$ rpki-client -vvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/271F3E9CFFE011EDA35F8946C4F9AE02.roa File: 271F3E9CFFE011EDA35F8946C4F9AE02.roa (raw, json) Hash identifier: fDZa3ruyI4VluhDMo0toVdiGueuR7vLetk94+XTO6ag= Subject key identifier: 32:55:6C:F5:A5:BD:26:A2:44:F5:E2:3F:00:5C:10:AA:EA:E2:CC:CA Certificate issuer: /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077 Certificate serial: 0430 Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/271F3E9CFFE011EDA35F8946C4F9AE02.roa Signing time: Thu 27 Mar 2025 00:36:59 +0000 ROA not before: Thu 27 Mar 2025 00:36:59 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 150750 IP address blocks: 103.162.136.0/24 maxlen: 24 103.162.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124731, serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077 Validity Not Before: Mar 27 00:36:59 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e49daa-b924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:62:4e:73:d8:a8:42:cb:34:ff:e5:de:97: 91:88:96:df:46:e6:a4:b0:57:73:40:2a:7d:99:51: b2:25:a1:4f:8a:28:73:33:43:26:d2:04:83:16:4d: 72:64:c2:2e:5d:d9:a2:8a:75:74:83:c0:94:cd:59: a8:0a:c2:a7:7c:25:b3:44:e2:fb:c7:07:05:e2:8e: 62:07:d7:0f:a3:32:d5:8b:34:6e:ff:5a:cf:55:51: 06:32:05:5c:1b:81:6b:e3:09:26:89:af:4b:08:d9: 08:c6:73:c2:c8:1c:ed:40:7b:f3:9f:d8:89:41:7a: d2:3e:d3:89:14:d1:db:e4:8a:96:32:92:da:a5:30: cd:62:85:86:de:83:39:51:41:32:97:45:e7:a0:63: 7e:c4:b9:f0:aa:a3:9a:ac:74:71:99:f2:63:a2:29: a7:4c:05:18:aa:a2:e6:e2:52:41:b4:6e:84:89:0d: f3:56:0a:3a:08:a6:b5:68:38:20:04:51:35:7d:e5: 2a:b1:02:9d:74:12:e6:9b:b3:6b:73:d1:a3:e1:2e: 93:86:e2:79:46:39:18:23:9d:d5:0f:db:17:ec:dc: 57:f4:79:4a:53:fe:de:53:62:ba:93:94:15:d3:e7: 06:b5:6d:32:a6:c3:7b:3b:52:ff:97:e8:5d:62:5b: 75:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:55:6C:F5:A5:BD:26:A2:44:F5:E2:3F:00:5C:10:AA:EA:E2:CC:CA X509v3 Authority Key Identifier: keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/271F3E9CFFE011EDA35F8946C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.136.0/23 Signature Algorithm: sha256WithRSAEncryption 79:87:e2:89:53:93:13:2b:59:d2:12:ef:5f:28:d5:c2:0f:52: 9e:61:b4:47:7d:68:28:47:65:19:b9:e4:73:70:59:ae:4e:d6: 63:bf:ce:fe:9d:0a:d4:08:7c:20:6f:98:5c:71:96:b5:d9:7a: e8:6a:4c:5d:94:a9:3d:de:55:3d:4c:15:e2:7d:f1:95:31:d4: 0a:01:e5:38:4c:65:eb:00:ec:41:78:ba:c3:72:a2:16:29:e1: 65:c0:53:24:03:5d:9c:63:74:4f:db:ed:77:53:4e:cc:15:2b: f0:7f:e2:0e:40:ef:81:a0:d3:67:e6:77:1f:8a:13:f5:87:38: 13:9d:0e:ef:40:b6:24:12:d1:47:f4:7d:19:66:5e:68:59:16: 24:45:18:02:3a:9b:90:f7:60:63:48:7f:dc:9d:08:66:dd:66: 16:8a:2e:72:77:3b:cc:e7:e5:16:eb:0c:9c:5d:3e:54:5a:ad: f6:5d:b4:fa:30:31:ee:d9:d9:c5:cc:8a:29:c2:c6:7c:7b:2d: 30:a1:3d:e2:e2:5b:e6:fd:bd:6a:82:c2:1b:75:84:d1:60:bf: f4:f4:a6:38:ec:15:2f:9b:4b:9d:1a:a1:f5:a3:fe:ab:84:e6: c5:9e:32:04:27:de:47:e1:f2:a4:69:25:76:9e:86:bb:69:27: 80:7c:f2:d9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ3MzExMTAvBgNVBAUTKDgwMTcwMkJDOUNERUY3M0RGNzM5QkZCN0Q0QkQyRjdC ODg4NUUwNzcwHhcNMjUwMzI3MDAzNjU5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0OWRhYS1iOTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgtiTnPYqELLNP/l3peRiJbfRuaksFdzQCp9mVGyJaFPiihzM0Mm0gSDFk1y ZMIuXdmiinV0g8CUzVmoCsKnfCWzROL7xwcF4o5iB9cPozLVizRu/1rPVVEGMgVc G4Fr4wkmia9LCNkIxnPCyBztQHvzn9iJQXrSPtOJFNHb5IqWMpLapTDNYoWG3oM5 UUEyl0XnoGN+xLnwqqOarHRxmfJjoimnTAUYqqLm4lJBtG6EiQ3zVgo6CKa1aDgg BFE1feUqsQKddBLmm7Nrc9Gj4S6ThuJ5RjkYI53VD9sX7NxX9HlKU/7eU2K6k5QV 0+cGtW0ypsN7O1L/l+hdYlt1lwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDJVbPWl vSaiRPXiPwBcEKrq4szKMB8GA1UdIwQYMBaAFIAXAryc3vc99zm/t9S9L3uIheB3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDczMS9CNkIwMTRCMjVE NkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6MzNPYi0zMUwwdmU0aUY0 SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCY0N2SnplOXozM09iLTMxTDB2ZTRpRjRIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ3MzEvQjZCMDE0QjI1RDZEMTFFQzhGRjYxMzFFQzRGOUFFMDIvMjcxRjNFOUNG RkUwMTFFREEzNUY4OTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnoogwDQYJKoZIhvcNAQELBQADggEBAHmH4olTkxMrWdIS 718o1cIPUp5htEd9aChHZRm55HNwWa5O1mO/zv6dCtQIfCBvmFxxlrXZeuhqTF2U qT3eVT1MFeJ98ZUx1AoB5ThMZesA7EF4usNyohYp4WXAUyQDXZxjdE/b7XdTTswV K/B/4g5A74Gg02fmdx+KE/WHOBOdDu9AtiQS0Uf0fRlmXmhZFiRFGAI6m5D3YGNI f9ydCGbdZhaKLnJ3O8zn5RbrDJxdPlRarfZdtPowMe7Z2cXMiinCxnx7LTChPeLi W+b9vWqCwht1hNFgv/T0pjjsFS+bS50aofWj/quE5sWeMgQn3kfh8qRpJXaehrtp J4B88tk= -----END CERTIFICATE-----Generated at Sat Apr 26 12:57:41 2025 by rpki-client