$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/B78B5CB6D65F11EA8B30486EC4F9AE02.roa File: B78B5CB6D65F11EA8B30486EC4F9AE02.roa (raw, json) Hash identifier: MyNq7pYsfXRPiYwbL0q3/Dn2sx3QYfe2KkNfFn5PXS8= Subject key identifier: B3:F9:02:8A:BC:B9:19:C7:32:7B:2D:FF:37:E8:7D:E9:63:08:FB:3B Certificate issuer: /CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Certificate serial: 07F6 Authority key identifier: B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/B78B5CB6D65F11EA8B30486EC4F9AE02.roa Signing time: Thu 30 Jan 2025 21:10:17 +0000 ROA not before: Thu 30 Jan 2025 21:10:17 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 134737 IP address blocks: 103.149.8.0/24 maxlen: 24 103.149.9.0/24 maxlen: 24 2001:df4:6580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2038 (0x7f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F8F2, serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Validity Not Before: Jan 30 21:10:17 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=679beab9-41ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:bd:be:38:b7:1f:2f:37:e1:53:ed:4a:ae: 07:62:7a:de:8c:e6:4f:fe:35:ab:5f:e3:f8:f0:bf: f0:f1:77:30:c9:c1:a2:df:13:78:b7:0e:64:05:f2: b4:6c:07:5e:c1:71:0c:1f:c3:06:ee:ea:ef:94:f6: f1:5c:43:86:d7:73:11:14:2a:13:99:05:5e:63:e8: 61:b1:a8:a6:b3:bf:27:28:0a:a5:71:e7:34:9b:0a: 0f:ec:cb:34:bf:1b:81:04:56:f3:67:8b:e8:4d:d7: d5:83:bb:8d:d7:a3:70:b6:ad:7e:71:1e:b1:61:7f: 0d:c8:8f:08:89:d1:c4:7b:31:c1:f4:ee:a2:fb:5d: fc:10:44:0e:45:2b:2a:36:70:c3:b8:a9:ca:d8:40: 01:53:9d:8a:8b:70:a2:54:08:6a:c5:0b:e4:ed:f6: f5:66:ee:71:7f:b5:89:1a:e0:52:51:ca:7a:d4:c2: a7:c2:5e:7e:82:52:57:ec:f3:6c:2e:3f:fb:f3:78: 57:f0:9e:01:cc:eb:2e:60:e1:ce:29:e8:fe:c4:07: fd:84:c8:62:e6:7d:d6:f6:71:a2:d4:e0:06:ee:75: 6a:27:08:6e:a1:25:bf:0f:7e:b9:93:90:fb:27:fc: fd:f6:c5:62:46:3b:9f:db:a8:42:db:a2:91:a8:92: ca:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F9:02:8A:BC:B9:19:C7:32:7B:2D:FF:37:E8:7D:E9:63:08:FB:3B X509v3 Authority Key Identifier: keyid:B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/B78B5CB6D65F11EA8B30486EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.8.0/23 IPv6: 2001:df4:6580::/48 Signature Algorithm: sha256WithRSAEncryption 5e:d1:6c:a2:05:78:1c:42:d0:43:bd:23:2c:b8:40:e6:86:70: 7f:15:00:b4:b6:99:3c:51:96:c1:27:aa:86:b5:78:40:99:18: de:7f:e9:77:5d:2c:2c:e3:0c:a5:3a:6e:d3:ea:46:b1:75:6c: 08:df:d7:f2:b5:95:1f:25:06:de:69:1a:e1:f6:af:c9:ae:5b: 60:48:06:d3:8f:99:f9:a4:92:8d:18:de:1e:c7:16:b4:d3:2a: 86:34:7b:e5:78:dc:49:c0:0c:a7:52:5e:5c:19:f0:1c:de:ef: 59:7d:fe:8a:f4:3d:40:32:18:95:90:76:72:b8:9f:8f:83:ab: e2:72:45:55:60:91:5b:25:63:1f:96:8a:d0:bc:21:a4:6a:89: 4b:e5:9b:ad:31:62:51:33:c3:f4:79:a6:0e:09:25:66:ad:b9: a5:67:4d:d8:a2:40:bc:1d:75:a2:1f:f7:91:ff:7c:ad:08:6a: 3a:e2:53:1b:04:30:1e:4b:8e:4c:0e:2d:af:58:83:98:96:a9: 74:98:3c:3e:68:71:65:ff:89:18:87:01:ed:4e:a3:0f:92:ea: 7e:1f:97:19:0e:a9:7f:6b:52:6e:04:f0:48:22:68:64:b8:32: 03:cd:ef:b3:64:9b:e0:88:8e:a2:cc:b2:d8:7e:5e:68:8a:08: 26:be:90:ef -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4RjIxMTAvBgNVBAUTKEI3OTFCRDFDOUUyMDgxQUE4NEY4MDc4MDY2QzBDN0Y2 MEE2Mzc5MEUwHhcNMjUwMTMwMjExMDE3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzliZWFiOS00MWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpS9vji3Hy834VPtSq4HYnrejOZP/jWrX+P48L/w8XcwycGi3xN4tw5kBfK0 bAdewXEMH8MG7urvlPbxXEOG13MRFCoTmQVeY+hhsaims78nKAqlcec0mwoP7Ms0 vxuBBFbzZ4voTdfVg7uN16Nwtq1+cR6xYX8NyI8IidHEezHB9O6i+138EEQORSsq NnDDuKnK2EABU52Ki3CiVAhqxQvk7fb1Zu5xf7WJGuBSUcp61MKnwl5+glJX7PNs Lj/783hX8J4BzOsuYOHOKej+xAf9hMhi5n3W9nGi1OAG7nVqJwhuoSW/D365k5D7 J/z99sViRjuf26hC26KRqJLKlwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLP5Aoq8 uRnHMnst/zfofeljCPs7MB8GA1UdIwQYMBaAFLeRvRyeIIGqhPgHgGbAx/YKY3kO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhGMi8wMjJENTcxQ0Q2 NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dhcUUtQWVBWnNESDlncGpl UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q1RzlISjRnZ2FxRS1BZUFac0RIOWdwamVRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Y4RjIvMDIyRDU3MUNENjVFMTFFQUI2MENBMzZCQzRGOUFFMDIvQjc4QjVDQjZE NjVGMTFFQThCMzA0ODZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlQgwDwQCAAIwCQMHACABDfRlgDANBgkqhkiG9w0BAQsF AAOCAQEAXtFsogV4HELQQ70jLLhA5oZwfxUAtLaZPFGWwSeqhrV4QJkY3n/pd10s LOMMpTpu0+pGsXVsCN/X8rWVHyUG3mka4favya5bYEgG04+Z+aSSjRjeHscWtNMq hjR75XjcScAMp1JeXBnwHN7vWX3+ivQ9QDIYlZB2crifj4Or4nJFVWCRWyVjH5aK 0LwhpGqJS+WbrTFiUTPD9HmmDgklZq25pWdN2KJAvB11oh/3kf98rQhqOuJTGwQw HkuOTA4tr1iDmJapdJg8PmhxZf+JGIcB7U6jD5Lqfh+XGQ6pf2tSbgTwSCJoZLgy A83vs2Sb4IiOosyy2H5eaIoIJr6Q7w== -----END CERTIFICATE-----Generated at Sat Apr 26 08:31:34 2025 by rpki-client