$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/6657C8D243B911E9AE253437C4F9AE02.roa File: 6657C8D243B911E9AE253437C4F9AE02.roa (raw, json) Hash identifier: Ksnt24EsyPmiy/Gyqmmcb01Su1qcDddDH/I7fUARzPI= Subject key identifier: 1A:2D:37:14:5A:85:C4:B7:F5:4E:8D:73:DA:C4:3F:98:1D:8D:0C:62 Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Certificate serial: 0FEF Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/6657C8D243B911E9AE253437C4F9AE02.roa Signing time: Wed 12 Feb 2025 18:05:50 +0000 ROA not before: Wed 12 Feb 2025 18:05:50 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 138600 IP address blocks: 103.134.56.0/22 maxlen: 22 103.134.56.0/23 maxlen: 23 103.134.56.0/24 maxlen: 24 103.134.57.0/24 maxlen: 24 103.134.58.0/23 maxlen: 23 103.134.58.0/24 maxlen: 24 103.134.59.0/24 maxlen: 24 2401:84e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4079 (0xfef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CE83 Validity Not Before: Feb 12 18:05:50 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ace2fd-02f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d8:fa:ef:85:3a:92:15:f3:bf:42:13:5c:9e: 0d:11:8e:cc:f5:32:99:0f:3f:55:6a:6c:3b:b5:4a: 12:8b:15:b5:fe:11:3a:a3:a7:06:cf:ad:a0:07:98: 40:8c:89:b7:a5:4b:ef:30:47:cb:15:5c:8c:ec:57: 18:d4:f3:c0:14:f8:51:6a:e6:2c:a0:9e:6a:7a:08: 4e:5b:66:83:0e:a0:82:79:bc:4c:b0:d7:35:3f:14: f7:f6:84:30:cb:72:02:ff:64:40:5b:92:a2:f3:88: b4:8d:a2:0d:52:bd:2f:8a:ef:51:38:87:79:57:e5: 75:4f:b5:3f:46:f4:b4:c0:d3:91:60:7d:82:10:4d: a2:c5:d4:58:74:73:d7:a4:6d:49:55:25:1e:92:60: d8:b7:51:46:5e:20:48:16:18:55:9a:b8:60:39:6f: 1c:b6:01:55:7a:cb:c2:75:3d:bf:b0:bd:44:7b:df: 42:8d:8e:e3:fd:15:5d:c4:4c:1b:a2:7a:38:f4:ff: 1c:5f:e8:d2:ca:9e:c5:cb:ba:eb:27:e3:27:60:43: 57:4f:20:3f:d7:14:85:8c:c5:f1:26:f8:8e:15:cd: 3f:13:f2:6a:b2:c4:93:0e:db:aa:74:f4:35:cc:94: a5:2d:52:fa:31:6f:ae:92:38:ec:d3:a5:ad:52:ed: 22:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2D:37:14:5A:85:C4:B7:F5:4E:8D:73:DA:C4:3F:98:1D:8D:0C:62 X509v3 Authority Key Identifier: keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/6657C8D243B911E9AE253437C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.56.0/22 IPv6: 2401:84e0::/32 Signature Algorithm: sha256WithRSAEncryption 73:62:d5:a0:29:a3:4f:f1:7e:4c:59:b1:7e:e6:fc:8e:bb:9c: 01:24:f3:ea:3d:9a:ee:bd:15:57:b9:39:05:8f:bf:90:a3:8a: 43:af:c7:ec:ce:36:d7:77:99:6f:b7:88:92:81:b1:ab:41:f7: 71:df:f0:f5:ca:de:18:a6:ff:e0:88:a0:f3:a2:95:2e:26:a6: 0d:02:96:a4:a1:af:4c:0c:37:00:a5:5e:6a:d0:84:27:02:c3: b6:d9:62:b2:f0:f9:57:62:10:00:4e:28:86:9a:bc:d6:40:9c: 47:08:27:f0:69:7a:c5:a9:3b:8f:8c:b3:58:3c:1a:4d:5d:f7: a5:07:2c:28:49:cc:48:56:5a:c8:ee:86:37:9b:97:e7:56:d5: 66:43:9a:86:d8:6c:fe:a6:84:3e:2f:30:3f:26:46:e7:08:87: 94:f0:ab:f5:63:39:ee:c6:a9:ec:4f:24:4c:06:d9:cd:c8:bd: 0a:a6:f6:73:8e:95:21:88:da:61:51:3f:80:3a:4b:7f:01:a6: 3e:ba:d9:44:c9:62:35:98:fc:18:c5:21:85:7b:57:fb:1b:14: 9d:dc:83:15:ee:a1:4b:d3:e2:16:9f:59:89:33:3d:8f:87:62: f4:91:cc:c0:c6:29:53:4b:eb:2f:83:6a:87:37:57:6d:06:b7: 14:61:db:44 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICD+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG NEY1MDE4QUUwHhcNMjUwMjEyMTgwNTUwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FjZTJmZC0wMmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9j674U6khXzv0ITXJ4NEY7M9TKZDz9Vamw7tUoSixW1/hE6o6cGz62gB5hA jIm3pUvvMEfLFVyM7FcY1PPAFPhRauYsoJ5qeghOW2aDDqCCebxMsNc1PxT39oQw y3IC/2RAW5Ki84i0jaINUr0viu9ROId5V+V1T7U/RvS0wNORYH2CEE2ixdRYdHPX pG1JVSUekmDYt1FGXiBIFhhVmrhgOW8ctgFVesvCdT2/sL1Ee99CjY7j/RVdxEwb ono49P8cX+jSyp7Fy7rrJ+MnYENXTyA/1xSFjMXxJviOFc0/E/JqssSTDtuqdPQ1 zJSlLVL6MW+ukjjs06WtUu0iXwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBotNxRa hcS39U6Nc9rEP5gdjQxiMB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkNFODMvOTU2NDE5MUE0M0I4MTFFOUFCQTIyQTM0QzRGOUFFMDIvNjY1N0M4RDI0 M0I5MTFFOUFFMjUzNDM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnhjgwDQQCAAIwBwMFACQBhOAwDQYJKoZIhvcNAQELBQAD ggEBAHNi1aApo0/xfkxZsX7m/I67nAEk8+o9mu69FVe5OQWPv5CjikOvx+zONtd3 mW+3iJKBsatB93Hf8PXK3him/+CIoPOilS4mpg0ClqShr0wMNwClXmrQhCcCw7bZ YrLw+VdiEABOKIaavNZAnEcIJ/BpesWpO4+Ms1g8Gk1d96UHLChJzEhWWsjuhjeb l+dW1WZDmobYbP6mhD4vMD8mRucIh5Twq/VjOe7GqexPJEwG2c3IvQqm9nOOlSGI 2mFRP4A6S38Bpj662UTJYjWY/BjFIYV7V/sbFJ3cgxXuoUvT4hafWYkzPY+HYvSR zMDGKVNL6y+Daoc3V20GtxRh20Q= -----END CERTIFICATE-----Generated at Sat Apr 5 13:47:45 2025 by rpki-client