$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa File: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (raw, json) Hash identifier: WszDeDtt2pA1qPuCttmdMd6CqUvx9wc+SucMvuhAFvE= Subject key identifier: D1:C5:00:D1:FC:4F:90:9C:E9:7B:53:69:94:18:D5:C4:7E:B9:71:44 Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: 016F Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa Signing time: Tue 31 Dec 2024 02:56:41 +0000 ROA not before: Tue 31 Dec 2024 02:56:41 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 6453 IP address blocks: 103.120.104.0/24 maxlen: 24 103.120.105.0/24 maxlen: 24 103.120.106.0/24 maxlen: 24 103.120.107.0/24 maxlen: 24 175.100.160.0/24 maxlen: 24 175.100.161.0/24 maxlen: 24 175.100.162.0/24 maxlen: 24 175.100.163.0/24 maxlen: 24 2405:a100:10::/44 maxlen: 44 2405:a100:20::/44 maxlen: 44 2405:a100:30::/44 maxlen: 44 2405:a100:40::/44 maxlen: 44 2405:a100:50::/44 maxlen: 44 2405:a100:60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A Validity Not Before: Dec 31 02:56:41 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67735d69-682c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a4:99:2e:55:bd:3b:16:cf:3d:8e:a8:9d:50: cd:80:2d:28:47:4d:29:92:d9:cf:d4:3c:07:aa:8c: 60:62:e0:0b:fc:c7:d9:f9:91:51:23:33:4a:47:a8: fb:e0:15:e7:53:c2:d9:37:f0:dc:4f:78:8c:a7:3e: 1c:b1:fc:b3:4c:be:86:fb:aa:8f:4d:ae:d0:a5:e1: de:e8:7d:73:e6:04:ba:73:0f:2e:d0:37:15:33:cc: b6:ca:81:b3:65:11:eb:d6:23:77:d3:6d:6a:78:bb: 11:e1:75:89:ce:18:16:e3:fe:58:57:14:a5:37:73: 8d:2e:80:f4:01:d0:24:60:35:e4:e7:b7:f1:fc:aa: 9f:cd:ac:ff:a6:15:81:8c:90:c6:37:6f:52:fb:34: 37:34:33:cc:22:14:57:de:f1:89:46:e4:77:28:f3: 76:dd:45:ef:ee:06:9f:fe:c1:27:b8:2c:81:fc:39: af:a9:44:52:66:85:32:c9:2a:04:a3:af:95:e6:aa: b7:20:94:8f:c4:e5:e2:f0:70:e7:d7:39:65:e2:84: 1f:22:a9:9a:b3:96:bc:ce:f8:4a:2d:75:fe:e2:c6: f5:18:98:2c:a2:b6:bc:eb:9e:f0:b0:df:cc:48:50: af:e8:c6:c5:0d:0b:3a:80:b7:e5:11:eb:31:4d:c6: 16:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C5:00:D1:FC:4F:90:9C:E9:7B:53:69:94:18:D5:C4:7E:B9:71:44 X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.104.0/22 175.100.160.0/22 IPv6: 2405:a100:10::-2405:a100:6f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 92:f1:b7:96:6b:30:b6:49:f8:e4:f2:a2:93:ed:e5:10:ff:75: 6b:29:44:c3:e4:10:47:a4:33:35:f1:21:2c:5b:ba:5d:95:d1: fd:af:8c:51:6e:bd:57:62:70:59:4b:54:af:fb:f3:52:07:31: 01:91:56:6a:17:df:07:85:84:a2:34:ce:30:b1:f3:44:38:32: bf:ba:a2:55:4c:cc:13:30:a3:34:93:e1:ea:3c:23:45:55:53: 44:fc:ef:2a:7b:60:b8:8a:7a:ff:aa:37:37:d3:05:4a:9f:96: 5c:4e:13:6a:02:b7:c3:52:19:d8:30:91:95:d3:33:5a:64:4f: da:cd:63:af:ed:6e:3a:59:f0:16:81:f6:c6:cc:e2:c3:e5:77: b2:9e:ec:a4:59:a2:36:88:99:e0:94:79:34:80:f9:7a:c7:1f: 1b:7e:86:20:a5:76:a0:5f:33:78:b0:72:a6:07:36:aa:c4:d6: 23:39:c3:67:2e:c4:9b:82:9b:a3:d8:4b:ea:b6:df:0d:e1:af: cb:c0:90:71:29:71:62:71:cc:fe:0b:87:86:80:c2:b9:e1:12: 98:5c:1b:2c:3b:a1:15:ac:cd:7f:00:d2:3a:c4:e8:f2:63:f5: 7f:11:4c:32:9b:ce:e4:65:40:a7:1d:f7:c1:dd:7f:a5:7e:45: 2b:e9:bd:1d -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjQxMjMxMDI1NjQxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzczNWQ2OS02ODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqSZLlW9OxbPPY6onVDNgC0oR00pktnP1DwHqoxgYuAL/MfZ+ZFRIzNKR6j7 4BXnU8LZN/DcT3iMpz4csfyzTL6G+6qPTa7QpeHe6H1z5gS6cw8u0DcVM8y2yoGz ZRHr1iN3021qeLsR4XWJzhgW4/5YVxSlN3ONLoD0AdAkYDXk57fx/Kqfzaz/phWB jJDGN29S+zQ3NDPMIhRX3vGJRuR3KPN23UXv7gaf/sEnuCyB/DmvqURSZoUyySoE o6+V5qq3IJSPxOXi8HDn1zll4oQfIqmas5a8zvhKLXX+4sb1GJgsora8657wsN/M SFCv6MbFDQs6gLflEesxTcYW7wIDAQABo4ICtzCCArMwHQYDVR0OBBYEFNHFANH8 T5Cc6XtTaZQY1cR+uXFEMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjBEMEEvNTY0QTEzNUVEMjIyMTFFRDlBMjA2QzQ2QzRGOUFFMDIvRDFFQUExOENE MkJDMTFFRDlFN0E5QTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMBIEAgABMAwDBAJneGgDBAKvZKAwGgQCAAIwFDASAwcEJAWhAAAQAwcEJAWh AABgMA0GCSqGSIb3DQEBCwUAA4IBAQCS8beWazC2Sfjk8qKT7eUQ/3VrKUTD5BBH pDM18SEsW7pdldH9r4xRbr1XYnBZS1Sv+/NSBzEBkVZqF98HhYSiNM4wsfNEODK/ uqJVTMwTMKM0k+HqPCNFVVNE/O8qe2C4inr/qjc30wVKn5ZcThNqArfDUhnYMJGV 0zNaZE/azWOv7W46WfAWgfbGzOLD5XeynuykWaI2iJnglHk0gPl6xx8bfoYgpXag XzN4sHKmBzaqxNYjOcNnLsSbgpuj2Evqtt8N4a/LwJBxKXFiccz+C4eGgMK54RKY XBssO6EVrM1/ANI6xOjyY/V/EUwym87kZUCnHffB3X+lfkUr6b0d -----END CERTIFICATE-----Generated at Sat Apr 5 06:02:22 2025 by rpki-client