$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/2C4993AA271B11EF97731F0BC4F9AE02.roa File: 2C4993AA271B11EF97731F0BC4F9AE02.roa (raw, json) Hash identifier: 510AYYtfzA2GESknsDswoMnwkXlbF/avHNUhiFeIBXA= Subject key identifier: D4:CB:41:A8:00:86:5F:67:3A:90:98:34:87:BB:F6:AD:79:A4:96:7A Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3 Certificate serial: 04E9 Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/2C4993AA271B11EF97731F0BC4F9AE02.roa Signing time: Sun 01 Dec 2024 00:03:12 +0000 ROA not before: Sun 01 Dec 2024 00:03:12 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 147018 IP address blocks: 103.173.6.0/24 maxlen: 24 103.173.7.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165362, serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3 Validity Not Before: Dec 1 00:03:12 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=674ba7c0-85d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8c:b2:27:b8:d1:71:14:f3:fd:66:ee:d2:e8: d3:5b:19:0d:5d:85:1c:a6:ff:03:fd:00:00:c0:a7: d0:75:1f:5e:0b:e5:86:7f:c5:e9:a8:9a:b6:54:16: 40:d1:d0:d6:36:a4:9e:e5:63:57:b0:82:c7:d1:65: 92:c3:28:ff:ff:33:55:56:b8:06:b9:c9:67:dc:db: 5c:aa:04:c5:44:46:30:4f:7a:0f:e3:69:50:47:fe: 02:5b:ac:1e:1e:d3:96:bf:e9:5c:94:d7:f4:1a:80: 33:a5:24:48:52:0f:b5:45:18:55:28:55:61:5f:50: 5b:71:60:c8:fd:5a:50:ba:79:40:aa:ac:90:f1:9f: bf:77:42:40:75:be:f9:87:c1:90:04:9f:7d:0e:98: db:48:88:0a:c4:b0:16:46:95:dc:3b:cf:13:0c:aa: 68:12:ec:56:ef:28:b6:b7:16:0c:10:5b:21:f9:21: d7:12:a9:66:dd:ed:79:c3:f5:49:cd:a5:61:26:22: a9:59:0d:f4:5d:72:e8:3a:21:20:ad:9e:ac:a0:eb: 7a:a3:79:58:7e:94:1c:65:12:15:e9:bf:69:a7:4f: 12:c6:25:b4:80:76:b0:4a:0f:61:41:a4:4d:d1:1f: 7f:70:f4:d6:7e:3c:75:26:64:d0:41:46:c3:c1:0e: ef:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CB:41:A8:00:86:5F:67:3A:90:98:34:87:BB:F6:AD:79:A4:96:7A X509v3 Authority Key Identifier: keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/2C4993AA271B11EF97731F0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.6.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:40:15:d4:7d:b7:26:ab:ec:4f:f1:5a:50:9b:43:ca:52:f4: b7:71:e4:de:b9:17:f8:d2:e2:8b:e4:6e:26:a9:2f:02:d6:30: b6:56:74:e7:40:15:1a:6e:31:22:35:43:ce:49:2a:fa:4e:94: d7:a1:c9:f7:b1:5e:df:10:ed:79:da:3c:98:c2:4c:2b:0e:27: 24:e1:28:2b:c1:59:fd:ad:36:76:30:ae:05:3d:5c:8b:ad:16: 02:14:61:68:f8:16:05:8c:13:46:62:b5:5a:6c:30:2d:fc:8c: 0e:0f:82:8d:8b:0a:2a:33:62:5a:05:a2:e1:ac:77:36:21:8c: a2:ba:86:eb:61:1d:b9:97:cc:bf:b0:94:da:5d:e9:62:a8:d7: 6a:41:99:f6:c2:ac:63:4e:f8:3e:c2:3e:f5:56:f4:24:22:99: b4:9d:19:60:3e:8f:55:69:63:ca:b4:90:67:78:6d:f7:0a:e7: 51:d3:92:3c:6d:0e:bb:f3:90:e3:5d:74:02:9e:3d:df:50:18: 61:a4:eb:37:94:65:7f:1f:bd:69:81:57:9c:75:dc:78:aa:64: 8a:cd:60:e6:a4:0d:f3:8f:52:1c:3e:b6:70:1b:ef:95:b6:8b: d7:e3:a5:a5:14:ee:f6:e5:e3:4c:ea:f9:62:9e:11:12:92:8f: 28:5b:92:c2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUzNjIxMTAvBgNVBAUTKEU1RTVEMTY4QTBFMTA5NkVBMUMzRjlCN0Y4RThENzU4 RUFFQTIzRjMwHhcNMjQxMjAxMDAwMzEyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRiYTdjMC04NWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6oyyJ7jRcRTz/Wbu0ujTWxkNXYUcpv8D/QAAwKfQdR9eC+WGf8XpqJq2VBZA 0dDWNqSe5WNXsILH0WWSwyj//zNVVrgGucln3NtcqgTFREYwT3oP42lQR/4CW6we HtOWv+lclNf0GoAzpSRIUg+1RRhVKFVhX1BbcWDI/VpQunlAqqyQ8Z+/d0JAdb75 h8GQBJ99DpjbSIgKxLAWRpXcO88TDKpoEuxW7yi2txYMEFsh+SHXEqlm3e15w/VJ zaVhJiKpWQ30XXLoOiEgrZ6soOt6o3lYfpQcZRIV6b9pp08SxiW0gHawSg9hQaRN 0R9/cPTWfjx1JmTQQUbDwQ7v8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNTLQagA hl9nOpCYNIe79q15pJZ6MB8GA1UdIwQYMBaAFOXl0Wig4QluocP5t/jo11jq6iPz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTM2Mi9EOUNCRjgwQTEw QjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENXNmh3X20zLU9qWFdPcnFJ X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlWFJhS0RoQ1c2aHdfbTMtT2pYV09ycUlfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjUzNjIvRDlDQkY4MEExMEIzMTFFQ0EzMURGODJDQzRGOUFFMDIvMkM0OTkzQUEy NzFCMTFFRjk3NzMxRjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnrQYwDQYJKoZIhvcNAQELBQADggEBAA1AFdR9tyar7E/x WlCbQ8pS9Ldx5N65F/jS4ovkbiapLwLWMLZWdOdAFRpuMSI1Q85JKvpOlNehyfex Xt8Q7XnaPJjCTCsOJyThKCvBWf2tNnYwrgU9XIutFgIUYWj4FgWME0ZitVpsMC38 jA4Pgo2LCiozYloFouGsdzYhjKK6huthHbmXzL+wlNpd6WKo12pBmfbCrGNO+D7C PvVW9CQimbSdGWA+j1VpY8q0kGd4bfcK51HTkjxtDrvzkONddAKePd9QGGGk6zeU ZX8fvWmBV5x13HiqZIrNYOakDfOPUhw+tnAb75W2i9fjpaUU7vbl40zq+WKeERKS jyhbksI= -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:36 2025 by rpki-client