$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/976A9C302BAF11F0B6DD613FC4F9AE02.roa File: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (raw, json) Hash identifier: 4aOvYw0Eo1kn2gxCnWQmbywNgEtQRRPUXbr/k+ZLw8M= Subject key identifier: 96:29:D1:A0:78:FB:DC:CE:C7:25:10:C6:F9:36:39:8F:EA:62:78:A5 Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: 01E0 Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/976A9C302BAF11F0B6DD613FC4F9AE02.roa Signing time: Thu 08 May 2025 01:56:01 +0000 ROA not before: Thu 08 May 2025 01:56:01 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 214143 IP address blocks: 103.71.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Validity Not Before: May 8 01:56:01 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=681c0f31-a041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4d:60:a4:9e:6d:57:12:e9:f1:27:c2:92:b7: 0e:66:b8:db:6d:2c:c7:f3:18:c8:03:d7:ce:d5:31: ad:56:c4:f5:1a:a8:0f:36:98:cc:34:68:93:02:43: d1:94:8e:69:5a:d1:4d:6d:a6:29:25:21:c7:77:fa: 6d:a5:34:47:7b:c5:18:f0:db:b8:fd:60:7a:91:d9: 79:56:a3:7d:d8:ac:bf:3a:02:74:ba:41:30:82:e1: ff:72:59:fb:1b:48:b6:ca:d1:8e:92:76:ce:fc:44: 1a:17:7a:24:e4:c0:c1:bd:e8:45:d8:97:e4:96:d2: 36:f5:ef:a6:b0:68:d8:30:d4:ba:c5:c3:3c:d0:d2: 51:96:95:ea:f1:86:9a:13:da:30:0f:7e:c8:08:56: 64:73:6c:85:a8:8b:29:8a:61:d1:75:48:14:4f:7f: 0f:97:6e:4a:55:30:97:f8:5f:a8:16:a8:69:6c:65: 7f:e1:06:da:24:d1:81:5b:90:8d:c7:a8:f1:05:ad: 2e:05:be:e6:31:bb:aa:96:fa:85:e5:a9:90:18:db: f4:04:72:4d:f9:a6:df:16:59:e2:00:2e:77:ba:06: b6:ad:f6:96:d5:07:99:fa:5c:8a:e8:ca:13:ae:ab: f5:34:0c:af:7a:87:be:30:51:f9:46:28:db:9a:ce: 78:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:29:D1:A0:78:FB:DC:CE:C7:25:10:C6:F9:36:39:8F:EA:62:78:A5 X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/976A9C302BAF11F0B6DD613FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.71.93.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:0f:bb:49:3a:f0:ea:a1:cf:5e:22:7d:e7:69:e0:b4:8a:ec: c9:b0:6e:91:fa:64:33:d4:6d:ab:d6:b7:e1:fd:bd:60:77:6a: e7:34:90:2e:ba:1a:dc:9a:37:9e:ed:7d:59:fb:74:30:b3:7b: 4b:99:59:63:6a:55:e0:2c:19:29:71:bd:71:56:4c:a8:5d:4f: 30:f7:3f:67:39:9f:9b:02:99:18:d4:1a:8e:42:a6:77:0b:a5: dc:a8:27:7a:86:37:68:f0:39:5f:fa:11:26:a9:5b:d8:f7:bf: 52:dc:d2:3e:b8:6b:e7:7b:d0:ee:a2:2f:63:59:e5:72:1c:5e: 68:10:0c:8f:4e:8b:67:37:94:41:b1:09:3d:72:c6:2d:a3:60: 1a:e8:67:3e:69:66:ef:b3:a4:45:a4:d4:9f:0f:36:ce:84:44: 9a:3c:b0:c9:99:7d:63:8d:14:41:a4:09:9c:48:c6:39:8e:3b: 3b:a9:13:b2:f4:04:ef:1d:ec:3e:4a:43:83:70:b9:da:25:37: f6:36:e8:a6:5e:f3:95:61:e6:1e:0c:11:3c:70:83:68:eb:f9: f3:7e:e4:c4:af:46:cd:5c:8e:cc:55:76:52:ec:3e:61:7b:c3: 65:7a:ec:2f:3d:ee:c8:d8:9b:d1:18:9a:0e:13:31:0e:e1:fd: ba:34:39:d3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjUwNTA4MDE1NjAxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjMGYzMS1hMDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApE1gpJ5tVxLp8SfCkrcOZrjbbSzH8xjIA9fO1TGtVsT1GqgPNpjMNGiTAkPR lI5pWtFNbaYpJSHHd/ptpTRHe8UY8Nu4/WB6kdl5VqN92Ky/OgJ0ukEwguH/cln7 G0i2ytGOknbO/EQaF3ok5MDBvehF2JfkltI29e+msGjYMNS6xcM80NJRlpXq8Yaa E9owD37ICFZkc2yFqIspimHRdUgUT38Pl25KVTCX+F+oFqhpbGV/4QbaJNGBW5CN x6jxBa0uBb7mMbuqlvqF5amQGNv0BHJN+abfFlniAC53uga2rfaW1QeZ+lyK6MoT rqv1NAyveoe+MFH5Rijbms54BwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJYp0aB4 +9zOxyUQxvk2OY/qYnilMB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTZEREIvRTFDRENERDJCRTFCMTFFREE2MUFDRDg0QzRGOUFFMDIvOTc2QTlDMzAy QkFGMTFGMEI2REQ2MTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnR10wDQYJKoZIhvcNAQELBQADggEBAEoPu0k68Oqhz14i fedp4LSK7MmwbpH6ZDPUbavWt+H9vWB3auc0kC66GtyaN57tfVn7dDCze0uZWWNq VeAsGSlxvXFWTKhdTzD3P2c5n5sCmRjUGo5CpncLpdyoJ3qGN2jwOV/6ESapW9j3 v1Lc0j64a+d70O6iL2NZ5XIcXmgQDI9Oi2c3lEGxCT1yxi2jYBroZz5pZu+zpEWk 1J8PNs6ERJo8sMmZfWONFEGkCZxIxjmOOzupE7L0BO8d7D5KQ4NwudolN/Y26KZe 85Vh5h4METxwg2jr+fN+5MSvRs1cjsxVdlLsPmF7w2V67C897sjYm9EYmg4TMQ7h /bo0OdM= -----END CERTIFICATE-----Generated at Tue May 13 11:38:33 2025 by rpki-client