$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/819150603F3411EF85BAC749C4F9AE02.roa File: 819150603F3411EF85BAC749C4F9AE02.roa (raw, json) Hash identifier: W4tDaOtoueXLJGV231Xq5px334ORbAFdGWpLgfvtl8E= Subject key identifier: 4C:0A:E0:7F:C3:69:3F:79:93:0C:C5:A2:93:77:D6:5F:C0:2A:B3:44 Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Certificate serial: 03C9 Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/819150603F3411EF85BAC749C4F9AE02.roa Signing time: Thu 13 Feb 2025 02:14:11 +0000 ROA not before: Thu 13 Feb 2025 02:14:11 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 149483 IP address blocks: 103.180.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 969 (0x3c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Validity Not Before: Feb 13 02:14:11 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67ad5573-5dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:e1:cf:aa:bb:2c:bc:f5:f7:5d:53:12:5b: 1a:54:45:c9:7c:01:65:c6:c2:fb:63:c3:88:9b:5d: 7e:25:f6:79:47:f3:ef:a2:43:1c:27:87:f2:85:db: 01:f1:da:3d:5a:83:c2:26:66:02:12:44:b7:6e:8d: 41:61:c1:64:f4:9b:78:36:d2:9c:2e:f1:b6:ad:44: 29:9b:35:1a:10:a9:ba:98:10:63:f4:63:75:5d:dd: d8:ca:7e:c0:9e:02:ad:e7:dd:8d:68:8f:5f:9f:b6: 91:d4:7e:4b:e6:00:68:00:49:82:e7:8b:98:2e:cf: a3:3d:e2:71:0a:c5:4b:79:d2:3e:7e:94:e9:2a:fa: f7:35:62:53:ca:fd:ef:c3:04:59:f1:87:42:ed:5f: 83:65:94:06:92:3b:58:e4:67:6e:77:3d:d0:cb:5a: 9a:d5:4f:d8:b2:cb:16:6e:c5:ec:ea:0a:1e:f3:cb: 5e:c1:cf:cf:a1:39:76:ca:00:07:70:ac:9c:cd:03: 9c:f7:7b:12:82:b5:75:06:c2:59:d8:36:b1:46:bc: 6d:a1:ba:4b:e2:ce:f7:12:8d:7d:f2:71:79:15:e5: 5a:bf:1d:b5:93:b0:92:a8:f0:e6:50:fd:f5:79:0a: 09:9b:ca:c0:7f:24:d9:db:36:c6:c0:f8:8f:c2:65: 3d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0A:E0:7F:C3:69:3F:79:93:0C:C5:A2:93:77:D6:5F:C0:2A:B3:44 X509v3 Authority Key Identifier: keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/819150603F3411EF85BAC749C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.180.203.0/24 Signature Algorithm: sha256WithRSAEncryption 81:61:e9:5f:f0:a3:90:78:27:aa:f5:eb:92:ad:bb:2a:49:36: 6b:c7:b9:6a:9a:7a:c5:43:d0:b5:82:a3:b9:88:62:c1:81:70: 48:4d:bc:c9:f0:2b:c8:77:cd:61:4d:06:2f:4c:a5:f2:90:64: 71:d6:e8:be:d1:e1:5e:95:5a:42:fb:23:0f:e2:b2:df:fe:3a: 83:81:73:91:1b:74:3d:d1:96:12:93:18:e0:40:6a:d0:19:85: 7d:d9:f6:57:62:87:85:40:18:b2:6a:bc:58:36:4d:39:39:b2: 09:de:ff:e2:a3:2e:21:66:f0:e6:28:9b:ff:9d:88:ca:c6:7e: be:25:1c:42:16:57:3e:60:0b:e7:3f:81:9f:b4:5c:2c:33:9d: 29:70:0c:cc:e9:37:b7:e0:81:c0:57:16:a9:1a:db:47:3b:ef: 2d:d1:4e:28:85:e6:49:77:79:b8:36:13:5a:4a:45:fb:e1:e0: a0:1f:91:86:de:3f:92:d6:e7:d8:d0:8a:0d:e8:40:2c:0e:e8: e6:3b:af:6a:99:b0:ad:21:0c:f5:1c:0c:f4:ab:fd:fd:d9:f5: e7:95:e3:63:1a:09:ac:77:c9:8d:30:ad:6d:f2:1a:73:3a:23: 17:ec:0e:af:ab:7b:29:b1:a0:ad:11:b6:52:0d:c5:64:dc:be: 33:94:46:da -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxMjYxMTAvBgNVBAUTKEQ2QTlGQ0NCMzZBMDI3MUNCQzVGMTEyQkI3MjA1QTU3 QjlGNDg0RjcwHhcNMjUwMjEzMDIxNDExWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FkNTU3My01ZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2bhz6q7LLz1911TElsaVEXJfAFlxsL7Y8OIm11+JfZ5R/PvokMcJ4fyhdsB 8do9WoPCJmYCEkS3bo1BYcFk9Jt4NtKcLvG2rUQpmzUaEKm6mBBj9GN1Xd3Yyn7A ngKt592NaI9fn7aR1H5L5gBoAEmC54uYLs+jPeJxCsVLedI+fpTpKvr3NWJTyv3v wwRZ8YdC7V+DZZQGkjtY5Gdudz3Qy1qa1U/YsssWbsXs6goe88tewc/PoTl2ygAH cKyczQOc93sSgrV1BsJZ2DaxRrxtobpL4s73Eo198nF5FeVavx21k7CSqPDmUP31 eQoJm8rAfyTZ2zbGwPiPwmU9SwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEwK4H/D aT95kwzFopN31l/AKrNEMB8GA1UdIwQYMBaAFNap/Ms2oCccvF8RK7cgWle59IT3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODEyNi8xNTdGNjZFQTgw MDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4eThYeEVydHlCYVY3bjBo UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFxbjh5emFnSnh5OFh4RXJ0eUJhVjduMGhQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjgxMjYvMTU3RjY2RUE4MDA2MTFFQ0IwM0EwRTYxQzRGOUFFMDIvODE5MTUwNjAz RjM0MTFFRjg1QkFDNzQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABntMswDQYJKoZIhvcNAQELBQADggEBAIFh6V/wo5B4J6r1 65KtuypJNmvHuWqaesVD0LWCo7mIYsGBcEhNvMnwK8h3zWFNBi9MpfKQZHHW6L7R 4V6VWkL7Iw/ist/+OoOBc5EbdD3RlhKTGOBAatAZhX3Z9ldih4VAGLJqvFg2TTk5 sgne/+KjLiFm8OYom/+diMrGfr4lHEIWVz5gC+c/gZ+0XCwznSlwDMzpN7fggcBX Fqka20c77y3RTiiF5kl3ebg2E1pKRfvh4KAfkYbeP5LW59jQig3oQCwO6OY7r2qZ sK0hDPUcDPSr/f3Z9eeV42MaCax3yY0wrW3yGnM6IxfsDq+reymxoK0RtlINxWTc vjOURto= -----END CERTIFICATE-----Generated at Sat Apr 26 13:09:25 2025 by rpki-client