$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/0628D74630C211ECBB5A4116C4F9AE02.roa File: 0628D74630C211ECBB5A4116C4F9AE02.roa (raw, json) Hash identifier: yUQWHT36J9pLE1kpKGBgRzyjB4VNhd4/HCHR7qeOtAQ= Subject key identifier: 32:CD:1C:29:6B:93:65:5F:3D:EF:7F:E1:81:F8:19:8C:B1:33:7E:2F Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 0486 Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/0628D74630C211ECBB5A4116C4F9AE02.roa Signing time: Thu 27 Feb 2025 01:23:40 +0000 ROA not before: Thu 27 Feb 2025 01:23:40 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 45753 IP address blocks: 103.84.84.0/22 maxlen: 24 202.59.249.0/24 maxlen: 24 202.61.97.0/24 maxlen: 24 202.61.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 23:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF Validity Not Before: Feb 27 01:23:40 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67bfbe9c-7660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:94:59:ec:a2:f0:41:f0:d3:25:2e:cb:9f:7a: db:36:22:e2:f5:a5:6f:a4:50:7c:a3:fd:f8:13:58: 0c:74:31:13:dd:5f:78:f7:b1:ed:f8:97:70:7d:c6: c4:7f:a8:8d:11:2b:ff:bf:28:0b:fc:09:12:78:7e: 4c:1c:42:59:1d:12:c2:04:e1:87:08:51:14:0d:49: bf:9a:49:b5:0c:13:a9:7e:06:8a:a1:9f:ca:65:f5: 54:aa:19:10:c7:0e:2c:0c:0e:39:18:d4:ea:f2:fe: 4e:0a:37:84:15:e5:74:88:ba:52:0c:db:3b:08:9a: 87:8b:5f:7f:bb:a2:f8:ad:17:d0:63:b6:94:fb:52: e9:f0:62:6e:0c:fd:fd:e2:c5:3a:66:1d:fc:fd:08: 8b:f8:23:75:19:e6:4a:2c:08:5b:35:24:d4:a8:7b: c6:b8:95:8c:c6:d3:8c:2f:78:fd:4c:91:05:f0:b8: b2:ea:76:2e:a3:b1:2d:52:12:e1:e6:55:7d:ef:f4: 83:3e:52:47:72:b3:6f:7c:07:d9:28:aa:34:01:c0: 67:b7:e7:63:65:6f:12:cd:2f:19:bc:17:9e:31:27: 79:a5:3e:dc:9a:40:fb:b6:f5:d1:e3:c8:c5:07:0d: 2e:20:0d:de:0e:e3:77:2f:c6:10:70:22:61:71:5d: 97:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CD:1C:29:6B:93:65:5F:3D:EF:7F:E1:81:F8:19:8C:B1:33:7E:2F X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/0628D74630C211ECBB5A4116C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.84.0/22 202.59.249.0/24 202.61.97.0/24 202.61.111.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:ed:16:a9:92:cd:98:57:82:da:d4:56:6b:53:7f:21:4f:9b: 62:df:1c:3a:ad:5a:02:f1:c8:f9:72:93:ef:13:0d:99:3b:57: 19:32:73:8d:d7:5b:9c:7d:c0:9d:7b:fe:30:05:8e:5c:0c:11: 82:89:25:9c:91:ec:c5:40:29:18:86:93:82:19:ee:93:13:96: 72:69:b6:ec:7c:0c:1f:31:11:6f:7b:a5:8b:b4:c9:c9:23:23: 03:10:38:0f:79:25:27:47:45:41:34:12:fa:91:f9:15:dd:70: 41:e8:9f:e0:03:d7:6e:91:7d:ce:c2:c1:43:fa:0d:c5:db:d8: 68:fa:4b:ed:52:41:f1:86:75:26:e4:83:e5:30:e1:e8:47:6a: 74:98:b8:4b:00:35:f6:78:92:e8:a0:e2:de:1e:5f:cc:40:65: ad:12:97:c0:cc:7c:be:b8:4e:aa:bc:7b:4b:9f:35:f5:33:51: 1f:04:4c:09:fb:94:ea:7b:68:4c:00:a7:25:f8:3f:23:2e:76: 7d:0d:0f:fd:1b:4e:a2:c7:20:9a:63:4f:50:79:81:9a:29:15: df:c6:d7:e0:5a:6e:5a:7d:50:c2:62:25:32:6a:b0:cb:ac:7e: 5d:e8:05:ab:72:d3:98:98:a6:b8:50:7c:89:e0:6b:33:00:f5: f4:9a:4e:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjUwMjI3MDEyMzQwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JmYmU5Yy03NjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JRZ7KLwQfDTJS7Ln3rbNiLi9aVvpFB8o/34E1gMdDET3V9497Ht+JdwfcbE f6iNESv/vygL/AkSeH5MHEJZHRLCBOGHCFEUDUm/mkm1DBOpfgaKoZ/KZfVUqhkQ xw4sDA45GNTq8v5OCjeEFeV0iLpSDNs7CJqHi19/u6L4rRfQY7aU+1Lp8GJuDP39 4sU6Zh38/QiL+CN1GeZKLAhbNSTUqHvGuJWMxtOML3j9TJEF8Liy6nYuo7EtUhLh 5lV97/SDPlJHcrNvfAfZKKo0AcBnt+djZW8SzS8ZvBeeMSd5pT7cmkD7tvXR48jF Bw0uIA3eDuN3L8YQcCJhcV2XOwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFDLNHClr k2VfPe9/4YH4GYyxM34vMB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBCQkYvRTQ5MTEyM0EzMEJGMTFFQ0E4NUM0NDE0QzRGOUFFMDIvMDYyOEQ3NDYz MEMyMTFFQ0JCNUE0MTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAJnVFQDBADKO/kDBADKPWEDBADKPW8wDQYJKoZIhvcNAQEL BQADggEBAE3tFqmSzZhXgtrUVmtTfyFPm2LfHDqtWgLxyPlyk+8TDZk7Vxkyc43X W5x9wJ17/jAFjlwMEYKJJZyR7MVAKRiGk4IZ7pMTlnJptux8DB8xEW97pYu0yckj IwMQOA95JSdHRUE0EvqR+RXdcEHon+AD126Rfc7CwUP6DcXb2Gj6S+1SQfGGdSbk g+Uw4ehHanSYuEsANfZ4kuig4t4eX8xAZa0Sl8DMfL64Tqq8e0ufNfUzUR8ETAn7 lOp7aEwApyX4PyMudn0ND/0bTqLHIJpjT1B5gZopFd/G1+Bablp9UMJiJTJqsMus fl3oBaty05iYprhQfIngazMA9fSaTjA= -----END CERTIFICATE-----Generated at Thu Mar 13 21:52:20 2025 by rpki-client