$ rpki-client -vvf rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/2DF8935CAFB411ED8D33ED1FC4F9AE02.roa File: 2DF8935CAFB411ED8D33ED1FC4F9AE02.roa (raw, json) Hash identifier: vlOK1RJCHtSR0rcREKWIrzl7luUJenVcTiEDALCfBP0= Subject key identifier: BF:40:82:81:5F:60:CC:9F:58:D1:58:DB:E8:2B:90:DD:53:35:2E:53 Certificate issuer: /CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B Certificate serial: 014F Authority key identifier: 81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/2DF8935CAFB411ED8D33ED1FC4F9AE02.roa Signing time: Fri 29 Nov 2024 02:55:37 +0000 ROA not before: Fri 29 Nov 2024 02:55:37 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 140106 IP address blocks: 103.178.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160602 Validity Not Before: Nov 29 02:55:37 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67492d29-b3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:83:d0:5d:c3:0f:ab:eb:ad:4b:e0:73:dc:31: d7:0a:e8:35:73:ff:27:78:be:c0:91:78:bf:42:e7: e7:d8:84:20:12:d5:e0:63:8e:f3:99:6e:24:03:42: f5:10:61:da:a1:d6:c8:8f:a8:22:ba:b0:f4:63:42: a9:92:fa:b6:ea:91:17:e7:01:54:ee:ac:da:31:df: d4:b4:6b:e6:e1:50:e3:85:ad:8e:02:81:2e:b5:83: 4a:5c:87:ae:27:67:7b:67:19:40:a0:9e:d9:bc:81: 25:83:12:94:8e:d7:0d:53:81:54:99:3b:12:5a:0a: 9d:04:72:b5:d4:cc:ff:74:a0:16:c1:2e:f6:47:8e: 61:2c:64:79:14:81:93:48:ac:b5:80:e6:21:4d:cd: 00:38:8f:5c:96:6f:e8:bc:e4:3c:e1:46:fb:d0:03: 2b:83:47:00:a2:f3:99:74:e0:37:44:15:99:fb:75: f3:76:ad:84:a3:92:42:ed:03:a6:2c:42:f4:84:70: 6a:c8:0e:ac:cd:3a:b0:de:5e:29:9d:c4:ea:af:53: b5:96:51:74:b4:6a:9a:d6:5b:4a:45:d7:6f:b2:1b: 86:f6:55:29:6d:cd:17:bd:c5:98:55:8b:b9:21:68: 2f:c3:d7:2e:46:4c:6d:f2:7b:eb:df:51:ce:73:ea: e7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:40:82:81:5F:60:CC:9F:58:D1:58:DB:E8:2B:90:DD:53:35:2E:53 X509v3 Authority Key Identifier: keyid:81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/2DF8935CAFB411ED8D33ED1FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.178.97.0/24 Signature Algorithm: sha256WithRSAEncryption 21:cf:84:5d:aa:6c:82:bd:7f:e0:b6:7c:08:89:99:61:2d:1a: 1d:5e:82:ab:58:20:40:0a:8c:d0:09:c7:a1:f5:19:0e:c7:21: 17:15:be:62:60:34:26:bb:45:e0:82:79:d3:a9:e6:a1:cb:e3: 3c:16:76:ae:c7:ab:18:8f:e1:8e:ff:77:a1:7b:78:b2:09:11: ea:ba:be:ce:90:fe:0b:65:c0:b0:c3:ca:61:2d:15:8c:a4:23: 13:d4:d0:b3:2d:5c:82:6e:0e:b4:86:0c:eb:f5:27:b9:f3:f9: 4a:0e:f4:4e:15:de:b5:17:b0:9e:08:74:19:43:0b:87:a3:36: 52:26:d0:8c:0e:a6:b4:67:ad:fd:1e:1c:23:91:3a:ce:fb:9e: e3:22:f3:a3:ff:26:03:de:94:f9:31:3c:21:d9:b2:c7:96:ac: 1a:bb:c2:4c:ba:d9:e1:84:06:1e:39:f2:0d:ec:cb:ac:d5:1a: c4:ef:6b:9f:ad:01:08:11:ce:0b:9a:8b:c7:d6:bb:42:e3:cf: a4:1d:96:f8:ed:d7:d7:66:2e:d6:69:0a:5e:96:bf:f8:f0:c5: de:8f:64:81:e2:7b:d2:45:9b:01:41:43:47:20:e0:51:c7:44: 73:89:c7:39:45:2b:dc:3f:a8:73:8d:5f:83:d8:96:1a:dd:f9: b4:7f:7f:9f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2MDIxMTAvBgNVBAUTKDgxODM1OUJDQTBGNjczQjc4MTYwMDNGQkI4OUI2NTM3 QTk0ODA3NUIwHhcNMjQxMTI5MDI1NTM3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ5MmQyOS1iM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oPQXcMPq+utS+Bz3DHXCug1c/8neL7AkXi/Qufn2IQgEtXgY47zmW4kA0L1 EGHaodbIj6giurD0Y0Kpkvq26pEX5wFU7qzaMd/UtGvm4VDjha2OAoEutYNKXIeu J2d7ZxlAoJ7ZvIElgxKUjtcNU4FUmTsSWgqdBHK11Mz/dKAWwS72R45hLGR5FIGT SKy1gOYhTc0AOI9clm/ovOQ84Ub70AMrg0cAovOZdOA3RBWZ+3Xzdq2Eo5JC7QOm LEL0hHBqyA6szTqw3l4pncTqr1O1llF0tGqa1ltKRddvshuG9lUpbc0XvcWYVYu5 IWgvw9cuRkxt8nvr31HOc+rnUQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL9AgoFf YMyfWNFY2+grkN1TNS5TMB8GA1UdIwQYMBaAFIGDWbyg9nO3gWAD+7ibZTepSAdb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDYwMi9GQkNDODk3Q0FG QjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3ZUJZQVA3dUp0bE42bElC MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZTlp2S0QyYzdlQllBUDd1SnRsTjZsSUIxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjA2MDIvRkJDQzg5N0NBRkIwMTFFREIyRjIwNDFCQzRGOUFFMDIvMkRGODkzNUNB RkI0MTFFRDhEMzNFRDFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnsmEwDQYJKoZIhvcNAQELBQADggEBACHPhF2qbIK9f+C2 fAiJmWEtGh1egqtYIEAKjNAJx6H1GQ7HIRcVvmJgNCa7ReCCedOp5qHL4zwWdq7H qxiP4Y7/d6F7eLIJEeq6vs6Q/gtlwLDDymEtFYykIxPU0LMtXIJuDrSGDOv1J7nz +UoO9E4V3rUXsJ4IdBlDC4ejNlIm0IwOprRnrf0eHCOROs77nuMi86P/JgPelPkx PCHZsseWrBq7wky62eGEBh458g3sy6zVGsTva5+tAQgRzguai8fWu0Ljz6Qdlvjt 19dmLtZpCl6Wv/jwxd6PZIHie9JFmwFBQ0cg4FHHRHOJxzlFK9w/qHONX4PYlhrd +bR/f58= -----END CERTIFICATE-----Generated at Sun Apr 6 06:32:13 2025 by rpki-client