$ rpki-client -vvf rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/164B42E2414111F0A098A82DC4F9AE02.roa File: 164B42E2414111F0A098A82DC4F9AE02.roa (raw, json) Hash identifier: dJHoDekjFkpD+HydVswBgGgsUVupPAujnF3OBVrSpKI= Subject key identifier: 7D:FB:83:9A:FF:5E:C7:3D:C5:EF:C5:17:71:9B:74:1A:D3:7F:7A:E8 Certificate issuer: /CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2 Certificate serial: 0F6E Authority key identifier: B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/164B42E2414111F0A098A82DC4F9AE02.roa Signing time: Wed 04 Jun 2025 12:40:25 +0000 ROA not before: Wed 04 Jun 2025 12:40:25 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 134562 IP address blocks: 103.120.164.0/22 maxlen: 22 103.120.164.0/24 maxlen: 25 103.120.164.0/25 maxlen: 27 103.120.164.128/26 maxlen: 27 103.120.164.192/27 maxlen: 27 103.120.164.224/27 maxlen: 27 103.120.165.0/24 maxlen: 24 103.120.166.0/24 maxlen: 24 103.120.167.0/24 maxlen: 24 2403:5a40::/32 maxlen: 32 2403:5a40::/41 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3950 (0xf6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BF1E, serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2 Validity Not Before: Jun 4 12:40:25 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=68403eb9-3224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:2f:b4:e1:d6:60:48:28:19:3a:c3:ba:58: 97:39:d6:61:41:f0:2a:17:a4:77:6e:72:c5:f1:02: 07:c1:cf:f4:42:14:8b:1e:ee:db:0d:b9:84:a0:9b: b6:b6:37:87:ee:7d:68:cc:7c:18:1d:3d:3d:62:01: b4:16:67:3f:e4:52:fe:20:82:d9:38:7c:ed:df:d2: 3a:3c:ae:47:b5:a2:97:55:8e:dc:d8:33:3e:59:9d: 8b:10:7f:4f:98:99:6f:15:44:d6:37:4d:e5:27:72: 1a:c2:19:39:32:6d:c6:a2:61:39:72:29:5c:25:b8: 28:59:4b:50:1b:d6:23:a1:da:eb:fe:61:7b:fc:0e: b3:c0:34:b3:e8:13:b1:40:1d:81:9e:fa:4f:4c:6a: df:89:24:15:d3:57:9b:d3:c9:1e:36:e7:d7:75:fe: c8:d6:b0:1f:5d:42:0f:5e:61:30:e4:44:24:0e:a2: 6c:37:44:fb:b4:6c:20:8a:59:bb:08:99:b6:9e:77: b7:bb:d8:14:9c:ab:5f:60:ff:a1:c6:eb:0d:8d:9d: 44:db:57:0e:8a:7a:7f:e6:96:f5:55:8c:b6:f4:b9: a9:4b:01:93:43:44:22:49:1d:e6:ea:9a:0f:24:9d: 8d:50:0c:b4:c9:af:06:bf:79:15:a9:46:60:c6:04: cb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FB:83:9A:FF:5E:C7:3D:C5:EF:C5:17:71:9B:74:1A:D3:7F:7A:E8 X509v3 Authority Key Identifier: keyid:B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/164B42E2414111F0A098A82DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.164.0/22 IPv6: 2403:5a40::/32 Signature Algorithm: sha256WithRSAEncryption 