$ rpki-client -vvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/A92EC53AC95B11ED9ABE6935C4F9AE02.roa File: A92EC53AC95B11ED9ABE6935C4F9AE02.roa (raw, json) Hash identifier: gnoiGXKkrmhYTwfXU41IB03BpkGU00B0FHz74SrCkdc= Subject key identifier: B2:3A:96:81:88:3A:39:27:01:5E:32:37:0D:32:87:61:26:70:4B:74 Certificate issuer: /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E Certificate serial: 016E Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/A92EC53AC95B11ED9ABE6935C4F9AE02.roa Signing time: Fri 21 Feb 2025 04:56:19 +0000 ROA not before: Fri 21 Feb 2025 04:56:19 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 133370 IP address blocks: 103.225.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165BD7 Validity Not Before: Feb 21 04:56:19 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67b80773-dc95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:14:63:45:e5:c3:e7:6a:22:7a:19:0d:86:47: 27:3b:02:ea:12:4f:d2:1d:97:01:2f:ea:3c:a5:54: b2:6e:6f:f3:c8:0a:25:74:82:4d:73:15:5f:03:37: 74:ab:aa:77:32:99:72:65:ba:93:63:4c:0b:60:c9: b8:7b:cb:3b:91:da:26:40:a4:80:8d:38:1e:aa:cb: 20:0e:c6:a1:5b:44:de:a1:2a:82:a9:e7:de:82:91: 11:d8:ff:d6:f3:3c:af:7b:97:15:cc:5b:14:ad:20: ce:1b:09:2c:52:65:ce:23:50:3e:01:fc:ad:ce:2d: b9:55:18:cc:f5:02:7e:0c:ce:4d:06:f4:a4:43:1d: 57:e9:a6:1c:6c:0a:c3:a6:62:a4:1f:a9:4f:03:24: ae:bf:fb:42:91:5b:82:8e:ad:17:f1:7f:11:b0:43: d4:23:3a:bd:44:16:a7:a4:81:46:4b:0c:13:17:75: f3:39:11:8b:d1:03:c1:6f:b4:8e:f3:0e:d0:23:b4: 86:f6:e0:a4:fe:f5:0b:59:01:3e:12:07:7a:0e:fd: ce:4f:78:26:8c:6d:a3:72:03:18:3b:7a:2c:c2:cc: 7a:4c:4c:f8:bf:14:eb:03:a3:c4:df:5c:f2:1d:99: 4d:20:d1:8f:ea:9a:75:fb:fa:b6:72:eb:a9:80:4a: e4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3A:96:81:88:3A:39:27:01:5E:32:37:0D:32:87:61:26:70:4B:74 X509v3 Authority Key Identifier: keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/A92EC53AC95B11ED9ABE6935C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.225.210.0/23 Signature Algorithm: sha256WithRSAEncryption 01:d7:04:c8:6d:33:81:b0:d0:f5:85:ef:b2:1c:15:e2:6d:cc: cb:5f:5f:af:0f:fc:e3:8f:6d:85:fe:e0:8e:32:ef:45:7e:87: 76:79:02:d7:18:1f:74:a9:9c:96:9f:24:89:52:f2:c7:a3:45: 35:27:3b:5f:7b:65:6e:c4:8c:95:54:82:2e:79:33:98:1d:6f: 28:77:a6:38:1e:2e:d8:36:7c:b9:5d:db:2b:36:10:20:a2:b0: 99:a2:b8:e6:5b:0b:01:a0:83:53:7c:c2:d1:e0:e3:20:09:34: fe:a1:30:32:9a:63:c3:e9:30:b5:35:01:a9:07:56:24:2c:ff: 3a:54:0b:34:97:47:2e:c1:ec:43:94:f9:c9:34:ab:f4:cb:6d: 41:3a:3d:be:d0:d6:43:37:b3:07:2b:cb:73:08:9c:e0:49:9e: 3c:cc:77:3d:12:f5:29:e4:d9:57:dc:14:86:01:1e:aa:37:49: 4b:7a:9c:cb:61:9a:14:ed:c4:86:63:3c:fa:83:18:de:b4:07: 66:ff:4c:bc:eb:b9:ee:9d:76:d6:ab:fb:2f:b5:70:a3:a3:7b: 18:e6:ec:e3:d5:11:ee:8d:1e:9d:8f:1b:b4:2d:bc:7e:54:7e: 0e:0a:df:2b:85:a3:4c:42:8d:1b:fa:da:eb:74:b0:4b:d2:f8: 42:e8:c4:a2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCRDcxMTAvBgNVBAUTKDZCNDk1NzY2MkFENEMyMUJENDIyQTg3REI0MUI4QkNG QzlENkREOEUwHhcNMjUwMjIxMDQ1NjE5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2I4MDc3My1kYzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6xRjReXD52oiehkNhkcnOwLqEk/SHZcBL+o8pVSybm/zyAoldIJNcxVfAzd0 q6p3MplyZbqTY0wLYMm4e8s7kdomQKSAjTgeqssgDsahW0TeoSqCqefegpER2P/W 8zyve5cVzFsUrSDOGwksUmXOI1A+Afytzi25VRjM9QJ+DM5NBvSkQx1X6aYcbArD pmKkH6lPAySuv/tCkVuCjq0X8X8RsEPUIzq9RBanpIFGSwwTF3XzORGL0QPBb7SO 8w7QI7SG9uCk/vULWQE+Egd6Dv3OT3gmjG2jcgMYO3oswsx6TEz4vxTrA6PE31zy HZlNINGP6pp1+/q2cuupgErkAQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLI6loGI OjknAV4yNw0yh2EmcEt0MB8GA1UdIwQYMBaAFGtJV2Yq1MIb1CKofbQbi8/J1t2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUJENy84QTYyQzgyQUM5 NTgxMUVEOTE4RThDMzRDNEY5QUUwMi9hMGxYWmlyVXdodlVJcWg5dEJ1THo4blcz WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EwbFhaaXJVd2h2VUlxaDl0QnVMejhuVzNZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjVCRDcvOEE2MkM4MkFDOTU4MTFFRDkxOEU4QzM0QzRGOUFFMDIvQTkyRUM1M0FD OTVCMTFFRDlBQkU2OTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn4dIwDQYJKoZIhvcNAQELBQADggEBAAHXBMhtM4Gw0PWF 77IcFeJtzMtfX68P/OOPbYX+4I4y70V+h3Z5AtcYH3SpnJafJIlS8sejRTUnO197 ZW7EjJVUgi55M5gdbyh3pjgeLtg2fLld2ys2ECCisJmiuOZbCwGgg1N8wtHg4yAJ NP6hMDKaY8PpMLU1AakHViQs/zpUCzSXRy7B7EOU+ck0q/TLbUE6Pb7Q1kM3swcr y3MInOBJnjzMdz0S9Snk2VfcFIYBHqo3SUt6nMthmhTtxIZjPPqDGN60B2b/TLzr ue6ddtar+y+1cKOjexjm7OPVEe6NHp2PG7QtvH5Ufg4K3yuFo0xCjRv62ut0sEvS +ELoxKI= -----END CERTIFICATE-----Generated at Sat Apr 5 03:26:27 2025 by rpki-client