$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/D70119A43CB211EC9A01695FC4F9AE02.roa File: D70119A43CB211EC9A01695FC4F9AE02.roa (raw, json) Hash identifier: Sfq7zwsHIT4LApgTVDRFHk10JkrfthfbYhUwRPOBCl8= Subject key identifier: 79:16:1E:DD:95:54:59:55:BD:B5:E0:22:27:60:DB:65:E5:A8:90:C5 Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 0440 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/D70119A43CB211EC9A01695FC4F9AE02.roa Signing time: Mon 16 Dec 2024 23:52:34 +0000 ROA not before: Mon 16 Dec 2024 23:52:34 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 148975 IP address blocks: 103.175.20.0/23 maxlen: 23 103.175.20.0/24 maxlen: 24 103.175.21.0/24 maxlen: 24 2001:df7:e880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: Dec 16 23:52:34 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6760bd41-70ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e8:c1:b0:43:f3:9c:16:20:6f:96:3a:1b:67: 14:b4:a0:41:3b:6b:8f:7c:a4:59:04:20:17:93:77: 16:35:a3:c8:ff:de:37:64:3c:61:ad:ce:25:65:b2: b0:e8:50:80:31:61:80:a6:74:b6:86:f6:a4:1e:4d: 82:92:aa:cb:5d:b7:ca:4d:42:49:9e:91:37:e3:e6: ba:e7:f6:0e:09:fa:d3:e7:8f:1d:74:ab:31:05:d2: 3a:7e:9e:af:c5:d9:7a:f1:c6:45:28:58:c4:ef:7d: 56:51:56:7f:01:b9:2d:0c:fb:cf:41:16:c1:97:f8: c0:ad:4d:92:f1:fc:bf:4b:a9:c0:8b:5b:ae:2b:cd: e1:4d:14:a0:6f:67:46:89:22:4f:ab:c8:2b:29:40: 04:c5:8b:70:d5:a5:47:b7:d6:28:65:ea:67:fb:b1: e2:b2:20:82:66:66:09:a8:05:dd:cb:29:78:c2:1a: 69:96:86:3e:60:2b:9b:e2:55:27:68:ff:31:63:6d: c2:0a:99:65:ce:fc:bd:07:c2:df:fd:de:fd:76:33: 03:c9:b5:f8:87:8c:f5:2b:fd:98:59:75:72:fc:b4: 82:7f:fb:ee:b0:d8:31:99:d2:1f:61:ee:18:6e:0f: e4:c0:c2:d7:f0:a4:ce:3a:e9:bd:c9:9c:df:21:8d: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:16:1E:DD:95:54:59:55:BD:B5:E0:22:27:60:DB:65:E5:A8:90:C5 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/D70119A43CB211EC9A01695FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.20.0/23 IPv6: 2001:df7:e880::/48 Signature Algorithm: sha256WithRSAEncryption ea:1a:25:01:af:de:e6:10:f7:2f:5f:43:9c:43:5e:b6:9e:2e: 1f:dc:5e:c4:84:ec:49:72:cd:89:4e:ad:9d:09:f0:fb:bf:3e: c7:1e:1f:32:48:b6:cb:45:8f:9f:3e:8b:2f:97:d8:62:94:21: 15:dd:d9:9d:41:09:ad:99:30:e0:ca:ca:8c:5f:d6:25:d0:e0: 07:3d:f0:6b:e5:b2:8e:b8:50:c8:e2:3b:7b:b4:b7:93:0f:b2: e4:2d:e0:8c:2e:33:30:c0:a2:81:54:11:c9:48:f2:b7:9b:33: 30:a6:73:63:66:a3:bc:04:9e:dd:5d:43:f0:4b:ff:89:e4:99: fc:47:d0:46:ad:63:e8:7a:e4:cc:36:b4:55:2f:c5:f8:91:77: a6:69:82:62:b2:4b:d6:08:72:15:4d:44:47:44:54:cf:07:72: 1c:58:e2:3c:b4:8e:26:04:9f:be:2f:0a:e6:0c:9c:5d:d4:c6: 9f:83:66:e4:16:c9:45:d7:bc:2d:12:18:77:38:f1:a5:d1:97: 9e:ca:b0:f2:7e:18:cb:0d:c2:ac:76:65:6f:1e:00:0d:24:1f: 77:48:a8:ca:86:26:e8:29:df:4a:12:8f:4d:f1:2a:c6:38:80: 65:e8:eb:76:41:54:15:5b:83:65:0e:f4:24:63:cb:e1:f9:71: 34:0a:c8:a0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjQxMjE2MjM1MjM0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYwYmQ0MS03MGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmejBsEPznBYgb5Y6G2cUtKBBO2uPfKRZBCAXk3cWNaPI/943ZDxhrc4lZbKw 6FCAMWGApnS2hvakHk2CkqrLXbfKTUJJnpE34+a65/YOCfrT548ddKsxBdI6fp6v xdl68cZFKFjE731WUVZ/AbktDPvPQRbBl/jArU2S8fy/S6nAi1uuK83hTRSgb2dG iSJPq8grKUAExYtw1aVHt9YoZepn+7HisiCCZmYJqAXdyyl4whpploY+YCub4lUn aP8xY23CCpllzvy9B8Lf/d79djMDybX4h4z1K/2YWXVy/LSCf/vusNgxmdIfYe4Y bg/kwMLX8KTOOum9yZzfIY1TuwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHkWHt2V VFlVvbXgIidg22XlqJDFMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjdCOUQvQzU1NTZGMUUzQ0FGMTFFQ0IzMUYzQzM4QzRGOUFFMDIvRDcwMTE5QTQz Q0IyMTFFQzlBMDE2OTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrxQwDwQCAAIwCQMHACABDffogDANBgkqhkiG9w0BAQsF AAOCAQEA6holAa/e5hD3L19DnENetp4uH9xexITsSXLNiU6tnQnw+78+xx4fMki2 y0WPnz6LL5fYYpQhFd3ZnUEJrZkw4MrKjF/WJdDgBz3wa+WyjrhQyOI7e7S3kw+y 5C3gjC4zMMCigVQRyUjyt5szMKZzY2ajvASe3V1D8Ev/ieSZ/EfQRq1j6HrkzDa0 VS/F+JF3pmmCYrJL1ghyFU1ER0RUzwdyHFjiPLSOJgSfvi8K5gycXdTGn4Nm5BbJ Rde8LRIYdzjxpdGXnsqw8n4Yyw3CrHZlbx4ADSQfd0ioyoYm6CnfShKPTfEqxjiA ZejrdkFUFVuDZQ70JGPL4flxNArIoA== -----END CERTIFICATE-----Generated at Sat Apr 26 08:03:16 2025 by rpki-client