$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/CBF9AD5449E811E6BAF4525DC4F9AE02.roa File: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (raw, json) Hash identifier: w2d5iGO1DzNwRW9XaGG0C+Ss9EnEjj1pHZpwfJJ5U1I= Subject key identifier: 6F:C6:2B:04:4A:14:00:98:98:C4:08:C5:73:1A:6D:15:A2:E1:65:41 Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Certificate serial: 22C7 Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/CBF9AD5449E811E6BAF4525DC4F9AE02.roa Signing time: Sat 04 Jan 2025 16:06:11 +0000 ROA not before: Sat 04 Jan 2025 16:06:11 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 134839 IP address blocks: 103.222.238.0/24 maxlen: 24 103.245.176.0/24 maxlen: 24 103.247.180.0/24 maxlen: 24 2001:df7:a401::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8903 (0x22c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Validity Not Before: Jan 4 16:06:11 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67795c72-ad1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:7a:58:fe:d4:4e:ad:26:fc:ae:da:9e:2f: 2a:bf:56:fb:c4:92:97:34:76:b2:17:92:bd:5c:00: d3:5f:9c:24:96:82:97:a2:06:c2:a1:47:08:66:e4: e3:19:81:33:a2:a4:63:0b:f8:6f:78:1b:e2:e3:8c: ec:3d:2b:9a:4d:0b:d5:30:03:e9:04:e1:3b:6d:f2: 86:ed:ac:45:91:d7:1f:91:20:5c:7e:91:ab:a1:62: 36:8c:64:a8:60:42:a1:8c:94:1c:fb:94:b5:ce:f2: 0e:ba:38:c0:ee:71:28:1f:77:df:ce:36:7d:9d:4c: 69:86:3d:de:a6:fb:63:53:8f:e6:55:82:d2:bb:69: ac:77:74:2e:18:5d:45:cc:fa:56:61:ed:96:30:45: 7a:ff:bc:75:73:81:e1:4c:5e:52:e1:18:22:77:2f: 9e:85:b7:62:96:6c:ab:01:68:dc:96:d0:40:84:d8: a8:d7:c9:08:68:f5:aa:99:68:49:01:f3:19:a1:c7: e8:37:62:dd:e8:af:27:19:54:0c:e4:6e:3f:4a:5d: 7c:95:43:e4:71:83:c3:27:d8:12:a3:44:90:14:cc: 58:1d:18:78:7d:d5:20:fd:db:8c:26:59:b5:9f:d2: f7:db:37:25:e0:1c:f1:ad:b5:46:bc:3e:0c:f0:ff: 12:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C6:2B:04:4A:14:00:98:98:C4:08:C5:73:1A:6D:15:A2:E1:65:41 X509v3 Authority Key Identifier: keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/CBF9AD5449E811E6BAF4525DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.222.238.0/24 103.245.176.0/24 103.247.180.0/24 IPv6: 2001:df7:a401::/48 Signature Algorithm: sha256WithRSAEncryption 1b:21:5c:b7:31:e6:cf:5b:eb:f7:6d:eb:fa:1e:55:6a:c1:55: 47:dc:00:90:e2:d1:51:b0:06:7e:c2:a2:6d:4a:5a:79:c1:d1: db:3e:b6:2b:84:e6:d1:5e:d3:c6:29:70:cd:c7:1a:e8:33:ff: 3e:25:54:b1:a6:86:3c:94:b4:c0:f0:11:b7:f4:28:2a:e7:b4: be:3c:67:95:0e:3b:c2:36:97:dd:75:4b:04:71:66:5d:ec:3e: c7:25:db:a8:be:8f:1e:de:38:6e:7c:04:00:ef:f7:ad:a0:d0: 70:d3:fc:bb:70:b1:52:a0:e1:95:f4:0d:8c:04:3d:13:9d:f0: 5b:80:69:3c:09:2f:87:4e:fb:76:fc:64:73:4c:98:35:3f:76: b8:3b:65:f4:29:fa:94:ab:d8:ec:53:fa:ff:a0:94:3d:76:25: 65:ef:df:07:51:d4:c3:45:50:98:83:7d:20:45:51:2c:e0:6e: 5f:5c:fd:3c:06:96:d0:89:ce:bb:f9:cd:ce:b7:1a:a0:95:f4: e0:5c:4b:2c:4e:db:ac:d2:92:0d:69:29:ab:13:34:f0:95:b2: f5:d3:52:f0:b7:c4:dc:01:9f:66:3e:20:43:aa:c8:d7:29:1a: 8f:ea:d1:a3:4b:af:5f:52:16:d3:1c:40:21:c6:ca:e7:e1:4e: d6:f8:3d:c1 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICIscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4 RTAxNTQ2N0MwHhcNMjUwMTA0MTYwNjExWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc5NWM3Mi1hZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsod6WP7UTq0m/K7ani8qv1b7xJKXNHayF5K9XADTX5wkloKXogbCoUcIZuTj GYEzoqRjC/hveBvi44zsPSuaTQvVMAPpBOE7bfKG7axFkdcfkSBcfpGroWI2jGSo YEKhjJQc+5S1zvIOujjA7nEoH3ffzjZ9nUxphj3epvtjU4/mVYLSu2msd3QuGF1F zPpWYe2WMEV6/7x1c4HhTF5S4Rgidy+ehbdilmyrAWjcltBAhNio18kIaPWqmWhJ AfMZocfoN2Ld6K8nGVQM5G4/Sl18lUPkcYPDJ9gSo0SQFMxYHRh4fdUg/duMJlm1 n9L32zcl4BzxrbVGvD4M8P8SbwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFG/GKwRK FACYmMQIxXMabRWi4WVBMB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjczNDIvNkREQkM3RkM5MzI3MTFFNUE4MUYzMDNFQzRGOUFFMDIvQ0JGOUFENTQ0 OUU4MTFFNkJBRjQ1MjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBABn3u4DBABn9bADBABn97QwDwQCAAIwCQMHACABDfekATAN BgkqhkiG9w0BAQsFAAOCAQEAGyFctzHmz1vr923r+h5VasFVR9wAkOLRUbAGfsKi bUpaecHR2z62K4Tm0V7Txilwzcca6DP/PiVUsaaGPJS0wPARt/QoKue0vjxnlQ47 wjaX3XVLBHFmXew+xyXbqL6PHt44bnwEAO/3raDQcNP8u3CxUqDhlfQNjAQ9E53w W4BpPAkvh077dvxkc0yYNT92uDtl9Cn6lKvY7FP6/6CUPXYlZe/fB1HUw0VQmIN9 IEVRLOBuX1z9PAaW0InOu/nNzrcaoJX04FxLLE7brNKSDWkpqxM08JWy9dNS8LfE 3AGfZj4gQ6rI1ykaj+rRo0uvX1IW0xxAIcbK5+FO1vg9wQ== -----END CERTIFICATE-----Generated at Sat Apr 26 08:03:01 2025 by rpki-client