$ rpki-client -vvf rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/B4A76FC8B5EC11EF9287020CC4F9AE02.roa File: B4A76FC8B5EC11EF9287020CC4F9AE02.roa (raw, json) Hash identifier: JQfh1u+kukwSEqZawoJIJYKiGmFwuaaFjBW+kzrVtks= Subject key identifier: F5:A8:0F:BB:DC:CB:95:74:4A:62:73:7D:03:6F:F6:10:1B:24:1C:E9 Certificate issuer: /CN=A917A0C0/serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692 Certificate serial: 43 Authority key identifier: A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/B4A76FC8B5EC11EF9287020CC4F9AE02.roa Signing time: Sat 05 Apr 2025 07:12:23 +0000 ROA not before: Sat 05 Apr 2025 07:12:23 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132839 IP address blocks: 103.211.124.0/22 maxlen: 24 160.238.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A0C0, serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692 Validity Not Before: Apr 5 07:12:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f0d7d7-7d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:cc:12:cd:8b:85:eb:9b:27:90:06:93:b7: 2b:c6:ad:06:64:a7:a0:b8:c7:d8:e4:6a:bf:0a:6a: 0b:f5:9b:43:67:9a:6d:b2:94:d2:61:14:26:33:94: b0:ec:63:89:6f:f6:45:f3:f6:9e:52:f0:d1:4c:a4: 96:e4:59:e9:34:76:c8:79:6b:6f:29:83:3e:92:3e: b8:17:9e:6f:3c:75:eb:4d:3a:eb:d4:91:a2:75:42: 7d:4e:20:3c:a5:e3:84:16:20:c3:cb:94:07:99:94: 6a:92:42:09:e5:09:b8:42:e5:97:8e:24:39:31:f4: fa:21:15:cd:8b:1b:a1:f2:d0:c4:4b:c7:7b:85:61: 0b:ab:54:92:2f:63:14:76:b6:61:ad:dc:82:61:53: 95:9d:65:51:1c:d8:99:9d:2d:b1:95:4e:00:ad:56: 7d:a0:63:fb:19:7e:b5:a4:93:6c:17:0d:5e:a9:db: eb:e6:ff:43:f3:37:ab:37:8c:19:33:8a:5e:06:9c: 57:0f:e2:af:2b:fd:14:b2:7f:a4:60:af:19:ca:86: 19:37:ef:91:9c:a9:4a:78:c2:60:f4:16:09:48:fd: f9:2a:b1:c8:83:b8:33:78:76:71:21:d0:f2:a9:22: 78:81:5e:35:00:ca:27:50:9a:25:35:ad:c4:e9:83: d3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A8:0F:BB:DC:CB:95:74:4A:62:73:7D:03:6F:F6:10:1B:24:1C:E9 X509v3 Authority Key Identifier: keyid:A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/B4A76FC8B5EC11EF9287020CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.211.124.0/22 160.238.84.0/22 Signature Algorithm: sha256WithRSAEncryption 41:93:cb:22:0e:ab:db:cc:8d:d7:e1:de:c0:b6:58:b6:61:59: 1e:a2:98:3c:07:af:59:84:93:63:f5:06:9b:bb:67:84:75:cd: c5:6c:8e:c2:1f:85:ee:b5:b4:9c:4c:bf:af:56:84:59:12:ac: 2a:1d:9f:22:54:d0:7f:6f:f1:f9:52:5b:b1:b2:48:38:cc:63: 3e:5c:ee:81:94:a0:9e:6e:23:04:df:10:b7:dc:87:69:a9:f5: 95:2c:31:6e:1b:c7:88:f7:45:9b:98:2f:0f:cf:6a:0a:28:03: 04:40:88:b9:ad:97:fc:9f:95:76:f1:0a:b8:99:34:06:1d:d1: e5:41:e8:d3:c5:04:9d:9e:7e:99:1a:80:c7:96:22:f8:ef:e4: 28:1b:9d:7d:98:ba:e4:1d:e3:a9:44:47:91:b6:af:20:e2:d3: 5c:df:44:9d:28:5d:63:45:9e:eb:e7:85:36:4b:05:90:40:56: bc:35:2a:28:96:a3:f0:06:71:82:1d:db:97:90:ff:63:8f:26: a3:0d:55:ac:d7:bd:c0:5d:a8:ca:56:cc:7f:8f:fb:00:f7:47: 3f:b3:50:0c:15:7e:3d:69:5a:9d:10:3b:8e:77:e4:7f:be:c6: bb:9d:b1:28:bf:ef:70:d6:0d:81:19:d6:6d:6d:b7:32:e1:0d: c1:73:ca:69 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTBDMDExMC8GA1UEBRMoQTI2NjE2N0EwNEZBRkVFNUFFMUE1MEUwNDU3MEFENUZE NDRFRDY5MjAeFw0yNTA0MDUwNzEyMjNaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZjBkN2Q3LTdkNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1H8wSzYuF65snkAaTtyvGrQZkp6C4x9jkar8Kagv1m0Nnmm2ylNJhFCYzlLDs Y4lv9kXz9p5S8NFMpJbkWek0dsh5a28pgz6SPrgXnm88detNOuvUkaJ1Qn1OIDyl 44QWIMPLlAeZlGqSQgnlCbhC5ZeOJDkx9PohFc2LG6Hy0MRLx3uFYQurVJIvYxR2 tmGt3IJhU5WdZVEc2JmdLbGVTgCtVn2gY/sZfrWkk2wXDV6p2+vm/0PzN6s3jBkz il4GnFcP4q8r/RSyf6RgrxnKhhk375GcqUp4wmD0FglI/fkqsciDuDN4dnEh0PKp IniBXjUAyidQmiU1rcTpg9N3AgMBAAGjggKbMIIClzAdBgNVHQ4EFgQU9agPu9zL lXRKYnN9A2/2EBskHOkwHwYDVR0jBBgwFoAUomYWegT6/uWuGlDgRXCtX9RO1pIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMEMwLzRBMkVEQzgwQjVF QzExRUZCMDJFQzEwQUM0RjlBRTAyL29tWVdlZ1Q2X3VXdUdsRGdSWEN0WDlSTzFw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb21ZV2VnVDZfdVd1R2xEZ1JYQ3RYOVJPMXBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTBDMC80QTJFREM4MEI1RUMxMUVGQjAyRUMxMEFDNEY5QUUwMi9CNEE3NkZDOEI1 RUMxMUVGOTI4NzAyMENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmfTfAMEAqDuVDANBgkqhkiG9w0BAQsFAAOCAQEAQZPLIg6r 28yN1+HewLZYtmFZHqKYPAevWYSTY/UGm7tnhHXNxWyOwh+F7rW0nEy/r1aEWRKs Kh2fIlTQf2/x+VJbsbJIOMxjPlzugZSgnm4jBN8Qt9yHaan1lSwxbhvHiPdFm5gv D89qCigDBECIua2X/J+VdvEKuJk0Bh3R5UHo08UEnZ5+mRqAx5Yi+O/kKBudfZi6 5B3jqURHkbavIOLTXN9EnShdY0We6+eFNksFkEBWvDUqKJaj8AZxgh3bl5D/Y48m ow1VrNe9wF2oylbMf4/7APdHP7NQDBV+PWlanRA7jnfkf77Gu52xKL/vcNYNgRnW bW23MuENwXPKaQ== -----END CERTIFICATE-----Generated at Sat Apr 26 07:37:41 2025 by rpki-client