$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B2B24A4221D711EB9CFAC46EC4F9AE02.roa File: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (raw, json) Hash identifier: WopX8EPUj9ND6qcXFWft9CyuoZSX2+UxPu40b2aj+pc= Subject key identifier: 15:2F:72:09:D1:2F:F8:81:27:84:1C:C5:A6:BE:A0:31:45:04:A8:F1 Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Certificate serial: 0F73 Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B2B24A4221D711EB9CFAC46EC4F9AE02.roa Signing time: Thu 06 Mar 2025 18:06:21 +0000 ROA not before: Thu 06 Mar 2025 18:06:21 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 135386 IP address blocks: 103.133.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3955 (0xf73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Validity Not Before: Mar 6 18:06:21 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c9e41d-050a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:3b:4a:b8:1a:f9:ca:06:76:c7:4c:6f:94: cb:51:7a:62:fd:cb:e9:bf:0c:6f:08:a7:a0:f5:6d: 1a:97:b3:7e:e9:52:ac:b4:7e:a5:88:46:35:30:eb: 0f:d1:ed:24:0e:7e:05:e4:2b:3a:10:6b:98:72:cc: 94:88:23:2c:e9:bb:27:2d:d3:26:62:e7:b0:36:b1: ff:9f:47:f4:cc:cc:e0:96:3d:20:30:eb:63:78:b6: 3b:41:b7:e2:dd:1a:c1:25:4c:7d:88:f2:07:64:02: db:69:1a:36:51:d0:0c:53:f2:a7:0b:07:43:8a:75: 8a:0a:0f:49:20:92:55:a5:ba:2a:aa:37:ab:e3:51: 9d:02:b6:5a:33:20:ef:92:77:40:54:06:5e:3c:45: ef:5f:02:f9:c1:d6:30:de:23:52:96:75:c0:17:ac: b8:88:d0:5d:35:98:1e:6a:b4:32:e2:6e:34:c2:77: a4:d5:2f:62:8c:dd:53:8d:cc:94:09:7d:d8:9c:26: 7a:c9:58:37:3c:97:38:12:71:ab:48:a0:0d:66:1f: 58:b3:cf:5f:d4:99:45:48:60:78:60:73:42:df:34: d9:b0:21:d1:87:cc:4b:bd:b6:85:c0:8b:dd:55:12: bd:db:4b:20:af:b9:05:d3:63:6c:02:dd:c9:39:e6: 95:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2F:72:09:D1:2F:F8:81:27:84:1C:C5:A6:BE:A0:31:45:04:A8:F1 X509v3 Authority Key Identifier: keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B2B24A4221D711EB9CFAC46EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.176.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:e3:a5:a0:db:4b:43:c4:04:b0:b3:6a:53:26:5e:9f:d4:2c: a5:01:39:3d:66:1d:63:5c:a6:c2:ef:84:67:34:60:db:83:24: 6f:19:6d:ef:51:31:3f:47:51:6e:89:8b:e5:f0:8d:25:52:fc: f2:ea:74:bd:26:02:e8:16:47:ca:98:fc:b9:6b:a8:ce:48:f5: 85:4c:8e:86:fc:9a:2f:e6:90:2e:2f:6d:5c:96:2a:12:cd:be: d5:86:e7:41:73:93:f3:20:7c:43:09:5f:ea:5e:82:dd:f5:58: d6:60:14:ab:7f:98:56:c7:83:16:e7:7a:28:0f:ed:ef:05:c1: 8e:d2:ba:7a:06:8a:f1:58:4a:f1:71:0a:b1:d6:d7:94:0a:f4: 46:c4:d6:9f:10:24:17:42:9d:9d:b7:45:0a:77:a8:20:f9:b1: eb:39:37:43:a0:da:7f:f6:85:39:24:67:ab:77:0d:4a:b0:dd: 85:67:98:a5:73:fa:f1:01:8d:b6:bf:98:3a:4b:03:29:27:49: 9d:ab:89:8d:bb:8a:64:7b:64:f1:49:e7:b4:47:d9:56:70:fa: e7:ad:17:01:d8:a3:40:af:79:92:89:d9:02:80:16:0b:e5:b7: 38:d3:81:fa:59:ad:ea:64:56:95:78:1c:f4:d0:d9:1a:78:e6: fc:ab:57:05 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD RDM0MEFCMjgwHhcNMjUwMzA2MTgwNjIxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M5ZTQxZC0wNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhw7Srga+coGdsdMb5TLUXpi/cvpvwxvCKeg9W0al7N+6VKstH6liEY1MOsP 0e0kDn4F5Cs6EGuYcsyUiCMs6bsnLdMmYuewNrH/n0f0zMzglj0gMOtjeLY7Qbfi 3RrBJUx9iPIHZALbaRo2UdAMU/KnCwdDinWKCg9JIJJVpboqqjer41GdArZaMyDv kndAVAZePEXvXwL5wdYw3iNSlnXAF6y4iNBdNZgearQy4m40wnek1S9ijN1TjcyU CX3YnCZ6yVg3PJc4EnGrSKANZh9Ys89f1JlFSGB4YHNC3zTZsCHRh8xLvbaFwIvd VRK920sgr7kF02NsAt3JOeaVCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBUvcgnR L/iBJ4Qcxaa+oDFFBKjxMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzE2OTAvMTVCNDFCODg2M0YzMTFFOUEwODU0QzQ3QzRGOUFFMDIvQjJCMjRBNDIy MUQ3MTFFQjlDRkFDNDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnhbAwDQYJKoZIhvcNAQELBQADggEBAErjpaDbS0PEBLCz alMmXp/ULKUBOT1mHWNcpsLvhGc0YNuDJG8Zbe9RMT9HUW6Ji+XwjSVS/PLqdL0m AugWR8qY/LlrqM5I9YVMjob8mi/mkC4vbVyWKhLNvtWG50Fzk/MgfEMJX+pegt31 WNZgFKt/mFbHgxbneigP7e8FwY7SunoGivFYSvFxCrHW15QK9EbE1p8QJBdCnZ23 RQp3qCD5ses5N0Og2n/2hTkkZ6t3DUqw3YVnmKVz+vEBjba/mDpLAyknSZ2riY27 imR7ZPFJ57RH2VZw+uetFwHYo0CveZKJ2QKAFgvltzjTgfpZrepkVpV4HPTQ2Rp4 5vyrVwU= -----END CERTIFICATE-----Generated at Sat Apr 26 16:59:35 2025 by rpki-client