$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/98281C68C74D11EFBDEB795AC4F9AE02.roa File: 98281C68C74D11EFBDEB795AC4F9AE02.roa (raw, json) Hash identifier: AIVNJI4ml2hm0sk+tjU7ezgPrM6ruoUwi1BLVLUi/kc= Subject key identifier: 7A:56:7F:93:2C:B7:62:8A:2E:DE:92:52:9A:89:B9:7B:16:57:4D:9C Certificate issuer: /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82 Certificate serial: 11EB Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/98281C68C74D11EFBDEB795AC4F9AE02.roa Signing time: Tue 31 Dec 2024 08:02:35 +0000 ROA not before: Tue 31 Dec 2024 08:02:35 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 24039 IP address blocks: 103.193.208.0/22 maxlen: 22 203.190.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4587 (0x11eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82 Validity Not Before: Dec 31 08:02:35 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6773a51b-b662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:43:22:85:ae:7c:a2:25:dd:97:cc:af:5f: d6:e2:25:2e:d8:4c:7e:dd:01:2e:e5:6c:32:9d:7d: 1a:89:07:82:d5:40:8f:5f:f9:16:b1:a2:ec:b5:1c: ed:04:c9:31:71:60:d8:99:07:52:20:21:fd:c2:fe: 3b:c9:fd:8b:69:73:95:0b:0c:6b:37:99:a7:40:c9: 41:d8:7e:6e:7f:64:e0:be:35:73:ac:31:ee:05:26: 1c:6a:ba:71:44:49:d0:3a:ab:a4:d4:c8:c8:b5:b5: 11:9a:90:94:1e:fc:82:39:d7:29:ce:a6:7a:74:a4: d3:da:ef:52:9a:11:c7:57:4b:2e:ed:83:31:94:d4: 96:05:be:52:46:6b:66:da:77:e6:21:16:36:b5:19: 40:24:a2:ad:56:24:d9:8e:bd:b8:0d:3a:49:9a:ab: 4a:3c:7e:ef:7c:65:b6:4b:06:1f:26:80:e6:8d:d2: b3:5f:0f:bb:d0:d5:5d:e5:f3:aa:a5:98:46:e9:2a: a1:31:73:6f:74:db:2a:3b:eb:29:36:7d:b7:0e:c9: 5c:30:7f:da:8b:24:ba:31:0a:f3:08:a2:5a:d0:f7: 40:cc:33:8d:dc:56:84:e2:2b:65:53:d7:6f:d5:e9: 82:75:53:33:d2:21:2a:89:1b:26:c7:6f:aa:55:c5: 09:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:56:7F:93:2C:B7:62:8A:2E:DE:92:52:9A:89:B9:7B:16:57:4D:9C X509v3 Authority Key Identifier: keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/98281C68C74D11EFBDEB795AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.193.208.0/22 203.190.223.0/24 Signature Algorithm: sha256WithRSAEncryption ad:ae:59:15:da:09:e2:a3:13:9d:36:93:2a:d8:0a:73:d6:55: 78:d2:76:ab:73:db:f8:02:ce:6a:0e:03:7d:6c:32:23:99:74: a0:a6:6c:27:0c:89:e9:45:42:f6:f3:0b:cb:f0:60:67:de:31: f7:23:d5:99:ab:85:1a:38:1c:30:b4:eb:2a:6b:5c:16:f9:60: 88:ee:53:31:36:d6:83:64:6e:c5:87:5c:c3:76:0a:56:05:25: 3a:40:fe:fb:69:13:bb:5d:75:ad:fe:03:82:35:cb:91:98:cf: ae:b4:64:3b:1c:c2:ee:88:ea:cc:33:ed:3e:46:9c:eb:f8:e8: 7b:41:42:ac:16:ee:46:15:58:9b:10:c7:aa:e8:ff:b2:34:70: 18:44:0b:9d:14:30:06:98:74:ad:e9:9c:44:e3:c8:18:63:9e: 61:4b:69:53:49:fc:ad:6f:1a:05:ad:59:f6:1c:8d:31:68:9f: 52:4d:5e:52:c2:77:e0:59:9c:38:77:cf:a9:c3:c1:ee:b1:ff: 96:3c:8d:28:35:39:28:2d:cb:96:b8:b4:75:b2:39:dc:26:8d: 6b:50:32:b7:c4:03:a9:34:7d:56:53:38:23:7d:13:1a:e7:50: 05:86:6c:dd:13:a9:19:85:11:8c:54:6a:2b:8d:f4:16:c6:ce: dd:23:10:41 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICEeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzczNTgxMTAvBgNVBAUTKDgwRTNDM0FFNTE5QTRGMTgzNzVBQzZBNDNGNTM3QTg1 RkY3QTJBODIwHhcNMjQxMjMxMDgwMjM1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzczYTUxYi1iNjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOhDIoWufKIl3ZfMr1/W4iUu2Ex+3QEu5WwynX0aiQeC1UCPX/kWsaLstRzt BMkxcWDYmQdSICH9wv47yf2LaXOVCwxrN5mnQMlB2H5uf2TgvjVzrDHuBSYcarpx REnQOquk1MjItbURmpCUHvyCOdcpzqZ6dKTT2u9SmhHHV0su7YMxlNSWBb5SRmtm 2nfmIRY2tRlAJKKtViTZjr24DTpJmqtKPH7vfGW2SwYfJoDmjdKzXw+70NVd5fOq pZhG6SqhMXNvdNsqO+spNn23DslcMH/aiyS6MQrzCKJa0PdAzDON3FaE4itlU9dv 1emCdVMz0iEqiRsmx2+qVcUJGQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHpWf5Ms t2KKLt6SUpqJuXsWV02cMB8GA1UdIwQYMBaAFIDjw65Rmk8YN1rGpD9TeoX/eiqC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzM1OC9CRTg0RjA5NERE MEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4ZzNXc2FrUDFONmhmOTZL b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPUERybEdhVHhnM1dzYWtQMU42aGY5NktvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzczNTgvQkU4NEYwOTRERDBCMTFFODg1NDQ5QTQwQzRGOUFFMDIvOTgyODFDNjhD NzREMTFFRkJERUI3OTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnwdADBADLvt8wDQYJKoZIhvcNAQELBQADggEBAK2uWRXa CeKjE502kyrYCnPWVXjSdqtz2/gCzmoOA31sMiOZdKCmbCcMielFQvbzC8vwYGfe Mfcj1ZmrhRo4HDC06yprXBb5YIjuUzE21oNkbsWHXMN2ClYFJTpA/vtpE7tdda3+ A4I1y5GYz660ZDscwu6I6swz7T5GnOv46HtBQqwW7kYVWJsQx6ro/7I0cBhEC50U MAaYdK3pnETjyBhjnmFLaVNJ/K1vGgWtWfYcjTFon1JNXlLCd+BZnDh3z6nDwe6x /5Y8jSg1OSgty5a4tHWyOdwmjWtQMrfEA6k0fVZTOCN9ExrnUAWGbN0TqRmFEYxU aiuN9BbGzt0jEEE= -----END CERTIFICATE-----Generated at Sat Apr 26 09:37:19 2025 by rpki-client