$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/CEEBA382BD1511EB9E873260C4F9AE02.roa File: CEEBA382BD1511EB9E873260C4F9AE02.roa (raw, json) Hash identifier: SXzW5vEmVU+GCJ/5C4H8HxVaw63CXUsgN+mA1S8Q1HE= Subject key identifier: 85:B4:95:16:FE:6D:92:02:04:1B:80:7C:2B:A9:E8:8D:D5:AB:28:F2 Certificate issuer: /CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Certificate serial: 0581 Authority key identifier: 04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/CEEBA382BD1511EB9E873260C4F9AE02.roa Signing time: Sun 22 Dec 2024 22:51:21 +0000 ROA not before: Sun 22 Dec 2024 22:51:21 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 131202 IP address blocks: 103.103.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165B02, serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Validity Not Before: Dec 22 22:51:21 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676897e9-11dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:58:4b:b6:97:39:fd:8d:14:60:88:44:80:0e: 96:9d:30:0d:d5:b4:51:bc:47:52:7e:72:5b:2d:ae: a9:60:d3:fa:0c:f6:44:fd:0e:2a:f9:24:e6:0c:63: da:5e:68:7e:b7:9a:50:e0:b0:6e:9c:a5:29:3e:7e: 48:ae:38:93:ba:88:9a:ee:a5:e8:08:06:be:4f:06: 2e:12:67:63:1d:70:99:d7:87:30:2c:02:dd:d0:0c: 03:ef:30:b7:a0:13:da:37:ab:05:39:d7:4b:83:29: 91:46:bf:34:30:da:7b:44:52:53:aa:70:9a:f3:84: bb:22:89:c0:e6:78:c9:b4:87:29:5e:47:d6:0c:95: 18:8c:05:67:39:d3:29:ba:cd:2f:ae:6d:a5:5b:78: dd:e7:f0:c2:83:55:c7:b6:32:fe:7a:1f:38:ab:55: f5:c9:86:70:6d:e0:8b:f6:35:4e:18:3f:c7:90:d5: be:03:ea:df:8c:76:2e:84:bc:a7:7c:95:a4:24:55: 9b:c4:13:6e:06:00:72:66:49:5b:ab:4e:51:f2:cd: b7:b0:7b:7a:a2:cf:f7:01:71:b0:4a:79:b6:01:07: c7:b4:d5:f8:91:82:a9:b2:a4:b3:56:7e:d6:5e:ba: 50:40:c3:c0:bc:ed:80:51:b7:55:69:9a:40:ae:5d: cc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B4:95:16:FE:6D:92:02:04:1B:80:7C:2B:A9:E8:8D:D5:AB:28:F2 X509v3 Authority Key Identifier: keyid:04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/CEEBA382BD1511EB9E873260C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.103.218.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:14:37:9e:38:33:cb:7f:24:4a:aa:64:0a:69:5d:8c:39:c9: aa:4c:a4:d3:70:51:2c:6c:fe:9d:ef:89:06:a3:67:64:8f:00: 34:ec:b2:0b:74:6e:9d:51:2f:f5:f1:2a:fd:09:1d:6c:fb:3c: 25:81:98:22:f7:95:71:8c:ca:42:2f:57:3a:fa:00:22:ef:84: 3d:0b:da:3d:da:96:f7:af:56:fa:16:99:e6:5a:63:d0:fc:3d: 9d:af:ae:57:b5:ba:b0:89:57:66:a3:a2:d7:f4:18:c2:54:e1: 35:87:f8:d7:ee:56:62:94:eb:fc:b4:34:87:43:71:13:32:b4: 44:78:17:eb:59:58:96:c1:b1:aa:59:6a:ce:77:17:c7:a4:a6: ca:45:90:dc:c4:c6:41:4d:6f:a1:46:67:4c:e9:8d:e7:3a:82: 3b:a3:e7:d1:b6:1f:4e:2e:62:f9:5b:34:e5:0a:78:f2:fd:f0: 14:a4:06:1c:d0:21:0a:db:9b:5f:34:ac:1a:a9:17:55:ce:43: b4:a1:81:03:3f:96:16:fe:96:72:ec:86:48:50:f9:3c:1d:e2: be:14:13:08:a7:b3:ce:be:19:b8:b7:82:19:a0:d8:2c:f6:8b: e6:75:f6:19:e6:5f:29:88:f5:35:3c:ba:f5:58:90:83:e0:e4: 88:63:d2:3d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCMDIxMTAvBgNVBAUTKDA0MUQ1MTkyNDdDNDZFNzNGNkE2N0RERjdDOTA0OUJG RjI3OUMwQjcwHhcNMjQxMjIyMjI1MTIxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY4OTdlOS0xMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFhLtpc5/Y0UYIhEgA6WnTAN1bRRvEdSfnJbLa6pYNP6DPZE/Q4q+STmDGPa Xmh+t5pQ4LBunKUpPn5IrjiTuoia7qXoCAa+TwYuEmdjHXCZ14cwLALd0AwD7zC3 oBPaN6sFOddLgymRRr80MNp7RFJTqnCa84S7IonA5njJtIcpXkfWDJUYjAVnOdMp us0vrm2lW3jd5/DCg1XHtjL+eh84q1X1yYZwbeCL9jVOGD/HkNW+A+rfjHYuhLyn fJWkJFWbxBNuBgByZklbq05R8s23sHt6os/3AXGwSnm2AQfHtNX4kYKpsqSzVn7W XrpQQMPAvO2AUbdVaZpArl3MRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIW0lRb+ bZICBBuAfCup6I3VqyjyMB8GA1UdIwQYMBaAFAQdUZJHxG5z9qZ933yQSb/yecC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUIwMi85NUEzOEVGNkJE MTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJuUDJwbjNmZkpCSnZfSjV3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JCMVJra2ZFYm5QMnBuM2ZmSkJKdl9KNXdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjVCMDIvOTVBMzhFRjZCRDE0MTFFQkI1RUVGRDVGQzRGOUFFMDIvQ0VFQkEzODJC RDE1MTFFQjlFODczMjYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnZ9owDQYJKoZIhvcNAQELBQADggEBAIsUN544M8t/JEqq ZAppXYw5yapMpNNwUSxs/p3viQajZ2SPADTssgt0bp1RL/XxKv0JHWz7PCWBmCL3 lXGMykIvVzr6ACLvhD0L2j3alvevVvoWmeZaY9D8PZ2vrle1urCJV2ajotf0GMJU 4TWH+NfuVmKU6/y0NIdDcRMytER4F+tZWJbBsapZas53F8ekpspFkNzExkFNb6FG Z0zpjec6gjuj59G2H04uYvlbNOUKePL98BSkBhzQIQrbm180rBqpF1XOQ7ShgQM/ lhb+lnLshkhQ+Twd4r4UEwins86+Gbi3ghmg2Cz2i+Z19hnmXymI9TU8uvVYkIPg 5Ihj0j0= -----END CERTIFICATE-----Generated at Sat Apr 26 07:50:04 2025 by rpki-client