$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F7D72D3E23E211EFA47D6C68C4F9AE02.roa File: F7D72D3E23E211EFA47D6C68C4F9AE02.roa (raw, json) Hash identifier: e+M4adDsVVtiBfslPnOBJOSyjq+6gRCvAtKsdhjHrg8= Subject key identifier: AF:9D:E0:1C:27:8D:4C:EB:B8:30:8F:67:B8:75:30:AB:49:10:F9:BA Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Certificate serial: 0387 Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F7D72D3E23E211EFA47D6C68C4F9AE02.roa Signing time: Thu 05 Dec 2024 01:15:07 +0000 ROA not before: Thu 05 Dec 2024 01:15:07 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 135110 IP address blocks: 103.239.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916557B Validity Not Before: Dec 5 01:15:07 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6750fe9b-9f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:39:13:af:b9:39:6a:cc:01:bf:5a:9f:ce:30: 8d:40:db:9b:a4:bf:b6:42:be:32:dc:05:6d:68:64: a2:e4:37:84:42:09:0a:84:06:c6:b9:17:c6:48:ca: 87:6a:d8:19:b3:a2:46:19:07:53:66:84:6f:fa:e3: 9e:46:df:b9:cd:80:44:d8:88:f1:13:08:60:a1:eb: d7:74:08:be:3b:7a:2f:9a:d8:93:da:31:33:ef:31: fd:91:95:30:31:cd:67:49:da:d3:7a:68:05:5c:03: 7b:57:38:df:a4:1b:db:9c:62:9c:d6:d2:58:17:53: ac:f2:8a:e6:9f:3d:e1:29:14:3b:ba:15:64:71:03: 04:dd:5e:de:8f:fd:ec:4e:de:da:5a:2c:43:32:04: fd:7d:92:c9:a3:b0:a4:dc:d6:41:77:2b:18:9d:5e: 1c:b0:bb:fd:15:31:d4:1e:d5:23:3d:6b:ea:83:59: 6c:b8:93:9d:42:6d:66:c1:89:c4:48:5a:c9:e5:21: ee:74:e7:74:4d:40:66:83:09:28:1d:3d:e7:8b:cf: 7b:f7:24:58:6b:0c:3a:5d:e5:ee:c4:3a:84:bf:19: dd:96:14:cf:a4:5f:88:b8:03:b2:e6:29:a1:24:20: 0d:66:20:6e:ba:bf:28:03:b5:b6:07:cd:b9:b3:33: 78:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9D:E0:1C:27:8D:4C:EB:B8:30:8F:67:B8:75:30:AB:49:10:F9:BA X509v3 Authority Key Identifier: keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F7D72D3E23E211EFA47D6C68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.239.102.0/24 Signature Algorithm: sha256WithRSAEncryption 80:ff:00:a8:6b:13:83:dc:ed:e5:19:bc:33:b1:54:f8:a4:d3: ce:dd:47:ac:8c:4a:fd:0e:8c:ec:fa:21:ca:a8:e7:67:77:68: 49:fe:51:22:14:33:b5:e9:08:c7:3d:93:fe:ff:a4:a0:b2:b2: 30:27:8a:aa:2c:a7:4f:5b:1a:3d:ae:8b:b1:83:62:0f:cb:fb: 36:55:cc:35:aa:b1:8a:3f:2a:87:a4:99:81:67:98:d1:1c:5d: f5:4b:be:4c:55:fc:8a:34:ae:7a:ea:1c:b9:49:d0:74:2e:70: 6a:74:5f:c5:0a:23:04:6c:21:22:63:7e:e5:22:e2:62:6e:b8: 9d:3d:81:5b:e3:5e:7a:4f:32:df:6b:e7:aa:82:2e:eb:f6:5c: cd:18:ec:d8:c3:e0:9b:72:65:49:a9:08:3f:a7:c8:d1:81:cb: ec:ed:77:a9:ec:75:eb:a1:42:e9:e3:3c:80:23:32:3b:10:89: ea:21:7f:4f:ce:e7:51:7c:f3:56:7c:77:08:d2:8d:29:2b:01: a4:1e:28:da:7f:fe:de:39:55:42:11:3f:08:29:3f:61:d9:bb: 3a:02:87:c1:27:67:ad:c9:9c:c0:40:1a:97:43:0a:32:2b:ee: 66:ca:e7:4d:95:21:e4:ad:f8:c2:51:8e:93:dd:5b:44:00:42: 79:69:8c:85 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE MjYwQUE5NzgwHhcNMjQxMjA1MDExNTA3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwZmU5Yi05ZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TkTr7k5aswBv1qfzjCNQNubpL+2Qr4y3AVtaGSi5DeEQgkKhAbGuRfGSMqH atgZs6JGGQdTZoRv+uOeRt+5zYBE2IjxEwhgoevXdAi+O3ovmtiT2jEz7zH9kZUw Mc1nSdrTemgFXAN7VzjfpBvbnGKc1tJYF1Os8ormnz3hKRQ7uhVkcQME3V7ej/3s Tt7aWixDMgT9fZLJo7Ck3NZBdysYnV4csLv9FTHUHtUjPWvqg1lsuJOdQm1mwYnE SFrJ5SHudOd0TUBmgwkoHT3ni8979yRYaww6XeXuxDqEvxndlhTPpF+IuAOy5imh JCANZiBuur8oA7W2B825szN4BwIDAQABo4IClTCCApEwHQYDVR0OBBYEFK+d4Bwn jUzruDCPZ7h1MKtJEPm6MB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1N0IvOERBNzI2NDBDMUZBMTFFQ0IzMEVFMjFBQzRGOUFFMDIvRjdENzJEM0Uy M0UyMTFFRkE0N0Q2QzY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn72YwDQYJKoZIhvcNAQELBQADggEBAID/AKhrE4Pc7eUZ vDOxVPik087dR6yMSv0OjOz6Icqo52d3aEn+USIUM7XpCMc9k/7/pKCysjAniqos p09bGj2ui7GDYg/L+zZVzDWqsYo/KoekmYFnmNEcXfVLvkxV/Io0rnrqHLlJ0HQu cGp0X8UKIwRsISJjfuUi4mJuuJ09gVvjXnpPMt9r56qCLuv2XM0Y7NjD4JtyZUmp CD+nyNGBy+ztd6nsdeuhQunjPIAjMjsQieohf0/O51F881Z8dwjSjSkrAaQeKNp/ /t45VUIRPwgpP2HZuzoCh8EnZ63JnMBAGpdDCjIr7mbK502VIeSt+MJRjpPdW0QA QnlpjIU= -----END CERTIFICATE-----Generated at Sun Apr 6 21:54:45 2025 by rpki-client