$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/7B6F6276E03811EFAC3C5652C4F9AE02.roa File: 7B6F6276E03811EFAC3C5652C4F9AE02.roa (raw, json) Hash identifier: melteXR1cRharD5muHTsf70+edihxivjKNNQzAZNpLE= Subject key identifier: 90:91:89:3B:15:D5:61:D2:2F:2B:99:7F:B8:5A:BA:86:A7:BA:BB:B6 Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Certificate serial: 038A Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/7B6F6276E03811EFAC3C5652C4F9AE02.roa Signing time: Wed 19 Mar 2025 01:16:57 +0000 ROA not before: Wed 19 Mar 2025 01:16:57 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 23750 IP address blocks: 103.159.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E8E Validity Not Before: Mar 19 01:16:57 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67da1b09-c979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:21:71:8e:4c:53:29:b6:a6:60:ab:4d:37: 0c:dd:4e:d6:3b:e6:a4:d8:14:f8:01:e7:c0:de:33: e1:e4:35:e2:b3:8d:b4:80:3d:86:fa:09:89:a3:76: c1:eb:b9:66:34:83:51:82:53:70:08:d7:87:23:4f: 02:6b:a3:c7:c7:b4:4c:62:10:cd:fe:e4:4c:94:b1: 6e:16:f6:d0:42:4a:6e:f9:40:4a:0d:0d:f2:5e:ee: e1:97:b2:1d:20:17:5e:03:82:0c:f9:80:ff:8f:f1: 77:9d:d1:99:63:ec:2d:0e:1a:a9:2f:7e:42:91:bd: 26:93:0a:e5:2d:64:f5:98:f4:da:6c:8d:0d:8a:0d: 54:ee:e8:b1:6a:44:01:48:d0:49:f8:bf:4b:02:7c: dd:ed:42:f3:1c:95:3f:de:d2:fb:05:be:45:14:74: 4d:26:5f:d4:a0:97:81:e5:ce:a8:ca:3c:b8:dc:a9: 59:cf:e4:49:a4:0b:95:bd:d0:73:00:56:96:bd:0d: db:32:df:03:3b:35:0d:b7:24:03:55:2d:60:4c:ea: 52:72:d2:98:54:d5:01:6b:8d:81:14:58:ec:fb:e6: 7b:69:05:da:38:20:17:19:8d:dd:f8:98:4a:13:3a: 71:bc:52:94:a8:af:63:dc:e8:d0:3b:ec:96:24:bd: f2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:91:89:3B:15:D5:61:D2:2F:2B:99:7F:B8:5A:BA:86:A7:BA:BB:B6 X509v3 Authority Key Identifier: keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/7B6F6276E03811EFAC3C5652C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.79.0/24 Signature Algorithm: sha256WithRSAEncryption 47:5b:cb:f3:20:55:cf:68:a6:67:1c:8e:b4:58:0d:02:35:3d: f7:6c:d7:3e:ad:fa:45:51:8d:9a:42:19:9a:bb:37:e4:2f:37: c1:70:0d:16:1c:3f:b9:9d:f7:bb:79:e4:5e:bb:51:47:8d:2f: 57:47:4b:3b:8a:a1:3f:fc:b4:c9:85:9f:13:53:f6:d0:4e:e2: 35:52:45:24:ef:07:3e:ea:d0:71:4b:82:27:b0:19:f8:08:29: 2c:50:a3:c8:c4:b5:ca:17:bf:7a:07:2c:e4:65:9e:fd:8f:e9: 39:00:68:85:03:02:50:4a:91:50:98:b9:0f:9a:dc:3a:1e:24: 81:47:95:49:9f:0e:83:59:90:21:b4:13:70:99:62:8c:90:eb: ff:f2:e8:87:a7:7a:3f:84:b7:0b:a6:78:82:29:88:d5:49:d7: 1c:ce:7c:e1:2c:2b:5a:3f:2c:5d:c2:f5:3e:7a:ed:f7:e1:fa: 9f:5b:11:65:b4:8a:c5:05:57:b8:26:34:37:cf:3e:91:6a:a8: 26:ac:5d:4a:76:ed:72:df:a3:8b:8e:d0:01:cd:da:12:88:8c: 46:21:34:58:9f:8e:c9:8f:2c:86:7b:0f:a5:40:31:c2:06:e1: 20:b9:90:60:17:dd:a5:25:62:f7:f0:f3:a2:31:47:99:31:33: a4:7e:1e:c9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFOEUxMTAvBgNVBAUTKDVGMkU1RTYyOTMyQkI1MEE4NUZGMkY5QTVGMzFCMkJB REQ1RjM0QUMwHhcNMjUwMzE5MDExNjU3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RhMWIwOS1jOTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIMhcY5MUym2pmCrTTcM3U7WO+ak2BT4AefA3jPh5DXis420gD2G+gmJo3bB 67lmNINRglNwCNeHI08Ca6PHx7RMYhDN/uRMlLFuFvbQQkpu+UBKDQ3yXu7hl7Id IBdeA4IM+YD/j/F3ndGZY+wtDhqpL35Ckb0mkwrlLWT1mPTabI0Nig1U7uixakQB SNBJ+L9LAnzd7ULzHJU/3tL7Bb5FFHRNJl/UoJeB5c6oyjy43KlZz+RJpAuVvdBz AFaWvQ3bMt8DOzUNtyQDVS1gTOpSctKYVNUBa42BFFjs++Z7aQXaOCAXGY3d+JhK EzpxvFKUqK9j3OjQO+yWJL3yFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJCRiTsV 1WHSLyuZf7hauoanuru2MB8GA1UdIwQYMBaAFF8uXmKTK7UKhf8vml8xsrrdXzSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEU4RS8wNEZCQjhGMEFF MEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRRcUZfeS1hWHpHeXV0MWZO S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5NWVZcE1ydFFxRl95LWFYekd5dXQxZk5Ldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThFOEUvMDRGQkI4RjBBRTBGMTFFQ0EwMjA1NjY2QzRGOUFFMDIvN0I2RjYyNzZF MDM4MTFFRkFDM0M1NjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnn08wDQYJKoZIhvcNAQELBQADggEBAEdby/MgVc9opmcc jrRYDQI1Pfds1z6t+kVRjZpCGZq7N+QvN8FwDRYcP7md97t55F67UUeNL1dHSzuK oT/8tMmFnxNT9tBO4jVSRSTvBz7q0HFLgiewGfgIKSxQo8jEtcoXv3oHLORlnv2P 6TkAaIUDAlBKkVCYuQ+a3DoeJIFHlUmfDoNZkCG0E3CZYoyQ6//y6Ienej+Etwum eIIpiNVJ1xzOfOEsK1o/LF3C9T567ffh+p9bEWW0isUFV7gmNDfPPpFqqCasXUp2 7XLfo4uO0AHN2hKIjEYhNFifjsmPLIZ7D6VAMcIG4SC5kGAX3aUlYvfw86IxR5kx M6R+Hsk= -----END CERTIFICATE-----Generated at Sat Apr 5 06:14:04 2025 by rpki-client