$ rpki-client -vvf rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/CDBA3F66B9BD11EAAE22B109C4F9AE02.roa File: CDBA3F66B9BD11EAAE22B109C4F9AE02.roa (raw, json) Hash identifier: YmZW8IrF5Ot7b++uoJjSCiZIZtySz+iokfuITWaJe4A= Subject key identifier: 84:5C:CB:00:E2:91:A6:30:FD:48:C6:66:A1:59:AC:E0:F4:C7:57:21 Certificate issuer: /CN=A9169DB2/serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB Certificate serial: 0876 Authority key identifier: 9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/CDBA3F66B9BD11EAAE22B109C4F9AE02.roa Signing time: Sat 08 Feb 2025 20:38:49 +0000 ROA not before: Sat 08 Feb 2025 20:38:49 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 56301 IP address blocks: 103.17.108.0/23 maxlen: 23 103.48.116.0/24 maxlen: 24 103.87.69.0/24 maxlen: 24 203.26.188.0/24 maxlen: 24 203.26.189.0/24 maxlen: 24 218.100.84.0/24 maxlen: 24 2401:fd40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2166 (0x876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169DB2 Validity Not Before: Feb 8 20:38:49 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a7c0d9-0522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6f:7d:2e:78:d9:06:c8:64:31:13:8a:28:96: 98:68:f7:ee:f2:ea:b3:44:9f:20:21:1a:b8:04:db: a2:6d:3a:6c:71:a0:bf:c6:ae:47:57:81:1c:f7:d2: d0:cb:33:31:f2:8d:04:4a:c7:a7:a8:1b:cf:94:a6: 6b:7d:40:20:04:4d:59:8b:11:ba:4e:c2:0e:88:e0: 9c:ab:57:cd:20:d5:e4:47:55:3a:af:c3:05:c1:d3: 96:67:ae:22:a2:0e:f5:fd:ca:eb:1a:48:8f:46:3c: 94:dc:1d:31:65:1c:dc:57:0d:96:b7:2c:2f:db:10: db:27:cb:b7:b9:d9:09:63:f1:41:ca:fb:11:25:53: da:93:ff:d6:e0:12:6a:c8:1b:f7:1d:5b:49:67:f1: 90:0b:28:47:31:5b:df:f7:25:8f:5a:46:02:e1:8c: 03:ca:d7:0b:d4:13:1e:8a:e1:4d:68:66:5c:8f:cc: 20:52:76:fc:d4:99:4a:fc:db:30:51:e6:3a:d6:d9: 33:6b:c6:94:74:46:32:3b:4e:65:90:c8:19:a9:84: d1:87:73:ac:db:e3:32:2f:04:b3:9d:33:21:78:50: 34:20:2c:eb:fa:9e:75:32:60:92:4d:e4:7e:3d:7a: 72:cb:9b:00:73:6a:a8:11:3c:c7:18:62:2e:bf:a5: 8a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5C:CB:00:E2:91:A6:30:FD:48:C6:66:A1:59:AC:E0:F4:C7:57:21 X509v3 Authority Key Identifier: keyid:9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/CDBA3F66B9BD11EAAE22B109C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.17.108.0/23 103.48.116.0/24 103.87.69.0/24 203.26.188.0/23 218.100.84.0/24 IPv6: 2401:fd40::/32 Signature Algorithm: sha256WithRSAEncryption 05:13:8d:7b:9f:ae:34:e1:2b:42:8b:76:d7:55:b4:16:d1:d6: 