$ rpki-client -vvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/071BCFF849D011EF9F8A8969C4F9AE02.roa File: 071BCFF849D011EF9F8A8969C4F9AE02.roa (raw, json) Hash identifier: ta+wizYmG5Li1UNdnV+RjnG6RQDSQFnDtjBK6l15sJs= Subject key identifier: 18:08:AE:9C:0E:2B:EB:50:86:0B:46:EB:98:55:23:6F:F8:E9:77:E8 Certificate issuer: /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8 Certificate serial: 0115 Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/071BCFF849D011EF9F8A8969C4F9AE02.roa Signing time: Fri 07 Feb 2025 03:36:27 +0000 ROA not before: Fri 07 Feb 2025 03:36:27 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 139900 IP address blocks: 103.146.206.0/24 maxlen: 24 103.146.207.0/24 maxlen: 24 2400:b020::/33 maxlen: 33 2400:b020:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B79F Validity Not Before: Feb 7 03:36:27 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a57fbb-9b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:92:bc:9f:54:88:a9:49:23:67:19:62:62:c0: 65:1c:d2:1b:c5:aa:3b:37:0a:2c:b6:88:65:0a:3c: 9b:ba:fa:f5:e2:c4:9a:59:f4:90:52:9f:ce:b9:78: 7c:68:e5:f2:4f:13:02:b2:a0:52:9c:86:c1:ae:26: 8a:89:f2:c5:4b:ec:9c:70:7c:5d:1b:6a:9d:ec:d3: 28:fb:e7:8e:e4:3f:47:3a:d3:09:56:c1:90:c0:10: 6b:79:3c:f9:c4:b3:75:4c:29:15:94:0f:c7:8c:d5: ef:98:bd:e1:2d:24:78:29:16:51:c2:8d:90:20:2c: a9:77:b8:9c:bb:86:1a:5b:91:ff:e1:22:9a:a8:20: fe:1e:6c:9f:cd:74:69:7a:c6:ea:bf:6c:3d:45:3d: 28:d9:6b:f7:2b:45:c0:fe:a3:ee:ff:8c:d2:3b:1f: 28:f3:82:b8:7e:17:e7:af:f6:58:de:16:96:d3:02: 21:1c:63:3a:cc:3d:97:8a:24:80:1b:28:a8:bb:ae: 49:2e:5f:de:cc:6e:34:90:47:3e:c2:08:2f:5f:31: 9f:dc:46:db:57:c4:04:c7:0f:e9:72:3b:bc:69:6d: 9a:65:ae:9c:15:eb:75:db:21:72:92:a4:d6:20:a1: 3f:5f:d8:28:6c:a4:6b:d0:14:61:20:e3:cb:73:ce: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:08:AE:9C:0E:2B:EB:50:86:0B:46:EB:98:55:23:6F:F8:E9:77:E8 X509v3 Authority Key Identifier: keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/071BCFF849D011EF9F8A8969C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.206.0/23 IPv6: 2400:b020::/32 Signature Algorithm: sha256WithRSAEncryption 9b:c3:ce:69:dc:50:e1:20:16:d8:6d:c8:74:1f:aa:fd:fb:b0: 8c:ec:4c:4a:de:7b:80:19:0b:04:ac:40:74:13:8a:73:b8:2f: 4e:8c:36:8a:87:e5:de:11:eb:46:0f:5e:b1:ef:67:ed:d5:ba: 2b:9c:e4:00:60:7c:63:cf:04:05:6b:b3:da:75:f0:2f:e4:ad: eb:f0:e4:2b:2a:5b:cc:6a:b7:d6:1d:e6:a2:b7:40:59:17:ed: e6:d0:14:29:fc:ce:51:27:11:9e:05:70:b8:2a:52:5f:22:40: bc:d7:dc:f1:0b:16:fe:56:a9:80:54:b1:fd:17:52:1e:c1:fc: c9:48:a0:b1:89:66:79:bb:d3:eb:18:d1:87:87:a2:eb:26:e5: 17:ec:c9:0a:02:97:16:81:0c:72:4b:04:4f:11:94:46:75:f8: 83:7e:eb:67:d8:30:a2:cb:14:f5:a8:5f:fc:f4:cd:df:28:d7: 44:cf:78:12:e5:61:69:a4:77:29:d4:37:1b:e8:74:b1:67:49: 3c:39:22:ab:e0:ac:44:0b:f1:76:9d:8a:a3:da:c4:ad:ef:4a: d4:91:2e:24:d3:41:b7:9e:9f:84:d5:06:a4:5e:cf:7e:9d:f8: a3:46:12:f7:df:d6:7b:71:c7:73:8f:a3:fc:72:22:92:5e:8f: 84:7a:14:19 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI3OUYxMTAvBgNVBAUTKDc4RTQyOTBCQ0NDOTk5MTU4MEIyNzZEQzBDMkM5N0JG QjA4NjIwRDgwHhcNMjUwMjA3MDMzNjI3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E1N2ZiYi05YjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35K8n1SIqUkjZxliYsBlHNIbxao7NwostohlCjybuvr14sSaWfSQUp/OuXh8 aOXyTxMCsqBSnIbBriaKifLFS+yccHxdG2qd7NMo++eO5D9HOtMJVsGQwBBreTz5 xLN1TCkVlA/HjNXvmL3hLSR4KRZRwo2QICypd7icu4YaW5H/4SKaqCD+HmyfzXRp esbqv2w9RT0o2Wv3K0XA/qPu/4zSOx8o84K4fhfnr/ZY3haW0wIhHGM6zD2XiiSA Gyiou65JLl/ezG40kEc+wggvXzGf3EbbV8QExw/pcju8aW2aZa6cFet12yFykqTW IKE/X9gobKRr0BRhIOPLc84cKQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBgIrpwO K+tQhgtG65hVI2/46XfoMB8GA1UdIwQYMBaAFHjkKQvMyZkVgLJ23Awsl7+whiDY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc5Ri9EQTY4MzdGMDRF MjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1SV0FzbmJjREN5WHY3Q0dJ TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VPUXBDOHpKbVJXQXNuYmNEQ3lYdjdDR0lOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEI3OUYvREE2ODM3RjA0RTI5MTFFRTk0NUMzOTRGQzRGOUFFMDIvMDcxQkNGRjg0 OUQwMTFFRjlGOEE4OTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnks4wDQQCAAIwBwMFACQAsCAwDQYJKoZIhvcNAQELBQAD ggEBAJvDzmncUOEgFthtyHQfqv37sIzsTEree4AZCwSsQHQTinO4L06MNoqH5d4R 60YPXrHvZ+3Vuiuc5ABgfGPPBAVrs9p18C/krevw5CsqW8xqt9Yd5qK3QFkX7ebQ FCn8zlEnEZ4FcLgqUl8iQLzX3PELFv5WqYBUsf0XUh7B/MlIoLGJZnm70+sY0YeH ousm5RfsyQoClxaBDHJLBE8RlEZ1+IN+62fYMKLLFPWoX/z0zd8o10TPeBLlYWmk dynUNxvodLFnSTw5IqvgrEQL8XadiqPaxK3vStSRLiTTQbeen4TVBqRez36d+KNG Evff1ntxx3OPo/xyIpJej4R6FBk= -----END CERTIFICATE-----Generated at Sat Apr 5 02:07:53 2025 by rpki-client