$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/9CB324BA273111EF9F5B0860C4F9AE02.roa File: 9CB324BA273111EF9F5B0860C4F9AE02.roa (raw, json) Hash identifier: tuypvpB5BqOqFONJHnNDkY9wl1Vyxr2l9hApI1MYGj0= Subject key identifier: 5E:25:32:C5:66:D7:34:86:8C:08:C9:67:2E:37:53:22:89:A8:20:3E Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3 Certificate serial: 04E8 Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/9CB324BA273111EF9F5B0860C4F9AE02.roa Signing time: Sun 01 Dec 2024 00:03:11 +0000 ROA not before: Sun 01 Dec 2024 00:03:11 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 142647 IP address blocks: 103.173.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165362, serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3 Validity Not Before: Dec 1 00:03:11 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=674ba7bf-4da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:2e:41:5d:34:9f:23:c0:3a:37:c6:cc:af: 86:35:30:0b:37:78:bf:7a:6b:aa:cb:99:15:21:df: a4:1a:55:d1:52:73:44:3c:d7:18:fd:9a:33:42:c7: 6e:35:25:00:e6:37:8f:10:36:42:85:f4:69:42:ba: 81:08:0f:d2:60:b1:2d:98:6f:89:ea:8d:1a:b4:d4: 25:c1:d0:f7:fd:34:d9:95:3c:b8:40:32:1d:f9:3c: d3:2b:9f:46:8a:8d:17:e8:51:d9:27:37:96:00:7e: aa:7b:2b:a6:02:73:5c:53:64:f0:94:1b:e2:3c:2b: b1:8a:6d:01:5d:de:c6:03:8d:1c:7b:2a:14:59:fb: 0b:70:c3:9a:3f:68:31:74:d0:77:15:e9:03:0d:97: 4c:e0:38:21:07:fa:3c:47:69:c9:b4:88:fd:c1:bf: 18:74:73:98:d9:c7:4e:f8:11:3a:80:28:04:b3:56: 24:70:dd:c5:78:50:c1:2a:d5:24:c9:40:3f:f3:df: 98:90:92:8a:15:aa:78:ae:77:08:61:17:5b:53:2d: d4:50:60:6d:b5:0e:d5:a7:ab:e6:a3:e0:af:99:58: f9:c1:3f:40:88:d0:41:c1:1a:3e:c9:c4:33:bf:57: 8b:41:78:f7:e7:a8:62:2c:18:0b:5a:e9:8f:f6:d4: af:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:25:32:C5:66:D7:34:86:8C:08:C9:67:2E:37:53:22:89:A8:20:3E X509v3 Authority Key Identifier: keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/9CB324BA273111EF9F5B0860C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.7.0/24 Signature Algorithm: sha256WithRSAEncryption 76:8f:99:65:1f:0c:74:45:e7:4b:7a:4f:b8:d3:cb:87:d6:4c: 3d:79:b0:4a:06:95:8e:df:ec:ca:4a:35:2e:ea:32:b6:8a:b4: 3d:71:b7:57:dd:21:5d:56:36:f5:8d:d4:3e:e8:1f:c5:35:c8: c0:75:c4:dd:bf:81:e7:8b:37:7b:fb:b9:e0:de:ae:bb:3f:12: bf:f8:a6:0a:70:2a:b9:f9:11:cc:64:fd:c9:ae:4a:8c:88:e6: f2:f0:48:1d:b2:9b:d1:dc:06:04:fa:e3:e8:ab:83:cd:73:ea: 47:71:d6:ed:3a:b0:83:fd:fe:25:9b:28:94:91:fa:c4:19:8f: c1:1f:5e:98:59:8e:14:f3:cf:76:fc:82:b8:22:54:79:be:5a: 6f:cf:24:7c:9b:3f:cf:bf:1d:39:f2:f5:2b:20:18:9c:05:e7: 59:3a:9a:d3:e9:6b:9a:cd:dc:df:62:e4:03:3b:77:75:85:fc: fa:e3:11:c6:92:2a:c3:aa:09:46:c8:96:1b:1a:5b:34:f0:d6: a6:40:1f:70:08:6d:b1:f1:2d:25:ad:c7:16:d7:b3:b5:e4:1b: 0c:a4:77:94:49:55:e1:76:ca:28:40:76:66:78:dd:19:55:d6: a2:78:cb:34:93:27:24:54:d1:d3:18:60:39:3f:39:02:22:fe: 05:3e:f5:99 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUzNjIxMTAvBgNVBAUTKEU1RTVEMTY4QTBFMTA5NkVBMUMzRjlCN0Y4RThENzU4 RUFFQTIzRjMwHhcNMjQxMjAxMDAwMzExWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRiYTdiZi00ZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzAuQV00nyPAOjfGzK+GNTALN3i/emuqy5kVId+kGlXRUnNEPNcY/ZozQsdu NSUA5jePEDZChfRpQrqBCA/SYLEtmG+J6o0atNQlwdD3/TTZlTy4QDId+TzTK59G io0X6FHZJzeWAH6qeyumAnNcU2TwlBviPCuxim0BXd7GA40ceyoUWfsLcMOaP2gx dNB3FekDDZdM4DghB/o8R2nJtIj9wb8YdHOY2cdO+BE6gCgEs1YkcN3FeFDBKtUk yUA/89+YkJKKFap4rncIYRdbUy3UUGBttQ7Vp6vmo+CvmVj5wT9AiNBBwRo+ycQz v1eLQXj356hiLBgLWumP9tSvsQIDAQABo4IClTCCApEwHQYDVR0OBBYEFF4lMsVm 1zSGjAjJZy43UyKJqCA+MB8GA1UdIwQYMBaAFOXl0Wig4QluocP5t/jo11jq6iPz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTM2Mi9EOUNCRjgwQTEw QjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENXNmh3X20zLU9qWFdPcnFJ X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlWFJhS0RoQ1c2aHdfbTMtT2pYV09ycUlfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjUzNjIvRDlDQkY4MEExMEIzMTFFQ0EzMURGODJDQzRGOUFFMDIvOUNCMzI0QkEy NzMxMTFFRjlGNUIwODYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnrQcwDQYJKoZIhvcNAQELBQADggEBAHaPmWUfDHRF50t6 T7jTy4fWTD15sEoGlY7f7MpKNS7qMraKtD1xt1fdIV1WNvWN1D7oH8U1yMB1xN2/ geeLN3v7ueDerrs/Er/4pgpwKrn5Ecxk/cmuSoyI5vLwSB2ym9HcBgT64+irg81z 6kdx1u06sIP9/iWbKJSR+sQZj8EfXphZjhTzz3b8grgiVHm+Wm/PJHybP8+/HTny 9SsgGJwF51k6mtPpa5rN3N9i5AM7d3WF/PrjEcaSKsOqCUbIlhsaWzTw1qZAH3AI bbHxLSWtxxbXs7XkGwykd5RJVeF2yihAdmZ43RlV1qJ4yzSTJyRU0dMYYDk/OQIi /gU+9Zk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:44 2025 by rpki-client