$ rpki-client -vvf rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/A20DDFE2725911ED8CB4D763C4F9AE02.roa File: A20DDFE2725911ED8CB4D763C4F9AE02.roa (raw, json) Hash identifier: YLNPavuZCOudMxVfyqmjZm9NJz/Z+dCM3fPBM36z61c= Subject key identifier: 62:55:91:08:2B:58:54:89:90:99:3D:09:7F:57:16:14:92:43:B9:3B Certificate issuer: /CN=A915E77C/serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB Certificate serial: 0180 Authority key identifier: 05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/A20DDFE2725911ED8CB4D763C4F9AE02.roa Signing time: Tue 17 Dec 2024 02:15:50 +0000 ROA not before: Tue 17 Dec 2024 02:15:50 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 63526 IP address blocks: 103.48.160.0/23 maxlen: 23 103.48.160.0/24 maxlen: 24 103.48.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E77C, serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB Validity Not Before: Dec 17 02:15:50 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6760ded6-ab3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8f:b1:17:9e:2a:15:e0:36:24:ff:a9:39:0b: 4b:9b:d7:7b:2e:ee:8e:c3:3c:b4:d7:14:33:52:52: 65:73:ef:4c:4f:7f:e0:02:3b:b4:bd:d0:8b:5a:b6: 73:8d:b7:68:5a:30:7b:6c:18:57:53:b1:48:29:81: e8:1e:84:c6:a2:cd:25:94:b8:45:7b:1f:e6:55:37: 21:36:ea:df:16:7c:9a:fd:42:29:42:bc:52:cb:f4: 64:5f:d3:1b:27:27:7c:97:fc:ad:ae:c4:14:29:51: aa:42:f4:74:97:5e:fb:a8:5a:bb:c4:8d:4a:22:4d: 9c:d0:2c:08:55:85:8b:b9:2f:bb:2d:a0:5b:2f:ec: 47:41:ad:b5:95:56:61:50:e5:42:36:c1:59:57:24: b7:ff:ef:83:75:4d:e6:ac:d9:9d:43:ce:bb:60:bb: d7:64:c4:fa:bb:1f:53:69:80:d4:ff:f9:76:bc:f9: e2:7e:31:25:23:c9:4d:6e:d0:b3:9c:c5:9c:86:90: a4:cc:f8:88:ff:c6:ad:14:d6:53:37:51:12:31:70: e5:1a:f1:95:59:81:2c:93:f4:ab:ba:6f:82:a0:9b: b1:9e:00:6c:7d:84:f0:95:c0:f1:1f:5f:e7:a6:8d: 99:14:8b:26:d9:58:a9:01:a0:9d:bb:20:68:98:15: a1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:55:91:08:2B:58:54:89:90:99:3D:09:7F:57:16:14:92:43:B9:3B X509v3 Authority Key Identifier: keyid:05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/A20DDFE2725911ED8CB4D763C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.160.0/23 Signature Algorithm: sha256WithRSAEncryption 75:14:66:b6:4c:79:69:82:0d:05:63:dc:78:c9:cd:9c:1c:df: 06:e4:80:07:ea:c3:ec:ec:fa:c5:47:5d:5e:de:29:c5:a5:33: 66:ed:aa:9b:65:49:ba:e7:65:dd:c9:76:e1:bd:b7:98:88:17: c2:d4:86:04:fe:a3:0c:de:fd:69:e9:a7:a4:b8:0d:5d:63:5b: 20:77:d1:00:84:c5:2d:21:7b:40:e4:46:9f:a1:d7:97:80:0b: 48:ef:e6:7c:2e:b9:47:90:d9:83:63:c6:50:3b:88:88:95:9c: 3b:20:27:f8:d2:14:ac:60:f8:ae:cc:24:f0:0f:33:3b:b0:0b: 10:ee:ae:b7:6c:e4:44:de:96:e5:08:b3:0b:32:e8:bb:9f:ab: d2:49:7b:e5:ea:7a:24:ae:bb:c5:f0:86:85:41:27:a7:c1:54: 29:ef:eb:53:eb:4e:0c:07:64:15:69:db:39:76:27:8f:f9:5f: bf:e8:87:93:7f:1c:b7:49:7c:03:f0:94:b5:c4:1b:9c:3e:b0: e3:26:ec:2a:ac:df:48:63:16:8f:8e:bd:a1:4c:b7:0b:c8:dc: 41:90:05:69:e7:b8:b4:8c:26:24:bb:a2:bc:f5:f5:2e:eb:59: 1b:44:18:b1:9e:0c:c5:27:2d:c7:bc:ea:b4:3b:b3:74:16:ac: b7:af:ec:22 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3N0MxMTAvBgNVBAUTKDA1MDM3RTRDREU0NEVDNjY0MkM0MTY5RkE4NTEzNzJE NzhGQkZDQUIwHhcNMjQxMjE3MDIxNTUwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYwZGVkNi1hYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34+xF54qFeA2JP+pOQtLm9d7Lu6Owzy01xQzUlJlc+9MT3/gAju0vdCLWrZz jbdoWjB7bBhXU7FIKYHoHoTGos0llLhFex/mVTchNurfFnya/UIpQrxSy/RkX9Mb Jyd8l/ytrsQUKVGqQvR0l177qFq7xI1KIk2c0CwIVYWLuS+7LaBbL+xHQa21lVZh UOVCNsFZVyS3/++DdU3mrNmdQ867YLvXZMT6ux9TaYDU//l2vPnifjElI8lNbtCz nMWchpCkzPiI/8atFNZTN1ESMXDlGvGVWYEsk/Srum+CoJuxngBsfYTwlcDxH1/n po2ZFIsm2VipAaCduyBomBWhZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGJVkQgr WFSJkJk9CX9XFhSSQ7k7MB8GA1UdIwQYMBaAFAUDfkzeROxmQsQWn6hRNy14+/yr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc3Qy9GNzAwQTlFQzcy NTYxMUVEOTAyMTE1NjJDNEY5QUUwMi9CUU4tVE41RTdHWkN4QmFmcUZFM0xYajdf S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRTi1UTjVFN0daQ3hCYWZxRkUzTFhqN19Lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUU3N0MvRjcwMEE5RUM3MjU2MTFFRDkwMjExNTYyQzRGOUFFMDIvQTIwRERGRTI3 MjU5MTFFRDhDQjRENzYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnMKAwDQYJKoZIhvcNAQELBQADggEBAHUUZrZMeWmCDQVj 3HjJzZwc3wbkgAfqw+zs+sVHXV7eKcWlM2btqptlSbrnZd3JduG9t5iIF8LUhgT+ owze/Wnpp6S4DV1jWyB30QCExS0he0DkRp+h15eAC0jv5nwuuUeQ2YNjxlA7iIiV nDsgJ/jSFKxg+K7MJPAPMzuwCxDurrds5ETeluUIswsy6Lufq9JJe+XqeiSuu8Xw hoVBJ6fBVCnv61PrTgwHZBVp2zl2J4/5X7/oh5N/HLdJfAPwlLXEG5w+sOMm7Cqs 30hjFo+OvaFMtwvI3EGQBWnnuLSMJiS7orz19S7rWRtEGLGeDMUnLce86rQ7s3QW rLev7CI= -----END CERTIFICATE-----Generated at Sat Apr 26 08:32:36 2025 by rpki-client