$ rpki-client -vvf rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/B0C5F17CC8DA11EE9340650EC4F9AE02.roa File: B0C5F17CC8DA11EE9340650EC4F9AE02.roa (raw, json) Hash identifier: 6lk7JsGwO4/wcTnuVTo0XHToPhtmgaBJiaipZQHj0o0= Subject key identifier: 97:D7:98:8B:9B:6D:0D:F0:28:AB:A1:03:A2:F1:53:EB:B0:CC:DB:DB Certificate issuer: /CN=A9156334/serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07 Certificate serial: B0 Authority key identifier: 8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/B0C5F17CC8DA11EE9340650EC4F9AE02.roa Signing time: Sat 21 Dec 2024 04:48:37 +0000 ROA not before: Sat 21 Dec 2024 04:48:37 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 150774 IP address blocks: 103.174.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156334 Validity Not Before: Dec 21 04:48:37 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=676648a5-7c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:35:40:8d:06:46:29:53:50:6b:6f:d3:34: c8:39:4a:56:0a:08:d0:12:42:1d:2a:24:8b:0d:9e: 48:3d:87:c2:1e:22:79:cf:43:14:89:23:c2:bf:dd: 6b:75:07:ed:27:e9:a2:9f:bf:64:76:95:a8:a7:88: 08:f8:38:9d:b9:fb:b8:73:ee:33:17:dd:8e:c7:2e: 06:50:4a:20:b6:a4:6b:7d:62:53:69:2f:48:95:79: 6b:2f:da:4e:b0:4b:40:e5:1c:21:39:33:4d:2f:34: 59:86:f6:74:cf:22:59:b8:e9:12:11:94:d0:29:2e: 9a:fe:e2:3c:36:d0:17:7e:42:76:0a:57:47:69:ad: 89:34:1c:12:ef:82:09:8f:78:56:b3:ee:5e:cb:7a: df:26:c2:a3:b0:f2:53:a0:20:14:4c:e3:c3:72:8d: 28:5a:c3:fb:6a:f2:b8:66:29:5a:3b:50:06:01:32: 8c:1a:8c:72:90:5d:71:1b:8f:b7:45:56:7e:04:34: ee:2e:d0:97:6e:eb:0e:52:55:ac:01:19:d7:ed:68: 4a:9b:12:fb:34:19:80:e5:12:00:78:e8:a9:ce:34: 64:a3:88:f3:48:9d:d3:8f:03:c7:74:c9:01:30:c9: 61:26:f2:c5:0d:6a:86:26:93:a3:9d:96:a4:a0:aa: 16:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D7:98:8B:9B:6D:0D:F0:28:AB:A1:03:A2:F1:53:EB:B0:CC:DB:DB X509v3 Authority Key Identifier: keyid:8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/B0C5F17CC8DA11EE9340650EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.192.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:da:b9:c7:a3:7b:d9:a9:8b:6b:33:9a:48:66:02:77:2b:0f: c6:d5:db:76:11:9f:45:78:a9:a0:dc:40:66:f4:68:23:23:2f: 0a:8b:de:15:b3:af:ca:09:e9:4c:74:4a:b3:9c:49:38:2c:ac: da:07:70:a4:f7:5a:a7:09:b5:af:e0:20:0f:d0:c5:2d:0d:25: 71:46:ef:3d:e5:e3:27:ff:24:b3:1d:a9:73:13:42:f6:4a:7c: 9a:27:8d:f6:6f:25:91:b1:7f:7c:f4:3c:22:fd:30:62:e1:28: e4:22:76:be:40:a5:8e:14:e8:f0:21:09:ab:40:7a:cd:de:89: 8c:4f:4c:ae:b1:60:62:b3:78:b5:39:6e:05:b7:7c:dd:25:30: 25:c5:9a:7f:19:44:06:10:22:a3:e8:64:93:1b:51:93:bc:f1: 1f:57:b0:21:91:62:33:4f:54:b2:c5:e9:fb:c4:44:1b:de:1e: 45:5d:32:68:d6:d5:23:11:92:31:ee:5c:38:5e:e5:83:09:26: df:48:94:a9:9a:2e:be:a1:86:7e:2a:b0:0a:7d:5d:f4:66:cf: 4a:e9:fb:d4:89:13:2d:f6:15:e5:0d:d5:84:68:a4:51:44:72: 96:6e:6e:42:99:37:38:c7:5d:e8:5d:c6:7c:1f:01:24:05:ea: 9e:eb:a7:83 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYzMzQxMTAvBgNVBAUTKDhFOERENUIyQzEwMUI5ODNBNzk5QzkzOEFBMEU0MEE2 NTFGQ0JFMDcwHhcNMjQxMjIxMDQ0ODM3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY2NDhhNS03YzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gc1QI0GRilTUGtv0zTIOUpWCgjQEkIdKiSLDZ5IPYfCHiJ5z0MUiSPCv91r dQftJ+min79kdpWop4gI+Didufu4c+4zF92Oxy4GUEogtqRrfWJTaS9IlXlrL9pO sEtA5RwhOTNNLzRZhvZ0zyJZuOkSEZTQKS6a/uI8NtAXfkJ2CldHaa2JNBwS74IJ j3hWs+5ey3rfJsKjsPJToCAUTOPDco0oWsP7avK4ZilaO1AGATKMGoxykF1xG4+3 RVZ+BDTuLtCXbusOUlWsARnX7WhKmxL7NBmA5RIAeOipzjRko4jzSJ3TjwPHdMkB MMlhJvLFDWqGJpOjnZakoKoW7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJfXmIub bQ3wKKuhA6LxU+uwzNvbMB8GA1UdIwQYMBaAFI6N1bLBAbmDp5nJOKoOQKZR/L4H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjMzNC9FN0NEREZDRUM4 RDgxMUVFOUY0QUI5NkRDNEY5QUUwMi9qbzNWc3NFQnVZT25tY2s0cWc1QXBsSDh2 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvM1Zzc0VCdVlPbm1jazRxZzVBcGxIOHZnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTYzMzQvRTdDRERGQ0VDOEQ4MTFFRTlGNEFCOTZEQzRGOUFFMDIvQjBDNUYxN0ND OERBMTFFRTkzNDA2NTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnrsAwDQYJKoZIhvcNAQELBQADggEBAErauceje9mpi2sz mkhmAncrD8bV23YRn0V4qaDcQGb0aCMjLwqL3hWzr8oJ6Ux0SrOcSTgsrNoHcKT3 WqcJta/gIA/QxS0NJXFG7z3l4yf/JLMdqXMTQvZKfJonjfZvJZGxf3z0PCL9MGLh KOQidr5ApY4U6PAhCatAes3eiYxPTK6xYGKzeLU5bgW3fN0lMCXFmn8ZRAYQIqPo ZJMbUZO88R9XsCGRYjNPVLLF6fvERBveHkVdMmjW1SMRkjHuXDhe5YMJJt9IlKma Lr6hhn4qsAp9XfRmz0rp+9SJEy32FeUN1YRopFFEcpZubkKZNzjHXehdxnwfASQF 6p7rp4M= -----END CERTIFICATE-----Generated at Fri Apr 4 23:54:28 2025 by rpki-client