$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/5559811AC52311EEAEEC2E3BC4F9AE02.roa File: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (raw, json) Hash identifier: QFhCans14JnqpL9Jwv4rbJ2pg2u9bZu64HPsOXqSkiA= Subject key identifier: 63:DD:2C:18:22:CF:6B:31:5A:F4:35:E7:B9:91:E3:5B:B7:80:8E:62 Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Certificate serial: 0100 Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/5559811AC52311EEAEEC2E3BC4F9AE02.roa Signing time: Mon 23 Dec 2024 03:47:43 +0000 ROA not before: Mon 23 Dec 2024 03:47:43 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 136759 IP address blocks: 103.36.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121995, serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Validity Not Before: Dec 23 03:47:43 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6768dd5f-55b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:96:e4:96:36:c8:16:0f:a9:51:47:38:14:92: 40:29:c0:b0:c5:6a:18:23:6f:df:1d:35:c7:70:6a: e9:03:83:67:36:87:72:b6:ab:cd:92:c0:af:2e:ff: 23:58:61:ab:71:ab:ce:0c:c8:8e:3c:aa:3f:b6:1f: 76:0d:f6:ec:3d:1f:02:9d:3a:79:8b:e5:ab:26:7f: 07:42:66:df:b1:5d:08:79:dc:23:a2:84:6c:cf:b4: 30:73:b8:60:91:c4:1a:f2:b0:9e:11:08:6a:66:87: 5a:48:22:f8:17:48:5e:1e:26:79:e5:d2:ae:21:b7: 6c:87:d3:67:d6:c9:be:07:69:86:3e:64:ea:e8:b0: 8e:71:c0:d9:ed:cf:1f:fc:be:3e:3d:57:ef:1e:8d: 9e:3c:c8:45:98:b2:ab:a2:f5:e5:2c:0e:fd:27:01: 8b:85:0a:61:e5:6a:c3:65:75:dc:c7:e4:a2:55:33: 98:48:56:d4:ad:94:b3:c5:13:aa:72:45:0d:f0:7f: 2e:a1:9c:96:03:c2:e5:06:5d:c5:72:8b:b4:2c:4f: 28:64:9e:a2:37:06:46:78:b7:01:c0:31:03:db:e4: d5:1e:0c:f7:86:89:5c:d2:cb:22:9c:67:ad:ea:3e: 94:46:b1:24:4f:bc:22:09:09:12:15:cc:49:c5:81: 83:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DD:2C:18:22:CF:6B:31:5A:F4:35:E7:B9:91:E3:5B:B7:80:8E:62 X509v3 Authority Key Identifier: keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/5559811AC52311EEAEEC2E3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.36.255.0/24 Signature Algorithm: sha256WithRSAEncryption 07:2e:eb:cc:17:5e:46:fc:86:f8:15:f1:5d:1a:f3:cb:d7:ed: 4c:d1:bd:a8:18:c0:a6:3d:37:46:f0:e2:b0:9e:95:49:12:22: ae:dd:cd:93:a0:77:d0:1f:79:31:65:ee:d9:9e:9b:b0:1e:af: f9:8c:d1:ca:62:d0:25:a0:ee:22:24:f8:f7:b7:e9:66:e1:6a: e0:a3:5d:96:d9:9f:ea:00:1a:22:22:5c:9f:b7:ae:a0:db:75: ea:eb:5b:d0:f8:ac:e2:d5:c6:08:81:f2:7d:cb:19:50:de:a5: ac:23:8a:d6:2d:b0:62:13:23:ae:2c:98:d8:a7:1c:02:76:4a: bc:c8:88:67:4b:e2:bf:d3:4a:c0:e3:fb:5c:46:fc:2f:36:c2: 63:9e:ed:6b:42:c4:0a:ef:02:c7:fe:a8:04:d5:45:33:a1:a3: 37:2b:44:c1:ed:d9:1f:6a:09:54:d5:35:55:ff:71:1a:57:8e: 5d:bf:a4:f1:49:93:13:2a:57:f5:5f:d6:05:42:08:f8:1d:97: 46:99:38:ae:29:07:e4:38:a2:36:47:bb:1e:4e:43:a3:5c:80: 2c:51:1f:7e:a7:77:65:f7:fc:a5:48:b4:ec:27:62:3f:da:69: 11:26:97:3e:7a:11:3f:be:bb:c4:9d:bb:2f:21:5e:06:d1:5a: e8:a2:4f:d9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5OTUxMTAvBgNVBAUTKDIyOUUwNjRBQ0Y0MzJGNjREQUE3MDE3QTY2QkU4QjYx QTk2QjE4NUEwHhcNMjQxMjIzMDM0NzQzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY4ZGQ1Zi01NWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpbkljbIFg+pUUc4FJJAKcCwxWoYI2/fHTXHcGrpA4NnNodytqvNksCvLv8j WGGrcavODMiOPKo/th92DfbsPR8CnTp5i+WrJn8HQmbfsV0IedwjooRsz7Qwc7hg kcQa8rCeEQhqZodaSCL4F0heHiZ55dKuIbdsh9Nn1sm+B2mGPmTq6LCOccDZ7c8f /L4+PVfvHo2ePMhFmLKrovXlLA79JwGLhQph5WrDZXXcx+SiVTOYSFbUrZSzxROq ckUN8H8uoZyWA8LlBl3Fcou0LE8oZJ6iNwZGeLcBwDED2+TVHgz3holc0ssinGet 6j6URrEkT7wiCQkSFcxJxYGDxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGPdLBgi z2sxWvQ157mR41u3gI5iMB8GA1UdIwQYMBaAFCKeBkrPQy9k2qcBema+i2Gpaxha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTk5NS85RTM2QkZBNDRD MTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwyVGFwd0Y2WnI2TFlhbHJH Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwNEdTczlETDJUYXB3RjZacjZMWWFsckdGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE5OTUvOUUzNkJGQTQ0QzE3MTFFRUFBQkYwMzJCQzRGOUFFMDIvNTU1OTgxMUFD NTIzMTFFRUFFRUMyRTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnJP8wDQYJKoZIhvcNAQELBQADggEBAAcu68wXXkb8hvgV 8V0a88vX7UzRvagYwKY9N0bw4rCelUkSIq7dzZOgd9AfeTFl7tmem7Aer/mM0cpi 0CWg7iIk+Pe36WbhauCjXZbZn+oAGiIiXJ+3rqDbderrW9D4rOLVxgiB8n3LGVDe pawjitYtsGITI64smNinHAJ2SrzIiGdL4r/TSsDj+1xG/C82wmOe7WtCxArvAsf+ qATVRTOhozcrRMHt2R9qCVTVNVX/cRpXjl2/pPFJkxMqV/Vf1gVCCPgdl0aZOK4p B+Q4ojZHux5OQ6NcgCxRH36nd2X3/KVItOwnYj/aaREmlz56ET++u8Sduy8hXgbR WuiiT9k= -----END CERTIFICATE-----Generated at Sat Apr 26 08:14:21 2025 by rpki-client