$ rpki-client -vvf rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/C17E4DE2503E11EBB72F4C61C4F9AE02.roa File: C17E4DE2503E11EBB72F4C61C4F9AE02.roa (raw, json) Hash identifier: Cao5bthPX96QQ3SQheHb0r7GeyEcmcCxx6iv6SXw/fo= Subject key identifier: D6:65:58:7F:E3:ED:76:BD:71:71:23:F0:EF:1F:6E:D0:46:E4:8E:2F Certificate issuer: /CN=A919271C/serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A Certificate serial: 06AB Authority key identifier: 9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/C17E4DE2503E11EBB72F4C61C4F9AE02.roa Signing time: Thu 30 Jan 2025 22:14:28 +0000 ROA not before: Thu 30 Jan 2025 22:14:28 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 134489 IP address blocks: 103.161.48.0/23 maxlen: 23 103.161.48.0/24 maxlen: 24 103.161.49.0/24 maxlen: 24 2407:1b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.crl rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1707 (0x6ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919271C Validity Not Before: Jan 30 22:14:28 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=679bf9c4-7207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:bf:e7:19:56:cd:65:48:c2:4d:47:6f:19: e5:6a:bf:22:53:80:88:56:44:15:14:3f:0e:bd:16: 8b:85:5d:6b:8b:09:f4:c9:33:20:e8:22:9e:19:f6: 0f:f8:05:c0:6b:eb:fe:47:7f:69:cf:cb:22:62:e6: 92:c0:53:30:a9:29:e8:70:20:fb:31:ff:6b:dc:a4: b1:94:db:3b:53:96:b5:6e:2c:71:12:ce:fb:ca:97: 25:d0:ac:cf:3a:46:f2:1c:9c:c5:47:08:88:0d:27: 5b:c2:fc:a8:12:82:3b:d0:69:8a:f5:aa:1f:93:49: 73:1a:db:da:07:be:cf:97:63:90:56:38:b6:30:d9: 4a:92:31:12:cb:5b:90:83:f5:60:1d:61:c3:ff:e0: 2f:1d:b4:0c:f7:47:49:1e:70:13:54:ec:e4:24:45: b1:bf:09:b9:43:13:e1:83:9b:0a:d9:22:b1:db:98: e8:67:ec:ac:7a:53:61:da:9b:9b:4d:cf:d2:4f:9e: 3c:84:60:23:b3:8d:5f:58:67:a7:6b:8d:bb:b2:76: 10:2b:cc:01:cb:20:b0:35:28:cc:24:49:98:1b:d8: 34:3e:42:7c:3f:70:44:96:75:a9:bf:04:d0:3e:97: e1:57:bf:d3:ef:d1:b1:49:f1:c7:f7:ff:9c:c7:1b: e7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:65:58:7F:E3:ED:76:BD:71:71:23:F0:EF:1F:6E:D0:46:E4:8E:2F X509v3 Authority Key Identifier: keyid:9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/C17E4DE2503E11EBB72F4C61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.48.0/23 IPv6: 2407:1b40::/32 Signature Algorithm: sha256WithRSAEncryption 78:73:d1:92:38:b9:54:8c:ce:5a:da:dd:b8:7b:1e:78:89:f8: 5e:3b:cd:65:3d:4a:ac:32:c0:25:ca:dd:eb:f6:29:d0:ac:bd: 1b:fc:96:c5:1b:dc:a4:a4:9e:23:a5:7b:62:ed:34:3d:17:5c: 03:de:f6:bb:5f:16:bf:cc:31:f0:f9:2e:b1:4c:d3:71:8f:f6: 6b:20:72:bf:22:a0:37:f2:d8:9e:c1:8e:09:86:dd:f0:dd:87: 54:ff:66:24:ad:46:f9:44:33:d1:cb:5c:4b:8e:1d:aa:f6:c0: 3b:13:da:ba:a1:7b:0d:12:c3:b6:93:8f:cd:ed:e5:6d:88:e1: 87:48:6f:94:0e:8c:13:5f:fe:6a:52:d6:82:f4:60:62:c2:51: cf:31:23:a3:f4:45:3d:a9:1e:7f:ff:29:33:2e:9b:08:65:aa: d2:f5:68:ce:7a:bf:e8:42:f3:0b:c0:69:78:73:f2:48:ac:d5: 37:95:77:6b:79:ff:9e:3c:5b:77:c5:24:65:9c:1a:48:91:f8: 5f:8f:a5:27:4a:15:b9:0e:87:cd:3e:a0:41:5e:fb:a9:82:38: bd:6e:4f:c0:4a:bf:41:ca:16:26:f6:40:5a:7e:f1:fb:c7:c1: b2:f1:3a:d5:12:f1:59:17:5d:9b:a5:f0:6c:3f:35:8e:2f:d1: 52:9c:25:99 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI3MUMxMTAvBgNVBAUTKDlBRTAyMkREOTBGQUNBRjJCQzVDNzM3NkU4QTg0Q0U1 MDUxRTg5NkEwHhcNMjUwMTMwMjIxNDI4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzliZjljNC03MjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5m/5xlWzWVIwk1Hbxnlar8iU4CIVkQVFD8OvRaLhV1riwn0yTMg6CKeGfYP +AXAa+v+R39pz8siYuaSwFMwqSnocCD7Mf9r3KSxlNs7U5a1bixxEs77ypcl0KzP OkbyHJzFRwiIDSdbwvyoEoI70GmK9aofk0lzGtvaB77Pl2OQVji2MNlKkjESy1uQ g/VgHWHD/+AvHbQM90dJHnATVOzkJEWxvwm5QxPhg5sK2SKx25joZ+yselNh2pub Tc/ST548hGAjs41fWGena427snYQK8wByyCwNSjMJEmYG9g0PkJ8P3BElnWpvwTQ PpfhV7/T79GxSfHH9/+cxxvnAwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNZlWH/j 7Xa9cXEj8O8fbtBG5I4vMB8GA1UdIwQYMBaAFJrgIt2Q+sryvFxzduioTOUFHolq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjcxQy9FREYxM0M2MDUw M0MxMUVCQTJERjMyNUZDNEY5QUUwMi9tdUFpM1pENnl2SzhYSE4yNktoTTVRVWVp V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL211QWkzWkQ2eXZLOFhITjI2S2hNNVFVZWlXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTI3MUMvRURGMTNDNjA1MDNDMTFFQkEyREYzMjVGQzRGOUFFMDIvQzE3RTRERTI1 MDNFMTFFQkI3MkY0QzYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnoTAwDQQCAAIwBwMFACQHG0AwDQYJKoZIhvcNAQELBQAD ggEBAHhz0ZI4uVSMzlra3bh7HniJ+F47zWU9SqwywCXK3ev2KdCsvRv8lsUb3KSk niOle2LtND0XXAPe9rtfFr/MMfD5LrFM03GP9msgcr8ioDfy2J7BjgmG3fDdh1T/ ZiStRvlEM9HLXEuOHar2wDsT2rqhew0Sw7aTj83t5W2I4YdIb5QOjBNf/mpS1oL0 YGLCUc8xI6P0RT2pHn//KTMumwhlqtL1aM56v+hC8wvAaXhz8kis1TeVd2t5/548 W3fFJGWcGkiR+F+PpSdKFbkOh80+oEFe+6mCOL1uT8BKv0HKFib2QFp+8fvHwbLx OtUS8VkXXZul8Gw/NY4v0VKcJZk= -----END CERTIFICATE-----Generated at Fri Apr 4 23:56:41 2025 by rpki-client