$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/4CA4BE8E667411EF8E723587C4F9AE02.roa File: 4CA4BE8E667411EF8E723587C4F9AE02.roa (raw, json) Hash identifier: 8qwHnAzkWpQMSqbxW4gRTYW6uWniUVjWaHfJJJJlxJ8= Subject key identifier: 8E:33:31:50:0E:31:09:05:9B:93:3B:13:C6:5C:DD:33:8A:15:5B:0C Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Certificate serial: 46 Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/4CA4BE8E667411EF8E723587C4F9AE02.roa Signing time: Tue 31 Dec 2024 05:59:57 +0000 ROA not before: Tue 31 Dec 2024 05:59:57 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 135898 IP address blocks: 103.79.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Validity Not Before: Dec 31 05:59:57 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6773885d-96b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5b:17:11:cb:b1:52:fa:af:e7:ab:c7:a9:aa: 4d:a8:22:2d:bc:bd:68:61:d1:94:5e:84:0c:e3:20: a9:7e:7d:37:f5:2e:b8:40:d0:ec:8a:2e:bc:1f:13: c1:8d:cc:ab:ef:d6:1f:8f:dd:29:ff:25:c0:bf:57: 05:fb:96:3c:f6:45:bb:b1:0d:a0:bb:3f:bf:f0:e8: ad:db:f6:d9:15:d5:62:e9:57:60:85:16:8e:a6:04: d5:e3:b8:26:45:dc:ea:5d:b1:5b:9d:2b:74:85:35: e6:b2:72:3d:1a:c0:3f:b6:d9:22:00:90:59:7a:90: f7:b6:b5:44:b1:4f:23:18:c4:8a:2d:86:e6:bf:8d: e1:4c:b9:c8:06:fd:ca:ff:1f:a7:cf:28:45:48:5f: f2:7c:a0:38:4f:3e:46:45:c9:c7:a1:31:80:b0:b5: 9f:d7:15:c6:1c:ef:09:b4:15:62:38:8a:79:74:7f: 14:ef:89:9e:64:e2:87:e6:f0:49:0b:f0:52:d5:fe: 8d:74:31:e9:ec:48:a7:c4:97:d8:83:0d:e4:bb:da: dc:4a:e6:69:f7:cd:65:88:86:d9:ab:23:9f:c5:ad: 6e:8b:20:14:ad:ef:a5:6e:87:ce:27:2f:0d:64:3d: 7c:22:81:47:88:9d:63:42:06:a1:ce:83:ba:3b:26: c9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:33:31:50:0E:31:09:05:9B:93:3B:13:C6:5C:DD:33:8A:15:5B:0C X509v3 Authority Key Identifier: keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/4CA4BE8E667411EF8E723587C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.79.88.0/23 Signature Algorithm: sha256WithRSAEncryption c6:da:ba:c4:ec:7c:af:bc:a2:45:05:8b:da:64:65:2e:09:48: 2b:12:4a:54:92:8c:b2:a5:f1:b2:c9:e9:6e:14:73:05:bd:9a: 59:6b:66:e3:d5:e0:8c:fd:18:60:49:49:ac:ff:8f:4d:07:f3: f0:b2:39:d9:f6:2a:1c:5a:bd:18:fe:61:27:41:42:54:a6:5e: 00:fb:e0:ed:9a:85:33:2e:92:03:3e:37:5b:ee:15:da:bf:7d: 7a:b8:9b:62:0d:90:db:55:94:fe:4f:6a:78:4f:28:cf:ec:d6: 3e:8d:be:3d:f1:47:97:d1:7c:19:f8:48:06:d2:ee:20:ae:6a: a2:77:3d:69:83:37:4c:7a:95:20:f1:9e:82:8e:77:91:a4:e6: f9:2c:cb:d3:42:cb:e9:63:c7:75:f0:63:b6:a8:14:6c:42:cf: 21:00:d5:62:0b:df:f3:2b:90:a0:44:2b:35:7c:83:4b:13:0b: e3:e0:7a:a2:04:ca:69:d2:c8:f4:22:11:bf:e8:d0:2f:13:99: 95:6d:25:47:fc:91:ea:a7:7a:27:82:bc:4f:c0:93:ea:24:46: a4:4b:db:24:6b:45:1d:ac:4d:50:5a:cf:44:ed:97:9f:e1:bd: b3:7c:a6:bf:c5:98:65:28:e9:6d:83:43:1d:e2:69:2f:67:4a: 0c:67:fd:9d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEREODExMC8GA1UEBRMoRTZCNTREMDI3Q0UzNDk4QkYzNUU0RDA2NUJDNDc4QTkz NkMxNjE2OTAeFw0yNDEyMzEwNTU5NTdaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NzM4ODVkLTk2YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoWxcRy7FS+q/nq8epqk2oIi28vWhh0ZRehAzjIKl+fTf1LrhA0OyKLrwfE8GN zKvv1h+P3Sn/JcC/VwX7ljz2RbuxDaC7P7/w6K3b9tkV1WLpV2CFFo6mBNXjuCZF 3OpdsVudK3SFNeaycj0awD+22SIAkFl6kPe2tUSxTyMYxIothua/jeFMucgG/cr/ H6fPKEVIX/J8oDhPPkZFycehMYCwtZ/XFcYc7wm0FWI4inl0fxTviZ5k4ofm8EkL 8FLV/o10MensSKfEl9iDDeS72txK5mn3zWWIhtmrI5/FrW6LIBSt76Vuh84nLw1k PXwigUeInWNCBqHOg7o7JskXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUjjMxUA4x CQWbkzsTxlzdM4oVWwwwHwYDVR0jBBgwFoAU5rVNAnzjSYvzXk0GW8R4qTbBYWkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwREQ4L0E2NkE3NUVFNjVC QjExRUZBRkEzMkY4MkM0RjlBRTAyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllX ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNXJWTkFuempTWXZ6WGswR1c4UjRxVGJCWVdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEREOC9BNjZBNzVFRTY1QkIxMUVGQUZBMzJGODJDNEY5QUUwMi80Q0E0QkU4RTY2 NzQxMUVGOEU3MjM1ODdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWdPWDANBgkqhkiG9w0BAQsFAAOCAQEAxtq6xOx8r7yiRQWL 2mRlLglIKxJKVJKMsqXxssnpbhRzBb2aWWtm49XgjP0YYElJrP+PTQfz8LI52fYq HFq9GP5hJ0FCVKZeAPvg7ZqFMy6SAz43W+4V2r99eribYg2Q21WU/k9qeE8oz+zW Po2+PfFHl9F8GfhIBtLuIK5qonc9aYM3THqVIPGego53kaTm+SzL00LL6WPHdfBj tqgUbELPIQDVYgvf8yuQoEQrNXyDSxML4+B6ogTKadLI9CIRv+jQLxOZlW0lR/yR 6qd6J4K8T8CT6iRGpEvbJGtFHaxNUFrPRO2Xn+G9s3ymv8WYZSjpbYNDHeJpL2dK DGf9nQ== -----END CERTIFICATE-----Generated at Sat Apr 26 09:34:54 2025 by rpki-client