$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/1F88812AAD5311EBA93CEB69C4F9AE02.roa File: 1F88812AAD5311EBA93CEB69C4F9AE02.roa (raw, json) Hash identifier: JxqBCjBT9K2ryaUj1ZqNSpK/pt6W0FIjzbMts6xP/O4= Subject key identifier: 48:57:A3:99:54:36:DF:0E:77:B7:0B:66:16:D4:56:FF:59:54:CD:71 Certificate issuer: /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Certificate serial: 075F Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/1F88812AAD5311EBA93CEB69C4F9AE02.roa Signing time: Mon 30 Sep 2024 21:40:43 +0000 ROA not before: Mon 30 Sep 2024 21:40:43 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 137969 IP address blocks: 103.155.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1887 (0x75f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BF7 Validity Not Before: Sep 30 21:40:43 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fb1adb-9037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:d7:0a:64:7a:1a:eb:1d:6b:76:d7:51:16: cc:7a:8d:b5:7c:3f:ad:47:5f:ae:36:e8:50:20:36: c1:fa:8a:87:b1:eb:b5:bf:4d:33:59:3d:bd:da:b9: 18:e0:1c:f9:45:39:d7:ab:80:42:68:d4:16:02:23: c2:b8:5e:78:1a:52:19:f0:fd:43:b3:3e:67:ef:b0: f0:99:db:70:04:e3:c7:bc:4b:b1:c2:ea:64:6e:c8: ba:4f:9e:e5:c9:c4:72:74:40:35:8c:2b:f4:f4:ca: f0:39:46:cd:8d:c4:28:f4:90:88:72:1d:84:10:45: 8c:6d:75:a0:e7:05:41:b7:7f:f8:a9:8f:09:a8:44: d5:59:2f:5f:93:aa:e1:a1:32:cc:c4:a4:14:4e:7d: ff:da:ce:76:82:97:63:07:41:35:a7:07:1c:7c:47: 66:1a:4b:9a:79:de:33:7a:ec:21:41:27:c4:c3:23: 37:40:42:d2:0e:52:a1:23:0c:b7:11:12:06:88:72: 1f:56:6c:2c:58:fd:58:94:c8:94:75:02:a6:3b:31: 74:77:2a:7c:1f:aa:e3:68:24:68:9b:ce:e2:c5:44: 5c:60:21:55:76:b7:34:cd:5a:84:02:87:ef:c9:19: e0:f4:bf:86:63:b4:3a:5e:31:14:38:cd:83:b4:c0: 30:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:57:A3:99:54:36:DF:0E:77:B7:0B:66:16:D4:56:FF:59:54:CD:71 X509v3 Authority Key Identifier: keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/1F88812AAD5311EBA93CEB69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.120.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:5a:e8:79:b5:d5:33:42:c5:f1:98:ef:6f:64:95:f7:35:4a: 5a:51:9d:ff:7e:e4:93:e4:f1:5b:7d:8e:af:db:03:72:ff:86: 53:cc:58:1f:3e:10:eb:c7:74:18:e3:6a:29:bd:7a:f3:bf:e7: 98:cb:f0:b5:44:53:ea:8b:d8:3f:8f:9b:65:7f:45:fc:72:2a: 16:75:65:97:77:88:c1:4e:b1:a5:eb:b1:56:24:f7:69:68:cc: 23:f9:f9:2e:79:c1:e2:78:5b:96:9c:3b:e4:b7:11:d6:f9:34: 74:0e:de:cd:26:01:5d:33:bb:05:2a:17:f3:ff:e7:b6:40:17: e0:34:54:c4:21:b2:de:76:42:13:d5:78:ed:ef:da:9a:ce:9e: 22:be:22:df:a1:f1:8a:82:df:4c:c7:42:a9:dc:de:1e:23:c6: 27:75:50:00:d8:72:12:4c:7b:4e:4c:c4:dc:12:48:44:4f:ce: 5a:de:7b:b6:29:0b:61:76:df:90:8d:8a:5f:b0:c0:7f:64:a0: 9b:6a:f5:76:12:c1:bc:2c:83:33:5a:69:6a:b0:2d:82:10:7c: c3:2e:cb:e5:7e:ae:90:b0:39:b0:a3:4a:c9:37:81:9f:96:ce: 4e:17:1e:d0:0a:ea:8c:c9:94:06:c4:6f:40:dc:a4:3e:b3:b3: dd:83:80:3a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCRjcxMTAvBgNVBAUTKDlCNDYwMUI2QjBCNzhGQjhGRTlFMzkzMzRBODFCNUE1 REQ1OTU2MjkwHhcNMjQwOTMwMjE0MDQzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZiMWFkYi05MDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunnXCmR6Gusda3bXURbMeo21fD+tR1+uNuhQIDbB+oqHseu1v00zWT292rkY 4Bz5RTnXq4BCaNQWAiPCuF54GlIZ8P1Dsz5n77DwmdtwBOPHvEuxwupkbsi6T57l ycRydEA1jCv09MrwOUbNjcQo9JCIch2EEEWMbXWg5wVBt3/4qY8JqETVWS9fk6rh oTLMxKQUTn3/2s52gpdjB0E1pwccfEdmGkuaed4zeuwhQSfEwyM3QELSDlKhIwy3 ERIGiHIfVmwsWP1YlMiUdQKmOzF0dyp8H6rjaCRom87ixURcYCFVdrc0zVqEAofv yRng9L+GY7Q6XjEUOM2DtMAwzQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEhXo5lU Nt8Od7cLZhbUVv9ZVM1xMB8GA1UdIwQYMBaAFJtGAbawt4+4/p45M0qBtaXdWVYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JGNy9BRDJBQzcyRUZC RUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3ai1uamt6U29HMXBkMVpW aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20wWUJ0ckMzajdqLW5qa3pTb0cxcGQxWlZpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdCRjcvQUQyQUM3MkVGQkVBMTFFQUEwQUMzMzFBQzRGOUFFMDIvMUY4ODgxMkFB RDUzMTFFQkE5M0NFQjY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnm3gwDQYJKoZIhvcNAQELBQADggEBAJpa6Hm11TNCxfGY 729klfc1SlpRnf9+5JPk8Vt9jq/bA3L/hlPMWB8+EOvHdBjjaim9evO/55jL8LVE U+qL2D+Pm2V/RfxyKhZ1ZZd3iMFOsaXrsVYk92lozCP5+S55weJ4W5acO+S3Edb5 NHQO3s0mAV0zuwUqF/P/57ZAF+A0VMQhst52QhPVeO3v2prOniK+It+h8YqC30zH Qqnc3h4jxid1UADYchJMe05MxNwSSERPzlree7YpC2F235CNil+wwH9koJtq9XYS wbwsgzNaaWqwLYIQfMMuy+V+rpCwObCjSsk3gZ+Wzk4XHtAK6ozJlAbEb0DcpD6z s92DgDo= -----END CERTIFICATE-----Generated at Sun Feb 16 21:04:26 2025 by rpki-client