$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa File: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (raw, json) Hash identifier: bw0f6KbJYjRey2+KDVpK9dBW3Yh7Jdgva8k4Bt7aCcM= Subject key identifier: 48:38:6C:D9:3D:51:B1:15:25:EF:20:AB:C6:EA:1D:D5:60:47:F5:12 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: D1 Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa Signing time: Tue 24 Dec 2024 03:54:00 +0000 ROA not before: Tue 24 Dec 2024 03:54:00 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 38047 IP address blocks: 103.118.40.0/22 maxlen: 22 103.118.40.0/23 maxlen: 23 103.118.40.0/24 maxlen: 24 103.118.41.0/24 maxlen: 24 103.118.42.0/23 maxlen: 23 103.118.42.0/24 maxlen: 24 103.118.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Dec 24 03:54:00 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=676a3057-62af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:59:2a:12:52:e6:b6:2b:c1:ab:2a:01:8f:86: a1:fa:47:8c:0e:1a:2d:ee:99:b9:d1:b2:82:95:3d: 46:17:39:ff:92:88:d2:85:a8:e0:98:db:86:2f:ee: 96:37:7e:01:b2:4a:eb:9f:b6:59:bc:57:47:cb:5b: bf:d4:88:30:4f:b9:4b:ac:2d:b1:d6:b3:45:2e:96: 88:9b:24:03:48:f6:03:d3:54:2e:a3:34:35:5c:aa: f9:7d:bb:80:3f:49:98:f8:d9:df:27:5e:34:96:86: 64:b1:b7:2d:74:19:5f:22:7b:c5:d2:54:7b:c0:80: 86:d9:ea:4a:34:fc:36:13:6f:12:5f:8a:f6:45:5e: cc:04:4f:ee:a1:5a:04:ed:a8:97:1a:6b:eb:36:98: d8:f6:47:39:c7:1b:93:07:83:b9:f2:28:bf:e2:43: b8:a0:76:7a:27:79:a6:74:01:d7:4c:19:92:4d:f8: f1:07:f2:a5:3a:23:67:ac:32:45:4f:01:1c:25:d8: 9e:1b:4f:31:88:9d:2b:a4:b7:d9:ae:4d:51:f5:d4: 86:7d:97:ff:10:88:db:45:17:bd:4e:89:a4:99:78: c7:58:f0:9e:25:73:7f:d2:c2:4e:9b:12:ca:31:8a: eb:7e:92:40:b8:2d:d4:7d:3b:f6:d8:8f:ae:33:bc: ac:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:38:6C:D9:3D:51:B1:15:25:EF:20:AB:C6:EA:1D:D5:60:47:F5:12 X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.118.40.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:42:d5:cd:9d:ed:02:b1:91:5f:38:e7:d3:03:a0:2a:d4:d2: 29:4e:fe:e2:08:24:f4:e1:93:6a:42:29:56:23:2f:68:1c:6e: c3:a6:1a:40:00:65:fb:e1:e0:9d:71:0e:a7:f0:6c:71:53:b6: f0:c2:e6:ad:ce:7c:8b:d7:e3:95:78:2b:39:90:45:18:64:92: 53:96:e3:bd:5e:eb:71:59:82:df:d9:0a:5e:e4:a0:7d:46:17: fa:08:48:f4:e9:0f:8a:3a:10:76:0a:7e:eb:dc:78:9e:ee:85: 7f:ce:ed:dc:38:fb:39:8b:a1:f2:eb:6b:06:9d:cc:16:ad:b2: 80:cd:74:a2:d0:bd:bf:31:4e:6e:39:c3:4e:13:9c:6c:dd:39: d1:e2:fd:95:2a:0c:35:8d:5b:58:8b:26:c5:83:b8:a0:c0:26: 0c:d8:21:84:bf:d2:08:58:9d:69:9b:a1:48:d3:9e:97:e0:b6: 70:50:99:d0:d0:96:2c:5c:ca:31:92:7d:2a:91:c6:35:ef:e2: e6:cd:a1:7e:05:e6:39:86:06:ab:d1:53:c9:3a:d7:23:1d:b1: 8d:50:2b:88:fa:36:d7:ee:af:30:04:7f:89:d8:3b:50:d7:2b: 16:58:f9:58:a0:76:75:38:84:e5:39:13:4d:56:6c:7f:04:81: 30:ec:39:84 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjQxMjI0MDM1NDAwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZhMzA1Ny02MmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21kqElLmtivBqyoBj4ah+keMDhot7pm50bKClT1GFzn/kojShajgmNuGL+6W N34Bskrrn7ZZvFdHy1u/1IgwT7lLrC2x1rNFLpaImyQDSPYD01QuozQ1XKr5fbuA P0mY+NnfJ140loZksbctdBlfInvF0lR7wICG2epKNPw2E28SX4r2RV7MBE/uoVoE 7aiXGmvrNpjY9kc5xxuTB4O58ii/4kO4oHZ6J3mmdAHXTBmSTfjxB/KlOiNnrDJF TwEcJdieG08xiJ0rpLfZrk1R9dSGfZf/EIjbRRe9TomkmXjHWPCeJXN/0sJOmxLK MYrrfpJAuC3UfTv22I+uM7ys+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFEg4bNk9 UbEVJe8gq8bqHdVgR/USMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E2NkYvOEZDQzlEMjhDNkY5MTFFRTk3RTZGQjFEQzRGOUFFMDIvQjRCNkMyQjBD MUFBMTFFRjgzQTMxRDZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJndigwDQYJKoZIhvcNAQELBQADggEBACxC1c2d7QKxkV84 59MDoCrU0ilO/uIIJPThk2pCKVYjL2gcbsOmGkAAZfvh4J1xDqfwbHFTtvDC5q3O fIvX45V4KzmQRRhkklOW471e63FZgt/ZCl7koH1GF/oISPTpD4o6EHYKfuvceJ7u hX/O7dw4+zmLofLrawadzBatsoDNdKLQvb8xTm45w04TnGzdOdHi/ZUqDDWNW1iL JsWDuKDAJgzYIYS/0ghYnWmboUjTnpfgtnBQmdDQlixcyjGSfSqRxjXv4ubNoX4F 5jmGBqvRU8k61yMdsY1QK4j6NtfurzAEf4nYO1DXKxZY+VigdnU4hOU5E01WbH8E gTDsOYQ= -----END CERTIFICATE-----Generated at Sat Apr 26 05:55:48 2025 by rpki-client