$ rpki-client -vvf rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/8D2816C4F90211EF99692E40C4F9AE02.roa File: 8D2816C4F90211EF99692E40C4F9AE02.roa (raw, json) Hash identifier: +NqGztaEhZpUZkM4BrFHd/HmjU1Jxg/vDaPsvxdwGGQ= Subject key identifier: 80:DA:F2:E1:C2:54:FF:5A:39:44:CB:79:80:AB:6F:B7:31:AF:84:0B Certificate issuer: /CN=A916763E/serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3 Certificate serial: 02 Authority key identifier: 69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/8D2816C4F90211EF99692E40C4F9AE02.roa Signing time: Tue 04 Mar 2025 14:11:23 +0000 ROA not before: Tue 04 Mar 2025 14:11:23 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 135059 IP address blocks: 103.174.8.0/23 maxlen: 23 103.174.8.0/24 maxlen: 24 103.174.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916763E Validity Not Before: Mar 4 14:11:23 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67c70a0a-9b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4e:e8:8d:c6:e5:24:c6:8d:4d:6b:64:c4:42: 3f:3d:04:87:1f:50:90:a3:5f:c6:4f:37:42:51:71: b1:d3:80:6a:d5:20:3f:af:03:16:d0:a2:79:6c:50: 1e:62:e8:64:61:ea:65:16:38:e3:72:72:c6:59:4e: 22:32:f7:d2:3e:2b:d0:ef:a7:18:48:4a:21:e7:ce: 01:8b:cc:d0:87:01:ea:68:67:84:26:3f:4a:1c:4f: e6:d6:2f:0a:fc:45:7a:44:58:50:cc:eb:d3:49:4a: 01:57:6c:b8:75:b8:ef:2e:57:81:5b:63:35:8b:d5: 9b:ca:79:3a:46:65:8e:71:09:5a:15:1f:03:1b:24: 69:38:0b:c0:99:bd:21:f6:3e:f9:ec:d7:48:cc:c0: 09:67:9b:3f:73:76:d9:3d:36:0a:26:de:78:ea:6e: 9a:64:20:7f:00:b9:22:0b:09:d6:63:c2:55:84:ca: b4:44:ca:73:39:53:8a:25:54:5e:05:09:58:8e:8e: 00:aa:a1:aa:06:45:98:9b:ca:51:25:42:b7:14:e8: e0:5e:bb:46:06:16:e9:68:56:aa:e0:42:52:6e:42: 4c:66:5e:5d:71:d8:32:97:43:ec:9f:a0:3e:93:ca: 85:4f:14:05:42:f2:78:7f:bf:02:b7:78:e5:e6:8c: 42:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DA:F2:E1:C2:54:FF:5A:39:44:CB:79:80:AB:6F:B7:31:AF:84:0B X509v3 Authority Key Identifier: keyid:69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/8D2816C4F90211EF99692E40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.8.0/23 Signature Algorithm: sha256WithRSAEncryption 79:ae:e6:25:9e:16:6a:77:88:0b:75:26:f8:2f:03:69:df:f5: d3:28:2d:2f:42:10:e0:c7:46:de:41:75:b3:03:16:e1:ec:15: fe:8e:df:f2:8d:62:91:9e:88:6d:21:ad:2a:84:6c:7a:7b:36: 36:a7:e5:91:d9:8c:5b:ba:41:08:04:cf:13:e3:e0:b0:7d:df: 55:1a:1b:b9:2c:f5:a2:78:6c:5f:54:d8:97:82:9f:db:c4:0c: ab:71:e9:ca:a4:ed:8d:38:f7:85:8f:40:9e:88:d3:33:58:22: 3e:7c:57:bd:cd:66:ef:e4:5a:32:3d:dc:da:66:03:82:8b:20: f7:de:bf:6f:74:3f:c8:34:c3:02:5b:c9:42:c8:f6:e5:0b:bf: 34:49:de:72:4a:20:cd:a8:0a:82:6a:90:96:fa:fa:72:5e:85: 75:60:d0:a1:d3:44:55:e4:fc:67:ba:67:99:9b:01:77:cb:43: 8d:e2:41:15:2e:0a:6b:a9:9c:0f:f1:c7:f2:f8:74:b9:71:c6: 03:82:a5:43:69:b5:5b:7e:19:83:b8:19:fc:4f:1b:88:ae:cb: 1d:95:d7:4e:05:11:cf:d1:ac:21:17:d6:a3:b4:39:9e:42:80: a6:42:f5:e3:78:5b:25:22:48:32:34:7c:ea:25:c3:c4:00:3a: bf:6a:ea:b4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzYzRTExMC8GA1UEBRMoNjkwQzE2QTk3RUU0MEI4OUE2NENCMzFGNjJBOTlBNTYz MDA4MkRDMzAeFw0yNTAzMDQxNDExMjNaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzcwYTBhLTliNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbTuiNxuUkxo1Na2TEQj89BIcfUJCjX8ZPN0JRcbHTgGrVID+vAxbQonlsUB5i 6GRh6mUWOONycsZZTiIy99I+K9DvpxhISiHnzgGLzNCHAepoZ4QmP0ocT+bWLwr8 RXpEWFDM69NJSgFXbLh1uO8uV4FbYzWL1ZvKeTpGZY5xCVoVHwMbJGk4C8CZvSH2 Pvns10jMwAlnmz9zdtk9Ngom3njqbppkIH8AuSILCdZjwlWEyrREynM5U4olVF4F CViOjgCqoaoGRZibylElQrcU6OBeu0YGFuloVqrgQlJuQkxmXl1x2DKXQ+yfoD6T yoVPFAVC8nh/vwK3eOXmjEL9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUgNry4cJU /1o5RMt5gKtvtzGvhAswHwYDVR0jBBgwFoAUaQwWqX7kC4mmTLMfYqmaVjAILcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NjNFLzg1Nzk1RkVDRjkw MTExRUY5QzI0QzgxMkM0RjlBRTAyL2FRd1dxWDdrQzRtbVRMTWZZcW1hVmpBSUxj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVF3V3FYN2tDNG1tVExNZllxbWFWakFJTGNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzYzRS84NTc5NUZFQ0Y5MDExMUVGOUMyNEM4MTJDNEY5QUUwMi84RDI4MTZDNEY5 MDIxMUVGOTk2OTJFNDBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeuCDANBgkqhkiG9w0BAQsFAAOCAQEAea7mJZ4WaneIC3Um +C8Dad/10ygtL0IQ4MdG3kF1swMW4ewV/o7f8o1ikZ6IbSGtKoRsens2NqflkdmM W7pBCATPE+PgsH3fVRobuSz1onhsX1TYl4Kf28QMq3HpyqTtjTj3hY9AnojTM1gi PnxXvc1m7+RaMj3c2mYDgosg996/b3Q/yDTDAlvJQsj25Qu/NEneckogzagKgmqQ lvr6cl6FdWDQodNEVeT8Z7pnmZsBd8tDjeJBFS4Ka6mcD/HH8vh0uXHGA4KlQ2m1 W34Zg7gZ/E8biK7LHZXXTgURz9GsIRfWo7Q5nkKApkL143hbJSJIMjR86iXDxAA6 v2rqtA== -----END CERTIFICATE-----Generated at Sun Apr 6 06:37:25 2025 by rpki-client