$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/E3A9EC4C025011EFB3CEFA09C4F9AE02.roa File: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (raw, json) Hash identifier: BWss25KwJ6L54iiEaPMsjplWvsMA0hnuvwGf8Bs1rfY= Subject key identifier: 6B:7B:0A:CC:4C:95:85:D3:E3:99:1D:66:A0:38:33:CE:CA:25:E1:00 Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Certificate serial: C1 Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/E3A9EC4C025011EFB3CEFA09C4F9AE02.roa Signing time: Fri 11 Apr 2025 05:42:31 +0000 ROA not before: Fri 11 Apr 2025 05:42:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 147023 IP address blocks: 103.164.182.0/23 maxlen: 23 103.164.182.0/24 maxlen: 24 103.164.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Validity Not Before: Apr 11 05:42:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f8abc7-7fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ba:0d:34:ad:4d:9a:0d:db:5c:72:43:da:a9: 45:1b:10:bd:aa:1f:70:6a:a1:77:31:96:77:61:d9: 29:c0:d6:eb:f6:92:1d:4b:52:56:af:fd:3f:5e:a3: 98:db:9d:81:89:90:2a:b8:c7:cb:03:98:2d:ea:2f: 3a:a6:2d:4b:3c:f0:ab:73:39:6a:d6:4e:91:1b:44: 8a:19:b7:cd:43:65:13:ec:3d:50:3b:83:2c:4d:7b: 25:7a:74:c2:9e:d3:7b:9d:ec:02:bf:38:59:3d:7c: 4e:bb:3f:35:f3:34:07:2d:5e:49:c5:7d:d3:10:78: 51:2b:f2:54:2c:b6:65:21:c4:f9:63:0b:6a:b5:26: 2a:f1:f5:0a:ed:9a:d4:2d:0b:90:25:85:f4:da:7e: ad:a7:70:88:fb:a7:43:03:60:b8:9e:93:9d:5f:fc: 6a:6c:d4:40:ff:af:0b:5c:0c:eb:05:e5:ed:50:e8: b9:af:74:cb:e4:c3:19:79:97:db:e7:39:4d:be:7a: 80:ef:5a:9f:ab:39:d1:bc:0f:09:7c:2a:a4:2e:32: fa:c0:48:da:e9:9e:28:ba:84:56:d1:60:f9:27:c4: c1:93:72:2a:d3:19:81:1f:57:59:70:ca:cd:d1:fa: e6:bd:7c:62:2a:f6:51:51:58:36:6e:54:4e:8a:21: 54:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7B:0A:CC:4C:95:85:D3:E3:99:1D:66:A0:38:33:CE:CA:25:E1:00 X509v3 Authority Key Identifier: keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/E3A9EC4C025011EFB3CEFA09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.182.0/23 Signature Algorithm: sha256WithRSAEncryption 82:d6:33:fc:77:9f:2d:f4:37:0d:d0:ee:c9:e6:aa:1a:aa:6f: da:0b:da:a7:7f:91:34:66:61:d8:58:fa:7c:ec:81:b5:66:b5: b5:b7:e1:67:80:d1:48:b5:3e:79:0f:26:5f:2d:c0:92:30:f3: 8d:81:7e:a0:98:4f:90:36:2d:b5:d9:b3:c3:9c:e0:16:ae:d5: 1c:5f:2d:33:2b:82:8a:3f:30:8c:f0:33:95:21:74:9d:cb:d6: 34:7b:ea:c9:e2:46:b7:f5:7f:5e:b1:06:0c:48:3d:20:75:7e: be:4b:ce:45:1c:4b:c1:b7:a4:68:37:65:a5:82:43:85:8a:c3: a6:20:9d:0f:38:e6:71:b5:73:9e:16:58:df:55:07:d3:06:e7: 81:8b:2a:82:7a:02:4e:48:ee:26:e1:88:5b:a1:fd:12:0a:98: e7:b3:23:c6:0d:ac:55:50:6a:cb:8d:55:e1:ec:21:73:b5:04: 38:eb:74:71:00:35:9f:30:35:37:d9:92:61:5a:c6:8c:db:da: 80:ea:f6:fc:01:74:bf:88:e4:1d:75:21:f2:dc:1e:35:ab:11: 97:91:c4:78:1a:f5:ed:c8:29:05:00:1f:43:8d:23:64:54:b7: 11:e1:6b:9b:00:b7:02:bc:49:3c:7d:6b:20:95:f6:23:48:17: 35:3d:68:d1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKDFDN0IzMDU3NkVCMTg1MDhFRjI3NzlDNEVGNUJCNTcy NDkyREQyOTkwHhcNMjUwNDExMDU0MjMxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y4YWJjNy03ZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsroNNK1Nmg3bXHJD2qlFGxC9qh9waqF3MZZ3YdkpwNbr9pIdS1JWr/0/XqOY 252BiZAquMfLA5gt6i86pi1LPPCrczlq1k6RG0SKGbfNQ2UT7D1QO4MsTXslenTC ntN7newCvzhZPXxOuz818zQHLV5JxX3TEHhRK/JULLZlIcT5YwtqtSYq8fUK7ZrU LQuQJYX02n6tp3CI+6dDA2C4npOdX/xqbNRA/68LXAzrBeXtUOi5r3TL5MMZeZfb 5zlNvnqA71qfqznRvA8JfCqkLjL6wEja6Z4ouoRW0WD5J8TBk3Iq0xmBH1dZcMrN 0frmvXxiKvZRUVg2blROiiFU5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGt7CsxM lYXT45kdZqA4M87KJeEAMB8GA1UdIwQYMBaAFBx7MFdusYUI7yd5xO9btXJJLdKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS9BNjkxNUIzNDAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhRanZKM25FNzF1MWNra3Qw cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hIc3dWMjZ4aFFqdkozbkU3MXUxY2trdDBway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUY1Q0EvQTY5MTVCMzQwMjRGMTFFRkFDNjVGNTc3QzRGOUFFMDIvRTNBOUVDNEMw MjUwMTFFRkIzQ0VGQTA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnpLYwDQYJKoZIhvcNAQELBQADggEBAILWM/x3ny30Nw3Q 7snmqhqqb9oL2qd/kTRmYdhY+nzsgbVmtbW34WeA0Ui1PnkPJl8twJIw842BfqCY T5A2LbXZs8Oc4Bau1RxfLTMrgoo/MIzwM5UhdJ3L1jR76sniRrf1f16xBgxIPSB1 fr5LzkUcS8G3pGg3ZaWCQ4WKw6YgnQ845nG1c54WWN9VB9MG54GLKoJ6Ak5I7ibh iFuh/RIKmOezI8YNrFVQasuNVeHsIXO1BDjrdHEANZ8wNTfZkmFaxozb2oDq9vwB dL+I5B11IfLcHjWrEZeRxHga9e3IKQUAH0ONI2RUtxHha5sAtwK8STx9ayCV9iNI FzU9aNE= -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:29 2025 by rpki-client