$ rpki-client -vvf rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/6DCC06C231BC11EA9AACCA4BC4F9AE02.roa File: 6DCC06C231BC11EA9AACCA4BC4F9AE02.roa (raw, json) Hash identifier: 3rmLILbAM/KMJx9b9ZtmiW/UU8JiAcyOhmtpDcFmRPg= Subject key identifier: 61:B9:E4:72:FD:84:FA:9E:07:04:BC:DC:77:9C:F5:53:8F:A8:0C:D3 Certificate issuer: /CN=A9160701/serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0 Certificate serial: 0B3B Authority key identifier: E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/6DCC06C231BC11EA9AACCA4BC4F9AE02.roa Signing time: Thu 06 Feb 2025 18:57:29 +0000 ROA not before: Thu 06 Feb 2025 18:57:29 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 56028 IP address blocks: 103.19.4.0/22 maxlen: 22 103.19.4.0/24 maxlen: 24 103.19.5.0/24 maxlen: 24 103.19.6.0/24 maxlen: 24 103.19.7.0/24 maxlen: 24 114.31.212.0/22 maxlen: 22 114.31.212.0/24 maxlen: 24 114.31.213.0/24 maxlen: 24 114.31.214.0/24 maxlen: 24 114.31.215.0/24 maxlen: 24 119.160.224.0/21 maxlen: 24 163.47.232.0/22 maxlen: 22 163.47.232.0/24 maxlen: 24 163.47.233.0/24 maxlen: 24 163.47.234.0/24 maxlen: 24 163.47.235.0/24 maxlen: 24 2406:1a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2875 (0xb3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160701 Validity Not Before: Feb 6 18:57:29 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a50619-4391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bb:a4:8b:93:07:a4:99:d0:e7:39:bd:39:b7: 5c:a3:e4:41:68:5b:9a:5b:e9:96:14:c7:c0:9f:ed: 1b:8e:89:fd:4f:7d:8f:44:c5:52:b2:a9:a0:44:fc: 8a:4f:9f:94:eb:b7:de:eb:2d:82:65:70:1f:33:18: ef:fc:bf:fd:f1:aa:c4:e0:b6:30:34:7d:79:d1:71: 5f:0e:cd:40:34:e4:1b:e9:05:d0:19:b9:90:2c:aa: c9:4d:21:4e:9e:35:8e:0f:50:82:88:48:b0:e0:e2: 5b:3e:a1:cf:bf:93:56:03:d3:b0:64:25:02:37:1d: f1:32:1c:50:28:0f:86:19:46:94:c3:e9:55:ba:b1: 92:fb:8f:95:a7:75:b3:64:64:e8:e1:9a:d3:d1:fa: 76:1a:f8:2f:de:be:9b:ed:ef:a1:2c:58:cf:2e:3d: 3e:29:d0:77:ca:09:da:d6:af:49:8b:c6:28:ec:df: 99:48:26:cd:69:80:88:09:a0:e6:ba:b7:94:ed:1a: c5:11:6d:d2:32:0b:bc:4e:0a:73:3e:ae:23:3b:3b: 71:0d:b8:09:e8:04:c4:5e:44:ed:fd:53:2d:fb:ec: b1:19:2b:84:39:ec:28:df:fc:1a:60:44:d6:c9:f6: 37:26:73:55:64:51:9d:93:27:ae:1c:73:28:84:27: 6c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B9:E4:72:FD:84:FA:9E:07:04:BC:DC:77:9C:F5:53:8F:A8:0C:D3 X509v3 Authority Key Identifier: keyid:E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/6DCC06C231BC11EA9AACCA4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.19.4.0/22 114.31.212.0/22 119.160.224.0/21 163.47.232.0/22 IPv6: 