$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/BAA6E77E852D11ED9A1A8D47C4F9AE02.roa File: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (raw, json) Hash identifier: LpYZeCMqtoq3Zi6VrSOzNbUcfWQzSLEFLO1bEbqVHyo= Subject key identifier: 64:AF:51:93:CB:49:26:65:D4:52:55:E8:CE:78:16:FE:10:E0:A7:FB Certificate issuer: /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Certificate serial: 094F Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/BAA6E77E852D11ED9A1A8D47C4F9AE02.roa Signing time: Fri 06 Dec 2024 20:09:17 +0000 ROA not before: Fri 06 Dec 2024 20:09:17 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 138523 IP address blocks: 103.127.180.0/24 maxlen: 24 103.127.181.0/24 maxlen: 24 103.127.182.0/24 maxlen: 24 103.127.183.0/24 maxlen: 24 2404:2640:4000::/34 maxlen: 34 2404:2640:8000::/36 maxlen: 36 2404:2640:9000::/36 maxlen: 36 2404:2640:a000::/36 maxlen: 36 2404:2640:b000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2383 (0x94f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Validity Not Before: Dec 6 20:09:17 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=675359ed-da57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:73:a1:47:bb:c0:07:29:62:17:95:59:bf: 56:d3:ef:5a:94:05:ab:b1:bd:c8:25:bd:0d:fb:fb: 7b:11:73:27:a4:2a:7e:82:02:e3:8a:0a:c6:49:67: d4:9d:06:f3:21:46:98:99:a5:52:a6:2e:53:84:a7: 3e:69:5b:d5:38:48:5e:b0:98:a7:2e:b2:b2:ae:e3: 7b:e5:ed:35:a9:e8:3f:d3:0c:d2:ae:f4:e7:2e:b2: 8a:63:ad:95:29:97:0f:68:b4:22:5e:c8:4b:1e:35: 67:e8:a1:ce:c0:16:8b:b6:b8:8b:63:8b:5e:68:c7: d3:22:57:a9:62:31:a8:ad:d2:8c:37:2d:15:ff:4d: 60:46:fe:bd:50:0e:de:cb:2e:87:e4:d4:8d:a5:9c: dc:63:4d:b2:3a:2d:13:bf:dc:bb:25:90:0a:29:36: 42:6e:cf:a9:d1:5d:ec:3e:ee:82:83:3f:22:63:4f: ce:d4:cd:2d:3a:f3:3b:4d:34:26:0c:5a:3f:c9:37: 32:f4:39:08:ed:5a:a2:0e:9e:4c:9a:f0:44:1b:b3: 70:33:ad:f7:40:22:21:ac:77:b3:72:21:a4:ad:8a: 60:5f:18:1a:fb:ed:05:08:0d:f7:ce:44:aa:55:0f: 45:ca:c4:05:10:b0:92:fc:fc:6b:28:53:47:03:a7: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AF:51:93:CB:49:26:65:D4:52:55:E8:CE:78:16:FE:10:E0:A7:FB X509v3 Authority Key Identifier: keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/BAA6E77E852D11ED9A1A8D47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.180.0/22 IPv6: 2404:2640:4000::-2404:2640:bfff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 77:a1:fe:ee:b7:d0:a4:c0:da:7d:05:d7:3f:6d:05:4f:f5:38: 94:c8:13:f0:17:58:c3:1f:49:38:1d:8c:54:2f:16:83:20:61: 9c:d9:d1:99:9d:4a:a8:db:ac:ff:6b:e1:17:58:be:db:8e:f6: 45:9d:d1:49:82:4f:65:81:6e:e0:e6:e8:66:46:c0:f9:53:db: da:87:a2:2a:f9:8d:1c:6e:d4:01:51:ab:ff:1f:28:16:9b:8e: 94:b3:90:ac:14:8f:09:36:02:bd:ee:da:73:bb:6f:72:d4:af: 8c:02:11:51:a8:44:11:97:03:21:dc:c1:74:05:e9:be:4a:1c: 29:92:de:a0:e1:04:f0:6b:d6:b2:ef:56:cb:3c:97:58:32:b6: ca:92:78:44:71:ff:e8:d7:e6:7f:a7:07:d5:6f:7c:4f:ff:d0: d9:5a:0b:aa:e9:5e:06:e6:53:ee:57:7a:79:b7:f3:bf:40:91: 5e:0d:41:8a:66:6f:14:05:15:eb:ee:b0:6c:c8:a4:3c:56:0c: 6c:0e:7b:d1:68:a0:dd:ff:4c:05:6d:7c:91:8c:40:de:d5:ed: c6:60:93:00:a0:54:b9:31:de:64:34:a3:dc:07:c0:5c:6b:d2: 53:66:94:4c:e1:e0:36:5e:bd:b5:ff:24:c9:e1:18:28:02:a0: 0b:a7:92:fa -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICCU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlEQ0IxMTAvBgNVBAUTKDA3QTYwN0RDQTkzMzMyMUZGNzhGRUM2OENEN0E0QzE0 OTU0MzdBNUYwHhcNMjQxMjA2MjAwOTE3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUzNTllZC1kYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxspzoUe7wAcpYheVWb9W0+9alAWrsb3IJb0N+/t7EXMnpCp+ggLjigrGSWfU nQbzIUaYmaVSpi5ThKc+aVvVOEhesJinLrKyruN75e01qeg/0wzSrvTnLrKKY62V KZcPaLQiXshLHjVn6KHOwBaLtriLY4teaMfTIlepYjGordKMNy0V/01gRv69UA7e yy6H5NSNpZzcY02yOi0Tv9y7JZAKKTZCbs+p0V3sPu6Cgz8iY0/O1M0tOvM7TTQm DFo/yTcy9DkI7VqiDp5MmvBEG7NwM633QCIhrHezciGkrYpgXxga++0FCA33zkSq VQ9FysQFELCS/PxrKFNHA6eOsQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFGSvUZPL SSZl1FJV6M54Fv4Q4Kf7MB8GA1UdIwQYMBaAFAemB9ypMzIf94/saM16TBSVQ3pf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOURDQi83QzlFQzlCQThD NEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1oXzNqLXhvelhwTUZKVkRl bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2WUgzS2t6TWhfM2oteG96WHBNRkpWRGVsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjlEQ0IvN0M5RUM5QkE4QzRDMTFFQUEwNTE4NTgyQzRGOUFFMDIvQkFBNkU3N0U4 NTJEMTFFRDlBMUE4RDQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBAJnf7QwGAQCAAIwEjAQAwYGJAQmQEADBgYkBCZAgDANBgkq hkiG9w0BAQsFAAOCAQEAd6H+7rfQpMDafQXXP20FT/U4lMgT8BdYwx9JOB2MVC8W gyBhnNnRmZ1KqNus/2vhF1i+2472RZ3RSYJPZYFu4OboZkbA+VPb2oeiKvmNHG7U AVGr/x8oFpuOlLOQrBSPCTYCve7ac7tvctSvjAIRUahEEZcDIdzBdAXpvkocKZLe oOEE8GvWsu9WyzyXWDK2ypJ4RHH/6Nfmf6cH1W98T//Q2VoLquleBuZT7ld6ebfz v0CRXg1BimZvFAUV6+6wbMikPFYMbA570Wig3f9MBW18kYxA3tXtxmCTAKBUuTHe ZDSj3AfAXGvSU2aUTOHgNl69tf8kyeEYKAKgC6eS+g== -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:32 2025 by rpki-client