$ rpki-client -vvf rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/962B0D98B14111E5A3B46B15C4F9AE02.roa File: 962B0D98B14111E5A3B46B15C4F9AE02.roa (raw, json) Hash identifier: yQHlkxuzz99/7kQgioJqP7ffoLiy5kq1xOtP6xkgYXI= Subject key identifier: 5E:01:D5:E4:D3:41:66:89:8D:F5:75:76:D7:1F:CD:81:A7:90:3C:0A Certificate issuer: /CN=A9126285/serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Certificate serial: 2721 Authority key identifier: BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/962B0D98B14111E5A3B46B15C4F9AE02.roa Signing time: Mon 14 Apr 2025 15:52:34 +0000 ROA not before: Mon 14 Apr 2025 15:52:34 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 133950 IP address blocks: 103.49.205.0/24 maxlen: 24 103.55.179.0/24 maxlen: 24 103.87.121.0/24 maxlen: 24 103.96.117.0/24 maxlen: 24 2001:df2:8400::/48 maxlen: 48 2001:df2:8401::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10017 (0x2721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126285, serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Validity Not Before: Apr 14 15:52:34 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67fd2f42-2537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:54:14:cb:ca:67:d1:51:b8:af:f5:14:2c: e4:a4:64:0c:7d:5a:e3:56:c5:e4:94:5c:18:e5:de: a6:41:1d:5a:b7:2b:92:f2:db:a0:2c:3f:4c:03:8a: db:be:d8:98:69:fc:0a:5c:9c:79:97:90:16:f4:4c: 23:e6:f6:23:82:75:ca:41:ac:bf:9f:4d:3c:80:10: 56:e0:f0:d3:0e:be:da:3a:24:6e:81:17:c8:03:0d: e9:ce:dc:9e:1b:f6:70:9e:bf:21:5f:79:a8:d2:62: 66:fc:f1:58:84:12:a4:45:df:17:4b:62:af:db:bd: 75:3c:81:89:70:96:bb:08:c7:4d:d0:05:41:6d:d4: 68:aa:97:ca:12:3e:9a:77:a1:09:51:33:ca:8a:31: 31:05:71:1b:38:8c:55:38:0c:ae:59:9b:e8:38:12: 8a:1c:62:95:0e:a7:16:51:06:71:19:38:3a:f4:96: fa:55:d4:8b:03:62:19:f4:cd:30:dc:7b:88:2a:ab: 64:de:b2:e4:cf:05:34:30:24:4b:21:09:bb:a4:1a: a0:84:c5:20:55:71:9e:ab:62:52:f8:59:a5:b7:52: 26:51:8c:84:d2:2b:91:f2:f4:00:58:1a:a6:56:9d: e9:4f:1d:73:93:10:d5:c3:d5:2f:8e:fa:07:6a:89: 33:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:01:D5:E4:D3:41:66:89:8D:F5:75:76:D7:1F:CD:81:A7:90:3C:0A X509v3 Authority Key Identifier: keyid:BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/962B0D98B14111E5A3B46B15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.49.205.0/24 103.55.179.0/24 103.87.121.0/24 103.96.117.0/24 IPv6: 2001:df2:8400::/47 Signature Algorithm: sha256WithRSAEncryption 7b:81:dc:e0:ef:cc:ab:29:e3:27:5e:47:51:ab:5b:07:0d:94: 