$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/DB9C041801B311ECBA0E715CC4F9AE02.roa File: DB9C041801B311ECBA0E715CC4F9AE02.roa (raw, json) Hash identifier: POPDOMnD2vV8xWQMiufmv3X0702RYs86sixhHrnG1/8= Subject key identifier: 2D:EF:B6:49:AF:5F:75:92:15:BC:1E:A9:00:D3:51:88:18:03:05:F6 Certificate issuer: /CN=A9178D2A/serialNumber=991B362C66B9A18029A8DD428155D97C76E01209 Certificate serial: 0507 Authority key identifier: 99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/DB9C041801B311ECBA0E715CC4F9AE02.roa Signing time: Sat 05 Apr 2025 00:04:33 +0000 ROA not before: Sat 05 Apr 2025 00:04:33 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136427 IP address blocks: 103.87.162.0/24 maxlen: 24 2001:df0:8900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1287 (0x507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178D2A, serialNumber=991B362C66B9A18029A8DD428155D97C76E01209 Validity Not Before: Apr 5 00:04:33 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f07390-3d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:17:8f:14:95:73:7a:42:34:a1:02:1e:f9: 06:91:bc:31:58:0e:23:84:65:d8:1c:93:32:05:2c: 7c:04:98:86:28:46:8a:a5:39:0d:15:49:ad:83:65: 55:57:ad:e4:77:94:37:af:1b:06:0e:9e:08:37:bd: 8f:bc:83:2f:6b:6a:53:ed:dd:06:93:d6:9b:78:04: 52:f4:53:0e:8a:e0:85:b0:3a:7e:3e:ef:b2:2e:e0: b5:b9:06:f9:63:c4:14:ac:87:62:bb:d2:7b:43:7e: fd:bc:81:0e:86:63:b7:a7:3a:3a:6f:c7:3c:89:c3: 1d:91:93:ff:a5:f3:7c:3f:cb:3a:f5:1e:00:6c:fd: 61:41:aa:b0:54:c8:9a:f0:46:b1:1e:09:07:2c:ca: d4:eb:c6:13:ec:e5:63:5b:70:8a:47:80:27:d2:a7: 82:ed:f1:97:bd:3c:b2:4b:52:38:b8:21:0d:ec:6f: 76:4c:84:5b:1a:e2:e0:ee:6b:c5:2a:29:c4:d1:f0: a9:f3:71:29:0c:9a:de:ae:2e:89:4a:ca:d6:e3:0a: 51:29:e0:b2:0f:38:f5:70:cf:a7:88:8c:dd:6c:8b: 37:0c:38:5c:e0:e0:3e:a1:ce:f4:42:8e:85:b6:e9: 1b:c2:3d:44:c7:b8:3b:8a:35:6d:cc:32:b8:6e:aa: 60:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EF:B6:49:AF:5F:75:92:15:BC:1E:A9:00:D3:51:88:18:03:05:F6 X509v3 Authority Key Identifier: keyid:99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/DB9C041801B311ECBA0E715CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.87.162.0/24 IPv6: 2001:df0:8900::/48 Signature Algorithm: sha256WithRSAEncryption 4a:b5:20:27:79:05:07:41:39:2a:8c:f9:c3:6c:37:36:cd:f4: 62:1f:21:6d:c3:e2:fd:0b:0c:a9:6a:b6:bc:0d:48:9c:4a:70: 1a:8c:80:f3:fe:fc:01:8c:bb:52:88:b4:c5:db:1a:69:a7:7e: e5:68:17:64:19:3e:10:38:5f:04:9c:bb:1d:05:92:c7:1f:36: d5:08:1f:2f:39:d4:6d:88:60:98:0d:8a:18:ac:89:1a:f6:50: 3b:7c:d2:cf:99:ba:3a:40:c0:9e:46:76:6a:38:4b:6f:fe:49: b7:a9:d4:51:4a:98:48:98:b9:37:fc:e4:34:9d:0f:81:b0:e8: f5:f4:3b:0e:0b:b6:e3:42:00:c3:af:a4:d3:9d:49:18:18:91: 15:1c:8f:e1:c0:2a:51:97:53:de:9b:b0:b7:c0:7f:64:c3:4f: 1c:6c:a5:d4:64:7e:d5:23:d5:d0:18:a8:d1:6f:a5:85:b2:dc: db:1a:81:5f:d5:92:e1:ce:c1:8a:0d:57:3a:8b:55:38:58:fc: d6:9e:ab:cd:f3:2f:f8:9c:71:5d:27:21:e7:d0:7e:2c:19:d8: cf:73:7e:1f:85:8f:80:d9:64:ee:a7:c7:0d:1d:85:ab:82:21: 3a:a9:82:e5:32:90:1b:db:6f:56:d3:31:d4:23:fb:c8:3b:5f: 44:f2:fa:5a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhEMkExMTAvBgNVBAUTKDk5MUIzNjJDNjZCOUExODAyOUE4REQ0MjgxNTVEOTdD NzZFMDEyMDkwHhcNMjUwNDA1MDAwNDMzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2YwNzM5MC0zZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7sXjxSVc3pCNKECHvkGkbwxWA4jhGXYHJMyBSx8BJiGKEaKpTkNFUmtg2VV V63kd5Q3rxsGDp4IN72PvIMva2pT7d0Gk9abeARS9FMOiuCFsDp+Pu+yLuC1uQb5 Y8QUrIdiu9J7Q379vIEOhmO3pzo6b8c8icMdkZP/pfN8P8s69R4AbP1hQaqwVMia 8EaxHgkHLMrU68YT7OVjW3CKR4An0qeC7fGXvTyyS1I4uCEN7G92TIRbGuLg7mvF KinE0fCp83EpDJreri6JSsrW4wpRKeCyDzj1cM+niIzdbIs3DDhc4OA+oc70Qo6F tukbwj1Ex7g7ijVtzDK4bqpgSwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFC3vtkmv X3WSFbweqQDTUYgYAwX2MB8GA1UdIwQYMBaAFJkbNixmuaGAKajdQoFV2Xx24BIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEQyQS8yRDJGODI2NjAx QjIxMUVDQTU3RUY1NUJDNEY5QUUwMi9tUnMyTEdhNW9ZQXBxTjFDZ1ZYWmZIYmdF Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21SczJMR2E1b1lBcHFOMUNnVlhaZkhiZ0Vnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhEMkEvMkQyRjgyNjYwMUIyMTFFQ0E1N0VGNTVCQzRGOUFFMDIvREI5QzA0MTgw MUIzMTFFQ0JBMEU3MTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnV6IwDwQCAAIwCQMHACABDfCJADANBgkqhkiG9w0BAQsF AAOCAQEASrUgJ3kFB0E5Koz5w2w3Ns30Yh8hbcPi/QsMqWq2vA1InEpwGoyA8/78 AYy7Uoi0xdsaaad+5WgXZBk+EDhfBJy7HQWSxx821QgfLznUbYhgmA2KGKyJGvZQ O3zSz5m6OkDAnkZ2ajhLb/5Jt6nUUUqYSJi5N/zkNJ0PgbDo9fQ7Dgu240IAw6+k 051JGBiRFRyP4cAqUZdT3puwt8B/ZMNPHGyl1GR+1SPV0Bio0W+lhbLc2xqBX9WS 4c7Big1XOotVOFj81p6rzfMv+JxxXSch59B+LBnYz3N+H4WPgNlk7qfHDR2Fq4Ih OqmC5TKQG9tvVtMx1CP7yDtfRPL6Wg== -----END CERTIFICATE-----Generated at Mon May 12 05:34:50 2025 by rpki-client