$ rpki-client -vvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/D1FCB742514711ED92E3885EC4F9AE02.roa File: D1FCB742514711ED92E3885EC4F9AE02.roa (raw, json) Hash identifier: Js88dwnU0hyC4RLKD1NQ44jyQxJzu0X07dqPCT3Ukh0= Subject key identifier: 15:56:5C:FE:65:7C:56:D4:05:F4:5F:DF:93:FF:44:C4:DE:62:94:90 Certificate issuer: /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76 Certificate serial: 0195 Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/D1FCB742514711ED92E3885EC4F9AE02.roa Signing time: Thu 05 Dec 2024 02:16:34 +0000 ROA not before: Thu 05 Dec 2024 02:16:34 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 38195 IP address blocks: 103.12.96.0/23 maxlen: 23 2001:df1:69c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156255 Validity Not Before: Dec 5 02:16:34 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67510d02-5e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3c:49:7f:3c:57:d6:33:8f:a6:7c:4d:00:29: e7:ee:9a:12:a6:15:2c:79:32:27:03:49:72:21:1c: 05:52:f5:1c:f6:43:45:22:d6:82:2f:7d:c6:00:4b: 09:78:60:60:9e:2f:e3:51:a8:d9:8b:d3:bf:2b:37: 06:db:e9:f7:60:49:a3:93:a4:f7:67:75:e5:be:81: ab:0d:4e:78:bf:d3:5c:c1:29:0a:34:33:ee:ec:ef: 8e:b8:d6:59:65:4a:c1:4e:ff:88:cb:7a:54:35:e2: 8d:cc:fa:8d:48:01:4d:39:95:db:a0:92:3f:48:f6: 03:b4:9d:85:ea:b0:f2:98:47:2a:62:8a:7c:7c:a9: c2:8f:54:d2:85:14:e1:7e:82:02:4d:2c:24:55:44: 9d:c8:4e:46:21:40:30:de:1e:46:41:7c:98:0a:c5: 21:f2:9b:d1:4e:68:30:8e:fe:a3:5f:5e:87:93:02: 6d:a9:57:f4:42:be:1e:8e:e3:52:c2:30:ae:c7:5b: eb:65:32:fc:a4:de:3e:ec:2a:2e:5c:6a:61:2d:05: 29:66:72:72:fa:c9:f0:3a:14:ea:8a:19:bf:9a:3c: 77:c2:6e:94:d1:ac:0e:c2:d0:77:1e:9c:db:8f:8a: 6a:2b:0f:36:ac:1a:1d:5a:82:c5:4f:00:e1:5f:9c: 21:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:56:5C:FE:65:7C:56:D4:05:F4:5F:DF:93:FF:44:C4:DE:62:94:90 X509v3 Authority Key Identifier: keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/D1FCB742514711ED92E3885EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.12.96.0/23 IPv6: 2001:df1:69c0::/48 Signature Algorithm: sha256WithRSAEncryption 00:54:93:df:f4:13:b9:a0:7c:06:94:e7:ef:c2:ae:99:f1:ff: 92:22:1b:54:16:67:7e:82:6e:b8:0f:6b:af:75:f9:1b:60:fa: ea:66:1b:9e:1a:d3:5a:53:04:86:16:42:64:be:af:25:e8:46: 56:01:63:12:99:76:dc:96:96:7d:0d:36:95:f9:2b:b9:c4:15: 58:d2:04:9b:38:d5:68:41:b0:b0:b3:21:51:00:d1:f2:2c:14: 6f:c8:de:ef:a7:28:60:f7:a3:5a:99:54:c0:63:94:e4:84:dc: d7:21:04:c1:19:3f:9a:32:ce:cd:bc:f8:f2:dc:c3:29:11:47: 51:c7:a1:4a:f9:b8:68:66:b0:3f:d1:f1:d0:6a:8a:a5:a7:25: f7:c5:e5:9c:3b:58:d9:30:6c:bd:9b:7b:14:b2:85:f2:4e:09: 56:aa:83:6f:16:47:6e:31:e5:5b:7a:3d:5f:40:63:ab:94:1a: 16:14:4e:80:91:bd:35:eb:a0:7f:2c:14:f7:8b:d5:61:34:51: 15:2a:c1:3a:34:3c:db:54:7e:93:f0:be:f5:32:de:3f:f3:18: e1:13:6e:b7:6f:4b:7d:04:1c:3d:0b:45:66:20:15:97:07:ce: b2:eb:ab:2e:83:88:6d:82:25:ac:c9:6a:aa:62:54:ad:e1:9c: ea:5a:39:a0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYyNTUxMTAvBgNVBAUTKDVGNkM4RkEzQTY1ODc0MDIzMUIyQzRCMTM0ODFCRTEx NTAwQURDNzYwHhcNMjQxMjA1MDIxNjM0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUxMGQwMi01ZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TxJfzxX1jOPpnxNACnn7poSphUseTInA0lyIRwFUvUc9kNFItaCL33GAEsJ eGBgni/jUajZi9O/KzcG2+n3YEmjk6T3Z3XlvoGrDU54v9NcwSkKNDPu7O+OuNZZ ZUrBTv+Iy3pUNeKNzPqNSAFNOZXboJI/SPYDtJ2F6rDymEcqYop8fKnCj1TShRTh foICTSwkVUSdyE5GIUAw3h5GQXyYCsUh8pvRTmgwjv6jX16HkwJtqVf0Qr4ejuNS wjCux1vrZTL8pN4+7CouXGphLQUpZnJy+snwOhTqihm/mjx3wm6U0awOwtB3Hpzb j4pqKw82rBodWoLFTwDhX5wh3QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBVWXP5l fFbUBfRf35P/RMTeYpSQMB8GA1UdIwQYMBaAFF9sj6OmWHQCMbLEsTSBvhFQCtx2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjI1NS85MTYyMDg0QzUw NzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRBSXhzc1N4TklHLUVWQUsz SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gyeVBvNlpZZEFJeHNzU3hOSUctRVZBSzNIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTYyNTUvOTE2MjA4NEM1MDczMTFFRDlCOEMxNDJEQzRGOUFFMDIvRDFGQ0I3NDI1 MTQ3MTFFRDkyRTM4ODVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnDGAwDwQCAAIwCQMHACABDfFpwDANBgkqhkiG9w0BAQsF AAOCAQEAAFST3/QTuaB8BpTn78KumfH/kiIbVBZnfoJuuA9rr3X5G2D66mYbnhrT WlMEhhZCZL6vJehGVgFjEpl23JaWfQ02lfkrucQVWNIEmzjVaEGwsLMhUQDR8iwU b8je76coYPejWplUwGOU5ITc1yEEwRk/mjLOzbz48tzDKRFHUcehSvm4aGawP9Hx 0GqKpacl98XlnDtY2TBsvZt7FLKF8k4JVqqDbxZHbjHlW3o9X0Bjq5QaFhROgJG9 NeugfywU94vVYTRRFSrBOjQ821R+k/C+9TLeP/MY4RNut29LfQQcPQtFZiAVlwfO suurLoOIbYIlrMlqqmJUreGc6lo5oA== -----END CERTIFICATE-----Generated at Sat Apr 5 16:28:54 2025 by rpki-client