$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/369A67D4B01B11EEBD075854C4F9AE02.roa File: 369A67D4B01B11EEBD075854C4F9AE02.roa (raw, json) Hash identifier: MCZ4hWeiAmt9KhYesLRixKufRw6yQV6zNqKued4Xvos= Subject key identifier: 3A:67:C1:71:C8:30:5E:FF:D4:EC:04:B9:17:72:62:93:C0:A7:C2:A3 Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0F44 Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/369A67D4B01B11EEBD075854C4F9AE02.roa Signing time: Wed 04 Jun 2025 18:00:15 +0000 ROA not before: Wed 04 Jun 2025 18:00:15 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 54197 IP address blocks: 43.250.107.0/24 maxlen: 24 103.232.213.0/24 maxlen: 24 2402:3180:8::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3908 (0xf44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Jun 4 18:00:15 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684089af-a54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:12:72:b7:46:0e:d7:13:a1:03:96:4f:ef:3d: 52:5c:8e:17:75:e0:09:b5:ef:92:5b:9e:bc:e7:2e: 2c:97:34:e1:f3:e4:8f:b8:62:ff:bb:77:2e:01:90: eb:36:93:ce:9e:57:bb:86:5e:bc:21:01:c8:f9:5a: 43:66:1b:21:f1:b9:9f:70:58:97:29:2b:85:33:9f: 11:cb:b8:f3:e6:9a:5b:d0:f4:a8:df:bd:89:2e:7d: c0:9b:45:e2:77:2d:5c:de:75:f3:f6:da:28:33:b2: ef:79:21:2c:6d:fa:02:22:75:6f:8d:b8:2c:8a:8b: 4d:1c:77:97:27:b4:0e:87:e3:a1:83:3a:28:41:e1: c7:10:3e:f7:33:a8:31:81:46:77:66:e7:e6:df:86: 46:cb:22:98:ea:b4:72:21:a0:39:01:fd:08:c3:22: ab:c7:79:d2:34:62:2a:fd:0d:c5:5b:5e:81:bf:7f: cf:c1:ec:86:f2:ca:4b:af:35:e4:24:ba:78:99:19: 35:af:03:82:f5:a7:a2:e6:02:16:00:59:e9:99:5d: 57:01:35:df:e9:71:a1:8d:71:53:b4:11:9c:ce:e4: 29:37:04:af:f9:47:40:27:fe:54:c6:42:be:00:ea: db:28:20:c3:8a:f3:25:b0:3c:ba:1e:e0:da:6c:59: 1d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:67:C1:71:C8:30:5E:FF:D4:EC:04:B9:17:72:62:93:C0:A7:C2:A3 X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/369A67D4B01B11EEBD075854C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.107.0/24 103.232.213.0/24 IPv6: 2402:3180:8::/45 Signature Algorithm: sha256WithRSAEncryption 65:ea:2d:12:ca:0a:27:43:a6:c6:27:43:5f:f0:b3:77:8a:2d: f8:d0:e3:af:08:6e:1c:61:b7:6e:0b:e0:17:35:a3:57:2d:39: dd:4e:dc:19:97:67:a5:a4:74:d3:b1:17:04:31:2d:56:bd:69: 2d:86:ad:93:53:97:58:85:9e:ac:47:ec:cb:c5:21:d0:97:77: dc:74:12:65:9a:c7:fa:a7:82:9b:73:79:5b:d4:89:27:20:33: ac:82:3c:20:38:a8:5f:12:3f:82:26:86:98:2b:27:37:f8:6e: 5a:f6:ca:05:df:90:3c:be:4b:83:9a:89:19:ab:67:b5:35:92: a9:ce:3b:d7:c0:51:37:ec:34:11:c8:84:fa:b7:62:01:9d:61: 13:b7:3d:02:84:80:e7:84:8c:16:7f:11:97:77:cf:48:af:4e: 3f:bb:48:26:83:c2:15:cb:9d:01:68:c2:d9:e9:54:25:f4:0c: fe:1e:19:44:76:f2:0d:83:04:d6:1b:06:aa:0c:69:70:4f:a9: 50:d8:db:7a:c1:51:96:51:fa:a2:29:3f:c2:00:7a:04:cc:15: e0:20:9b:e2:ba:d2:0c:38:2f:f1:db:83:2b:68:f2:45:9b:bd: 3e:ec:0d:bd:b6:7b:7c:4c:cb:34:f0:ed:9a:8e:4c:a8:c1:96: 92:cd:93:0a -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICD0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjUwNjA0MTgwMDE1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQwODlhZi1hNTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxJyt0YO1xOhA5ZP7z1SXI4XdeAJte+SW5685y4slzTh8+SPuGL/u3cuAZDr NpPOnle7hl68IQHI+VpDZhsh8bmfcFiXKSuFM58Ry7jz5ppb0PSo372JLn3Am0Xi dy1c3nXz9tooM7LveSEsbfoCInVvjbgsiotNHHeXJ7QOh+OhgzooQeHHED73M6gx gUZ3Zufm34ZGyyKY6rRyIaA5Af0IwyKrx3nSNGIq/Q3FW16Bv3/PweyG8spLrzXk JLp4mRk1rwOC9aei5gIWAFnpmV1XATXf6XGhjXFTtBGczuQpNwSv+UdAJ/5UxkK+ AOrbKCDDivMlsDy6HuDabFkd6QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFDpnwXHI MF7/1OwEuRdyYpPAp8KjMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZCRkYvRTQyQkVBQzI5M0YwMTFFOUJDMENGRjcxQzRGOUFFMDIvMzY5QTY3RDRC MDFCMTFFRUJEMDc1ODU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAAr+msDBABn6NUwDwQCAAIwCQMHAyQCMYAACDANBgkqhkiG 9w0BAQsFAAOCAQEAZeotEsoKJ0OmxidDX/Czd4ot+NDjrwhuHGG3bgvgFzWjVy05 3U7cGZdnpaR007EXBDEtVr1pLYatk1OXWIWerEfsy8Uh0Jd33HQSZZrH+qeCm3N5 W9SJJyAzrII8IDioXxI/giaGmCsnN/huWvbKBd+QPL5Lg5qJGatntTWSqc4718BR N+w0EciE+rdiAZ1hE7c9AoSA54SMFn8Rl3fPSK9OP7tIJoPCFcudAWjC2elUJfQM /h4ZRHbyDYME1hsGqgxpcE+pUNjbesFRllH6oik/wgB6BMwV4CCb4rrSDDgv8duD K2jyRZu9PuwNvbZ7fEzLNPDtmo5MqMGWks2TCg== -----END CERTIFICATE-----Generated at Sun Jun 15 09:39:16 2025 by rpki-client