$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/A34E20703F3411EF9DF9274AC4F9AE02.roa File: A34E20703F3411EF9DF9274AC4F9AE02.roa (raw, json) Hash identifier: mj7Quo5wKTbG3d5ij/IP0EyOkfhXPi1COcacV2q2awg= Subject key identifier: AA:7F:B0:20:14:03:E2:AC:CF:71:B2:D8:78:FC:66:63:5F:E9:35:0A Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Certificate serial: 03C8 Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/A34E20703F3411EF9DF9274AC4F9AE02.roa Signing time: Thu 13 Feb 2025 02:14:10 +0000 ROA not before: Thu 13 Feb 2025 02:14:10 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 135341 IP address blocks: 103.180.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168126 Validity Not Before: Feb 13 02:14:10 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67ad5571-3d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7b:4f:11:6b:ec:ca:4a:52:bc:4d:83:48:fc: be:19:02:4b:c4:f8:77:0a:53:03:be:82:db:8a:31: e6:c8:83:8f:b5:1d:63:b1:fd:df:60:b5:df:02:cf: 1c:79:5f:03:e9:10:aa:75:29:bf:9b:34:ff:95:9f: b2:10:f0:f6:9c:e7:16:96:c4:9a:2c:dd:22:cb:9b: d2:10:bb:22:2f:d9:a9:00:ba:7a:57:34:9f:d0:e2: 20:09:81:e2:6a:ef:20:84:5d:f9:6f:f1:35:c2:da: 39:7a:ff:fe:5c:a4:31:61:48:6a:91:4c:2c:be:af: 06:de:79:61:61:bb:33:d3:13:33:b4:14:21:4c:5f: 3f:f9:e0:fa:33:46:69:d6:0b:2b:8d:4a:c3:d2:20: 71:ab:07:06:57:a6:da:c9:22:df:db:c8:ae:77:bb: bf:03:81:47:19:0d:59:99:b7:89:e0:13:9c:3d:b2: 3e:24:c7:ae:f1:eb:e0:2a:dd:3d:1c:e8:80:b4:ad: 3a:60:06:89:92:7a:62:1f:ef:03:e7:41:c6:1d:75: b7:d8:eb:11:40:66:0e:e4:3d:34:fe:2c:4f:f1:44: 99:9e:5b:98:e4:d0:0d:c3:b7:9b:f4:76:27:b2:b2: 9b:4e:9b:b0:ed:47:30:03:be:d3:f7:13:b6:df:17: 6a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7F:B0:20:14:03:E2:AC:CF:71:B2:D8:78:FC:66:63:5F:E9:35:0A X509v3 Authority Key Identifier: keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/A34E20703F3411EF9DF9274AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.180.202.0/24 Signature Algorithm: sha256WithRSAEncryption 08:b0:6d:6d:72:5c:5f:3c:4b:13:48:70:45:42:3d:69:8b:db: 9c:ed:7a:45:e8:e1:1c:17:be:4e:c3:80:d8:a1:7b:e6:29:90: fe:1a:24:87:fd:bf:fe:f6:9c:2f:40:ed:f0:ad:fa:34:70:e8: 5a:c2:99:f6:74:b8:46:ef:b0:e5:20:68:e0:d1:bd:7a:01:40: 07:24:f4:d7:f3:42:91:7e:d0:1b:e7:7f:b8:a4:c3:95:28:97: ab:1e:ca:83:fa:c0:2a:e8:27:27:25:e5:f9:ee:38:34:db:c4: c9:82:15:2b:0e:c6:3b:26:47:77:28:7a:fb:db:13:78:99:56: 23:24:78:0f:85:88:fa:05:3e:ce:eb:61:39:bc:64:46:91:3b: da:6d:82:f5:33:bf:3b:a2:a8:32:2a:6b:bf:f8:ad:87:f5:1d: 47:a1:a0:1a:ff:54:46:17:2f:32:6f:2d:f1:f9:bc:8b:a6:6a: 77:d8:d5:77:e8:d1:74:c8:4c:e4:3a:50:39:df:91:8a:52:af: d9:1a:3c:9d:86:2c:69:54:d1:8a:b6:1d:e5:23:d7:ce:c1:28: 92:62:3a:b0:e1:bf:4c:80:a5:2b:37:81:f6:64:0a:c8:12:65: 2d:f0:7e:f6:fe:34:6b:c7:17:3d:38:30:32:a0:e5:07:56:c8: a3:c5:04:06 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxMjYxMTAvBgNVBAUTKEQ2QTlGQ0NCMzZBMDI3MUNCQzVGMTEyQkI3MjA1QTU3 QjlGNDg0RjcwHhcNMjUwMjEzMDIxNDEwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FkNTU3MS0zZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXtPEWvsykpSvE2DSPy+GQJLxPh3ClMDvoLbijHmyIOPtR1jsf3fYLXfAs8c eV8D6RCqdSm/mzT/lZ+yEPD2nOcWlsSaLN0iy5vSELsiL9mpALp6VzSf0OIgCYHi au8ghF35b/E1wto5ev/+XKQxYUhqkUwsvq8G3nlhYbsz0xMztBQhTF8/+eD6M0Zp 1gsrjUrD0iBxqwcGV6baySLf28iud7u/A4FHGQ1ZmbeJ4BOcPbI+JMeu8evgKt09 HOiAtK06YAaJknpiH+8D50HGHXW32OsRQGYO5D00/ixP8USZnluY5NANw7eb9HYn srKbTpuw7UcwA77T9xO23xdqjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKp/sCAU A+Ksz3Gy2Hj8ZmNf6TUKMB8GA1UdIwQYMBaAFNap/Ms2oCccvF8RK7cgWle59IT3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODEyNi8xNTdGNjZFQTgw MDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4eThYeEVydHlCYVY3bjBo UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFxbjh5emFnSnh5OFh4RXJ0eUJhVjduMGhQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjgxMjYvMTU3RjY2RUE4MDA2MTFFQ0IwM0EwRTYxQzRGOUFFMDIvQTM0RTIwNzAz RjM0MTFFRjlERjkyNzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABntMowDQYJKoZIhvcNAQELBQADggEBAAiwbW1yXF88SxNI cEVCPWmL25ztekXo4RwXvk7DgNihe+YpkP4aJIf9v/72nC9A7fCt+jRw6FrCmfZ0 uEbvsOUgaODRvXoBQAck9NfzQpF+0Bvnf7ikw5Uol6seyoP6wCroJycl5fnuODTb xMmCFSsOxjsmR3coevvbE3iZViMkeA+FiPoFPs7rYTm8ZEaRO9ptgvUzvzuiqDIq a7/4rYf1HUehoBr/VEYXLzJvLfH5vIumanfY1Xfo0XTITOQ6UDnfkYpSr9kaPJ2G LGlU0Yq2HeUj187BKJJiOrDhv0yApSs3gfZkCsgSZS3wfvb+NGvHFz04MDKg5QdW yKPFBAY= -----END CERTIFICATE-----Generated at Mon Feb 17 08:24:51 2025 by rpki-client