$ rpki-client -vvf rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/05F74AC4B99C11ECA1344C85C4F9AE02.roa File: 05F74AC4B99C11ECA1344C85C4F9AE02.roa (raw, json) Hash identifier: 8hUucYPHQ79ZY6uDpo1eHlNtJ78CYgic7xieJwMDGwU= Subject key identifier: A9:09:C7:D9:67:A3:DB:7E:85:D1:61:97:95:C6:EE:93:34:DB:2F:4F Certificate issuer: /CN=A9118E3A/serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Certificate serial: 0339 Authority key identifier: 1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/05F74AC4B99C11ECA1344C85C4F9AE02.roa Signing time: Mon 07 Apr 2025 01:05:54 +0000 ROA not before: Mon 07 Apr 2025 01:05:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149775 IP address blocks: 103.186.22.0/23 maxlen: 23 103.186.22.0/24 maxlen: 24 103.186.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 825 (0x339) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118E3A, serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Validity Not Before: Apr 7 01:05:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f324f1-8cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5b:38:51:0a:49:ac:a0:69:d0:b3:08:eb:b5: 27:39:6b:29:28:bc:93:eb:32:a9:58:36:41:58:ef: 8b:61:c4:64:e3:1e:fb:4e:68:03:07:2f:d6:4e:4b: 40:fc:4a:ab:85:db:44:89:db:4e:29:94:5c:93:af: 66:c6:eb:93:53:e8:ab:4d:3c:cb:47:2c:5a:91:de: 09:23:72:cc:7f:e0:94:72:0c:ac:72:f2:8e:c0:11: bc:56:22:e8:ab:b0:a3:64:d5:cf:e4:cd:9d:d5:1a: 80:f3:c3:80:83:8a:35:de:e3:53:b0:95:ad:f9:53: a8:f7:a9:2f:40:4e:4a:67:a5:a2:f3:fe:66:2c:31: 3b:38:be:53:7e:d8:89:15:02:4a:e6:31:ab:5d:6d: 12:4f:9d:50:c7:73:16:81:ce:0a:f3:23:31:0d:8d: 94:ea:36:80:78:5c:a9:d9:fd:6a:f6:33:db:64:01: a7:d1:60:a9:ec:13:bb:f6:53:47:c9:5a:12:48:94: 81:90:aa:af:96:83:b6:24:30:4c:ed:8f:8f:ae:55: b7:7a:56:e6:27:02:52:8a:67:ad:16:73:bd:43:5e: 61:5d:f2:27:c0:6c:84:66:68:b6:f9:79:f2:c4:8e: 1d:b1:91:02:71:c3:39:fc:34:aa:7a:6b:73:03:c0: f3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:09:C7:D9:67:A3:DB:7E:85:D1:61:97:95:C6:EE:93:34:DB:2F:4F X509v3 Authority Key Identifier: keyid:1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/05F74AC4B99C11ECA1344C85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.22.0/23 Signature Algorithm: sha256WithRSAEncryption 39:5c:7a:b0:c9:55:50:72:66:c5:24:94:3a:c0:db:b6:1c:c3: cc:3d:52:a2:6f:4c:89:65:3f:83:95:bf:7d:42:7f:41:1d:0f: 59:69:53:7b:95:f4:5b:d3:cb:c0:d3:35:83:3c:ea:08:33:14: 64:8b:57:7b:6b:b8:d3:70:a9:ad:9f:74:67:4a:86:82:a7:22: 01:41:54:8f:f1:cb:26:65:b6:9a:db:01:62:c0:39:18:ae:63: 6d:4e:47:70:1a:38:6f:84:9b:43:4a:2b:66:57:6c:a9:57:f8: fb:ad:f9:6b:0f:cf:61:a3:78:04:ad:32:d6:b0:d5:cf:8d:9d: 77:29:3c:48:85:05:70:40:af:93:0a:d2:16:95:38:86:52:d1: ab:2e:42:1a:24:a6:b5:2a:ad:3b:fb:40:29:e0:04:55:37:52: dd:e3:f2:06:2d:74:95:59:88:5c:73:ea:e1:97:73:c6:15:3d: b1:ae:80:18:da:fd:5a:27:ae:1c:14:60:10:5c:cb:af:53:d2: 73:38:3e:01:cd:84:3d:75:f6:a2:7a:8b:20:02:e7:4b:8e:10: 36:5f:f8:9d:3d:cd:fc:d0:cb:c7:14:50:bf:4d:67:78:35:59: 22:92:be:e5:4c:3c:74:97:39:c7:1c:a4:25:99:a3:a4:a0:02: eb:bb:85:d5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFM0ExMTAvBgNVBAUTKDFENjQyRUQyOEVDRUE1RjJBQUNGMzQ3QjE2MDk3RjlE OTI0MUQ3NkQwHhcNMjUwNDA3MDEwNTU0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YzMjRmMS04Y2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ls4UQpJrKBp0LMI67UnOWspKLyT6zKpWDZBWO+LYcRk4x77TmgDBy/WTktA /EqrhdtEidtOKZRck69mxuuTU+irTTzLRyxakd4JI3LMf+CUcgyscvKOwBG8ViLo q7CjZNXP5M2d1RqA88OAg4o13uNTsJWt+VOo96kvQE5KZ6Wi8/5mLDE7OL5TftiJ FQJK5jGrXW0ST51Qx3MWgc4K8yMxDY2U6jaAeFyp2f1q9jPbZAGn0WCp7BO79lNH yVoSSJSBkKqvloO2JDBM7Y+PrlW3elbmJwJSimetFnO9Q15hXfInwGyEZmi2+Xny xI4dsZECccM5/DSqemtzA8DzOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKkJx9ln o9t+hdFhl5XG7pM02y9PMB8GA1UdIwQYMBaAFB1kLtKOzqXyqs80exYJf52SQddt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEUzQS9BN0FCMEE4QUI5 OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3BmS3F6elI3RmdsX25aSkIx MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXUXUwbzdPcGZLcXp6UjdGZ2xfblpKQjEyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MThFM0EvQTdBQjBBOEFCOTk4MTFFQzhEQkU5MjgxQzRGOUFFMDIvMDVGNzRBQzRC OTlDMTFFQ0ExMzQ0Qzg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnuhYwDQYJKoZIhvcNAQELBQADggEBADlcerDJVVByZsUk lDrA27Ycw8w9UqJvTIllP4OVv31Cf0EdD1lpU3uV9FvTy8DTNYM86ggzFGSLV3tr uNNwqa2fdGdKhoKnIgFBVI/xyyZltprbAWLAORiuY21OR3AaOG+Em0NKK2ZXbKlX +Put+WsPz2GjeAStMtaw1c+NnXcpPEiFBXBAr5MK0haVOIZS0asuQhokprUqrTv7 QCngBFU3Ut3j8gYtdJVZiFxz6uGXc8YVPbGugBja/VonrhwUYBBcy69T0nM4PgHN hD119qJ6iyAC50uOEDZf+J09zfzQy8cUUL9NZ3g1WSKSvuVMPHSXOcccpCWZo6Sg Auu7hdU= -----END CERTIFICATE-----Generated at Sat Apr 26 05:51:49 2025 by rpki-client