$ rpki-client -vvf rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/92B90AE2A1C711ED8701EE35C4F9AE02.roa File: 92B90AE2A1C711ED8701EE35C4F9AE02.roa (raw, json) Hash identifier: gOeA95IoTDT+oKmI8jFxYBNTdxSgbCw9gAyz2psvCzs= Subject key identifier: 7A:E7:66:60:CB:01:92:9F:27:A4:45:09:48:2C:51:F4:EB:76:AE:A4 Certificate issuer: /CN=A9111274/serialNumber=27E4FD41C3B364C5E444E62EB718199258393369 Certificate serial: 0722 Authority key identifier: 27:E4:FD:41:C3:B3:64:C5:E4:44:E6:2E:B7:18:19:92:58:39:33:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/92B90AE2A1C711ED8701EE35C4F9AE02.roa Signing time: Tue 28 Jan 2025 21:21:00 +0000 ROA not before: Tue 28 Jan 2025 21:21:00 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 141412 IP address blocks: 103.158.132.0/23 maxlen: 23 103.158.132.0/24 maxlen: 24 103.158.133.0/24 maxlen: 24 2001:df5:5480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.crl rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111274, serialNumber=27E4FD41C3B364C5E444E62EB718199258393369 Validity Not Before: Jan 28 21:21:00 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67994a3c-c1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:34:65:fd:74:7a:27:e0:41:26:3a:73:74:56: 13:28:5e:4d:35:5f:a1:04:85:f9:94:5e:31:e0:2e: 52:8d:0f:2e:1c:7e:5c:e6:ed:93:fc:b8:76:45:72: 9a:44:02:12:c9:9e:70:da:ef:8d:43:81:13:c6:47: c4:ad:1f:b3:3e:09:37:59:30:15:e4:a1:6a:fd:aa: 20:a1:9a:44:eb:60:1b:e0:1f:e6:c4:95:d1:24:a0: cb:74:9e:20:e9:b8:be:b9:33:82:0d:91:bc:eb:48: 8c:d1:66:db:ec:59:9c:14:12:ee:0a:0e:d1:a6:81: a6:f5:11:16:91:46:a7:80:a4:fd:44:d2:92:35:6f: 0b:9e:10:58:0c:b5:80:c3:87:7a:51:99:11:80:56: b2:97:a9:f3:25:82:c9:3e:6f:dc:60:d6:ec:cb:d5: e1:b7:e9:7c:e8:7b:a4:ef:aa:94:a8:56:de:e0:6d: 1b:76:f7:76:ce:7b:2d:c6:41:b4:37:79:45:f8:12: ca:95:f4:8c:05:f6:5f:9d:48:f0:af:d2:26:34:bb: 5d:14:bf:d1:06:3f:b1:1f:2d:6a:03:34:5c:ab:90: cd:08:2d:5b:a8:fc:fb:50:f3:3a:51:21:1d:03:e6: b0:9a:f0:d0:16:c0:9a:30:fb:41:99:a3:3d:48:0d: 1b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E7:66:60:CB:01:92:9F:27:A4:45:09:48:2C:51:F4:EB:76:AE:A4 X509v3 Authority Key Identifier: keyid:27:E4:FD:41:C3:B3:64:C5:E4:44:E6:2E:B7:18:19:92:58:39:33:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/92B90AE2A1C711ED8701EE35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.132.0/23 IPv6: 2001:df5:5480::/48 Signature Algorithm: sha256WithRSAEncryption 