$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/9D3B1594253C11ED9D3E1A23C4F9AE02.roa File: 9D3B1594253C11ED9D3E1A23C4F9AE02.roa (raw, json) Hash identifier: 3BgxAdDyFeIZJJ0Dw/3SwPKNjFpUaWYs6+OX1Rnlr5Y= Subject key identifier: 72:16:21:71:CD:01:37:2D:70:B5:57:E6:A0:53:D3:24:32:FD:E9:FF Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 0432 Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/9D3B1594253C11ED9D3E1A23C4F9AE02.roa Signing time: Thu 02 Jan 2025 23:53:39 +0000 ROA not before: Thu 02 Jan 2025 23:53:39 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 149010 IP address blocks: 103.176.58.0/24 maxlen: 24 103.176.59.0/24 maxlen: 24 2001:df0:940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F Validity Not Before: Jan 2 23:53:39 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67772703-c68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:45:05:bc:0b:0a:e7:ac:f0:1b:ea:e3:a5:0d: f5:2d:cf:e7:b4:74:a3:6e:7a:7e:45:28:88:c9:75: ed:58:22:09:a5:42:51:b5:c6:04:91:c5:93:2c:0a: d8:20:00:9a:a8:c9:4d:5f:43:0c:79:9a:7a:5a:4b: 9f:e4:b7:7b:77:e2:a1:38:0d:35:92:e8:ae:22:9a: b0:1f:8a:34:53:50:40:78:ab:25:b6:ae:d5:56:ae: 6b:c2:97:ac:7b:3b:fe:54:a0:11:1a:20:9b:63:60: a4:89:e3:13:c9:ea:2e:00:7d:00:d5:69:ee:94:f4: 9c:cf:42:15:9a:ed:16:83:7b:24:eb:87:d1:36:5f: 8c:85:83:4a:93:9b:1e:6c:89:c4:6b:28:0e:4f:c2: 02:f3:71:b4:86:bb:8f:1e:47:4e:e6:b2:d2:40:e8: ae:eb:80:74:13:1d:c4:01:5e:32:58:b2:ab:24:92: 9d:3c:65:7b:7f:59:11:19:37:d1:a4:a3:d1:cf:6c: 18:6d:c6:51:01:2c:fc:17:6b:11:b8:28:6a:63:2b: 43:05:cd:c7:65:8c:8a:95:df:d4:51:ab:3b:74:43: 1d:e0:a2:df:5a:63:c9:8f:6b:f7:4b:59:1b:86:81: d7:4c:f4:bc:d1:f3:c0:80:7e:c0:ff:ba:f6:9b:4d: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:16:21:71:CD:01:37:2D:70:B5:57:E6:A0:53:D3:24:32:FD:E9:FF X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/9D3B1594253C11ED9D3E1A23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.58.0/23 IPv6: 2001:df0:940::/48 Signature Algorithm: sha256WithRSAEncryption 2b:d9:c6:73:14:ba:73:9d:54:f5:40:e0:59:dd:18:a5:67:50: 74:a9:4a:1b:83:a5:62:f7:d0:15:22:5e:bd:ff:19:79:2e:5d: f4:68:7b:74:c8:bf:63:2e:14:ea:70:13:32:63:6a:05:64:07: 7e:6b:df:52:e6:56:ae:d0:12:04:b1:ca:c8:f4:21:f8:63:8a: a8:8d:ff:d3:cf:e8:73:a9:7f:af:a7:6a:44:32:77:4e:45:c3: 8f:4f:66:d0:2e:af:c4:51:04:7d:a8:8a:d7:c0:61:28:5d:9f: ea:00:26:de:75:e8:ee:af:ef:5d:de:47:be:3f:23:10:4a:d5: 17:86:0b:41:a1:33:d1:1a:ef:3d:f9:bd:5e:fc:12:ee:62:e8: 35:a0:cf:37:09:05:e2:63:c6:23:b1:09:fa:91:0a:37:72:59: cb:d7:06:46:06:cf:76:af:27:ee:ad:45:cc:3d:b4:b8:46:3e: fd:33:d4:41:b5:52:f7:90:3c:81:c8:c8:00:06:e8:e8:02:bc: 66:5b:cc:82:7c:40:22:a6:9d:6a:2f:74:55:76:6a:15:23:5a: f6:e3:04:5d:90:a0:50:79:14:b6:9d:30:57:e1:a2:b8:5f:11: c6:c2:86:88:a3:5e:ea:f1:83:d6:42:26:6c:50:93:2f:1c:13: 06:b6:24:8c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjUwMTAyMjM1MzM5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc3MjcwMy1jNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EUFvAsK56zwG+rjpQ31Lc/ntHSjbnp+RSiIyXXtWCIJpUJRtcYEkcWTLArY IACaqMlNX0MMeZp6Wkuf5Ld7d+KhOA01kuiuIpqwH4o0U1BAeKsltq7VVq5rwpes ezv+VKARGiCbY2CkieMTyeouAH0A1WnulPScz0IVmu0Wg3sk64fRNl+MhYNKk5se bInEaygOT8IC83G0hruPHkdO5rLSQOiu64B0Ex3EAV4yWLKrJJKdPGV7f1kRGTfR pKPRz2wYbcZRASz8F2sRuChqYytDBc3HZYyKld/UUas7dEMd4KLfWmPJj2v3S1kb hoHXTPS80fPAgH7A/7r2m01jXQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHIWIXHN ATctcLVX5qBT0yQy/en/MB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTk2OEYvOUJDREEyMjg0ODM2MTFFQ0I0MjAyOTU3QzRGOUFFMDIvOUQzQjE1OTQy NTNDMTFFRDlEM0UxQTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnsDowDwQCAAIwCQMHACABDfAJQDANBgkqhkiG9w0BAQsF AAOCAQEAK9nGcxS6c51U9UDgWd0YpWdQdKlKG4OlYvfQFSJevf8ZeS5d9Gh7dMi/ Yy4U6nATMmNqBWQHfmvfUuZWrtASBLHKyPQh+GOKqI3/08/oc6l/r6dqRDJ3TkXD j09m0C6vxFEEfaiK18BhKF2f6gAm3nXo7q/vXd5Hvj8jEErVF4YLQaEz0RrvPfm9 XvwS7mLoNaDPNwkF4mPGI7EJ+pEKN3JZy9cGRgbPdq8n7q1FzD20uEY+/TPUQbVS 95A8gcjIAAbo6AK8ZlvMgnxAIqadai90VXZqFSNa9uMEXZCgUHkUtp0wV+GiuF8R xsKGiKNe6vGD1kImbFCTLxwTBrYkjA== -----END CERTIFICATE-----Generated at Sun Apr 6 01:46:50 2025 by rpki-client