$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/1C93BF747CD011EB9F876E78C4F9AE02.roa File: 1C93BF747CD011EB9F876E78C4F9AE02.roa (raw, json) Hash identifier: vUduh0w3eSZesFepaO929FwqL1Ap+OkfqL7IQgJ/yu0= Subject key identifier: C9:71:5E:8E:EB:57:F2:D7:B2:64:58:61:38:13:4F:16:77:C8:F1:D2 Certificate issuer: /CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C Certificate serial: 0669 Authority key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/1C93BF747CD011EB9F876E78C4F9AE02.roa Signing time: Fri 04 Apr 2025 23:02:43 +0000 ROA not before: Fri 04 Apr 2025 23:02:43 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 0 IP address blocks: 103.10.57.0/24 maxlen: 24 103.163.20.0/24 maxlen: 24 2001:deb:c000::/48 maxlen: 48 2001:deb:c001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F80, serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C Validity Not Before: Apr 4 23:02:43 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f06513-0f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7c:45:52:c7:9f:d4:0b:33:f3:ab:37:86:a5: 63:7e:01:b5:79:28:7f:cd:ac:30:c2:20:a2:b6:1b: 6d:54:1d:0a:f7:14:cb:aa:08:66:47:37:3f:c8:8d: 50:f1:54:1f:46:9c:14:e2:06:f2:4e:ff:c6:5b:c9: f8:a3:9a:2e:00:04:34:28:04:b4:2e:f8:f8:f5:d0: 7b:f6:d8:9c:ea:38:41:ce:83:e1:1c:3a:d8:21:1f: d3:d2:09:1a:e3:a2:9a:48:c4:ff:c6:d8:1e:cb:ea: c3:e3:08:5e:d1:d6:a0:85:75:ed:57:63:f6:c2:47: 00:1d:ed:e7:e8:d7:d3:02:b4:2a:d4:a3:e3:31:7d: 0a:a9:bc:4a:e4:96:e2:a3:bf:d0:3c:a1:7e:f9:e0: 7f:cd:e5:46:d7:f8:88:b6:5a:0d:c8:21:43:2e:9a: a1:bf:28:e9:85:49:68:40:6a:8e:81:b7:00:96:81: 11:ca:cc:62:0b:43:9d:fc:eb:94:79:d3:c1:8a:dc: 5b:d5:02:b3:78:bf:45:3d:b0:78:20:32:3c:41:5b: 59:24:1d:c9:1d:46:c3:dd:57:9d:d5:b1:5a:3d:38: 2b:77:97:ad:82:fe:ff:a0:78:62:09:c1:86:04:20: f1:86:38:e1:90:2a:7b:a0:d4:8f:41:55:a0:ee:f7: 9f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:71:5E:8E:EB:57:F2:D7:B2:64:58:61:38:13:4F:16:77:C8:F1:D2 X509v3 Authority Key Identifier: keyid:6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/1C93BF747CD011EB9F876E78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.57.0/24 103.163.20.0/24 IPv6: 2001:deb:c000::/47 Signature Algorithm: sha256WithRSAEncryption cc:85:3a:2e:67:bc:ba:68:73:4d:03:cc:57:3f:01:bc:c8:59: e7:2a:da:76:ad:21:72:5c:cb:82:45:e0:dc:86:a0:7a:ed:98: e2:77:e4:6e:d2:c9:32:2f:56:61:19:97:45:00:d4:82:0a:e1: b8:ab:46:15:19:a3:32:df:79:c0:c2:77:55:cd:b0:99:ac:16: 6c:e0:04:0a:46:2a:47:db:76:91:b5:5f:df:35:25:af:f8:58: af:5a:08:06:3c:91:41:61:68:9e:1a:ee:a0:1e:62:2d:62:73: 1e:5c:c8:db:a5:c5:89:27:51:75:42:08:39:28:15:0d:e4:46: 7f:52:26:3a:dc:e5:70:1f:ef:23:bc:a6:78:21:4f:65:4d:07: f5:0e:03:8f:bc:02:bd:27:52:99:57:8a:90:14:f3:24:4d:6e: 0b:54:55:fe:94:54:dd:e1:5d:6e:93:6d:2e:c9:8e:97:9e:0c: 65:6a:36:e1:20:71:e3:46:a4:47:ef:b1:27:91:ea:db:89:4f: 81:db:c8:02:d2:36:0a:e7:1d:9a:aa:a3:03:57:32:75:30:c3: b3:1a:ca:61:e7:f2:f9:ec:c3:2b:06:c5:88:fb:04:98:1a:ea: ee:4b:66:a9:c4:e2:dc:b2:a0:21:47:0e:33:ad:06:ad:c4:de: 64:f7:e0:a8 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGODAxMTAvBgNVBAUTKDZDQTJDRkE2ODhCREY5RTJENjU2MTYwODY3N0EzMEM5 MTUyNDNEMEMwHhcNMjUwNDA0MjMwMjQzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2YwNjUxMy0wZjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nxFUsef1Asz86s3hqVjfgG1eSh/zawwwiCithttVB0K9xTLqghmRzc/yI1Q 8VQfRpwU4gbyTv/GW8n4o5ouAAQ0KAS0Lvj49dB79tic6jhBzoPhHDrYIR/T0gka 46KaSMT/xtgey+rD4whe0daghXXtV2P2wkcAHe3n6NfTArQq1KPjMX0KqbxK5Jbi o7/QPKF++eB/zeVG1/iItloNyCFDLpqhvyjphUloQGqOgbcAloERysxiC0Od/OuU edPBitxb1QKzeL9FPbB4IDI8QVtZJB3JHUbD3Ved1bFaPTgrd5etgv7/oHhiCcGG BCDxhjjhkCp7oNSPQVWg7vefVQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFMlxXo7r V/LXsmRYYTgTTxZ3yPHSMB8GA1UdIwQYMBaAFGyiz6aIvfni1lYWCGd6MMkVJD0M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY4MC8wNzFERUE0MDdD Q0UxMUVCQkI4ODI5NzZDNEY5QUUwMi9iS0xQcG9pOS1lTFdWaFlJWjNvd3lSVWtQ UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLTFBwb2k5LWVMV1ZoWUlaM293eVJVa1BRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhGODAvMDcxREVBNDA3Q0NFMTFFQkJCODgyOTc2QzRGOUFFMDIvMUM5M0JGNzQ3 Q0QwMTFFQjlGODc2RTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnCjkDBABnoxQwDwQCAAIwCQMHASABDevAADANBgkqhkiG 9w0BAQsFAAOCAQEAzIU6Lme8umhzTQPMVz8BvMhZ5yradq0hclzLgkXg3Iageu2Y 4nfkbtLJMi9WYRmXRQDUggrhuKtGFRmjMt95wMJ3Vc2wmawWbOAECkYqR9t2kbVf 3zUlr/hYr1oIBjyRQWFonhruoB5iLWJzHlzI26XFiSdRdUIIOSgVDeRGf1ImOtzl cB/vI7ymeCFPZU0H9Q4Dj7wCvSdSmVeKkBTzJE1uC1RV/pRU3eFdbpNtLsmOl54M ZWo24SBx40akR++xJ5Hq24lPgdvIAtI2CucdmqqjA1cydTDDsxrKYefy+ezDKwbF iPsEmBrq7ktmqcTi3LKgIUcOM60GrcTeZPfgqA== -----END CERTIFICATE-----Generated at Sat Apr 26 08:15:59 2025 by rpki-client