:cea0:6000::/36 maxlen: 36 2400:cea0:7000::/36 maxlen: 36 2400:cea0:8000::/36 maxlen: 36 2400:cea0:9000::/36 maxlen: 36 2400:cea0:a000::/36 maxlen: 36 2400:cea0:b000::/36 maxlen: 36 2400:cea0:c000::/36 maxlen: 36 2400:cea0:d000::/36 maxlen: 36 2400:cea0:e000::/36 maxlen: 36 2400:cea0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B2D Validity Not Before: Feb 11 02:45:40 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67aab9d4-88ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:ab:52:88:23:81:21:7a:5d:37:5a:4c:ff: bc:19:0e:45:78:bb:10:69:5c:05:89:08:51:03:b7: 2b:29:ba:7c:5a:90:bd:a0:42:24:4e:76:53:c1:33: c7:0a:9e:12:c5:ba:df:d8:9a:c4:05:26:89:8c:76: 6f:ea:ce:ee:5b:13:59:ed:3d:52:43:61:c7:42:64: 92:02:3c:a3:02:f0:f6:4d:90:8c:72:fe:f8:d6:55: 1d:fb:ce:16:87:77:97:71:62:3b:26:cc:bc:0d:de: 39:2d:bc:dc:c9:1f:98:53:ed:fa:b9:17:a4:4a:07: 83:b9:c1:76:a2:74:64:b1:0b:1b:db:60:c3:65:7f: f2:a1:13:6c:56:91:a2:94:33:25:c2:0c:42:01:30: 3c:02:82:f2:76:2f:2c:0a:65:cb:52:67:32:38:33: 15:97:f5:75:79:45:6a:1d:b5:f5:3b:8a:60:42:dd: ef:c5:90:43:8c:e0:e4:29:9a:ca:48:96:78:b7:20: d2:59:0b:11:3f:88:1d:2d:79:98:da:34:8a:1a:7a: b2:11:ee:66:1f:47:52:ac:11:81:97:74:37:7a:b1: df:2c:9c:11:14:1a:3b:14:23:5f:66:61:24:f6:9d: 90:d7:32:92:90:91:c6:bb:4a:96:a5:61:39:db:a0: c3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AA:D4:B5:D0:2B:D3:19:4D:BC:B4:B5:12:FF:4D:FB:F8:51:58:C0 X509v3 Authority Key Identifier: keyid:D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/8E3128B4837D11EDB082012FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.59.162.0/23 IPv6: 2400:cea0::/32 Signature Algorithm: sha256WithRSAEncryption 5d:d9:84:0f:34:14:c2:bb:58:7e:75:d8:1b:82:2b:e4:86:89: a4:8e:bd:53:70:99:02:9a:27:ab:0f:c6:92:06:97:52:6a:dd: 8a:2c:19:84:51:b5:dc:9d:27:55:47:e5:29:e2:f1:13:82:4d: be:27:b5:4a:40:ce:d0:26:0a:74:2d:b4:f4:32:64:63:45:ae: 51:ff:92:b8:ef:81:ca:b4:d4:0a:77:2e:0c:1c:5c:03:e6:a5: 0c:32:05:cc:87:9b:af:7d:28:53:2b:e1:bf:0f:d9:00:b9:ab: 96:52:17:b0:85:db:84:42:f8:3c:ca:72:2d:66:57:4c:04:18: f6:a5:67:6a:37:34:73:c9:97:24:e6:22:77:d7:e2:b5:b2:f3: ae:d3:9f:b7:3a:40:0d:a9:04:e0:78:7f:76:2a:bb:55:bd:b5: b4:09:81:2c:ab:cf:de:46:ed:f9:50:c6:b2:e6:9c:02:9e:6c: 8e:e7:61:d7:2e:00:d3:f0:83:eb:13:a2:c4:e4:3f:46:74:d4: 08:d2:4f:15:21:39:99:04:de:89:e7:c3:fd:5c:a9:ff:53:da: 5b:c0:9c:dd:9d:25:0c:8a:18:e8:7c:ee:7e:3f:2d:97:fa:b0: 93:c7:1b:78:bd:d2:fc:ce:46:f2:1a:21:cd:b9:4b:70:ca:4b: c8:c9:e2:99 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCMkQxMTAvBgNVBAUTKEQ2Qjc1MTRDQkYwQkUyMDQ2QzEzQ0EwRDdGNUQyMjM1 MkZEQTU4RUUwHhcNMjUwMjExMDI0NTQwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FhYjlkNC04OGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbWrUogjgSF6XTdaTP+8GQ5FeLsQaVwFiQhRA7crKbp8WpC9oEIkTnZTwTPH Cp4Sxbrf2JrEBSaJjHZv6s7uWxNZ7T1SQ2HHQmSSAjyjAvD2TZCMcv741lUd+84W h3eXcWI7Jsy8Dd45LbzcyR+YU+36uRekSgeDucF2onRksQsb22DDZX/yoRNsVpGi lDMlwgxCATA8AoLydi8sCmXLUmcyODMVl/V1eUVqHbX1O4pgQt3vxZBDjODkKZrK SJZ4tyDSWQsRP4gdLXmY2jSKGnqyEe5mH0dSrBGBl3Q3erHfLJwRFBo7FCNfZmEk 9p2Q1zKSkJHGu0qWpWE526DDyQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNiq1LXQ K9MZTby0tRL/Tfv4UVjAMB8GA1UdIwQYMBaAFNa3UUy/C+IEbBPKDX9dIjUv2lju MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEIyRC8wMzFGNDUxRTgz N0IxMUVEODA1RDQwMkVDNEY5QUUwMi8xcmRSVEw4TDRnUnNFOG9OZjEwaU5TX2FX TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFyZFJUTDhMNGdSc0U4b05mMTBpTlNfYVdPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzRCMkQvMDMxRjQ1MUU4MzdCMTFFRDgwNUQ0MDJFQzRGOUFFMDIvOEUzMTI4QjQ4 MzdEMTFFREIwODIwMTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnO6IwDQQCAAIwBwMFACQAzqAwDQYJKoZIhvcNAQELBQAD ggEBAF3ZhA80FMK7WH512BuCK+SGiaSOvVNwmQKaJ6sPxpIGl1Jq3YosGYRRtdyd J1VH5Sni8ROCTb4ntUpAztAmCnQttPQyZGNFrlH/krjvgcq01Ap3LgwcXAPmpQwy BcyHm699KFMr4b8P2QC5q5ZSF7CF24RC+DzKci1mV0wEGPalZ2o3NHPJlyTmInfX 4rWy867Tn7c6QA2pBOB4f3Yqu1W9tbQJgSyrz95G7flQxrLmnAKebI7nYdcuANPw g+sTosTkP0Z01AjSTxUhOZkE3onnw/1cqf9T2lvAnN2dJQyKGOh87n4/LZf6sJPH G3i90vzORvIaIc25S3DKS8jJ4pk= -----END CERTIFICATE-----Generated at Sat Apr 5 02:13:17 2025 by rpki-client