$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa File: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (raw, json) Hash identifier: 7Hs9ZZORwzDrkP5Wsr0Azs8K265xvZ4OedgYnSopdc0= Subject key identifier: 20:8C:9E:69:65:75:59:3D:B4:C7:86:D4:B5:52:8C:6A:72:B9:25:4F Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Certificate serial: 18BB Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa Signing time: Sat 28 Dec 2024 16:34:05 +0000 ROA not before: Sat 28 Dec 2024 16:34:05 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 136004 IP address blocks: 103.79.117.0/24 maxlen: 24 103.99.176.0/23 maxlen: 23 103.99.176.0/24 maxlen: 24 103.99.177.0/24 maxlen: 24 103.120.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6331 (0x18bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C8A, serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Validity Not Before: Dec 28 16:34:05 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6770287d-a009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:83:8d:f1:74:5b:db:7d:96:28:9a:64:4d: 09:fc:aa:fe:52:37:e4:8a:96:53:80:bf:d9:f9:87: 54:b9:d7:82:10:bd:3a:f8:89:cc:b9:ad:b6:8e:2a: d3:7d:d0:7f:b7:4b:5a:bf:9e:52:12:8d:75:c7:64: 2a:bf:af:f5:1e:97:6b:31:29:e7:bf:d5:1b:64:1f: 16:c0:02:e4:93:0f:7e:16:5d:cb:a7:84:59:19:02: 12:0c:8b:c4:2a:50:94:41:47:42:22:91:12:7c:f6: 77:5d:a3:b1:02:2c:03:61:1d:c8:de:49:8a:72:f4: e9:4f:39:b4:74:5f:61:7d:8b:d5:0b:71:c3:ac:ad: e5:39:3d:db:fc:e2:48:db:df:c2:f3:4b:ff:25:72: ef:ba:f1:fc:75:0d:3b:f1:3a:c7:d0:d1:3f:fd:fb: 6b:13:2d:32:c6:22:9a:f0:dd:02:f0:91:e7:9c:39: 35:db:27:31:4d:ad:bd:1f:3c:fb:94:ec:65:b2:ac: c2:2b:28:c6:01:c2:70:81:dc:fb:95:a4:29:7f:f6: e3:a3:fa:85:e6:19:2f:50:7a:82:85:86:8f:b6:99: 5b:dc:09:dc:77:73:33:06:fc:05:71:8f:6a:95:20: 2e:1e:6e:08:5b:51:39:f5:3c:1f:3e:81:b8:4e:d9: a9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8C:9E:69:65:75:59:3D:B4:C7:86:D4:B5:52:8C:6A:72:B9:25:4F X509v3 Authority Key Identifier: keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.79.117.0/24 103.99.176.0/23 103.120.110.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:d0:4b:4f:eb:4c:28:80:09:1a:e1:ee:70:7d:87:2b:39:5e: a9:20:ae:13:02:12:80:ba:bd:8f:cf:6d:b4:a1:5d:22:21:37: 6d:fb:38:4c:63:99:62:86:62:f2:8d:03:21:80:1f:e3:e3:43: 3e:da:ee:28:28:4d:ce:d7:94:d5:69:af:c5:b1:f5:ff:f0:b0: e2:7c:f2:be:39:d0:51:2d:82:95:37:3b:27:b3:3c:4e:a3:b7: bd:20:d6:e1:e0:3f:4d:a0:37:3a:13:0a:e3:b8:81:e7:a5:84: 04:da:f4:9e:86:5e:9c:f4:e4:d0:af:1e:0a:64:8f:31:81:93: b9:e5:3c:34:a1:9d:04:73:15:45:24:14:89:b4:21:6f:c7:08: 2e:ef:f6:ba:21:cc:1c:68:00:25:98:00:e0:2b:a6:31:d4:63: 18:1f:81:fb:a5:34:a6:ea:04:b3:51:0c:73:73:da:8d:4f:a0: c5:d6:f9:0e:0c:96:46:6e:c8:be:2e:a6:6a:9b:18:31:34:2a: 14:dc:8c:f9:d0:d3:16:a6:17:b2:6c:6b:15:34:93:12:e0:d7: a4:46:5e:b4:23:d3:f6:96:ce:ab:c2:a4:49:7c:15:40:9c:9f: dc:cd:b1:83:e0:64:ad:7c:41:54:95:83:69:64:4d:41:b2:3d: 2a:aa:fb:83 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICGLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDOEExMTAvBgNVBAUTKDRFMkIyMEQ5NTM3MzJCNzVFRUQxMkYxMjk5MjFBMEIx QjVFQjE1OEUwHhcNMjQxMjI4MTYzNDA1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzcwMjg3ZC1hMDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAut+DjfF0W9t9liiaZE0J/Kr+UjfkipZTgL/Z+YdUudeCEL06+InMua22jirT fdB/t0tav55SEo11x2Qqv6/1HpdrMSnnv9UbZB8WwALkkw9+Fl3Lp4RZGQISDIvE KlCUQUdCIpESfPZ3XaOxAiwDYR3I3kmKcvTpTzm0dF9hfYvVC3HDrK3lOT3b/OJI 29/C80v/JXLvuvH8dQ078TrH0NE//ftrEy0yxiKa8N0C8JHnnDk12ycxTa29Hzz7 lOxlsqzCKyjGAcJwgdz7laQpf/bjo/qF5hkvUHqChYaPtplb3Ancd3MzBvwFcY9q lSAuHm4IW1E59TwfPoG4Ttmp0QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFCCMnmll dVk9tMeG1LVSjGpyuSVPMB8GA1UdIwQYMBaAFE4rINlTcyt17tEvEpkhoLG16xWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M4QS9FN0ZGQzVGNDg2 RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOekszWHUwUzhTbVNHZ3NiWHJG WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rpc2cyVk56SzNYdTBTOFNtU0dnc2JYckZZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNDOEEvRTdGRkM1RjQ4NkY3MTFFNzg2MzRFQzdFQzRGOUFFMDIvOUZENUM4RjQ4 RUZFMTFFODhDNkVCRDM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnT3UDBAFnY7ADBABneG4wDQYJKoZIhvcNAQELBQADggEB AH/QS0/rTCiACRrh7nB9hys5XqkgrhMCEoC6vY/PbbShXSIhN237OExjmWKGYvKN AyGAH+PjQz7a7igoTc7XlNVpr8Wx9f/wsOJ88r450FEtgpU3OyezPE6jt70g1uHg P02gNzoTCuO4geelhATa9J6GXpz05NCvHgpkjzGBk7nlPDShnQRzFUUkFIm0IW/H CC7v9rohzBxoACWYAOArpjHUYxgfgfulNKbqBLNRDHNz2o1PoMXW+Q4MlkZuyL4u pmqbGDE0KhTcjPnQ0xamF7JsaxU0kxLg16RGXrQj0/aWzqvCpEl8FUCcn9zNsYPg ZK18QVSVg2lkTUGyPSqq+4M= -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:09 2025 by rpki-client