$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/3B428CDA8AE011EF90B73462C4F9AE02.roa File: 3B428CDA8AE011EF90B73462C4F9AE02.roa (raw, json) Hash identifier: 57IRG/hk+CbShhSRohuNNMRM6NtPI2s9mEQB7EL1Rs8= Subject key identifier: 29:DF:28:C1:82:7C:2E:E0:DE:C8:A6:86:CF:1F:80:67:83:FC:55:F6 Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B Certificate serial: 05E3 Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/3B428CDA8AE011EF90B73462C4F9AE02.roa Signing time: Tue 14 Jan 2025 14:24:17 +0000 ROA not before: Tue 14 Jan 2025 14:24:17 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 131275 IP address blocks: 103.79.16.0/24 maxlen: 24 103.79.18.0/24 maxlen: 24 122.50.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1507 (0x5e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D8D9 Validity Not Before: Jan 14 14:24:17 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67867390-c9d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:17:86:b4:d6:36:dd:da:91:3e:1d:39:86: 07:79:ca:99:b6:14:7e:a9:2d:1e:1e:36:e3:dc:6e: 69:02:22:e4:70:e5:5b:d2:90:9f:99:68:9f:ad:0f: 8f:bd:26:b4:bb:de:c4:ff:f4:f7:7d:8e:9c:10:04: 34:51:4e:38:34:43:de:0b:d2:fd:d6:be:bd:35:f8: ff:82:b2:76:67:57:53:c7:f7:84:fd:99:bc:23:ec: 56:31:6b:03:03:c2:ec:7f:4e:b5:bf:94:bd:ba:03: a2:c0:f8:d6:ad:cc:e7:63:b4:40:8b:77:7b:0c:8a: ee:ec:00:f0:61:35:a2:8e:95:aa:54:81:3c:ae:35: f2:13:41:95:05:28:a2:36:c1:d9:76:b1:d1:04:75: 38:4b:76:37:69:dd:44:eb:8a:8a:a4:20:a9:c9:8b: e3:14:db:4b:2e:c7:32:fb:67:c2:f2:65:ae:23:d4: bb:20:e1:6a:c2:fd:67:a5:a1:72:8e:d6:9f:a1:1c: 21:b3:31:91:45:e5:32:60:d9:f9:26:6d:d2:bd:d4: 70:39:d1:21:e4:ed:4d:ff:23:ea:1c:14:c4:08:11: bd:80:91:f6:f8:a4:53:06:59:7d:8f:09:06:43:3c: 19:e3:8a:90:2c:cd:0e:0a:13:e4:38:23:be:99:54: 89:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DF:28:C1:82:7C:2E:E0:DE:C8:A6:86:CF:1F:80:67:83:FC:55:F6 X509v3 Authority Key Identifier: keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/3B428CDA8AE011EF90B73462C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.79.16.0/24 103.79.18.0/24 122.50.1.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:2a:aa:d6:db:7c:45:7e:78:3b:4b:c3:b6:54:80:f3:80:74: d4:04:3d:73:bb:97:72:0c:b1:b2:cf:cf:06:c4:93:f4:48:bd: b2:d1:28:78:67:2e:8f:51:89:2b:a3:02:ce:e2:0c:90:dc:6c: ac:e0:51:78:33:b2:5b:75:c8:81:50:1f:a1:fb:8e:d9:38:54: 04:ec:7b:d1:f1:f4:d6:96:4a:70:bd:8b:db:6d:af:b2:dd:40: 36:72:63:ec:c6:99:90:07:0f:cb:a5:d3:05:30:ae:3f:d5:17: e9:46:f6:83:4c:0e:49:82:02:e4:ba:12:6e:00:52:bc:bc:91: 49:57:c5:73:04:81:ad:69:12:01:72:02:37:94:71:63:f4:a1: 75:14:f4:03:55:39:69:af:a6:c3:a4:04:b6:6a:29:1e:60:4f: 74:ae:bb:cf:22:77:8d:d4:19:73:7d:58:e8:7e:c5:57:b1:55: c5:57:32:6f:29:93:fd:1e:f5:f2:d2:38:32:b6:6d:2c:a6:47: 4f:5c:f9:6d:76:27:6f:1f:81:d7:fe:cc:d2:ff:c2:d8:ac:e7: 48:df:f4:76:83:f8:2d:9c:16:e0:9c:ae:79:e3:51:ff:23:68: 9e:f7:2d:87:48:24:b8:24:1a:8f:0a:dc:78:a0:3e:31:14:e1: ad:93:6e:d4 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC NTc3MzQ1NkIwHhcNMjUwMTE0MTQyNDE3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg2NzM5MC1jOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHQXhrTWNt3akT4dOYYHecqZthR+qS0eHjbj3G5pAiLkcOVb0pCfmWifrQ+P vSa0u97E//T3fY6cEAQ0UU44NEPeC9L91r69Nfj/grJ2Z1dTx/eE/Zm8I+xWMWsD A8Lsf061v5S9ugOiwPjWrcznY7RAi3d7DIru7ADwYTWijpWqVIE8rjXyE0GVBSii NsHZdrHRBHU4S3Y3ad1E64qKpCCpyYvjFNtLLscy+2fC8mWuI9S7IOFqwv1npaFy jtafoRwhszGRReUyYNn5Jm3SvdRwOdEh5O1N/yPqHBTECBG9gJH2+KRTBll9jwkG QzwZ44qQLM0OChPkOCO+mVSJ8QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFCnfKMGC fC7g3simhs8fgGeD/FX2MB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4 RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQ4RDkvNTQ4M0JGQjZDOEZCMTFFQkJBNUJBRTUxQzRGOUFFMDIvM0I0MjhDREE4 QUUwMTFFRjkwQjczNDYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnTxADBABnTxIDBAB6MgEwDQYJKoZIhvcNAQELBQADggEB AC8qqtbbfEV+eDtLw7ZUgPOAdNQEPXO7l3IMsbLPzwbEk/RIvbLRKHhnLo9RiSuj As7iDJDcbKzgUXgzslt1yIFQH6H7jtk4VATse9Hx9NaWSnC9i9ttr7LdQDZyY+zG mZAHD8ul0wUwrj/VF+lG9oNMDkmCAuS6Em4AUry8kUlXxXMEga1pEgFyAjeUcWP0 oXUU9ANVOWmvpsOkBLZqKR5gT3Suu88id43UGXN9WOh+xVexVcVXMm8pk/0e9fLS ODK2bSymR09c+W12J28fgdf+zNL/wtis50jf9HaD+C2cFuCcrnnjUf8jaJ73LYdI JLgkGo8K3HigPjEU4a2TbtQ= -----END CERTIFICATE-----Generated at Sat Apr 5 19:34:02 2025 by rpki-client