$ rpki-client -vvf rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/6B47EC68529E11EC9C7C2081C4F9AE02.roa File: 6B47EC68529E11EC9C7C2081C4F9AE02.roa (raw, json) Hash identifier: RyLNM9Y2xKP2/pPGOLqXFeZG9/xveuZYuPTjdQJUT2M= Subject key identifier: B7:4C:6B:AD:94:4B:30:95:C9:60:4D:6D:7B:60:96:EE:D9:E1:10:B2 Certificate issuer: /CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9 Certificate serial: 0415 Authority key identifier: 89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/6B47EC68529E11EC9C7C2081C4F9AE02.roa Signing time: Sat 11 Jan 2025 00:13:35 +0000 ROA not before: Sat 11 Jan 2025 00:13:35 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 149037 IP address blocks: 103.177.68.0/23 maxlen: 24 2400:3860::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1045 (0x415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143035, serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9 Validity Not Before: Jan 11 00:13:35 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6781b7ae-43a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:50:56:17:31:dc:22:fa:75:dc:20:e6:22: ff:9a:e9:80:2d:a8:07:ad:6a:57:2f:24:7d:ff:90: b2:98:54:de:5a:13:bc:e3:e0:a0:dc:f3:7f:fa:f7: 8a:69:2a:b5:0f:bf:14:85:b7:05:5e:b4:94:88:2c: 68:29:4c:5f:d8:10:58:92:f7:34:b6:eb:67:db:98: 31:3c:ea:f4:6e:0a:3b:41:e4:db:9f:73:e1:b1:33: 89:29:a4:34:b2:80:23:8a:3f:e4:c9:d7:0f:69:cd: 71:93:7e:bb:fb:aa:fc:26:bd:26:90:8e:3d:36:75: be:29:dc:aa:a9:11:f0:58:c7:bc:6c:1e:33:49:96: 19:f3:89:6b:bb:cd:62:be:1b:1f:7c:ef:55:6c:88: 60:c0:b9:ec:59:ce:4d:0f:80:1e:3b:15:0e:4c:80: 75:4e:30:dc:a8:bb:50:35:8d:de:85:1d:1e:10:80: e3:1a:e0:51:f5:d8:24:3f:df:47:f0:1b:46:66:4d: 0a:78:ae:fe:12:f0:ec:58:a0:4a:9e:1d:c0:f1:08: 29:02:03:94:5b:3f:77:5f:a5:88:96:85:46:df:02: a7:53:89:c0:e9:84:cb:60:21:62:2e:4c:cb:3f:3e: aa:5f:f9:4a:0e:23:71:a5:be:9c:1d:51:58:d5:ab: fc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4C:6B:AD:94:4B:30:95:C9:60:4D:6D:7B:60:96:EE:D9:E1:10:B2 X509v3 Authority Key Identifier: keyid:89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/6B47EC68529E11EC9C7C2081C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.68.0/23 IPv6: 2400:3860::/32 Signature Algorithm: sha256WithRSAEncryption 73:a2:ce:4d:40:3b:66:4a:e6:fb:ae:3d:f5:e7:58:4f:bf:d0: b2:7f:4b:9d:54:75:01:7f:f9:4f:86:5f:3a:47:8f:7a:91:93: d8:32:3e:1b:41:fe:10:07:2f:54:59:03:c6:e1:1f:6a:6c:d0: 70:50:97:ce:b7:d5:fc:0f:ce:09:cc:71:54:67:7e:57:05:95: ab:9d:f1:28:20:b3:12:2c:c7:5d:62:72:f7:c5:10:c4:b6:92: db:d4:d8:91:5a:12:b1:e9:66:79:26:38:7f:cc:8d:c1:c5:01: 46:f8:c0:00:41:83:ec:8e:f1:ac:4c:fd:f1:56:91:18:da:39: 6f:c7:12:2e:4a:fb:67:19:d1:39:a8:e5:c7:33:9c:1b:e1:5d: a9:bc:78:34:23:34:be:60:60:74:1b:9f:c0:b7:86:a7:cc:72: 77:63:16:1f:3b:e9:3e:f4:e7:6c:fe:30:83:f1:d9:52:79:d6: 6f:9e:9a:e8:b4:89:16:7e:c8:0f:28:98:41:ee:4a:90:7b:b6: dd:c0:67:fa:73:00:ca:36:21:fc:a6:df:c0:6c:f7:17:75:b3: c7:1f:de:50:75:73:65:70:17:72:75:b1:0e:b4:23:09:8b:af: ae:fa:91:23:f5:04:09:4b:73:b8:02:b3:2e:3b:0b:94:fc:b1: 20:97:7a:95 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwMzUxMTAvBgNVBAUTKDg5QUJDMTM5OEIyNUIxRDZDRThGRjdCRkIzMkIxMkU5 RjA5NjczRjkwHhcNMjUwMTExMDAxMzM1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzgxYjdhZS00M2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyR9QVhcx3CL6ddwg5iL/mumALagHrWpXLyR9/5CymFTeWhO84+Cg3PN/+veK aSq1D78UhbcFXrSUiCxoKUxf2BBYkvc0tutn25gxPOr0bgo7QeTbn3PhsTOJKaQ0 soAjij/kydcPac1xk367+6r8Jr0mkI49NnW+KdyqqRHwWMe8bB4zSZYZ84lru81i vhsffO9VbIhgwLnsWc5ND4AeOxUOTIB1TjDcqLtQNY3ehR0eEIDjGuBR9dgkP99H 8BtGZk0KeK7+EvDsWKBKnh3A8QgpAgOUWz93X6WIloVG3wKnU4nA6YTLYCFiLkzL Pz6qX/lKDiNxpb6cHVFY1av8nwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLdMa62U SzCVyWBNbXtglu7Z4RCyMB8GA1UdIwQYMBaAFImrwTmLJbHWzo/3v7MrEunwlnP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzAzNS8xOEM2MjkxMjUy OUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNkYk9qX2Vfc3lzUzZmQ1dj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhdkJPWXNsc2RiT2pfZV9zeXNTNmZDV2Nfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDMwMzUvMThDNjI5MTI1MjlCMTFFQzlBMEIwQTdEQzRGOUFFMDIvNkI0N0VDNjg1 MjlFMTFFQzlDN0MyMDgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnsUQwDQQCAAIwBwMFACQAOGAwDQYJKoZIhvcNAQELBQAD ggEBAHOizk1AO2ZK5vuuPfXnWE+/0LJ/S51UdQF/+U+GXzpHj3qRk9gyPhtB/hAH L1RZA8bhH2ps0HBQl8631fwPzgnMcVRnflcFlaud8SggsxIsx11icvfFEMS2ktvU 2JFaErHpZnkmOH/MjcHFAUb4wABBg+yO8axM/fFWkRjaOW/HEi5K+2cZ0Tmo5ccz nBvhXam8eDQjNL5gYHQbn8C3hqfMcndjFh876T7052z+MIPx2VJ51m+emui0iRZ+ yA8omEHuSpB7tt3AZ/pzAMo2Ifym38Bs9xd1s8cf3lB1c2VwF3J1sQ60IwmLr676 kSP1BAlLc7gCsy47C5T8sSCXepU= -----END CERTIFICATE-----Generated at Sat Apr 26 09:23:53 2025 by rpki-client