$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/9B39DA4A17B611F0949B3513C4F9AE02.roa File: 9B39DA4A17B611F0949B3513C4F9AE02.roa (raw, json) Hash identifier: 7anCK5rKr6TDez2KdlHaScR0U7zVEjfA29+yLesnrHU= Subject key identifier: D7:53:B6:64:20:97:6F:75:5F:14:EE:89:F9:B2:EE:95:37:2D:7D:02 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 0380 Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/9B39DA4A17B611F0949B3513C4F9AE02.roa Signing time: Sat 12 Apr 2025 15:55:51 +0000 ROA not before: Sat 12 Apr 2025 15:55:51 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 210110 IP address blocks: 103.91.219.0/24 maxlen: 24 103.95.207.0/24 maxlen: 24 103.101.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 896 (0x380) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Apr 12 15:55:51 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67fa8d06-5e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:c4:7f:8b:8d:16:9b:e9:89:2f:6c:c1:b5: cd:a1:a4:e9:83:64:2d:5e:a7:86:29:0f:1f:5a:a0: 21:3f:d7:07:fd:13:de:61:ad:4b:b0:55:c9:12:71: cc:fa:98:3a:91:22:2a:11:e4:0d:8b:49:aa:bd:3f: 52:a8:e9:45:9f:29:2d:28:30:1f:1a:e2:ea:15:f0: 32:a2:5b:62:38:dc:63:b8:d7:ac:c7:6d:e9:64:f9: 2d:65:16:a2:92:32:5d:81:8a:6f:64:84:72:c5:d1: ea:1c:11:d5:8a:85:ba:6e:c4:8c:57:93:1a:98:ad: f8:d1:ce:75:8f:47:96:e4:c8:d0:98:1d:b1:10:56: e6:b4:54:55:b7:5c:59:f3:f7:c9:2f:77:ef:d2:d5: 40:d4:3d:ca:43:52:24:6e:81:bf:5f:70:05:ea:dd: a0:cf:87:1d:38:d1:96:c0:be:2b:c4:16:bb:1d:58: 74:b9:9e:6e:b9:d3:5a:8d:ec:9c:2c:9d:a3:5d:f4: 0d:84:5d:2c:e8:69:3b:90:28:31:f8:60:73:13:88: 98:0f:f5:d9:10:d6:fe:24:63:c2:ed:5e:36:af:ad: de:36:cc:c1:a0:c5:7c:c3:10:c6:67:59:a8:02:cf: 3a:97:c6:03:50:2e:5f:94:f0:da:71:7d:1e:0c:a4: 61:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:53:B6:64:20:97:6F:75:5F:14:EE:89:F9:B2:EE:95:37:2D:7D:02 X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/9B39DA4A17B611F0949B3513C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.219.0/24 103.95.207.0/24 103.101.153.0/24 Signature Algorithm: sha256WithRSAEncryption 90:c9:a3:9a:7f:c6:f1:bd:61:f9:ec:3b:a5:e7:c2:df:a1:23: 86:77:bb:a8:47:eb:70:9e:d9:e8:08:d4:fe:c3:0d:b6:c5:dd: a1:b3:3d:ee:5d:13:c2:98:e7:d3:62:b5:a0:ca:22:fd:17:55: ab:58:3d:a7:f9:67:ac:9c:5b:29:7e:b2:9c:2c:db:b5:dc:08: 77:50:fe:c0:b4:fa:2f:50:82:7a:e9:98:a0:50:b8:ff:03:6f: ae:2b:54:2c:9e:75:77:af:b9:e7:27:e0:b0:ec:1d:ce:42:f1: 20:b4:30:2e:29:f0:3b:9a:51:7a:00:4e:15:8a:6a:7b:23:c2: d4:5f:3c:43:52:ef:c3:82:99:0c:fc:57:c5:5f:18:fc:be:31: 1f:8f:84:f1:79:49:54:40:de:8c:43:3a:22:34:35:f5:7e:4d: 66:7c:36:9e:0d:da:a1:9a:af:3c:f7:5d:88:13:a5:ad:14:42: 99:ae:2d:77:0d:ee:82:55:79:7c:a8:37:01:19:d0:28:f8:ba: 30:ab:11:ea:fe:a3:0d:06:70:c7:7b:0b:92:bc:6e:76:91:98: 43:b1:05:ce:d5:d3:92:eb:14:45:da:65:55:a7:f7:01:40:7d: 4a:81:8e:49:7c:c8:25:26:e0:6c:ae:4e:83:0c:23:53:d1:99: dd:d0:45:25 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjUwNDEyMTU1NTUxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZhOGQwNi01ZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArczEf4uNFpvpiS9swbXNoaTpg2QtXqeGKQ8fWqAhP9cH/RPeYa1LsFXJEnHM +pg6kSIqEeQNi0mqvT9SqOlFnyktKDAfGuLqFfAyoltiONxjuNesx23pZPktZRai kjJdgYpvZIRyxdHqHBHVioW6bsSMV5MamK340c51j0eW5MjQmB2xEFbmtFRVt1xZ 8/fJL3fv0tVA1D3KQ1IkboG/X3AF6t2gz4cdONGWwL4rxBa7HVh0uZ5uudNajeyc LJ2jXfQNhF0s6Gk7kCgx+GBzE4iYD/XZENb+JGPC7V42r63eNszBoMV8wxDGZ1mo As86l8YDUC5flPDacX0eDKRhXQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNdTtmQg l291XxTuifmy7pU3LX0CMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjdGQzIvNUUzMEJGNzBCQkE2MTFFQ0JBRjQzMTU2QzRGOUFFMDIvOUIzOURBNEEx N0I2MTFGMDk0OUIzNTEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnW9sDBABnX88DBABnZZkwDQYJKoZIhvcNAQELBQADggEB AJDJo5p/xvG9YfnsO6Xnwt+hI4Z3u6hH63Ce2egI1P7DDbbF3aGzPe5dE8KY59Ni taDKIv0XVatYPaf5Z6ycWyl+spws27XcCHdQ/sC0+i9QgnrpmKBQuP8Db64rVCye dXevuecn4LDsHc5C8SC0MC4p8DuaUXoAThWKansjwtRfPENS78OCmQz8V8VfGPy+ MR+PhPF5SVRA3oxDOiI0NfV+TWZ8Np4N2qGarzz3XYgTpa0UQpmuLXcN7oJVeXyo NwEZ0Cj4ujCrEer+ow0GcMd7C5K8bnaRmEOxBc7V05LrFEXaZVWn9wFAfUqBjkl8 yCUm4GyuToMMI1PRmd3QRSU= -----END CERTIFICATE-----Generated at Sat Apr 26 08:00:20 2025 by rpki-client