$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/851D827C977511EBA99DCE72C4F9AE02.roa File: 851D827C977511EBA99DCE72C4F9AE02.roa (raw, json) Hash identifier: hQ/sXLdGqM267Zz0nlBpIRPhMJ+xIknpNjyonr+GXWA= Subject key identifier: 37:9B:23:53:4B:60:B6:34:89:1F:9C:07:04:12:70:BD:81:53:CA:62 Certificate issuer: /CN=A917B4EE/serialNumber=1A4D314C1FD010622E87491CE4827B623966709C Certificate serial: 060C Authority key identifier: 1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/851D827C977511EBA99DCE72C4F9AE02.roa Signing time: Thu 20 Mar 2025 23:03:18 +0000 ROA not before: Thu 20 Mar 2025 23:03:18 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 137069 IP address blocks: 103.164.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1548 (0x60c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4EE Validity Not Before: Mar 20 23:03:18 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67dc9eb5-7486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:58:1c:7f:6b:dd:b2:eb:f2:62:35:d0:db:4d: ca:10:f6:92:1b:51:05:15:a6:4f:33:8c:25:18:e9: 5c:8d:41:9a:e2:02:f0:05:1c:25:94:89:8a:99:30: 25:30:1e:88:17:e1:13:4a:11:0d:83:40:75:a9:d6: 2c:74:0a:01:2f:db:3d:f5:66:b6:4b:cb:dc:0f:b6: 0c:0a:64:20:9c:0b:51:73:1e:58:ab:35:5a:d5:36: fc:91:ae:8a:dc:3e:3a:76:2e:13:98:0c:10:05:e8: d8:86:57:82:22:06:35:eb:f6:54:de:6d:97:81:52: cf:63:53:4a:be:ba:02:a3:b1:e8:ee:5c:2f:68:e0: f3:be:21:50:a6:a1:7f:aa:46:93:15:71:c9:a9:ab: ed:59:a4:e9:aa:0f:9a:7b:6b:34:4b:3e:02:2c:f0: 9f:a9:5a:74:60:0e:39:e5:35:f2:6c:52:10:f6:33: 57:3c:5e:b3:f3:19:1f:57:89:e8:19:5a:db:1a:60: 83:78:48:6e:4d:ab:94:2f:d7:1f:07:37:f7:8c:4a: 9f:ae:bf:44:46:07:87:b2:f3:bc:0c:93:e7:e7:28: 34:ee:66:81:fa:85:61:7a:d4:ff:33:d4:59:08:03: 70:53:b4:60:ed:14:7a:34:b2:9f:ed:7d:a7:c2:bf: 2a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9B:23:53:4B:60:B6:34:89:1F:9C:07:04:12:70:BD:81:53:CA:62 X509v3 Authority Key Identifier: keyid:1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/851D827C977511EBA99DCE72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.145.0/24 Signature Algorithm: sha256WithRSAEncryption 26:92:30:73:ff:28:d7:97:6c:27:b3:1d:b7:12:c3:04:12:c5: ec:58:2f:68:77:1e:fd:e9:3c:c9:3a:ee:c0:64:44:71:9f:9b: 8a:65:25:72:14:82:3c:50:df:c2:d3:50:d4:cf:65:62:64:08: c1:d2:8d:ea:99:0b:0b:e8:3a:cf:26:99:14:18:67:81:ed:a5: 51:68:55:66:fc:e5:26:de:30:d0:dc:cd:99:c4:11:55:aa:a3: 58:53:71:d9:24:2d:54:2c:08:52:c3:2f:98:e0:9a:a9:d9:94: bd:46:95:78:64:55:7b:bb:57:b6:45:9e:a4:80:ef:63:b7:e8: 9d:ee:05:f4:5d:be:46:4f:4d:07:3c:78:f9:38:77:d9:55:fa: c4:bc:89:45:3b:e5:94:74:a8:1b:7b:af:ab:3a:ce:e0:06:fc: 08:fc:f5:16:36:db:cd:2e:b4:5e:9b:1a:67:65:c7:bf:be:cc: 87:02:3a:01:1b:c4:db:cc:cb:34:98:f5:ee:d9:9e:31:ad:80: 2f:66:49:5c:80:ae:b5:58:3a:bc:c2:9c:ba:2e:1c:e3:3c:e1: 11:35:4e:21:b8:ff:99:09:08:6e:22:e3:df:82:41:20:5c:1f: 9a:f7:17:54:ad:52:37:ea:6c:bf:00:82:c9:de:b4:ff:07:b0: a6:97:89:0e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0RUUxMTAvBgNVBAUTKDFBNEQzMTRDMUZEMDEwNjIyRTg3NDkxQ0U0ODI3QjYy Mzk2NjcwOUMwHhcNMjUwMzIwMjMwMzE4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RjOWViNS03NDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylgcf2vdsuvyYjXQ203KEPaSG1EFFaZPM4wlGOlcjUGa4gLwBRwllImKmTAl MB6IF+ETShENg0B1qdYsdAoBL9s99Wa2S8vcD7YMCmQgnAtRcx5YqzVa1Tb8ka6K 3D46di4TmAwQBejYhleCIgY16/ZU3m2XgVLPY1NKvroCo7Ho7lwvaODzviFQpqF/ qkaTFXHJqavtWaTpqg+ae2s0Sz4CLPCfqVp0YA455TXybFIQ9jNXPF6z8xkfV4no GVrbGmCDeEhuTauUL9cfBzf3jEqfrr9ERgeHsvO8DJPn5yg07maB+oVhetT/M9RZ CANwU7Rg7RR6NLKf7X2nwr8qzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDebI1NL YLY0iR+cBwQScL2BU8piMB8GA1UdIwQYMBaAFBpNMUwf0BBiLodJHOSCe2I5ZnCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRFRS8zQTcyN0M3RTk3 NzQxMUVCQUU4M0ZENzFDNEY5QUUwMi9HazB4VEJfUUVHSXVoMGtjNUlKN1lqbG1j SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drMHhUQl9RRUdJdWgwa2M1SUo3WWpsbWNKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I0RUUvM0E3MjdDN0U5Nzc0MTFFQkFFODNGRDcxQzRGOUFFMDIvODUxRDgyN0M5 Nzc1MTFFQkE5OURDRTcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnpJEwDQYJKoZIhvcNAQELBQADggEBACaSMHP/KNeXbCez HbcSwwQSxexYL2h3Hv3pPMk67sBkRHGfm4plJXIUgjxQ38LTUNTPZWJkCMHSjeqZ CwvoOs8mmRQYZ4HtpVFoVWb85SbeMNDczZnEEVWqo1hTcdkkLVQsCFLDL5jgmqnZ lL1GlXhkVXu7V7ZFnqSA72O36J3uBfRdvkZPTQc8ePk4d9lV+sS8iUU75ZR0qBt7 r6s6zuAG/Aj89RY2280utF6bGmdlx7++zIcCOgEbxNvMyzSY9e7ZnjGtgC9mSVyA rrVYOrzCnLouHOM84RE1TiG4/5kJCG4i49+CQSBcH5r3F1StUjfqbL8AgsnetP8H sKaXiQ4= -----END CERTIFICATE-----Generated at Sat Apr 5 03:54:04 2025 by rpki-client