0b:e6:f9:71:94:bd:a0:35:21:9e:61:57:ce:1d:5d:68:f8:ef: 74:90:38:07:f6:c3:a9:c1:f9:0b:d9:0f:44:4b:b5:c4:0b:00: d9:d3:d3:e3:b7:7a:f9:1a:ce:3f:d8:08:eb:5e:27:bb:1d:47: 9a:a4:52:44:7c:65:84:aa:b3:0d:85:f9:e4:b9:84:ed:06:be: a3:47:9d:1f:33:86:5b:4b:8b:07:9b:4e:17:a7:b7:1f:ed:ba: 8f:c9:34:75:ed:89:13:58:01:b6:f9:b3:f9:02:a3:3b:92:6a: 31:28:6e:2d:e6:f1:4c:2d:cb:11:35:c2:6c:63:5e:3e:48:70: 06:bb:a1:b1:4e:38:f0:2a:8d:a5:4a:cf:b9:cf:44:53:9e:57: d5:96:db:d8:99:b8:3c:e4:46:20:06:d7:0a:54:3f:22:fa:fd: 8b:7c:33:b0:df:3c:a4:af:6a:fb:79:68:0d:66:88:06:8d:03: a3:2d:16:56:88:97:d2:74:d6:e6:92:26:eb:93:58:38:64:5b: 2f:99:1a:fb:f6:c8:a6:f4:83:1a:8f:13:d1:43:9c:e5:63:6f: 02:93:24:f6:d5:77:30:3d:a9:b6:f4:0b:39:7d:fb:1b:ed:ca: 21:75:f3:a5:47:03:af:c7:d7:99:50:e2:1b:33:4f:c0:77:8a: af:89:30:38 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyNzQxMTAvBgNVBAUTKDI3RTRGRDQxQzNCMzY0QzVFNDQ0RTYyRUI3MTgxOTky NTgzOTMzNjkwHhcNMjUwMTI4MjEyMTAwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk5NGEzYy1jMWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DRl/XR6J+BBJjpzdFYTKF5NNV+hBIX5lF4x4C5SjQ8uHH5c5u2T/Lh2RXKa RAISyZ5w2u+NQ4ETxkfErR+zPgk3WTAV5KFq/aogoZpE62Ab4B/mxJXRJKDLdJ4g 6bi+uTOCDZG860iM0Wbb7FmcFBLuCg7RpoGm9REWkUangKT9RNKSNW8LnhBYDLWA w4d6UZkRgFayl6nzJYLJPm/cYNbsy9Xht+l86Huk76qUqFbe4G0bdvd2znstxkG0 N3lF+BLKlfSMBfZfnUjwr9ImNLtdFL/RBj+xHy1qAzRcq5DNCC1bqPz7UPM6USEd A+awmvDQFsCaMPtBmaM9SA0bPwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHrnZmDL AZKfJ6RFCUgsUfTrdq6kMB8GA1UdIwQYMBaAFCfk/UHDs2TF5ETmLrcYGZJYOTNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTI3NC9DQjM3REFERTI0 MzcxMUVCQjlGMUU0MjNDNEY5QUUwMi9KLVQ5UWNPelpNWGtST1l1dHhnWmtsZzVN MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otVDlRY096Wk1Ya1JPWXV0eGdaa2xnNU0yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTEyNzQvQ0IzN0RBREUyNDM3MTFFQkI5RjFFNDIzQzRGOUFFMDIvOTJCOTBBRTJB MUM3MTFFRDg3MDFFRTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnnoQwDwQCAAIwCQMHACABDfVUgDANBgkqhkiG9w0BAQsF AAOCAQEAC+b5cZS9oDUhnmFXzh1daPjvdJA4B/bDqcH5C9kPREu1xAsA2dPT47d6 +RrOP9gI614nux1HmqRSRHxlhKqzDYX55LmE7Qa+o0edHzOGW0uLB5tOF6e3H+26 j8k0de2JE1gBtvmz+QKjO5JqMShuLebxTC3LETXCbGNePkhwBruhsU448CqNpUrP uc9EU55X1Zbb2Jm4PORGIAbXClQ/Ivr9i3wzsN88pK9q+3loDWaIBo0Doy0WVoiX 0nTW5pIm65NYOGRbL5ka+/bIpvSDGo8T0UOc5WNvApMk9tV3MD2ptvQLOX37G+3K IXXzpUcDr8fXmVDiGzNPwHeKr4kwOA== -----END CERTIFICATE-----Generated at Sat Apr 26 14:19:00 2025 by rpki-client