$ rpki-client -vvf rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/2601A296AE1011EE92B7161BC4F9AE02.roa File: 2601A296AE1011EE92B7161BC4F9AE02.roa (raw, json) Hash identifier: ruTuAI8tCOCbFuPP+2u83Ib06u3MS/nsClPmyXw7xNc= Subject key identifier: E5:D9:DE:52:B6:B7:14:AF:A7:A9:79:41:D9:3D:CA:34:C6:9C:B3:DD Certificate issuer: /CN=A9116E68/serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C Certificate serial: DE Authority key identifier: 8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/2601A296AE1011EE92B7161BC4F9AE02.roa Signing time: Wed 05 Mar 2025 06:22:14 +0000 ROA not before: Wed 05 Mar 2025 06:22:14 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 150721 IP address blocks: 103.68.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116E68, serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C Validity Not Before: Mar 5 06:22:14 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c7ed96-337e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:70:61:ae:78:19:24:df:19:d3:9d:1c:a1:a2: f7:3b:35:d0:f0:64:b2:e6:88:a9:6f:89:f5:98:c3: b7:82:15:05:a1:84:43:0b:93:83:23:b7:c4:0c:d7: fc:bc:77:10:9c:32:6b:3b:86:30:cd:a7:f8:0f:43: a9:da:7e:0e:9e:ca:97:69:cd:52:8e:96:61:8c:59: 92:70:7b:d5:af:64:cc:4f:e8:9c:fa:88:aa:ad:19: 2d:2c:de:71:4f:97:3a:12:99:f4:1a:f7:a5:23:25: d6:65:d1:3c:7b:73:d7:c8:ee:e1:c5:bd:e9:8e:73: 71:3d:27:92:80:f8:60:7b:6f:13:5a:35:87:20:6a: 90:4c:4f:59:e3:24:76:ba:8e:eb:50:88:25:89:3d: 20:da:a3:c1:60:9c:4b:3a:20:e5:4f:04:be:58:d4: e5:32:12:67:a4:43:4e:7f:0d:57:05:dd:6f:a7:55: 92:81:9a:a1:8f:39:d7:29:b4:9f:47:4f:c9:5b:40: af:ac:ca:49:21:e0:fc:c2:25:60:c1:62:7d:d5:48: 35:b9:a5:d2:dd:28:b1:96:f5:1e:d2:ce:42:aa:f6: c6:e6:2c:b0:c9:7f:fa:d6:dc:b1:27:46:e1:8a:56: ec:f7:56:bd:e2:b1:b0:15:57:ee:ba:ff:b1:3c:87: 25:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D9:DE:52:B6:B7:14:AF:A7:A9:79:41:D9:3D:CA:34:C6:9C:B3:DD X509v3 Authority Key Identifier: keyid:8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/2601A296AE1011EE92B7161BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.234.0/23 Signature Algorithm: sha256WithRSAEncryption 32:54:21:2a:d3:9a:c6:e0:17:f5:d7:20:62:5b:98:ec:77:da: 06:dd:42:cf:a7:b2:8b:9d:32:69:34:a1:8a:db:dc:bf:d9:81: 3c:e0:3e:7a:81:4c:92:54:23:36:a2:58:5e:2d:fe:c8:ac:f8: 4d:5d:4e:ef:09:b0:31:ee:00:73:3b:98:8f:e3:3d:b2:ff:91: da:46:50:35:cf:a2:eb:8d:bf:2c:33:3a:0a:88:8b:1f:11:04: 14:7d:02:3a:51:4a:13:18:ad:76:b3:7f:67:2e:4c:8e:7f:02: 47:70:ef:4a:84:8c:3d:f6:c3:c2:99:b1:78:1f:a8:54:c8:ac: ff:7b:7b:66:03:54:e9:c8:52:7f:2d:b5:54:8d:92:3e:92:84: 2d:0a:05:ac:a7:21:9a:e1:7f:dd:ef:23:7c:0a:50:c6:c9:a1: 01:27:af:7a:8b:16:62:dd:5c:66:e7:d1:0c:36:63:1a:66:05: d2:ee:38:f4:6c:4a:c7:3e:cd:2c:6d:ae:d6:a5:47:b5:0b:1a: ed:2b:b0:ee:12:08:87:f2:25:ab:3f:19:66:79:a7:a6:a7:48: d5:0b:0c:9f:6c:ce:b5:53:23:cf:f6:2a:47:da:22:ca:53:5f: 6c:22:f0:9d:12:25:8a:ea:89:6e:0b:c8:1e:a9:ac:54:06:3d: be:bc:40:dd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZFNjgxMTAvBgNVBAUTKDhCQTk0RTI0NEM4NzAzRTJFMjEyNDU2Qjk4NzFCM0M4 MkQ1MDcwOUMwHhcNMjUwMzA1MDYyMjE0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3ZWQ5Ni0zMzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23BhrngZJN8Z050coaL3OzXQ8GSy5oipb4n1mMO3ghUFoYRDC5ODI7fEDNf8 vHcQnDJrO4Ywzaf4D0Op2n4OnsqXac1SjpZhjFmScHvVr2TMT+ic+oiqrRktLN5x T5c6Epn0GvelIyXWZdE8e3PXyO7hxb3pjnNxPSeSgPhge28TWjWHIGqQTE9Z4yR2 uo7rUIgliT0g2qPBYJxLOiDlTwS+WNTlMhJnpENOfw1XBd1vp1WSgZqhjznXKbSf R0/JW0CvrMpJIeD8wiVgwWJ91Ug1uaXS3SixlvUe0s5CqvbG5iywyX/61tyxJ0bh ilbs91a94rGwFVfuuv+xPIclYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOXZ3lK2 txSvp6l5Qdk9yjTGnLPdMB8GA1UdIwQYMBaAFIupTiRMhwPi4hJFa5hxs8gtUHCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkU2OC9EMkJBQUM0QUFF MEYxMUVFQTdBQzk0MUFDNEY5QUUwMi9pNmxPSkV5SEEtTGlFa1ZybUhHenlDMVFj SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2bE9KRXlIQS1MaUVrVnJtSEd6eUMxUWNKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTZFNjgvRDJCQUFDNEFBRTBGMTFFRUE3QUM5NDFBQzRGOUFFMDIvMjYwMUEyOTZB RTEwMTFFRTkyQjcxNjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnROowDQYJKoZIhvcNAQELBQADggEBADJUISrTmsbgF/XX IGJbmOx32gbdQs+nsoudMmk0oYrb3L/ZgTzgPnqBTJJUIzaiWF4t/sis+E1dTu8J sDHuAHM7mI/jPbL/kdpGUDXPouuNvywzOgqIix8RBBR9AjpRShMYrXazf2cuTI5/ Akdw70qEjD32w8KZsXgfqFTIrP97e2YDVOnIUn8ttVSNkj6ShC0KBaynIZrhf93v I3wKUMbJoQEnr3qLFmLdXGbn0Qw2YxpmBdLuOPRsSsc+zSxtrtalR7ULGu0rsO4S CIfyJas/GWZ5p6anSNULDJ9szrVTI8/2KkfaIspTX2wi8J0SJYrqiW4LyB6prFQG Pb68QN0= -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:34 2025 by rpki-client