$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/C620EAECECDB11EFA0EB1D45C4F9AE02.roa File: C620EAECECDB11EFA0EB1D45C4F9AE02.roa (raw, json) Hash identifier: +2XG7yFurtJbSnnp3Up0xgJBsQg/sJZ1G/Dlagou8Cs= Subject key identifier: B9:CF:25:E1:B4:6E:84:C8:0B:F4:5D:B2:47:2F:54:6D:DA:DE:F9:BD Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Certificate serial: 072E Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/C620EAECECDB11EFA0EB1D45C4F9AE02.roa Signing time: Mon 17 Feb 2025 03:03:34 +0000 ROA not before: Mon 17 Feb 2025 03:03:34 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 58600 IP address blocks: 103.9.40.0/22 maxlen: 24 163.47.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 22:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1838 (0x72e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA Validity Not Before: Feb 17 03:03:34 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67b2a706-dc04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c1:c1:b3:8d:7f:cf:4f:84:94:9b:d6:2d:90: d4:b5:32:06:2d:1c:f6:60:52:c3:ef:f8:1c:8e:bb: ae:01:de:de:82:09:01:88:4d:55:11:91:3b:c2:9e: f9:6a:8c:94:53:10:34:77:6d:56:54:25:48:9b:61: 43:96:d2:86:4f:58:de:0b:b0:ff:54:b6:a4:8b:0c: 0e:61:af:20:19:08:f1:2a:f6:12:d8:70:05:d1:61: 53:a7:50:d8:a2:ef:7f:00:b2:5f:9f:0d:59:68:b2: 68:33:fc:aa:5f:e1:ca:ec:7d:71:ee:73:4c:60:38: ff:27:95:b5:41:f4:1a:4d:75:f8:d0:c2:19:0a:3f: 4a:77:ae:db:da:f4:3f:26:19:d1:b9:91:4c:bb:31: a3:a5:66:35:a4:50:17:70:da:10:0d:a5:4a:6c:6f: bf:b3:39:6b:9f:56:d9:17:6e:db:de:ca:13:65:7c: 77:c1:86:71:52:e2:eb:43:b3:45:79:cb:f8:79:7a: f9:1e:72:bd:04:42:59:70:71:dd:09:9b:06:c9:90: ca:d0:60:6c:9a:7a:57:38:61:da:6f:22:a2:a2:11: ec:31:cf:5c:3b:01:92:0d:7f:04:33:1b:71:93:ff: 74:6e:9a:83:ab:df:7e:1e:3e:ba:33:db:ef:83:8a: 71:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CF:25:E1:B4:6E:84:C8:0B:F4:5D:B2:47:2F:54:6D:DA:DE:F9:BD X509v3 Authority Key Identifier: keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/C620EAECECDB11EFA0EB1D45C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.9.40.0/22 163.47.104.0/22 Signature Algorithm: sha256WithRSAEncryption 60:b0:4d:33:d4:76:22:a1:9e:72:16:a7:f5:91:a0:be:56:16: e9:0e:20:9b:9b:98:74:85:b4:e3:16:34:70:66:e3:c0:01:3d: e1:db:72:7c:5e:e4:d1:4c:c5:09:6f:50:0d:15:35:a0:10:02: 60:2f:17:9e:a9:e6:7b:89:b4:5e:b2:8b:ec:76:e6:80:8a:25: 37:73:62:3f:2c:0b:ca:ac:e1:8a:f4:7b:85:23:d0:bb:45:25: a5:b9:13:78:d1:6e:9f:e9:07:fb:70:0a:1d:a5:38:7c:2f:50: 9f:58:84:84:87:bf:ee:41:67:57:6b:bd:eb:8e:de:5a:a8:8a: 23:81:9b:8b:d9:2f:94:cf:ec:9a:18:b4:d2:10:b4:41:33:6a: a8:4a:99:1e:d8:b0:7b:49:6e:5e:2c:c6:f1:1f:fc:c2:8f:2a: dc:6b:2b:2d:06:27:d8:81:8a:ab:da:71:e8:63:82:9d:b8:c9: 56:18:38:fb:a3:26:d1:27:f8:34:d3:3c:74:53:bf:8c:42:47: 7d:ee:b2:79:0a:d2:47:4e:86:c3:82:26:c2:37:4a:32:b2:bd: 24:a0:17:fe:41:25:90:8d:98:26:0f:ec:a7:ef:0e:2b:50:37: f2:c6:5b:45:59:b3:4c:06:9a:53:f9:5b:d5:ae:31:82:89:a2: e4:23:21:07 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC NjBEQjFCMkMwHhcNMjUwMjE3MDMwMzM0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2IyYTcwNi1kYzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMHBs41/z0+ElJvWLZDUtTIGLRz2YFLD7/gcjruuAd7eggkBiE1VEZE7wp75 aoyUUxA0d21WVCVIm2FDltKGT1jeC7D/VLakiwwOYa8gGQjxKvYS2HAF0WFTp1DY ou9/ALJfnw1ZaLJoM/yqX+HK7H1x7nNMYDj/J5W1QfQaTXX40MIZCj9Kd67b2vQ/ JhnRuZFMuzGjpWY1pFAXcNoQDaVKbG+/szlrn1bZF27b3soTZXx3wYZxUuLrQ7NF ecv4eXr5HnK9BEJZcHHdCZsGyZDK0GBsmnpXOGHabyKiohHsMc9cOwGSDX8EMxtx k/90bpqDq99+Hj66M9vvg4px8wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLnPJeG0 boTIC/RdskcvVG3a3vm9MB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvQzYyMEVBRUNF Q0RCMTFFRkEwRUIxRDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnCSgDBAKjL2gwDQYJKoZIhvcNAQELBQADggEBAGCwTTPU diKhnnIWp/WRoL5WFukOIJubmHSFtOMWNHBm48ABPeHbcnxe5NFMxQlvUA0VNaAQ AmAvF56p5nuJtF6yi+x25oCKJTdzYj8sC8qs4Yr0e4Uj0LtFJaW5E3jRbp/pB/tw Ch2lOHwvUJ9YhISHv+5BZ1drveuO3lqoiiOBm4vZL5TP7JoYtNIQtEEzaqhKmR7Y sHtJbl4sxvEf/MKPKtxrKy0GJ9iBiqvacehjgp24yVYYOPujJtEn+DTTPHRTv4xC R33usnkK0kdOhsOCJsI3SjKyvSSgF/5BJZCNmCYP7KfvDitQN/LGW0VZs0wGmlP5 W9WuMYKJouQjIQc= -----END CERTIFICATE-----Generated at Wed Apr 9 06:53:33 2025 by rpki-client