$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/159A3C967D7211EBA0A7FF60C4F9AE02.roa File: 159A3C967D7211EBA0A7FF60C4F9AE02.roa (raw, json) Hash identifier: Zxo0mKrJYkISVsqHRZIlLeBZhk5GaXEPMnvmTBTNLew= Subject key identifier: 19:3D:C9:47:21:2F:5B:41:92:3B:82:82:D8:A1:6B:24:7B:C3:B4:58 Certificate issuer: /CN=A9160BD2/serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86 Certificate serial: 0633 Authority key identifier: E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/159A3C967D7211EBA0A7FF60C4F9AE02.roa Signing time: Thu 30 Jan 2025 22:42:35 +0000 ROA not before: Thu 30 Jan 2025 22:42:35 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 58464 IP address blocks: 103.23.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1587 (0x633) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BD2 Validity Not Before: Jan 30 22:42:35 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=679c005b-5b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:76:a5:eb:46:20:4f:5b:04:d4:8f:1a:99:d3: 80:09:92:3e:d6:be:5d:26:0b:90:43:9e:71:e2:94: 89:9c:fa:af:99:d5:df:e3:84:91:17:4b:e4:66:64: b3:a9:79:32:5a:00:4e:ac:c3:8d:ef:c0:2c:7d:ca: 6d:a5:0f:81:c5:3f:81:1e:76:44:69:ac:5c:37:0b: 79:25:90:31:65:e0:96:66:05:94:8f:70:76:04:11: d7:99:e0:16:71:eb:86:b3:f0:5e:88:66:79:bb:bd: 9a:40:92:f5:23:19:37:68:dc:f1:b3:87:cc:d1:ad: f2:16:0a:58:75:dd:a2:31:7e:b6:16:73:d8:91:ea: 4e:aa:f8:4d:99:61:f5:f0:b1:44:57:98:2b:c0:11: fe:b4:29:8a:3c:01:d9:6b:de:b7:d4:7a:88:eb:ef: 1d:23:e2:95:2d:da:7e:b2:71:6c:db:63:fc:22:ae: 7e:8c:6b:da:c1:6e:05:8b:0d:db:cb:f2:f5:9f:06: 58:14:66:f5:18:7b:35:53:f9:4a:2b:c9:0a:8b:cc: d5:45:82:63:40:41:a7:42:f9:d5:65:d8:36:b8:c8: 32:75:53:b4:3a:aa:4a:ba:23:c7:6c:03:b8:53:4c: 64:64:04:9e:b0:0f:67:e9:02:d4:27:ae:6f:c5:02: aa:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3D:C9:47:21:2F:5B:41:92:3B:82:82:D8:A1:6B:24:7B:C3:B4:58 X509v3 Authority Key Identifier: keyid:E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/159A3C967D7211EBA0A7FF60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.23.188.0/22 Signature Algorithm: sha256WithRSAEncryption 51:12:af:16:ab:7b:70:c4:06:58:f5:25:a5:41:f2:74:4d:86: 35:ff:a2:4e:31:d3:31:63:61:d5:36:ce:8a:36:2b:f5:23:93: ce:9e:d9:44:4d:ea:f3:10:50:31:f8:97:97:d8:57:ce:70:b4: 78:7a:16:42:33:70:32:26:4a:9c:fd:ba:4f:a8:e4:d0:8a:07: c1:ab:16:00:84:c2:3f:06:e2:17:e3:1b:a8:0b:b6:bd:3e:03: bc:04:19:c9:a3:f6:37:6f:72:04:27:ee:1f:16:1a:bd:ed:4f: 90:63:6d:60:2b:b7:d0:ef:ff:fd:b7:59:bf:b3:51:fb:f3:d7: 4a:72:ea:14:95:b3:01:08:b2:df:dc:b8:0d:39:cd:db:fc:95: de:d1:c2:4d:fa:4f:60:cb:36:64:c2:3b:49:fb:0e:6d:8a:d3: 76:b6:02:d1:3b:95:5d:a2:c1:86:9b:9e:51:ba:4d:dd:84:4c: 3b:bd:42:7f:b8:51:06:8d:71:2b:d0:4b:a6:fe:18:e4:7f:be: 5d:2d:5f:26:6c:fb:f7:da:d0:ae:e3:b0:35:ab:2e:de:ab:38: d6:28:76:00:9b:b9:dc:cc:7c:16:c0:11:48:ee:50:3e:b2:27: 54:51:4d:30:9c:2c:81:b8:31:6c:e6:dc:c0:ec:74:c8:76:7b: 04:35:9c:12 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRDIxMTAvBgNVBAUTKEU2RTdFMEJBRjM0RjIwQzNEOUM5RUYyNjc3NjgwNUYz ODI0NjNCODYwHhcNMjUwMTMwMjI0MjM1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzljMDA1Yi01YjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5nal60YgT1sE1I8amdOACZI+1r5dJguQQ55x4pSJnPqvmdXf44SRF0vkZmSz qXkyWgBOrMON78AsfcptpQ+BxT+BHnZEaaxcNwt5JZAxZeCWZgWUj3B2BBHXmeAW ceuGs/BeiGZ5u72aQJL1Ixk3aNzxs4fM0a3yFgpYdd2iMX62FnPYkepOqvhNmWH1 8LFEV5grwBH+tCmKPAHZa9631HqI6+8dI+KVLdp+snFs22P8Iq5+jGvawW4Fiw3b y/L1nwZYFGb1GHs1U/lKK8kKi8zVRYJjQEGnQvnVZdg2uMgydVO0OqpKuiPHbAO4 U0xkZASesA9n6QLUJ65vxQKqiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBk9yUch L1tBkjuCgtihayR7w7RYMB8GA1UdIwQYMBaAFObn4LrzTyDD2cnvJndoBfOCRjuG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJEMi9FN0U5MDQwMDdE NkYxMUVCODYxMTExNDdDNEY5QUUwMi81dWZndXZOUElNUFp5ZThtZDJnRjg0SkdP NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV1Zmd1dk5QSU1QWnllOG1kMmdGODRKR080WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjBCRDIvRTdFOTA0MDA3RDZGMTFFQjg2MTExMTQ3QzRGOUFFMDIvMTU5QTNDOTY3 RDcyMTFFQkEwQTdGRjYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnF7wwDQYJKoZIhvcNAQELBQADggEBAFESrxare3DEBlj1 JaVB8nRNhjX/ok4x0zFjYdU2zoo2K/Ujk86e2URN6vMQUDH4l5fYV85wtHh6FkIz cDImSpz9uk+o5NCKB8GrFgCEwj8G4hfjG6gLtr0+A7wEGcmj9jdvcgQn7h8WGr3t T5BjbWArt9Dv//23Wb+zUfvz10py6hSVswEIst/cuA05zdv8ld7Rwk36T2DLNmTC O0n7Dm2K03a2AtE7lV2iwYabnlG6Td2ETDu9Qn+4UQaNcSvQS6b+GOR/vl0tXyZs +/fa0K7jsDWrLt6rONYodgCbudzMfBbAEUjuUD6yJ1RRTTCcLIG4MWzm3MDsdMh2 ewQ1nBI= -----END CERTIFICATE-----Generated at Sat Apr 5 02:07:49 2025 by rpki-client