$ rpki-client -vvf rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/164993A63FBA11EDA5387132C4F9AE02.roa File: 164993A63FBA11EDA5387132C4F9AE02.roa (raw, json) Hash identifier: XYc2mxLenXQc+O8B80ZFK5EpIFxtXO429dywGYqqozs= Subject key identifier: 31:22:48:D4:1A:FD:BD:FF:68:03:6D:0B:49:CA:98:D4:76:57:7F:AA Certificate issuer: /CN=A9181380/serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37 Certificate serial: 01A3 Authority key identifier: 6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/164993A63FBA11EDA5387132C4F9AE02.roa Signing time: Tue 03 Dec 2024 02:05:49 +0000 ROA not before: Tue 03 Dec 2024 02:05:49 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 207190 IP address blocks: 103.145.86.0/23 maxlen: 23 103.145.86.0/24 maxlen: 24 103.145.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 01:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181380, serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37 Validity Not Before: Dec 3 02:05:49 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=674e677d-224f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:02:ad:c4:3a:65:82:75:da:e2:8b:39:06:76: 74:50:98:98:bf:60:22:9d:8f:32:63:cf:34:22:99: a3:0a:f3:35:a0:31:53:58:9a:2e:75:cc:97:ef:f3: 6e:ec:7c:b8:92:87:36:33:b3:ef:ef:bc:1c:f4:44: 25:85:78:9f:68:6f:3f:26:43:90:c9:c2:fb:c9:56: 98:c3:e0:61:35:b9:dc:f0:43:51:c1:a3:6b:11:b8: f0:65:fc:5b:d4:6a:3f:1a:76:10:fd:54:2e:34:ff: 90:1b:34:41:f6:3c:e9:b4:73:04:fd:f9:a1:d7:a0: af:75:00:a8:9f:e9:c7:8d:ba:86:af:b5:2e:cc:b4: b8:9c:a9:b7:5b:f9:ff:86:0e:99:f5:a7:f3:58:bf: 89:d6:8b:9a:ba:45:71:cb:b6:57:1e:3e:e0:ca:97: 27:98:ce:9b:75:94:ad:0b:eb:0a:d7:72:fb:19:78: 78:7c:ea:8e:ba:19:d8:43:0d:e0:35:73:9f:a4:73: db:92:c4:56:22:44:68:b5:b8:94:58:1b:84:0a:8f: bc:9d:16:e8:22:3e:7a:d3:fd:95:fc:ed:c0:03:6f: 75:cd:43:73:22:22:30:47:1f:45:8e:14:6f:bd:8e: 06:3b:34:5b:67:aa:79:fb:74:4a:6f:f0:05:16:dc: 6b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:22:48:D4:1A:FD:BD:FF:68:03:6D:0B:49:CA:98:D4:76:57:7F:AA X509v3 Authority Key Identifier: keyid:6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/164993A63FBA11EDA5387132C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.86.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:57:c0:99:1f:11:64:cd:a0:f9:f2:5c:23:00:76:3c:e3:0e: 65:a8:e6:0c:bd:6e:e9:96:0d:b6:48:ab:a1:24:7a:26:a5:1e: 4c:07:1a:47:72:4e:b1:4d:96:3c:6d:be:f0:d0:56:d9:9d:0f: f3:40:86:f8:07:29:43:83:7b:56:87:f6:bd:f3:1a:89:86:08: 3e:99:30:ab:dc:35:24:1f:08:6c:cd:f4:42:47:d2:27:29:63: aa:cf:21:51:52:e2:e1:50:a3:ad:af:44:46:c2:f3:72:e7:8f: 3d:e3:72:98:e3:1c:6a:a5:7a:73:ac:fb:bf:c2:18:7e:9c:67: 85:09:96:cf:06:92:71:48:5e:be:b5:11:2d:6c:fb:36:37:b3: 00:cb:13:91:ad:47:11:bb:c8:89:d1:c9:1c:2c:5d:00:ee:80: b5:c6:3f:60:5e:e6:b3:75:86:44:69:87:0b:c9:01:4a:9e:34: 27:f6:6e:bd:3b:ea:c6:77:46:fb:0a:50:6b:19:e8:5f:98:f6: 2e:67:1d:50:6e:e1:cf:ea:48:b8:95:8f:c6:41:b0:b0:37:4c: 2a:d4:b3:94:49:6f:87:21:1f:bc:8a:b9:9a:14:08:0e:6e:55: 0f:2b:c6:c5:c1:a5:81:81:87:dc:e7:6e:d9:94:bf:eb:b0:45: 5a:bc:91:56 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzODAxMTAvBgNVBAUTKDZDMkRFMzhEN0UzNzMzRTA4N0RERUY3OTc3RTMxODM5 QzBBREVFMzcwHhcNMjQxMjAzMDIwNTQ5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRlNjc3ZC0yMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QKtxDplgnXa4os5BnZ0UJiYv2AinY8yY880IpmjCvM1oDFTWJoudcyX7/Nu 7Hy4koc2M7Pv77wc9EQlhXifaG8/JkOQycL7yVaYw+BhNbnc8ENRwaNrEbjwZfxb 1Go/GnYQ/VQuNP+QGzRB9jzptHME/fmh16CvdQCon+nHjbqGr7UuzLS4nKm3W/n/ hg6Z9afzWL+J1ouaukVxy7ZXHj7gypcnmM6bdZStC+sK13L7GXh4fOqOuhnYQw3g NXOfpHPbksRWIkRotbiUWBuECo+8nRboIj560/2V/O3AA291zUNzIiIwRx9FjhRv vY4GOzRbZ6p5+3RKb/AFFtxr4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDEiSNQa /b3/aANtC0nKmNR2V3+qMB8GA1UdIwQYMBaAFGwt441+NzPgh93veXfjGDnAre43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM4MC8wREYzQjM5QTNF RkIxMUVEQjdEQTc4NzVDNEY5QUUwMi9iQzNqalg0M00tQ0gzZTk1ZC1NWU9jQ3Q3 amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDM2pqWDQzTS1DSDNlOTVkLU1ZT2NDdDdqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODEzODAvMERGM0IzOUEzRUZCMTFFREI3REE3ODc1QzRGOUFFMDIvMTY0OTkzQTYz RkJBMTFFREE1Mzg3MTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnkVYwDQYJKoZIhvcNAQELBQADggEBABxXwJkfEWTNoPny XCMAdjzjDmWo5gy9bumWDbZIq6EkeialHkwHGkdyTrFNljxtvvDQVtmdD/NAhvgH KUODe1aH9r3zGomGCD6ZMKvcNSQfCGzN9EJH0icpY6rPIVFS4uFQo62vREbC83Ln jz3jcpjjHGqlenOs+7/CGH6cZ4UJls8GknFIXr61ES1s+zY3swDLE5GtRxG7yInR yRwsXQDugLXGP2Be5rN1hkRphwvJAUqeNCf2br076sZ3RvsKUGsZ6F+Y9i5nHVBu 4c/qSLiVj8ZBsLA3TCrUs5RJb4chH7yKuZoUCA5uVQ8rxsXBpYGBh9znbtmUv+uw RVq8kVY= -----END CERTIFICATE-----Generated at Sun Apr 13 04:53:00 2025 by rpki-client