$ rpki-client -vvf rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/2CD223FCEA7811EF92D8DC39C4F9AE02.roa File: 2CD223FCEA7811EF92D8DC39C4F9AE02.roa (raw, json) Hash identifier: zvy+2HhQd/n3VOaiuMrL5/OccoJAnqCm0UAKCkrWeWw= Subject key identifier: 37:3B:81:09:37:71:5B:21:2C:6D:7D:29:6B:26:A0:B7:14:87:F7:83 Certificate issuer: /CN=A9138679/serialNumber=9280F070747753387B6BA65732D6DD7992B350C1 Certificate serial: 02 Authority key identifier: 92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/2CD223FCEA7811EF92D8DC39C4F9AE02.roa Signing time: Fri 14 Feb 2025 02:05:34 +0000 ROA not before: Fri 14 Feb 2025 02:05:34 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 4764 IP address blocks: 103.60.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138679, serialNumber=9280F070747753387B6BA65732D6DD7992B350C1 Validity Not Before: Feb 14 02:05:34 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67aea4ee-3e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:3f:e7:22:a3:ef:ca:d2:9e:4e:eb:ee:38: d3:4f:56:f6:ee:54:01:a1:e5:68:82:46:a5:49:87: 75:14:d5:cb:ab:f7:21:46:19:30:b6:37:23:be:50: f9:be:a3:16:bc:ae:4e:09:d8:36:c8:f7:b4:e1:96: ce:15:ab:b4:4b:9e:52:ec:29:60:fa:43:3a:0d:f7: 63:9f:51:2b:58:c4:b1:61:7d:59:21:ea:54:04:a3: 33:3e:05:24:cb:be:36:9f:88:9c:95:62:50:83:11: e2:75:55:6f:a0:b5:19:f1:d9:68:4b:6a:31:69:46: 2f:fb:33:8b:c9:88:de:7a:14:26:9f:3c:7a:5e:56: c8:64:d8:ae:43:e3:e6:18:c0:69:28:71:fc:f4:27: 4b:e0:1c:54:87:c1:51:8a:1d:62:75:46:6c:aa:2f: 69:dd:8b:6f:ba:38:c8:92:14:7d:bb:b1:c6:0e:4d: cf:76:01:63:c2:06:f3:31:40:58:a0:bb:0f:4f:f6: d0:6c:1b:b0:1f:0c:8a:00:45:b2:b0:a3:32:8a:53: 86:86:50:3e:c8:b3:97:f8:0f:eb:4d:9c:76:39:b2: 4b:a2:24:24:0f:ba:95:4b:d6:0a:47:18:52:76:8d: 84:32:5d:58:00:10:1d:37:45:53:fe:86:d7:60:b5: a1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3B:81:09:37:71:5B:21:2C:6D:7D:29:6B:26:A0:B7:14:87:F7:83 X509v3 Authority Key Identifier: keyid:92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/2CD223FCEA7811EF92D8DC39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.152.0/22 Signature Algorithm: sha256WithRSAEncryption bf:c3:be:82:13:de:5a:f9:f0:80:db:54:fe:c9:96:a8:47:df: a6:1b:76:f9:8f:86:9c:2d:cb:5d:2a:b9:9d:13:74:4e:24:0f: f4:35:71:ed:21:9e:85:9d:89:53:32:b8:ad:34:26:23:a5:8f: 27:00:0b:05:bf:0a:fc:77:1f:ec:d3:be:8e:6a:75:76:74:51: 46:75:1a:e9:6b:f4:17:38:ce:24:a4:a1:e9:ab:d4:54:18:f1: a7:c6:eb:c2:d2:69:20:8d:a6:99:33:6e:c5:5e:f1:c3:3f:81: c2:4e:22:42:5a:6d:e0:31:0c:bc:6c:09:bd:d4:4f:4d:c1:e5: 55:e6:0f:93:60:5e:25:4d:8f:33:c2:8b:0a:ec:f2:8e:8d:09: 9f:8b:1c:e2:86:20:8e:bd:fe:a8:b3:d5:84:bc:ac:69:25:ea: 00:bc:8c:3d:10:e0:0e:c9:de:76:a4:37:97:39:2d:b6:dc:a8: a7:9e:57:ba:99:5e:cb:d7:83:3e:c5:3a:2e:ff:7f:05:b2:8b: 38:97:89:c2:73:1d:59:a9:3b:7a:da:15:2e:d1:2b:c5:88:20: 17:1c:0a:4a:2b:6e:58:c4:be:a4:ee:b7:02:39:65:9f:1d:fb: 86:bf:19:10:9c:31:5b:ba:fe:a6:88:87:da:aa:44:29:35:f5: ac:5f:fb:f2 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODY3OTExMC8GA1UEBRMoOTI4MEYwNzA3NDc3NTMzODdCNkJBNjU3MzJENkRENzk5 MkIzNTBDMTAeFw0yNTAyMTQwMjA1MzRaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YWVhNGVlLTNlNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEsD/nIqPvytKeTuvuONNPVvbuVAGh5WiCRqVJh3UU1cur9yFGGTC2NyO+UPm+ oxa8rk4J2DbI97Thls4Vq7RLnlLsKWD6QzoN92OfUStYxLFhfVkh6lQEozM+BSTL vjafiJyVYlCDEeJ1VW+gtRnx2WhLajFpRi/7M4vJiN56FCafPHpeVshk2K5D4+YY wGkocfz0J0vgHFSHwVGKHWJ1RmyqL2ndi2+6OMiSFH27scYOTc92AWPCBvMxQFig uw9P9tBsG7AfDIoARbKwozKKU4aGUD7Is5f4D+tNnHY5skuiJCQPupVL1gpHGFJ2 jYQyXVgAEB03RVP+htdgtaGnAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUNzuBCTdx WyEsbX0payagtxSH94MwHwYDVR0jBBgwFoAUkoDwcHR3Uzh7a6ZXMtbdeZKzUMEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4Njc5L0NCMkNCM0NFRUE3 NzExRUZBNTYzNTY4MEM0RjlBRTAyL2tvRHdjSFIzVXpoN2E2WlhNdGJkZVpLelVN RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva29Ed2NIUjNVemg3YTZaWE10YmRlWkt6VU1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODY3OS9DQjJDQjNDRUVBNzcxMUVGQTU2MzU2ODBDNEY5QUUwMi8yQ0QyMjNGQ0VB NzgxMUVGOTJEOERDMzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmc8mDANBgkqhkiG9w0BAQsFAAOCAQEAv8O+ghPeWvnwgNtU /smWqEffpht2+Y+GnC3LXSq5nRN0TiQP9DVx7SGehZ2JUzK4rTQmI6WPJwALBb8K /Hcf7NO+jmp1dnRRRnUa6Wv0FzjOJKSh6avUVBjxp8brwtJpII2mmTNuxV7xwz+B wk4iQlpt4DEMvGwJvdRPTcHlVeYPk2BeJU2PM8KLCuzyjo0Jn4sc4oYgjr3+qLPV hLysaSXqALyMPRDgDsnedqQ3lzktttyop55Xupley9eDPsU6Lv9/BbKLOJeJwnMd Wak7etoVLtErxYggFxwKSituWMS+pO63Ajllnx37hr8ZEJwxW7r+poiH2qpEKTX1 rF/78g== -----END CERTIFICATE-----Generated at Sat Apr 26 08:18:49 2025 by rpki-client