$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/F44B1F40FC1711EBA835010DC4F9AE02.roa File: F44B1F40FC1711EBA835010DC4F9AE02.roa (raw, json) Hash identifier: Y4KIW6waXy9by1Ft4XI4IDDdWRGAFQ3T1gtKYgu91qw= Subject key identifier: 9C:3A:FB:36:4F:CE:28:5D:AE:60:C1:4B:C8:80:D3:53:13:72:82:78 Certificate issuer: /CN=A916BC76/serialNumber=340949ECB857836357F10253C694272208197B1D Certificate serial: 050E Authority key identifier: 34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/F44B1F40FC1711EBA835010DC4F9AE02.roa Signing time: Sat 22 Mar 2025 23:44:44 +0000 ROA not before: Sat 22 Mar 2025 23:44:44 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 141744 IP address blocks: 103.163.96.0/23 maxlen: 23 103.163.96.0/24 maxlen: 24 103.163.97.0/24 maxlen: 24 2001:df6:1180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 23:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1294 (0x50e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BC76, serialNumber=340949ECB857836357F10253C694272208197B1D Validity Not Before: Mar 22 23:44:44 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67df4b6c-bf95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:35:90:90:9e:64:5f:d6:84:fa:b0:32:fa: fb:38:16:09:ae:72:df:f7:4f:3a:69:d9:c3:85:cd: cd:5d:ef:c5:78:0f:ca:ed:f0:32:50:69:35:5e:55: 70:d0:98:38:25:67:7e:f9:74:c9:05:f0:21:fd:f1: 18:ee:72:0c:ab:26:6d:05:2e:23:b5:f0:f9:4e:2a: f5:83:35:44:65:7e:00:8b:b1:87:e6:07:ef:27:77: a1:4e:2d:d3:14:97:88:5a:fc:e7:22:d2:e4:7b:ac: 3f:30:cb:26:ba:81:c5:6b:ab:3c:b3:63:5e:a2:40: 3b:88:16:40:15:92:8d:e9:fa:ca:f0:b9:10:ac:b1: 35:ca:30:04:ea:59:be:be:06:56:47:49:33:5a:75: a7:93:b0:73:0d:40:33:d3:10:64:c7:70:2c:e3:9a: 48:a5:ce:02:c5:96:f2:19:41:ac:f5:29:71:ac:5e: 77:c6:47:be:29:dc:a6:e5:23:ee:dd:be:fb:d6:1b: f3:35:51:91:9b:e0:3b:21:57:6e:da:88:15:6f:38: 68:fa:9f:d5:b1:eb:e5:1b:08:8e:bc:8f:cd:db:9f: b4:68:11:48:33:e4:8e:1f:83:03:30:62:da:7e:9b: 1f:37:e9:6b:ae:10:3c:af:4f:33:cb:1e:2a:8c:a7: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3A:FB:36:4F:CE:28:5D:AE:60:C1:4B:C8:80:D3:53:13:72:82:78 X509v3 Authority Key Identifier: keyid:34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/F44B1F40FC1711EBA835010DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.96.0/23 IPv6: 2001:df6:1180::/48 Signature Algorithm: sha256WithRSAEncryption 98:14:c5:b4:e9:59:b2:cc:8e:75:aa:cb:cf:21:a2:ce:d9:6f: e2:aa:90:4e:ef:cf:1e:f4:98:f6:40:e9:75:0a:2b:48:10:69: 1f:d7:da:2b:ed:0a:d8:96:51:09:54:4c:8a:56:85:8e:cb:5e: 46:ab:4c:ac:be:ab:10:79:e4:de:89:b1:b3:23:13:83:70:e7: 41:6e:40:38:39:4b:0c:ec:80:d3:a6:b5:77:e8:f9:ab:b3:9f: ac:08:8a:7b:5c:91:82:39:d4:26:75:b2:a3:76:3f:b2:6c:c4: 41:c7:a5:2c:7c:9b:8d:92:6b:6d:ad:d1:c6:05:74:f0:17:7b: 4d:95:6c:40:a6:d0:72:f6:0b:6b:d9:6a:01:bf:a9:ed:25:d7: c3:b6:59:85:48:45:16:30:5e:e4:ac:3d:43:cc:b5:73:73:45: 13:3d:4c:6b:81:b5:3c:2b:2a:77:25:61:6c:8a:49:2d:bd:36: f1:9e:cf:b1:4f:3d:87:00:1b:20:62:99:b9:4c:bc:65:98:1e: 52:37:26:2d:51:64:57:9c:f7:80:18:46:b3:2d:6b:40:6b:cf: bc:15:83:bc:6e:ac:d4:77:51:e9:4a:c5:12:14:0d:4f:ab:53: 00:db:13:3e:68:41:0b:49:93:6b:ac:a0:91:a7:cb:35:aa:12: 15:f4:20:ed -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDNzYxMTAvBgNVBAUTKDM0MDk0OUVDQjg1NzgzNjM1N0YxMDI1M0M2OTQyNzIy MDgxOTdCMUQwHhcNMjUwMzIyMjM0NDQ0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RmNGI2Yy1iZjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoQ1kJCeZF/WhPqwMvr7OBYJrnLf9086adnDhc3NXe/FeA/K7fAyUGk1XlVw 0Jg4JWd++XTJBfAh/fEY7nIMqyZtBS4jtfD5Tir1gzVEZX4Ai7GH5gfvJ3ehTi3T FJeIWvznItLke6w/MMsmuoHFa6s8s2NeokA7iBZAFZKN6frK8LkQrLE1yjAE6lm+ vgZWR0kzWnWnk7BzDUAz0xBkx3As45pIpc4CxZbyGUGs9SlxrF53xke+Kdym5SPu 3b771hvzNVGRm+A7IVdu2ogVbzho+p/VsevlGwiOvI/N25+0aBFIM+SOH4MDMGLa fpsfN+lrrhA8r08zyx4qjKffhwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJw6+zZP zihdrmDBS8iA01MTcoJ4MB8GA1UdIwQYMBaAFDQJSey4V4NjV/ECU8aUJyIIGXsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkM3Ni82MTM2QTE3MkZD MTUxMUVCOUU1MEJDMEFDNEY5QUUwMi9OQWxKN0xoWGcyTlg4UUpUeHBRbklnZ1pl eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BbEo3TGhYZzJOWDhRSlR4cFFuSWdnWmV4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkJDNzYvNjEzNkExNzJGQzE1MTFFQjlFNTBCQzBBQzRGOUFFMDIvRjQ0QjFGNDBG QzE3MTFFQkE4MzUwMTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFno2AwDwQCAAIwCQMHACABDfYRgDANBgkqhkiG9w0BAQsF AAOCAQEAmBTFtOlZssyOdarLzyGiztlv4qqQTu/PHvSY9kDpdQorSBBpH9faK+0K 2JZRCVRMilaFjsteRqtMrL6rEHnk3omxsyMTg3DnQW5AODlLDOyA06a1d+j5q7Of rAiKe1yRgjnUJnWyo3Y/smzEQcelLHybjZJrba3RxgV08Bd7TZVsQKbQcvYLa9lq Ab+p7SXXw7ZZhUhFFjBe5Kw9Q8y1c3NFEz1Ma4G1PCsqdyVhbIpJLb028Z7PsU89 hwAbIGKZuUy8ZZgeUjcmLVFkV5z3gBhGsy1rQGvPvBWDvG6s1HdR6UrFEhQNT6tT ANsTPmhBC0mTa6ygkafLNaoSFfQg7Q== -----END CERTIFICATE-----Generated at Sun Apr 13 04:50:43 2025 by rpki-client