$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/8FC6588099D711EFB8A4757AC4F9AE02.roa File: 8FC6588099D711EFB8A4757AC4F9AE02.roa (raw, json) Hash identifier: BPf4Uoq0Qj7b7XBxVShWOvIfidFoB1L16kpmSz0j9Ew= Subject key identifier: BB:4B:02:D6:A4:89:E8:C7:D8:EE:94:F4:4F:9D:87:5B:6F:31:82:A9 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 2659 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/8FC6588099D711EFB8A4757AC4F9AE02.roa Signing time: Wed 15 Jan 2025 19:17:15 +0000 ROA not before: Wed 15 Jan 2025 19:17:15 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 64005 IP address blocks: 103.228.200.0/24 maxlen: 24 2001:df4:3800::/48 maxlen: 48 2400:eb80::/32 maxlen: 32 2400:eb80::/48 maxlen: 48 2400:eb80:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9817 (0x2659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0 Validity Not Before: Jan 15 19:17:15 2025 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=678809bb-0b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:65:68:98:de:7e:5b:e8:a7:75:5c:e1:80: c8:c1:a4:70:da:b5:a8:96:9d:a7:9c:a3:e1:5e:8d: 93:99:6a:3e:58:6b:d6:bd:63:4f:ca:30:c3:70:ed: 77:14:d7:1a:e7:01:b0:1f:74:8b:3d:fe:f1:90:a5: d1:f5:9e:cd:9e:ed:45:5c:b2:ee:20:dd:be:e9:0a: e9:35:fa:07:82:cb:f3:46:22:cb:cc:f3:4a:e8:1c: 17:22:22:fa:ff:bb:75:44:05:65:19:89:b6:32:fe: 16:b0:31:2b:2b:0c:03:70:fa:95:80:37:bf:98:77: 9d:dc:6e:56:69:8e:df:13:d6:cc:3b:c7:d6:7e:f4: 7c:3a:b1:4b:b9:24:f3:0e:61:b4:02:62:ee:54:74: 28:5d:65:f2:72:85:b0:25:a8:32:f9:b7:94:c5:f7: e5:38:0e:61:61:98:c2:76:99:56:01:cd:a6:be:af: 33:73:bc:8d:4e:ed:b7:f9:8f:1c:67:40:62:c8:78: fc:1d:09:48:ad:dc:8c:21:60:40:d0:34:fe:db:fd: 30:d6:4c:f6:ae:53:c0:3e:b0:8a:af:07:9b:4d:5f: 80:4e:d5:e4:32:64:8c:d7:52:90:9a:fc:f9:6c:1f: 81:a8:eb:52:dc:e7:b2:ba:11:4c:a9:eb:a6:e8:2f: 00:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4B:02:D6:A4:89:E8:C7:D8:EE:94:F4:4F:9D:87:5B:6F:31:82:A9 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/8FC6588099D711EFB8A4757AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.228.200.0/24 IPv6: 2001:df4:3800::/48 2400:eb80::/32 Signature Algorithm: sha256WithRSAEncryption 7c:69:8c:8d:7b:3e:92:fb:9d:47:0a:f1:94:a8:1c:a8:6f:52: d9:f4:3c:40:40:1c:76:1f:90:09:b9:10:e1:2e:dd:99:20:5f: e3:61:fb:ab:6b:9d:1a:62:27:52:e3:fc:a9:53:61:ab:a6:8f: 54:a4:9f:64:dc:21:9e:77:13:e6:4a:8d:00:89:83:87:dd:f2: df:17:b3:13:06:f3:f0:bb:3f:0f:bc:f5:44:92:d0:ad:99:d4: e3:6f:b1:71:cf:bf:27:93:e1:97:f1:22:0b:2a:dd:53:00:0c: 33:b2:dd:21:ad:4d:b4:7a:9c:d2:a3:58:5a:ad:3a:88:27:f4: 0b:88:25:32:a1:8f:71:b1:c6:10:ca:e2:64:16:b1:79:cc:ad: e9:db:f7:21:66:cc:96:17:34:13:66:be:60:ac:c9:46:a9:d4: 56:cb:8b:00:e8:7d:18:0f:87:72:00:0e:43:4c:22:be:08:82: 29:6a:b6:7a:6a:8d:bc:4f:85:84:3a:01:ad:80:31:95:b4:90: 80:da:24:03:f9:8b:7d:de:6a:3b:ff:8f:c8:3d:c2:3e:d5:25: ab:eb:9f:3d:03:0e:1a:1e:0f:5a:4d:5c:cf:b5:33:ad:9b:41: b6:93:a5:e4:dc:b2:b5:23:3d:a5:e5:18:e4:d3:64:79:7f:39: df:88:aa:d9 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICJlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjUwMTE1MTkxNzE1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg4MDliYi0wYjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZplaJjeflvop3Vc4YDIwaRw2rWolp2nnKPhXo2TmWo+WGvWvWNPyjDDcO13 FNca5wGwH3SLPf7xkKXR9Z7Nnu1FXLLuIN2+6QrpNfoHgsvzRiLLzPNK6BwXIiL6 /7t1RAVlGYm2Mv4WsDErKwwDcPqVgDe/mHed3G5WaY7fE9bMO8fWfvR8OrFLuSTz DmG0AmLuVHQoXWXycoWwJagy+beUxfflOA5hYZjCdplWAc2mvq8zc7yNTu23+Y8c Z0BiyHj8HQlIrdyMIWBA0DT+2/0w1kz2rlPAPrCKrwebTV+ATtXkMmSM11KQmvz5 bB+BqOtS3OeyuhFMqeum6C8ADQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFLtLAtak iejH2O6U9E+dh1tvMYKpMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNEQjAvQjg5NUFGNzQwNTE1MTFFNThENDlBRTQyQzRGOUFFMDIvOEZDNjU4ODA5 OUQ3MTFFRkI4QTQ3NTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMAwEAgABMAYDBABn5MgwFgQCAAIwEAMHACABDfQ4AAMFACQA64AwDQYJKoZI hvcNAQELBQADggEBAHxpjI17PpL7nUcK8ZSoHKhvUtn0PEBAHHYfkAm5EOEu3Zkg X+Nh+6trnRpiJ1Lj/KlTYaumj1Skn2TcIZ53E+ZKjQCJg4fd8t8XsxMG8/C7Pw+8 9USS0K2Z1ONvsXHPvyeT4ZfxIgsq3VMADDOy3SGtTbR6nNKjWFqtOogn9AuIJTKh j3GxxhDK4mQWsXnMrenb9yFmzJYXNBNmvmCsyUap1FbLiwDofRgPh3IADkNMIr4I gilqtnpqjbxPhYQ6Aa2AMZW0kIDaJAP5i33eajv/j8g9wj7VJavrnz0DDhoeD1pN XM+1M62bQbaTpeTcsrUjPaXlGOTTZHl/Od+Iqtk= -----END CERTIFICATE-----Generated at Sun Apr 6 06:42:49 2025 by rpki-client