2406:1a00::/32 Signature Algorithm: sha256WithRSAEncryption 9c:f7:90:33:f1:14:ba:c1:5f:9f:36:1e:94:8c:0a:2f:97:9f: 16:60:47:27:7b:27:01:ae:11:70:85:70:12:dc:d5:00:fb:19: ed:b0:e2:08:6a:00:48:f5:d6:9b:bb:9b:0c:44:a7:df:df:9a: 58:c6:20:e3:eb:10:6e:1b:6b:f6:c5:f1:35:19:05:9e:9c:76: 8d:e2:ae:57:08:41:6b:d1:2b:78:6b:1b:f8:1b:49:df:6c:19: 9b:3f:47:90:b0:cd:ee:42:96:8a:df:da:e5:a8:ea:78:59:95: 4f:5d:39:09:6d:a5:b9:b8:a8:c0:58:ad:0a:a3:ab:88:61:cd: 20:e0:b1:65:a5:84:30:60:e0:bb:a3:de:56:de:1e:4d:97:0b: 0f:6e:d5:5b:58:c4:dc:21:c6:7a:75:a9:c6:60:3d:ce:62:f0: 0e:a8:45:91:b3:d0:be:02:aa:ec:70:ed:04:56:b1:d5:7f:94: 0f:44:d3:c9:06:6d:64:dc:20:56:f1:c6:29:58:c6:25:ee:68: 57:e3:10:0a:9e:63:d6:9c:a6:42:44:88:96:f8:ea:8d:a5:24: 16:3e:57:2a:4d:13:55:7d:0a:64:61:93:81:8b:4e:8f:72:1c: 85:4c:21:11:33:bf:4b:b1:98:85:68:9b:8f:e3:13:ce:99:93: bb:b7:e8:de -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICCzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA3MDExMTAvBgNVBAUTKEU1MkRFOEIxOTE5MzM4QTNFMjU1NjY0RTg4MDQ4QTU2 OThBMTIwRDAwHhcNMjUwMjA2MTg1NzI5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E1MDYxOS00MzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlLuki5MHpJnQ5zm9Obdco+RBaFuaW+mWFMfAn+0bjon9T32PRMVSsqmgRPyK T5+U67fe6y2CZXAfMxjv/L/98arE4LYwNH150XFfDs1ANOQb6QXQGbmQLKrJTSFO njWOD1CCiEiw4OJbPqHPv5NWA9OwZCUCNx3xMhxQKA+GGUaUw+lVurGS+4+Vp3Wz ZGTo4ZrT0fp2Gvgv3r6b7e+hLFjPLj0+KdB3ygna1q9Ji8Yo7N+ZSCbNaYCICaDm ureU7RrFEW3SMgu8TgpzPq4jOztxDbgJ6ATEXkTt/VMt++yxGSuEOewo3/waYETW yfY3JnNVZFGdkyeuHHMohCdstQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFGG55HL9 hPqeBwS83Hec9VOPqAzTMB8GA1UdIwQYMBaAFOUt6LGRkzij4lVmTogEilaYoSDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDcwMS81NDAwQzQxODMw MzAxMUVBQTcyRjM2N0FDNEY5QUUwMi81UzNvc1pHVE9LUGlWV1pPaUFTS1ZwaWhJ TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVTM29zWkdUT0tQaVZXWk9pQVNLVnBpaElOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjA3MDEvNTQwMEM0MTgzMDMwMTFFQUE3MkYzNjdBQzRGOUFFMDIvNkRDQzA2QzIz MUJDMTFFQTlBQUNDQTRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAJnEwQDBAJyH9QDBAN3oOADBAKjL+gwDQQCAAIwBwMFACQG GgAwDQYJKoZIhvcNAQELBQADggEBAJz3kDPxFLrBX582HpSMCi+XnxZgRyd7JwGu EXCFcBLc1QD7Ge2w4ghqAEj11pu7mwxEp9/fmljGIOPrEG4ba/bF8TUZBZ6cdo3i rlcIQWvRK3hrG/gbSd9sGZs/R5Cwze5Clorf2uWo6nhZlU9dOQltpbm4qMBYrQqj q4hhzSDgsWWlhDBg4Luj3lbeHk2XCw9u1VtYxNwhxnp1qcZgPc5i8A6oRZGz0L4C quxw7QRWsdV/lA9E08kGbWTcIFbxxilYxiXuaFfjEAqeY9acpkJEiJb46o2lJBY+ VypNE1V9CmRhk4GLTo9yHIVMIREzv0uxmIVom4/jE86Zk7u36N4= -----END CERTIFICATE-----Generated at Sat Apr 5 14:38:10 2025 by rpki-client