$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa File: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (raw, json) Hash identifier: 8/axDs5qsmDACTYAZ5Y63PJlpZ3Ia2a5BRXxYdLZ9QE= Subject key identifier: 65:98:A1:3A:9F:81:24:D2:94:DA:44:CC:79:C0:B1:80:9F:2B:CC:49 Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Certificate serial: A0 Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa Signing time: Sat 18 Jan 2025 20:49:30 +0000 ROA not before: Sat 18 Jan 2025 20:49:30 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 141015 IP address blocks: 103.154.240.0/23 maxlen: 24 2407:e340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 18:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4 Validity Not Before: Jan 18 20:49:30 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=678c13da-3a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f6:c2:a0:98:d6:03:ba:b5:88:cb:33:97:01: 7d:25:49:96:fb:5d:26:b6:28:84:57:70:73:80:ef: 2a:fd:a0:5d:b3:2e:05:0e:f2:dc:82:ee:61:46:71: 5b:a4:73:1b:02:cc:e0:61:6b:49:66:9f:dd:cc:b6: 2a:d9:7d:ce:dd:d4:ba:f3:74:6d:75:7c:6f:b9:78: 45:1f:78:79:e2:62:da:e4:c9:14:e5:6e:f5:61:41: 90:39:f3:bd:94:90:1d:95:31:b2:dc:87:31:ec:44: 09:af:95:77:15:53:ed:bc:a0:84:65:90:31:21:24: 54:6f:ab:ad:1f:bc:9a:b5:f3:02:98:1e:c3:20:7c: 53:cf:93:1a:e4:2d:78:65:fd:8c:61:bd:18:36:64: 1f:f4:0e:21:4f:6f:69:34:18:81:9a:12:3e:b9:5c: 72:cc:df:6a:3d:d8:a4:6c:b7:d2:b0:90:c2:29:93: e8:e1:2f:de:42:c6:c1:75:97:25:29:5b:13:f7:02: b5:4a:2b:cb:67:da:95:a8:e8:10:ae:32:32:99:28: eb:90:71:c3:39:62:1e:c1:52:8b:07:9c:00:72:0d: 88:95:8f:ef:21:e8:db:f5:ee:09:91:41:9f:d2:00: d8:b8:eb:89:58:a1:10:09:61:a7:71:65:61:f1:d2: d9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:98:A1:3A:9F:81:24:D2:94:DA:44:CC:79:C0:B1:80:9F:2B:CC:49 X509v3 Authority Key Identifier: keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.240.0/23 IPv6: 2407:e340::/32 Signature Algorithm: sha256WithRSAEncryption 5a:db:fd:9d:c1:33:70:3c:88:29:d5:30:ee:20:c1:96:8c:8b: 71:1d:ca:f7:f5:cc:5e:1d:1d:e8:79:ac:28:26:11:8b:f7:00: 31:a8:19:40:5a:64:39:c6:4d:00:56:0b:41:75:43:ca:27:5e: 27:66:2e:89:aa:97:c5:1e:40:e3:eb:54:7b:3f:8e:32:43:3f: a2:8c:d5:b8:45:a0:d5:03:e3:36:28:43:aa:3c:c5:f6:e3:c8: ff:2e:f2:b8:71:62:db:24:cf:e7:b4:17:d0:d4:c1:01:7c:e6: ff:62:07:60:80:7a:ca:72:cd:cc:2f:75:1a:be:7d:80:a4:2e: 29:91:b7:bc:3b:3e:c2:6e:07:fd:e2:3f:cd:c2:3a:95:95:4b: c6:45:69:f0:6b:7d:10:b5:7b:0f:82:69:50:01:7c:64:cb:4f: 80:88:41:ef:0f:36:c2:8d:95:82:aa:b1:ff:cd:b4:a9:8f:f5: 54:42:45:86:35:ed:be:ca:eb:ba:41:a1:9e:9b:ed:e1:17:06: d4:e8:66:d1:1f:5a:e2:39:15:f2:19:6b:3b:7d:c2:2b:a8:33: 4b:f4:fc:2d:06:77:3b:d2:36:b7:3b:be:4a:63:f9:f8:fe:c2: 24:4a:64:52:ac:1b:eb:79:57:e0:cf:11:dc:65:8f:b8:77:8a: 28:4a:78:e2 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDIyQjRBOUFBQTk4MkFCQ0IzOUY5Nzg5ODZCQ0I2Nzcw QjYwMkMxQTQwHhcNMjUwMTE4MjA0OTMwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhjMTNkYS0zYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvbCoJjWA7q1iMszlwF9JUmW+10mtiiEV3BzgO8q/aBdsy4FDvLcgu5hRnFb pHMbAszgYWtJZp/dzLYq2X3O3dS683RtdXxvuXhFH3h54mLa5MkU5W71YUGQOfO9 lJAdlTGy3Icx7EQJr5V3FVPtvKCEZZAxISRUb6utH7yatfMCmB7DIHxTz5Ma5C14 Zf2MYb0YNmQf9A4hT29pNBiBmhI+uVxyzN9qPdikbLfSsJDCKZPo4S/eQsbBdZcl KVsT9wK1SivLZ9qVqOgQrjIymSjrkHHDOWIewVKLB5wAcg2IlY/vIejb9e4JkUGf 0gDYuOuJWKEQCWGncWVh8dLZOQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGWYoTqf gSTSlNpEzHnAsYCfK8xJMB8GA1UdIwQYMBaAFCK0qaqpgqvLOfl4mGvLZ3C2AsGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4czUtWGlZYTh0bmNMWUN3 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyU3BxcW1DcThzNS1YaVlhOHRuY0xZQ3dhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkU5RjQvM0Q2QkE1NzRGNjk2MTFFQTkzNDg2RjI1QzRGOUFFMDIvNzkwNTdFMUNF QjEwMTFFRUI5Q0U0RjE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnmvAwDQQCAAIwBwMFACQH40AwDQYJKoZIhvcNAQELBQAD ggEBAFrb/Z3BM3A8iCnVMO4gwZaMi3Edyvf1zF4dHeh5rCgmEYv3ADGoGUBaZDnG TQBWC0F1Q8onXidmLomql8UeQOPrVHs/jjJDP6KM1bhFoNUD4zYoQ6o8xfbjyP8u 8rhxYtskz+e0F9DUwQF85v9iB2CAespyzcwvdRq+fYCkLimRt7w7PsJuB/3iP83C OpWVS8ZFafBrfRC1ew+CaVABfGTLT4CIQe8PNsKNlYKqsf/NtKmP9VRCRYY17b7K 67pBoZ6b7eEXBtToZtEfWuI5FfIZazt9wiuoM0v0/C0GdzvSNrc7vkpj+fj+wiRK ZFKsG+t5V+DPEdxlj7h3iihKeOI= -----END CERTIFICATE-----Generated at Mon Apr 7 01:44:45 2025 by rpki-client