$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/A163C5C869A111ECA4837D28C4F9AE02.roa File: A163C5C869A111ECA4837D28C4F9AE02.roa (raw, json) Hash identifier: 0FTXingfRpsDYE8pdr5oSJqnzaTNs/nKqdTBW/g0vX8= Subject key identifier: 68:B8:E4:26:14:AF:54:B0:30:FC:B8:B9:39:08:7B:DD:2B:55:03:AA Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 2290 Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/A163C5C869A111ECA4837D28C4F9AE02.roa Signing time: Tue 31 Dec 2024 15:54:33 +0000 ROA not before: Tue 31 Dec 2024 15:54:33 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 30456 IP address blocks: 103.241.212.0/22 maxlen: 24 202.165.124.0/22 maxlen: 22 202.165.126.0/24 maxlen: 24 202.165.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8848 (0x2290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Dec 31 15:54:33 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=677413b8-599e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:38:d5:e1:25:b5:2a:4a:6b:e4:79:d5:3a: 69:d4:33:35:b3:57:24:31:d0:ac:1f:c5:eb:72:0a: f8:70:2e:fb:02:20:30:6f:01:58:bc:fa:0c:cf:46: 95:18:2f:bf:42:99:f0:7e:2e:a9:88:d8:54:8d:a8: 30:10:58:d7:12:cc:3a:ed:13:2b:c9:a6:4f:25:73: de:4c:78:53:79:c5:e2:78:f0:b3:7b:fc:f6:94:e4: c9:0a:f2:0c:46:fd:cf:bf:42:6a:3a:05:46:8d:84: 06:aa:b5:ed:58:13:26:be:ff:8b:7d:a2:64:c6:d4: 59:d2:87:bd:df:af:1f:0e:14:02:1f:cf:f2:6a:ca: 09:86:48:3c:9e:75:f9:48:96:39:67:93:fd:18:13: 51:40:c0:bf:da:25:ae:e6:39:d0:3e:56:c7:1e:d0: 27:3d:9a:7a:ff:7e:12:c4:a9:0b:b0:98:d6:6a:ab: 7b:7d:b1:41:40:9f:93:dc:82:63:f0:6a:12:89:cd: 4f:be:6e:b4:0b:74:4f:83:13:a5:64:bb:ff:4b:c4: 7b:84:df:d5:31:ae:2b:02:50:76:6d:f0:3b:e1:2c: 26:b8:83:0a:83:d1:4c:e4:be:55:6e:c3:17:21:92: 8e:2f:ef:92:dd:95:70:52:5f:d8:51:44:2f:3a:4d: 20:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B8:E4:26:14:AF:54:B0:30:FC:B8:B9:39:08:7B:DD:2B:55:03:AA X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/A163C5C869A111ECA4837D28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.241.212.0/22 202.165.124.0/22 Signature Algorithm: sha256WithRSAEncryption ad:5c:f2:b0:ef:eb:26:75:f3:73:9a:97:a2:86:81:c1:fb:a2: db:92:46:0c:0d:19:ae:14:d9:df:f1:90:10:46:f9:63:d3:d6: 9e:ce:2f:d1:13:87:72:66:80:11:7a:2c:fd:70:58:41:5f:1d: 06:68:63:84:37:2d:bf:46:d0:8b:b9:80:ac:45:38:46:cb:b9: 69:3b:dc:a3:22:16:94:5f:96:86:61:6a:b6:ed:d1:25:33:7d: 2d:4b:30:3a:99:d7:dd:e7:44:3c:db:64:fa:2d:b9:c8:9a:85: ae:f5:16:ab:e4:78:04:0e:56:97:0b:5a:83:15:2f:d3:35:da: 40:bb:d9:03:8a:6c:2f:31:35:3f:da:c2:8e:50:35:5f:25:34: b3:fa:4e:3f:4f:3b:6f:0e:7c:cd:5a:ba:d1:0a:fe:99:04:40: 74:a0:f5:33:83:3f:eb:a5:e7:22:5a:e5:25:00:66:41:b2:28: 4a:70:0f:1c:77:20:0c:c2:77:d2:8a:40:48:ac:e9:4d:d8:a8: 4c:bd:9c:f3:49:66:6b:39:aa:ab:88:06:14:c4:90:db:c1:a7: e1:a9:3b:6f:fc:c0:e9:09:65:1c:20:3f:0b:d6:c4:4c:8b:68: f0:17:f9:ae:eb:3a:f1:65:a9:e9:ad:cc:33:db:8c:d0:60:09: da:40:ec:45 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICIpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjQxMjMxMTU1NDMzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0MTNiOC01OTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzps41eEltSpKa+R51Tpp1DM1s1ckMdCsH8Xrcgr4cC77AiAwbwFYvPoMz0aV GC+/Qpnwfi6piNhUjagwEFjXEsw67RMryaZPJXPeTHhTecXiePCze/z2lOTJCvIM Rv3Pv0JqOgVGjYQGqrXtWBMmvv+LfaJkxtRZ0oe9368fDhQCH8/yasoJhkg8nnX5 SJY5Z5P9GBNRQMC/2iWu5jnQPlbHHtAnPZp6/34SxKkLsJjWaqt7fbFBQJ+T3IJj 8GoSic1Pvm60C3RPgxOlZLv/S8R7hN/VMa4rAlB2bfA74SwmuIMKg9FM5L5VbsMX IZKOL++S3ZVwUl/YUUQvOk0gWwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGi45CYU r1SwMPy4uTkIe90rVQOqMB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzI2NjMvQjhBRUYxMzhBOTRDMTFFNTgyOTFDQTY3QzRGOUFFMDIvQTE2M0M1Qzg2 OUExMTFFQ0E0ODM3RDI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn8dQDBALKpXwwDQYJKoZIhvcNAQELBQADggEBAK1c8rDv 6yZ183Oal6KGgcH7otuSRgwNGa4U2d/xkBBG+WPT1p7OL9ETh3JmgBF6LP1wWEFf HQZoY4Q3Lb9G0Iu5gKxFOEbLuWk73KMiFpRfloZharbt0SUzfS1LMDqZ193nRDzb ZPotuciaha71FqvkeAQOVpcLWoMVL9M12kC72QOKbC8xNT/awo5QNV8lNLP6Tj9P O28OfM1autEK/pkEQHSg9TODP+ul5yJa5SUAZkGyKEpwDxx3IAzCd9KKQEis6U3Y qEy9nPNJZms5qquIBhTEkNvBp+GpO2/8wOkJZRwgPwvWxEyLaPAX+a7rOvFlqemt zDPbjNBgCdpA7EU= -----END CERTIFICATE-----Generated at Sat Apr 26 08:11:19 2025 by rpki-client