$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/27E5184CCC6211EFA20BEE1BC4F9AE02.roa File: 27E5184CCC6211EFA20BEE1BC4F9AE02.roa (raw, json) Hash identifier: Nfq9gOVsvHp+sAvDqwlNp+Rm9HqcCv4rXARNazxofGE= Subject key identifier: 37:1D:B5:4C:DF:9D:8D:50:9F:68:81:59:88:B2:0C:AA:11:D2:F9:42 Certificate issuer: /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330 Certificate serial: 03 Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/27E5184CCC6211EFA20BEE1BC4F9AE02.roa Signing time: Mon 06 Jan 2025 19:12:22 +0000 ROA not before: Mon 06 Jan 2025 19:12:22 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 16789 IP address blocks: 103.170.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F0AF Validity Not Before: Jan 6 19:12:22 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=677c2b16-d9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a0:4a:5a:60:28:e0:d8:5a:77:b1:c0:7d:80: 2b:c2:4a:4b:3b:70:9d:5d:ff:64:06:cb:8d:94:83: 9d:16:f4:b2:ae:49:84:ce:25:e4:80:d1:fc:b2:a1: 8b:08:53:43:bc:40:20:be:b8:20:19:7d:12:40:e3: c4:26:a9:85:a8:ba:e8:b9:21:ae:11:2f:a2:20:9a: a4:26:d4:d3:5c:f6:1d:67:13:e6:cd:3e:04:17:08: 15:99:5e:e4:b5:7b:b4:47:1f:2b:a0:3e:dc:b4:33: 44:f8:e3:90:c9:13:d6:9e:9a:a5:d7:4a:86:a6:51: fa:47:ae:53:8b:47:e7:a4:54:98:2d:43:4d:49:10: 9f:85:90:83:04:e7:69:a3:bb:07:9e:4a:19:a6:a7: f3:18:8c:0e:81:95:1b:bc:30:0e:98:14:7b:e8:7e: ba:16:38:f1:e4:b1:7d:77:7c:7c:d5:1e:ca:19:14: dd:e8:c6:95:1b:d1:95:27:08:4d:8d:d6:69:b6:c8: db:e1:aa:d9:6f:33:65:01:2c:b7:0a:86:54:1a:e3: e4:a0:af:5b:b0:b8:2a:03:dc:c1:63:42:d2:15:74: b7:e4:ad:3f:2b:6c:89:8e:d7:5a:ec:51:96:1f:2d: d8:ad:1e:65:db:8d:0e:7a:d8:7f:5e:a3:86:34:e5: a2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1D:B5:4C:DF:9D:8D:50:9F:68:81:59:88:B2:0C:AA:11:D2:F9:42 X509v3 Authority Key Identifier: keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/27E5184CCC6211EFA20BEE1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.76.0/24 Signature Algorithm: sha256WithRSAEncryption cf:24:24:37:48:88:93:7a:b3:85:4f:79:e4:f4:a1:ff:cf:a4: 27:c1:42:4f:2b:76:d6:7a:7d:63:c2:35:36:77:5b:1b:e2:de: 20:86:b1:92:88:72:93:f3:7e:f5:5d:86:c6:21:71:79:22:72: 6c:a4:c8:21:2a:cf:bd:57:99:1a:58:9c:6c:ea:df:56:5a:99: 68:77:29:51:b4:61:be:a7:a5:ff:7e:65:71:e0:18:7e:79:55: c4:c2:25:4e:8a:53:9f:a1:50:33:77:fa:ea:9f:44:70:bb:8c: 21:f3:07:60:18:a2:3e:45:bb:b7:f4:a9:fa:cd:20:d1:34:8d: 31:68:e2:45:fe:cc:59:e7:36:5a:cb:f7:94:16:ed:87:b2:54: d6:b1:01:bb:df:5a:af:aa:3e:50:bb:ff:40:5f:fc:6d:9d:da: 84:83:8c:9e:66:72:0b:71:44:7d:ad:0c:0d:74:4b:bd:9b:e0: c1:07:14:70:5a:01:af:29:78:dc:85:45:49:b1:8f:de:3e:2e: 1b:d8:1e:8a:72:77:9e:5b:e9:62:d2:e9:8e:bf:e1:4b:ca:7d: 54:1d:1d:7d:96:25:f6:01:74:d9:0f:ac:28:47:e2:04:98:e3: 6c:94:92:38:b5:0c:e8:7c:2a:1e:ae:2e:1b:71:e4:f2:27:3c: 9e:8b:0a:1c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjBBRjExMC8GA1UEBRMoRTExNDM3OERBOTM0ODYxNDY5RjQ5NUQ5NzU5OEUwRjAw Mjg5QzMzMDAeFw0yNTAxMDYxOTEyMjJaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3N2MyYjE2LWQ5ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjoEpaYCjg2Fp3scB9gCvCSks7cJ1d/2QGy42Ug50W9LKuSYTOJeSA0fyyoYsI U0O8QCC+uCAZfRJA48QmqYWouui5Ia4RL6IgmqQm1NNc9h1nE+bNPgQXCBWZXuS1 e7RHHyugPty0M0T445DJE9aemqXXSoamUfpHrlOLR+ekVJgtQ01JEJ+FkIME52mj uweeShmmp/MYjA6BlRu8MA6YFHvofroWOPHksX13fHzVHsoZFN3oxpUb0ZUnCE2N 1mm2yNvhqtlvM2UBLLcKhlQa4+Sgr1uwuCoD3MFjQtIVdLfkrT8rbImO11rsUZYf LditHmXbjQ562H9eo4Y05aIBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUNx21TN+d jVCfaIFZiLIMqhHS+UIwHwYDVR0jBBgwFoAU4RQ3jak0hhRp9JXZdZjg8AKJwzAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGMEFGLzJEN0E3RTBFQ0M0 RjExRUZBODlBOEYxNEM0RjlBRTAyLzRSUTNqYWswaGhScDlKWFpkWmpnOEFLSnd6 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFJRM2phazBoaFJwOUpYWmRaamc4QUtKd3pBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjBBRi8yRDdBN0UwRUNDNEYxMUVGQTg5QThGMTRDNEY5QUUwMi8yN0U1MTg0Q0ND NjIxMUVGQTIwQkVFMUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeqTDANBgkqhkiG9w0BAQsFAAOCAQEAzyQkN0iIk3qzhU95 5PSh/8+kJ8FCTyt21np9Y8I1NndbG+LeIIaxkohyk/N+9V2GxiFxeSJybKTIISrP vVeZGlicbOrfVlqZaHcpUbRhvqel/35lceAYfnlVxMIlTopTn6FQM3f66p9EcLuM IfMHYBiiPkW7t/Sp+s0g0TSNMWjiRf7MWec2Wsv3lBbth7JU1rEBu99ar6o+ULv/ QF/8bZ3ahIOMnmZyC3FEfa0MDXRLvZvgwQcUcFoBryl43IVFSbGP3j4uG9geinJ3 nlvpYtLpjr/hS8p9VB0dfZYl9gF02Q+sKEfiBJjjbJSSOLUM6HwqHq4uG3Hk8ic8 nosKHA== -----END CERTIFICATE-----Generated at Sat Apr 5 00:34:52 2025 by rpki-client