$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/0BBF212E1EC211EF82A61739C4F9AE02.roa File: 0BBF212E1EC211EF82A61739C4F9AE02.roa (raw, json) Hash identifier: Jf2arvBq83FoSm5BKtxRrGvm4pEMUSYC+oIeuz2JcN8= Subject key identifier: 3B:2D:4A:FA:00:89:9E:6E:A2:A3:23:C7:15:A0:BF:E4:47:EC:65:58 Certificate issuer: /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE Certificate serial: 95 Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/0BBF212E1EC211EF82A61739C4F9AE02.roa Signing time: Mon 03 Mar 2025 07:59:40 +0000 ROA not before: Mon 03 Mar 2025 07:59:40 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 133132 IP address blocks: 103.108.176.0/24 maxlen: 24 2001:df4:1300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE Validity Not Before: Mar 3 07:59:40 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c5616c-07a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:2a:26:c1:a2:dd:92:96:2a:ea:c9:df:c4: 09:dc:f7:86:51:50:73:9a:a1:84:77:16:67:11:12: 6e:77:bc:61:42:c2:2e:c2:8a:2f:e4:0d:75:36:dc: ac:1e:e3:bd:17:8b:b3:47:b9:51:2b:e2:25:63:04: 74:b7:59:3c:bb:44:03:7c:7a:b7:7a:7a:8b:78:88: 85:76:6a:2d:a3:ab:ac:68:57:64:a1:56:ba:f2:37: e5:a1:c9:5f:77:5b:5b:55:b2:e7:65:c8:07:b3:63: 3c:49:00:a9:ed:16:6f:cf:45:9c:05:7e:5a:44:c0: 9c:98:b0:de:e8:d1:a8:a7:ad:4c:4f:d2:88:36:71: ce:d6:e1:d7:aa:53:a6:c4:bc:69:ed:c8:86:0c:e6: 6f:08:09:35:28:6c:f8:06:cc:18:d5:50:a4:5d:ae: 7c:61:be:22:81:b9:4a:2d:60:df:32:52:ac:5a:65: fc:be:71:98:dc:a0:1a:2b:e3:0e:4d:0b:e9:68:07: 6d:24:60:97:5d:a4:69:e5:99:6f:03:8e:dc:e2:4a: 63:15:47:e0:29:76:d1:4d:59:4f:ec:ff:a2:4d:99: 55:15:79:e9:11:98:9d:33:77:d7:09:f8:10:b6:21: 82:fd:84:50:b8:7e:74:6d:81:4a:bd:c4:ab:3d:a9: fd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2D:4A:FA:00:89:9E:6E:A2:A3:23:C7:15:A0:BF:E4:47:EC:65:58 X509v3 Authority Key Identifier: keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/0BBF212E1EC211EF82A61739C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.108.176.0/24 IPv6: 2001:df4:1300::/48 Signature Algorithm: sha256WithRSAEncryption b0:f3:68:ae:63:8f:f5:5f:b2:0c:4c:2d:ff:c7:58:9b:fb:3d: f7:7f:60:c6:91:f4:82:62:d1:4c:d0:5f:d5:6a:7e:7a:ee:25: 30:92:74:fd:07:60:17:8d:cd:57:fd:06:ed:ef:67:bb:65:42: c1:27:82:3b:23:1e:0b:cc:cd:a5:02:d4:20:0a:05:f5:42:42: 18:37:cd:77:b1:b4:a1:ba:94:b4:67:fb:e2:38:ae:3e:bb:25: a6:f4:4c:ec:8c:20:1e:f2:33:45:b9:81:3f:8f:dc:24:0b:c6: a1:50:6c:57:ba:94:2d:87:e3:b4:c4:91:b9:81:19:2e:57:45: 40:d1:a5:0d:4e:43:d2:41:88:8f:69:5b:67:2f:b4:18:6f:fb: e8:66:25:52:c9:c4:17:9a:15:7d:77:d3:9e:a4:ee:e3:45:dc: 82:33:ff:59:8c:6f:63:d8:78:47:5b:d0:f7:d7:f7:8f:68:df: e8:4b:92:a4:28:c3:2b:ad:aa:16:7b:95:4d:32:d3:9b:81:49: da:08:ee:6d:bb:0c:50:c3:c3:48:c4:0a:a6:42:20:47:b8:c4: 13:19:86:3e:ce:94:5f:e2:18:8f:e5:29:59:36:4f:23:e9:91: 54:e1:f1:48:8e:1b:81:ee:d8:9e:98:1a:60:48:23:d2:0a:c1: f0:d3:d2:95 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJCMTMxMTAvBgNVBAUTKEE3Q0VGQzE3MDBBNEUxODQ2NjI1MDhDNzgxNUY3RUIx RDAxMjlFQkUwHhcNMjUwMzAzMDc1OTQwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M1NjE2Yy0wN2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fcqJsGi3ZKWKurJ38QJ3PeGUVBzmqGEdxZnERJud7xhQsIuwoov5A11Ntys HuO9F4uzR7lRK+IlYwR0t1k8u0QDfHq3enqLeIiFdmoto6usaFdkoVa68jfloclf d1tbVbLnZcgHs2M8SQCp7RZvz0WcBX5aRMCcmLDe6NGop61MT9KINnHO1uHXqlOm xLxp7ciGDOZvCAk1KGz4BswY1VCkXa58Yb4igblKLWDfMlKsWmX8vnGY3KAaK+MO TQvpaAdtJGCXXaRp5ZlvA47c4kpjFUfgKXbRTVlP7P+iTZlVFXnpEZidM3fXCfgQ tiGC/YRQuH50bYFKvcSrPan9eQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDstSvoA iZ5uoqMjxxWgv+RH7GVYMB8GA1UdIwQYMBaAFKfO/BcApOGEZiUIx4FffrHQEp6+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkIxMy9EQzQ4M0YzMDFF QzAxMUVGOTYyOTQyN0RDNEY5QUUwMi9wODc4RndDazRZUm1KUWpIZ1Y5LXNkQVNu cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A4NzhGd0NrNFlSbUpRakhnVjktc2RBU25yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJCMTMvREM0ODNGMzAxRUMwMTFFRjk2Mjk0MjdEQzRGOUFFMDIvMEJCRjIxMkUx RUMyMTFFRjgyQTYxNzM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnbLAwDwQCAAIwCQMHACABDfQTADANBgkqhkiG9w0BAQsF AAOCAQEAsPNormOP9V+yDEwt/8dYm/s9939gxpH0gmLRTNBf1Wp+eu4lMJJ0/Qdg F43NV/0G7e9nu2VCwSeCOyMeC8zNpQLUIAoF9UJCGDfNd7G0obqUtGf74jiuPrsl pvRM7IwgHvIzRbmBP4/cJAvGoVBsV7qULYfjtMSRuYEZLldFQNGlDU5D0kGIj2lb Zy+0GG/76GYlUsnEF5oVfXfTnqTu40XcgjP/WYxvY9h4R1vQ99f3j2jf6EuSpCjD K62qFnuVTTLTm4FJ2gjubbsMUMPDSMQKpkIgR7jEExmGPs6UX+IYj+UpWTZPI+mR VOHxSI4bge7YnpgaYEgj0grB8NPSlQ== -----END CERTIFICATE-----Generated at Sat Apr 26 07:50:16 2025 by rpki-client