0d:6b:95:a9:58:b2:07:05:a5:31:72:36:8f:a4:88:5d:9f:3a: 2e:b6:68:57:dc:c1:b2:8d:11:03:90:52:fb:61:27:f5:3c:ca: dd:95:e7:d6:1c:16:ed:b5:aa:2f:3e:78:b0:16:46:7b:59:6f: f9:9b:61:3b:af:3c:34:25:f0:78:66:d9:d1:99:19:e2:e0:e8: c6:23:b7:3d:9a:3b:a5:fc:44:15:6c:81:39:d8:f1:20:9c:48: 34:d4:0f:74:b7:27:65:8b:52:f9:29:ab:3b:bc:f8:fa:51:27: e3:7c:fe:30:f7:61:37:da:99:b4:f5:18:20:64:48:0a:8b:4a: d0:7f:a3:e9:bc:3e:0a:44:b9:fa:5d:23:ed:85:4d:bc:85:24: 8b:8b:c4:c1:41:28:f1:bd:d5:51:73:b5:6a:3a:26:e7:95:e8: ea:4e:fa:f1:81:58:9b:83:06:79:ef:0f:bc:8e:9b:d0:04:bd: 67:69:c9:58:a4:fd:b8:f9:1a:94:92:1f:bc:45:ae:13:40:c1: 81:00:92:04:ca:b2:42:cd:87:38:f3:33:e4:70:e5:a9:3e:9f: 6e:54:fb:d0:05:25:1e:25:aa:0c:5d:35:90:93:83:cd:3b:e5: 4b:61:42:9f:c1:28:a4:48:b6:18:ef:dc:10:3a:18:6d:0d:6a: 8b:35:73:1c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICD24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JGMUUxMTAvBgNVBAUTKEIxNEIyRUU1QzVFRDczNkFCNzM2QjI1NTM1ODY3NTlB RkNERUMzRTIwHhcNMjUwNjA0MTI0MDI1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQwM2ViOS0zMjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8wvtOHWYEgoGTrDuliXOdZhQfAqF6R3bnLF8QIHwc/0QhSLHu7bDbmEoJu2 tjeH7n1ozHwYHT09YgG0Fmc/5FL+IILZOHzt39I6PK5HtaKXVY7c2DM+WZ2LEH9P mJlvFUTWN03lJ3Iawhk5Mm3GomE5cilcJbgoWUtQG9Yjodrr/mF7/A6zwDSz6BOx QB2BnvpPTGrfiSQV01eb08keNufXdf7I1rAfXUIPXmEw5EQkDqJsN0T7tGwgilm7 CJm2nne3u9gUnKtfYP+hxusNjZ1E21cOinp/5pb1VYy29LmpSwGTQ0QiSR3m6poP JJ2NUAy0ya8Gv3kVqUZgxgTLFQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFH37g5r/ Xsc9xe/FF3GbdBrTf3roMB8GA1UdIwQYMBaAFLFLLuXF7XNqtzayVTWGdZr83sPi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkYxRS9EQkIyQkY2NjZF NkYxMUU5QUEwMTdDMzNDNEY5QUUwMi9zVXN1NWNYdGMycTNOckpWTllaMW12emV3 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVc3U1Y1h0YzJxM05ySlZOWVoxbXZ6ZXctSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0JGMUUvREJCMkJGNjY2RTZGMTFFOUFBMDE3QzMzQzRGOUFFMDIvMTY0QjQyRTI0 MTQxMTFGMEEwOThBODJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJneKQwDQQCAAIwBwMFACQDWkAwDQYJKoZIhvcNAQELBQAD ggEBAA1rlalYsgcFpTFyNo+kiF2fOi62aFfcwbKNEQOQUvthJ/U8yt2V59YcFu21 qi8+eLAWRntZb/mbYTuvPDQl8Hhm2dGZGeLg6MYjtz2aO6X8RBVsgTnY8SCcSDTU D3S3J2WLUvkpqzu8+PpRJ+N8/jD3YTfambT1GCBkSAqLStB/o+m8PgpEufpdI+2F TbyFJIuLxMFBKPG91VFztWo6JueV6OpO+vGBWJuDBnnvD7yOm9AEvWdpyVik/bj5 GpSSH7xFrhNAwYEAkgTKskLNhzjzM+Rw5ak+n25U+9AFJR4lqgxdNZCTg8075Uth Qp/BKKRIthjv3BA6GG0Naos1cxw= -----END CERTIFICATE-----Generated at Fri Jun 20 01:42:56 2025 by rpki-client