$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/8A83E044AA5E11EF86EDC12AC4F9AE02.roa File: 8A83E044AA5E11EF86EDC12AC4F9AE02.roa (raw, json) Hash identifier: bTG0otEBv5pUF0uMZgR8QuZCzoXLSGz2eFHvXwQK5Yk= Subject key identifier: 18:8D:BD:38:9D:04:64:14:7A:0A:25:3E:F2:5E:CF:3D:84:57:5B:5B Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Certificate serial: 06DC Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/8A83E044AA5E11EF86EDC12AC4F9AE02.roa Signing time: Wed 08 Jan 2025 12:20:54 +0000 ROA not before: Wed 08 Jan 2025 12:20:54 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 9825 IP address blocks: 103.165.158.0/24 maxlen: 24 202.94.165.0/24 maxlen: 24 2407:4ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1756 (0x6dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Validity Not Before: Jan 8 12:20:54 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=677e6da6-9b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:83:93:eb:f7:13:bd:29:d6:b8:68:a3:54: 2f:60:af:3c:8c:e6:e3:cd:8d:b3:04:3c:f6:67:8b: 40:e5:d6:2b:41:60:94:13:56:49:60:62:0a:fe:23: af:cb:f5:14:37:f7:71:dc:d3:ca:e0:58:91:09:08: 18:c6:f9:4e:86:e7:a9:ac:a1:d4:f2:ea:ac:af:8f: 77:19:2c:5d:b9:49:34:89:05:55:bd:39:91:90:22: 27:35:d4:b5:1e:e7:e8:ba:a9:1d:90:fa:eb:93:9d: d2:d4:7e:e1:92:6f:80:35:83:14:59:2d:42:a6:df: ea:0c:88:de:13:1e:fd:f9:a5:0e:7c:da:3e:d1:a9: 16:7c:df:cd:c9:be:fa:8d:82:06:1b:16:98:0d:b1: d4:c4:09:b7:4e:1b:7a:98:f5:32:3f:da:ee:fd:db: de:98:71:e2:23:8a:8d:4d:e0:5c:01:17:f2:95:48: e3:7d:51:b7:2e:f1:43:14:c3:c4:36:e3:53:40:de: cd:78:e3:cb:da:bf:99:30:87:3d:6c:27:5f:8e:9a: dc:18:5e:b8:ed:53:8f:3b:39:30:de:71:fc:c1:30: 39:49:9c:85:bd:70:5c:f0:10:a1:49:b5:cc:ac:50: 4e:e0:00:a4:61:89:16:6e:c0:f5:46:96:f2:e7:2d: ba:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8D:BD:38:9D:04:64:14:7A:0A:25:3E:F2:5E:CF:3D:84:57:5B:5B X509v3 Authority Key Identifier: keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/8A83E044AA5E11EF86EDC12AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.158.0/24 202.94.165.0/24 IPv6: 2407:4ac0::/32 Signature Algorithm: sha256WithRSAEncryption 91:8a:e0:48:f8:2f:d2:c1:3c:62:01:ac:6c:8a:ef:92:df:ff: 75:9f:b7:63:0b:ab:11:9a:16:23:be:96:dc:ab:09:d6:59:4a: 1f:97:6d:a8:9f:a2:bf:00:2f:15:9c:f5:3b:bf:a0:86:66:57: 9c:ae:bb:21:1f:6d:55:5c:f0:ec:1f:7b:e9:31:c9:15:83:b2: 84:29:cc:a0:16:ea:83:54:56:6a:d0:8f:1e:ce:ad:22:c0:6e: 02:54:a4:52:fa:2c:b9:f5:6e:43:05:f0:b5:cc:ea:90:b4:14: da:5f:64:aa:ae:32:e3:a3:d8:ca:96:fd:27:2e:ab:77:f4:93: 97:32:a0:35:c1:53:bd:e1:c3:d5:17:fe:ca:b5:dc:d6:59:98: b2:60:19:1b:9c:f7:84:36:eb:c4:f5:35:e2:fd:ca:f1:2c:c7: 52:6a:eb:eb:21:0a:e6:7e:64:b9:1f:6c:9d:54:41:dc:e3:54: c4:ed:2b:cc:c3:eb:3e:65:8a:d8:40:9c:bc:6c:8f:ab:26:66: f1:f1:da:b6:38:1c:46:73:80:c0:f8:5b:cd:dc:17:55:84:36: 79:ae:37:28:60:99:4f:84:f8:62:4c:93:11:23:99:15:c9:14: 00:d5:97:43:0c:da:09:91:42:44:62:c8:6d:cd:1f:d8:6a:b5: 21:d4:5c:2d -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2QjcxMTAvBgNVBAUTKDgzRDk2RjFERUE3MkE5OUQyMzRCNDQ1NkQ2RjY2NzVE QzdFNjA2MUUwHhcNMjUwMTA4MTIyMDU0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdlNmRhNi05YjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdiDk+v3E70p1rhoo1QvYK88jObjzY2zBDz2Z4tA5dYrQWCUE1ZJYGIK/iOv y/UUN/dx3NPK4FiRCQgYxvlOhueprKHU8uqsr493GSxduUk0iQVVvTmRkCInNdS1 HufouqkdkPrrk53S1H7hkm+ANYMUWS1Cpt/qDIjeEx79+aUOfNo+0akWfN/Nyb76 jYIGGxaYDbHUxAm3Tht6mPUyP9ru/dvemHHiI4qNTeBcARfylUjjfVG3LvFDFMPE NuNTQN7NeOPL2r+ZMIc9bCdfjprcGF647VOPOzkw3nH8wTA5SZyFvXBc8BChSbXM rFBO4ACkYYkWbsD1Rpby5y265wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBiNvTid BGQUegolPvJezz2EV1tbMB8GA1UdIwQYMBaAFIPZbx3qcqmdI0tEVtb2Z13H5gYe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZCNy85NUVGN0RCQTk2 N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFaMGpTMFJXMXZablhjZm1C aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c5bHZIZXB5cVowalMwUlcxdlpuWGNmbUJoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU2QjcvOTVFRjdEQkE5NjdEMTFFQkFERDUwRDJDQzRGOUFFMDIvOEE4M0UwNDRB QTVFMTFFRjg2RURDMTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnpZ4DBADKXqUwDQQCAAIwBwMFACQHSsAwDQYJKoZIhvcN AQELBQADggEBAJGK4Ej4L9LBPGIBrGyK75Lf/3Wft2MLqxGaFiO+ltyrCdZZSh+X baifor8ALxWc9Tu/oIZmV5yuuyEfbVVc8Owfe+kxyRWDsoQpzKAW6oNUVmrQjx7O rSLAbgJUpFL6LLn1bkMF8LXM6pC0FNpfZKquMuOj2MqW/Scuq3f0k5cyoDXBU73h w9UX/sq13NZZmLJgGRuc94Q268T1NeL9yvEsx1Jq6+shCuZ+ZLkfbJ1UQdzjVMTt K8zD6z5lithAnLxsj6smZvHx2rY4HEZzgMD4W83cF1WENnmuNyhgmU+E+GJMkxEj mRXJFADVl0MM2gmRQkRiyG3NH9hqtSHUXC0= -----END CERTIFICATE-----Generated at Sat Apr 26 05:54:13 2025 by rpki-client