36:18:e9:6d:fe:fb:f1:cc:31:15:57:08:cc:4b:d1:82:3c:db: 04:04:55:ed:c1:f6:ed:ca:b4:9c:e8:df:06:2b:2f:16:19:43: a4:0d:46:91:7e:3f:66:7c:ef:27:b0:f5:8e:c2:de:6d:7e:ad: 59:fc:69:bb:87:65:a4:4b:f9:be:9a:71:91:e6:09:48:49:cb: 2b:c0:32:d2:0a:4e:61:4f:74:fd:ad:7b:9e:9b:1e:f8:79:2a: 2e:95:9f:a6:9a:84:0f:2c:38:78:eb:d3:ae:7f:79:e5:b6:01: 82:fb:76:3e:ab:c0:66:87:29:54:eb:e9:b5:18:a1:f8:13:b5: 3b:48:69:67:5b:f5:a2:3d:ea:54:ae:2e:9a:65:52:7c:b3:7d: 7d:6f:c5:93:00:1b:0f:ea:40:d5:ed:78:92:ca:ac:a2:39:01: e2:59:14:98:b6:45:b8:69:31:6d:ab:b8:8e:14:54:e9:0d:a0: b0:2e:c3:01:bd:4d:31:ba:37:f7:82:43:2d:51:a7:d8:18:56: 2e:17:8b:c7:88:5e:bb:9d:c4:0c:78:66:43:4a:fc:fb:bc:9a: 6e:05:dd:01:51:8a:14:76:d7:1b:4e:b3:21:7a:b5:ef:1f:63: 76:3a:76:25 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlEQjIxMTAvBgNVBAUTKDlCODI1OUY3QjNDMURFREQ0NzE5QkMwQURDNTg3QjNE Qjg5RTdCREIwHhcNMjUwMjA4MjAzODQ5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E3YzBkOS0wNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2W99LnjZBshkMROKKJaYaPfu8uqzRJ8gIRq4BNuibTpscaC/xq5HV4Ec99LQ yzMx8o0ESsenqBvPlKZrfUAgBE1ZixG6TsIOiOCcq1fNINXkR1U6r8MFwdOWZ64i og71/crrGkiPRjyU3B0xZRzcVw2Wtywv2xDbJ8u3udkJY/FByvsRJVPak//W4BJq yBv3HVtJZ/GQCyhHMVvf9yWPWkYC4YwDytcL1BMeiuFNaGZcj8wgUnb81JlK/Nsw UeY61tkza8aUdEYyO05lkMgZqYTRh3Os2+MyLwSznTMheFA0ICzr+p51MmCSTeR+ PXpyy5sAc2qoETzHGGIuv6WK/QIDAQABo4ICvDCCArgwHQYDVR0OBBYEFIRcywDi kaYw/UjGZqFZrOD0x1chMB8GA1UdIwQYMBaAFJuCWfezwd7dRxm8CtxYez24nnvb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OURCMi9BOUNDNDlCNkI5 QkIxMUVBQkREMEZEODRDNEY5QUUwMi9tNEpaOTdQQjN0MUhHYndLM0ZoN1BiaWVl OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL200Slo5N1BCM3QxSEdid0szRmg3UGJpZWU5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlEQjIvQTlDQzQ5QjZCOUJCMTFFQUJERDBGRDg0QzRGOUFFMDIvQ0RCQTNGNjZC OUJEMTFFQUFFMjJCMTA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAFnEWwDBABnMHQDBABnV0UDBAHLGrwDBADaZFQwDQQCAAIw BwMFACQB/UAwDQYJKoZIhvcNAQELBQADggEBAAUTjXufrjThK0KLdtdVtBbR1jYY 6W3++/HMMRVXCMxL0YI82wQEVe3B9u3KtJzo3wYrLxYZQ6QNRpF+P2Z87yew9Y7C 3m1+rVn8abuHZaRL+b6acZHmCUhJyyvAMtIKTmFPdP2te56bHvh5Ki6Vn6aahA8s OHjr065/eeW2AYL7dj6rwGaHKVTr6bUYofgTtTtIaWdb9aI96lSuLpplUnyzfX1v xZMAGw/qQNXteJLKrKI5AeJZFJi2RbhpMW2ruI4UVOkNoLAuwwG9TTG6N/eCQy1R p9gYVi4Xi8eIXrudxAx4ZkNK/Pu8mm4F3QFRihR21xtOsyF6te8fY3Y6diU= -----END CERTIFICATE-----Generated at Sat Apr 5 22:04:01 2025 by rpki-client