70:cc:ac:c3:82:8e:5a:25:04:62:f6:7b:08:b2:db:38:89:ff: a2:75:a3:89:f7:7c:d9:55:69:62:c7:54:dc:4b:95:cc:cb:07: b1:5b:2a:94:f3:89:01:df:7b:fa:2c:1b:c0:3f:a9:83:da:b5: f8:35:8c:5c:df:f5:b7:f8:33:59:6e:ea:57:88:91:34:5d:41: 65:89:c0:eb:2f:77:6f:4a:50:38:57:6f:df:74:a8:df:43:92: 1c:86:1f:cc:56:0a:42:65:a8:6e:57:d2:a7:1e:af:fb:7c:e1: 5d:95:a6:99:75:0d:b0:c7:27:c6:c0:fb:1f:69:a1:70:0a:e7: f7:6a:c1:ec:24:a9:eb:57:2b:3d:66:a0:21:92:fd:0c:55:9a: a3:38:0b:72:3b:9b:b1:5c:34:de:60:39:6d:91:48:b3:1f:f7: a8:00:af:47:00:9f:f5:8c:24:41:42:95:02:1a:5e:20:df:7b: f0:89:fa:89:f5:54:8f:cd:ff:ef:5f:c6:ab:4c:52:08:5b:b5: 4b:e6:b0:a0:25:34:e5:2d:ce:16:94:85:c8:a5:87:bd:1c:4e: 04:6c:aa:bb:09:59:a1:7d:3a:b0:de:89:ff:9b:d2:93:79:46: 96:71:27:de -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICJyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyODUxMTAvBgNVBAUTKEJDREJENzFEN0JBMjhERUJDNTkzOUY1Q0NBNzY2RUNB OUY3NTYzMTAwHhcNMjUwNDE0MTU1MjM0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZkMmY0Mi0yNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjNUFMvKZ9FRuK/1FCzkpGQMfVrjVsXklFwY5d6mQR1atyuS8tugLD9MA4rb vtiYafwKXJx5l5AW9Ewj5vYjgnXKQay/n008gBBW4PDTDr7aOiRugRfIAw3pztye G/Zwnr8hX3mo0mJm/PFYhBKkRd8XS2Kv2711PIGJcJa7CMdN0AVBbdRoqpfKEj6a d6EJUTPKijExBXEbOIxVOAyuWZvoOBKKHGKVDqcWUQZxGTg69Jb6VdSLA2IZ9M0w 3HuIKqtk3rLkzwU0MCRLIQm7pBqghMUgVXGeq2JS+Fmlt1ImUYyE0iuR8vQAWBqm Vp3pTx1zkxDVw9UvjvoHaokz/wIDAQABo4ICuDCCArQwHQYDVR0OBBYEFF4B1eTT QWaJjfV1dtcfzYGnkDwKMB8GA1UdIwQYMBaAFLzb1x17oo3rxZOfXMp2bsqfdWMQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI4NS9CMjYxMEI1OEMz RjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpldkZrNTljeW5adXlwOTFZ eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZOdlhIWHVpamV2Rms1OWN5blp1eXA5MVl4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyODUvQjI2MTBCNThDM0YyMTFFNEI5NjU3NTE0QzRGOUFFMDIvOTYyQjBEOThC MTQxMTFFNUEzQjQ2QjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMB4EAgABMBgDBABnMc0DBABnN7MDBABnV3kDBABnYHUwDwQCAAIwCQMHASAB DfKEADANBgkqhkiG9w0BAQsFAAOCAQEAe4Hc4O/MqynjJ15HUatbBw2UcMysw4KO WiUEYvZ7CLLbOIn/onWjifd82VVpYsdU3EuVzMsHsVsqlPOJAd97+iwbwD+pg9q1 +DWMXN/1t/gzWW7qV4iRNF1BZYnA6y93b0pQOFdv33So30OSHIYfzFYKQmWoblfS px6v+3zhXZWmmXUNsMcnxsD7H2mhcArn92rB7CSp61crPWagIZL9DFWaozgLcjub sVw03mA5bZFIsx/3qACvRwCf9YwkQUKVAhpeIN978In6ifVUj83/71/Gq0xSCFu1 S+awoCU05S3OFpSFyKWHvRxOBGyquwlZoX06sN6J/5vSk3lGlnEn3g== -----END CERTIFICATE-----Generated at Sat Apr 26 08:16:07 2025 by rpki-client