$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa File: 743770A0C06011EE882BC34AC4F9AE02.roa (raw, json) Hash identifier: wDUkAV/G8nH6a42xA1jspBcH2CyrvgBJPhHTMVF0vF4= Subject key identifier: 82:1D:4D:B6:ED:45:89:2E:8A:63:86:68:34:64:5C:6E:BA:DA:54:FD Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 14FA Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa Signing time: Sat 12 Apr 2025 16:55:39 +0000 ROA not before: Sat 12 Apr 2025 16:55:39 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 9541 IP address blocks: 103.209.125.0/24 maxlen: 24 103.209.126.0/24 maxlen: 24 103.209.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5370 (0x14fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Apr 12 16:55:39 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67fa9b0b-8a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:86:95:c3:30:da:f5:87:9f:9b:55:1f:87:0e: ee:de:55:3a:a1:30:85:58:43:07:de:ab:d8:06:ed: c1:31:8a:46:3f:00:d7:27:00:78:15:57:11:da:de: a1:2e:7d:8f:fb:26:12:0f:d4:89:c5:33:17:90:e4: b5:03:1a:59:da:74:4c:96:72:08:63:05:ba:d5:ed: 7e:4b:25:17:de:15:99:5e:a6:a0:11:1f:c7:1f:b9: 01:c1:d8:ff:96:0a:8c:37:60:21:16:e1:95:d3:3d: b6:6b:e4:bb:4c:b8:64:0e:d8:62:a2:9a:5e:55:de: 9c:55:3e:23:98:04:b3:25:84:3a:63:65:0c:f6:8b: a6:79:02:a5:af:42:10:4a:a9:0a:f0:f9:28:07:4e: df:05:02:8e:01:eb:4e:fb:32:fa:42:00:c4:5a:42: c8:c6:dc:42:1b:c1:2a:83:09:67:b4:7b:78:67:57: 9a:0c:1c:7c:47:be:ed:1f:c0:60:34:26:3f:e3:53: b8:39:46:8b:6e:c0:ba:c1:c5:62:21:a7:d3:27:87: af:6e:e8:52:11:c6:82:e9:10:54:3c:e5:8a:8d:eb: 0e:86:d9:66:35:37:71:3e:f8:8c:c4:98:dd:c0:92: ac:1b:9b:b9:69:eb:40:7d:0a:79:50:81:41:fb:07: b7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1D:4D:B6:ED:45:89:2E:8A:63:86:68:34:64:5C:6E:BA:DA:54:FD X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.125.0-103.209.127.255 Signature Algorithm: sha256WithRSAEncryption 1a:15:4d:bb:41:d9:3b:ef:71:5f:e1:79:41:36:80:f3:0e:0a: 51:b7:b6:5c:62:4c:05:44:5e:0a:91:55:dc:a1:db:91:28:de: 08:fb:d7:c9:45:27:1a:9a:2d:53:fc:86:ef:bd:f1:df:e0:49: 5e:9c:0b:e4:45:07:83:93:0d:1c:63:c2:7f:88:de:4c:6e:f3: 70:cc:a5:48:79:16:28:2d:ec:cb:67:3f:db:0e:a2:89:86:97: b8:16:78:e2:1a:3d:4c:d4:dc:a3:9d:4e:89:56:24:6f:97:32: ff:37:4b:a0:d8:87:cc:0c:42:96:fc:0f:5d:4f:e8:dc:2a:87: c3:5b:46:f5:32:d7:d5:6f:d6:c6:69:f0:6c:fe:60:71:7b:5e: c7:83:4a:cc:bc:54:57:49:2d:8a:08:29:ce:f1:b7:63:98:26: 28:dc:06:c0:84:38:c0:de:c9:59:22:e9:f7:55:cf:b0:11:19: f4:a6:3c:56:99:07:0b:e8:fe:dd:2d:2c:2c:81:90:60:32:1d: 73:79:00:ef:cd:e3:f6:36:30:29:56:6d:ce:03:2a:0d:1b:74: 0b:e2:71:02:95:6f:42:f8:c1:d9:cc:06:f5:b8:ce:a2:7f:ee: 8f:84:d2:65:34:c6:95:91:b0:15:be:9a:f2:84:00:86:a0:f1: c7:b7:71:6e -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICFPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjUwNDEyMTY1NTM5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZhOWIwYi04YTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4aVwzDa9Yefm1Ufhw7u3lU6oTCFWEMH3qvYBu3BMYpGPwDXJwB4FVcR2t6h Ln2P+yYSD9SJxTMXkOS1AxpZ2nRMlnIIYwW61e1+SyUX3hWZXqagER/HH7kBwdj/ lgqMN2AhFuGV0z22a+S7TLhkDthioppeVd6cVT4jmASzJYQ6Y2UM9oumeQKlr0IQ SqkK8PkoB07fBQKOAetO+zL6QgDEWkLIxtxCG8EqgwlntHt4Z1eaDBx8R77tH8Bg NCY/41O4OUaLbsC6wcViIafTJ4evbuhSEcaC6RBUPOWKjesOhtlmNTdxPviMxJjd wJKsG5u5aetAfQp5UIFB+we3+QIDAQABo4ICnTCCApkwHQYDVR0OBBYEFIIdTbbt RYkuimOGaDRkXG662lT9MB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzAxRDUvRDRCRTAwRDQ2M0U1MTFFOEI1Q0ZFNDFBQzRGOUFFMDIvNzQzNzcwQTBD MDYwMTFFRTg4MkJDMzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGfRfQMEB2fRADANBgkqhkiG9w0BAQsFAAOCAQEAGhVN u0HZO+9xX+F5QTaA8w4KUbe2XGJMBUReCpFV3KHbkSjeCPvXyUUnGpotU/yG773x 3+BJXpwL5EUHg5MNHGPCf4jeTG7zcMylSHkWKC3sy2c/2w6iiYaXuBZ44ho9TNTc o51OiVYkb5cy/zdLoNiHzAxClvwPXU/o3CqHw1tG9TLX1W/WxmnwbP5gcXtex4NK zLxUV0ktiggpzvG3Y5gmKNwGwIQ4wN7JWSLp91XPsBEZ9KY8VpkHC+j+3S0sLIGQ YDIdc3kA783j9jYwKVZtzgMqDRt0C+JxApVvQvjB2cwG9bjOon/uj4TSZTTGlZGw Fb6a8oQAhqDxx7dxbg== -----END CERTIFICATE-----Generated at Sat Apr 26 05:56:33 2025 by rpki-client