$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/6D106CEE3AA011EB963B4842C4F9AE02.roa File: 6D106CEE3AA011EB963B4842C4F9AE02.roa (raw, json) Hash identifier: m1Ja+K+BQF88h58Y18w9A7vu3WiRuOsB65pKsql8BvI= Subject key identifier: B6:EA:41:B0:F5:67:8E:35:56:6A:88:71:EA:6C:C5:43:4B:70:D8:C8 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 3471 Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/6D106CEE3AA011EB963B4842C4F9AE02.roa Signing time: Tue 18 Mar 2025 15:00:52 +0000 ROA not before: Tue 18 Mar 2025 15:00:52 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 37978 IP address blocks: 202.7.8.0/21 maxlen: 21 203.5.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13425 (0x3471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304 Validity Not Before: Mar 18 15:00:52 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67d98aa4-aa33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f0:cf:f4:c7:72:09:09:be:9d:92:2a:08:8d: c8:72:67:a3:5f:b1:fb:fa:09:ba:c8:a4:b0:36:49: bc:4c:c9:c4:0a:39:b1:a6:a4:cb:a7:a1:9b:3c:48: 58:74:c2:1a:e9:77:9b:39:9a:87:9f:e9:e3:61:f2: 15:b1:7c:36:9e:33:37:ba:1f:ba:d2:1b:23:35:92: e5:2f:d2:44:91:61:9b:1e:ee:84:0f:c7:df:24:61: c7:0d:6c:ec:9a:ae:f0:2c:b7:76:91:48:3f:27:f2: 1c:55:77:67:92:1f:bf:a8:38:3d:91:a3:00:b6:06: 6d:29:32:74:a3:ff:20:c3:02:18:90:3d:8a:aa:f3: bb:63:96:2c:09:0e:f5:41:b4:0f:7e:a2:dd:a5:76: a6:ea:df:15:24:ad:3b:5c:d8:d3:09:a6:e1:d4:c2: 2a:a5:08:5a:f9:76:6f:d5:23:53:e6:ab:ea:a9:eb: 45:68:19:97:b3:16:df:90:79:bf:75:55:c9:5a:d6: cd:51:cd:63:8e:44:7e:96:19:5a:d9:1e:77:92:d8: 17:bc:01:b5:54:57:12:32:5d:d6:95:ab:b5:8d:b0: f4:bf:9a:a3:78:38:bb:4b:51:85:9d:ee:65:08:84: 1e:46:a7:9d:88:99:cf:bd:21:b3:7c:26:18:c2:0b: 62:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EA:41:B0:F5:67:8E:35:56:6A:88:71:EA:6C:C5:43:4B:70:D8:C8 X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/6D106CEE3AA011EB963B4842C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.7.8.0/21 203.5.121.0/24 Signature Algorithm: sha256WithRSAEncryption 97:c9:57:3e:b3:4d:a3:0d:e7:50:19:0b:99:1e:47:71:a4:88: 4c:70:91:1c:56:5a:07:c4:a4:cb:be:d1:fd:65:95:e3:62:78: 90:ef:92:81:66:11:d1:3f:59:00:36:8f:34:ca:3d:27:ed:bc: 27:e0:42:30:f1:4e:c7:32:15:19:8b:d8:7d:22:80:a3:1e:8a: dd:e6:11:72:d9:f3:21:54:8a:02:49:6b:68:f9:45:42:c3:59: bf:ff:8b:04:b5:7c:8d:a6:ce:3b:d1:e2:ee:07:d7:5e:e1:9d: 7b:ec:af:df:3a:68:62:08:8d:3e:7e:e3:29:ac:a8:2a:19:dc: 5e:aa:df:00:0b:7c:88:76:0c:43:d3:aa:3b:2a:15:a8:69:34: 05:aa:ed:99:38:e1:61:15:04:00:ed:56:91:f2:bd:83:94:4c: e4:6e:c5:21:99:6b:a1:d3:57:1a:95:6c:19:b7:b1:4a:f0:e7: d5:3b:da:cf:81:4e:65:85:48:4e:cc:12:51:df:a7:a4:31:52: 18:ee:0f:40:c5:35:35:c2:ff:49:c2:f1:d3:93:09:77:75:c7: 8d:4c:dd:84:98:1c:45:91:0b:8c:51:45:66:6c:d4:a7:b5:8a: b9:93:f9:f8:82:0a:54:7f:79:d9:52:77:63:5e:38:f9:ed:ef: f3:0f:57:60 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjUwMzE4MTUwMDUyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q5OGFhNC1hYTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvDP9MdyCQm+nZIqCI3IcmejX7H7+gm6yKSwNkm8TMnECjmxpqTLp6GbPEhY dMIa6XebOZqHn+njYfIVsXw2njM3uh+60hsjNZLlL9JEkWGbHu6ED8ffJGHHDWzs mq7wLLd2kUg/J/IcVXdnkh+/qDg9kaMAtgZtKTJ0o/8gwwIYkD2KqvO7Y5YsCQ71 QbQPfqLdpXam6t8VJK07XNjTCabh1MIqpQha+XZv1SNT5qvqqetFaBmXsxbfkHm/ dVXJWtbNUc1jjkR+lhla2R53ktgXvAG1VFcSMl3Wlau1jbD0v5qjeDi7S1GFne5l CIQeRqediJnPvSGzfCYYwgtimQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLbqQbD1 Z441VmqIcepsxUNLcNjIMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzAzMDQvQUI4MjQ5QjIxRDhFMTFFMkIxODIyNkVEMDhCMDJDRDIvNkQxMDZDRUUz QUEwMTFFQjk2M0I0ODQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAPKBwgDBADLBXkwDQYJKoZIhvcNAQELBQADggEBAJfJVz6z TaMN51AZC5keR3GkiExwkRxWWgfEpMu+0f1lleNieJDvkoFmEdE/WQA2jzTKPSft vCfgQjDxTscyFRmL2H0igKMeit3mEXLZ8yFUigJJa2j5RULDWb//iwS1fI2mzjvR 4u4H117hnXvsr986aGIIjT5+4ymsqCoZ3F6q3wALfIh2DEPTqjsqFahpNAWq7Zk4 4WEVBADtVpHyvYOUTORuxSGZa6HTVxqVbBm3sUrw59U72s+BTmWFSE7MElHfp6Qx UhjuD0DFNTXC/0nC8dOTCXd1x41M3YSYHEWRC4xRRWZs1Ke1irmT+fiCClR/edlS d2NeOPnt7/MPV2A= -----END CERTIFICATE-----Generated at Sat Apr 5 23:14:30 2025 by rpki-client