$ rpki-client -vvf rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/B534A848E2CE11EFA7030E56C4F9AE02.roa File: B534A848E2CE11EFA7030E56C4F9AE02.roa (raw, json) Hash identifier: IJazIyHIF44pTPxQ+ChMh4PrZ/qmLQRUwrJ830VYj78= Subject key identifier: 39:D7:D1:7D:1A:9B:DB:F4:19:B6:88:8B:A0:EE:2E:FC:64:85:3A:2D Certificate issuer: /CN=A9138959/serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103 Certificate serial: 14 Authority key identifier: 0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/B534A848E2CE11EFA7030E56C4F9AE02.roa Signing time: Tue 04 Feb 2025 08:04:50 +0000 ROA not before: Tue 04 Feb 2025 08:04:50 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 140999 IP address blocks: 103.173.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138959, serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103 Validity Not Before: Feb 4 08:04:50 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67a1ca22-1f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c2:09:9e:3a:53:db:1f:ff:74:ae:fb:70:39: 63:e4:96:44:d7:7b:d8:60:ad:e0:e8:01:79:74:a5: f6:bc:e8:40:62:bb:2a:46:90:c9:e1:b5:b8:60:86: 3f:ae:22:7b:1e:69:d2:0d:fb:74:ae:35:e8:4d:48: d2:bc:25:bd:61:c0:03:b6:a8:b4:b0:fc:2e:21:10: 41:d9:09:93:76:9a:ee:8a:29:bb:b5:73:e6:5c:cf: c3:a2:f1:c3:11:0e:5d:9a:af:47:20:7c:d8:9e:52: 8b:a0:d5:a8:a3:6c:b4:42:43:9f:1d:14:fd:77:66: 0e:31:98:45:5d:bc:c4:25:58:29:b5:f2:02:76:ec: fb:41:1a:f9:35:b1:b0:52:5d:05:09:3e:ff:20:75: 8b:86:dd:ad:ec:cd:ce:12:ac:31:9b:2b:e4:8e:3e: df:4b:5b:ae:b6:46:0c:61:9c:dd:47:17:83:d9:11: 72:a6:11:3e:91:3e:18:09:36:03:72:fe:d3:91:20: 96:dd:65:98:87:df:37:cd:f4:62:b1:6a:b5:9b:60: 18:b9:3b:51:80:1b:0c:ac:ab:95:84:f1:74:3e:0c: 70:a3:f5:12:af:03:fc:e0:00:0b:51:68:33:16:c2: f6:57:24:93:4c:86:ab:20:8b:dd:eb:5c:0d:80:2b: b4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D7:D1:7D:1A:9B:DB:F4:19:B6:88:8B:A0:EE:2E:FC:64:85:3A:2D X509v3 Authority Key Identifier: keyid:0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/B534A848E2CE11EFA7030E56C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.0.0/23 Signature Algorithm: sha256WithRSAEncryption 00:81:16:72:09:fd:ad:81:85:e3:a0:64:42:84:2f:78:b2:b8: d8:e3:92:d7:d1:49:6a:e1:62:18:13:ee:39:71:e1:46:ee:ed: 0f:79:1c:ee:51:56:51:49:5c:b8:9d:06:7e:80:6a:b6:bc:c5: cc:7e:13:ba:49:fc:32:f3:ea:78:76:cb:41:3c:68:bb:23:37: 44:d7:35:3a:cd:2a:09:ac:e4:4f:7c:a3:c2:7f:ab:3f:f5:9e: cc:f0:a4:84:34:50:9c:08:17:2d:95:8b:04:58:3d:d4:ad:ed: e5:10:1e:5a:3e:c8:a4:35:47:da:2b:5d:22:43:e6:21:3d:4a: cd:5d:3b:18:ea:67:9e:2d:a6:0c:cb:aa:3f:16:20:ae:70:eb: 26:b7:3f:24:58:25:b6:84:72:e8:e0:e7:b5:a9:ab:8f:dc:20: 2a:6e:57:b2:38:04:fb:2e:05:2b:a2:01:12:c7:27:a9:56:88: 82:88:7e:2c:cf:09:d1:f1:ce:b5:ca:26:b6:6e:e9:45:71:67: 79:4b:0f:db:4d:a8:22:e9:ce:a4:1f:58:e8:cf:1f:ef:2d:58: 9a:d4:84:03:61:fe:2f:24:c6:10:8d:e5:3a:c7:fd:c0:07:db: bb:9f:e6:3e:94:fc:92:81:e1:66:86:76:b0:34:99:30:fc:65: 81:87:76:41 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODk1OTExMC8GA1UEBRMoMEU5MzY2MUFDMTYxNTRGNjVEMkEyRjc4MUEwMzFGMzVD OTMxMDEwMzAeFw0yNTAyMDQwODA0NTBaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YTFjYTIyLTFmOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYwgmeOlPbH/90rvtwOWPklkTXe9hgreDoAXl0pfa86EBiuypGkMnhtbhghj+u InseadIN+3SuNehNSNK8Jb1hwAO2qLSw/C4hEEHZCZN2mu6KKbu1c+Zcz8Oi8cMR Dl2ar0cgfNieUoug1aijbLRCQ58dFP13Zg4xmEVdvMQlWCm18gJ27PtBGvk1sbBS XQUJPv8gdYuG3a3szc4SrDGbK+SOPt9LW662RgxhnN1HF4PZEXKmET6RPhgJNgNy /tORIJbdZZiH3zfN9GKxarWbYBi5O1GAGwysq5WE8XQ+DHCj9RKvA/zgAAtRaDMW wvZXJJNMhqsgi93rXA2AK7QbAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUOdfRfRqb 2/QZtoiLoO4u/GSFOi0wHwYDVR0jBBgwFoAUDpNmGsFhVPZdKi94GgMfNckxAQMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4OTU5L0JCRDE0MDhDQ0RF QjExRUZCNTNBMUIyMEM0RjlBRTAyL0RwTm1Hc0ZoVlBaZEtpOTRHZ01mTmNreEFR TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRHBObUdzRmhWUFpkS2k5NEdnTWZOY2t4QVFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODk1OS9CQkQxNDA4Q0NERUIxMUVGQjUzQTFCMjBDNEY5QUUwMi9CNTM0QTg0OEUy Q0UxMUVGQTcwMzBFNTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWetADANBgkqhkiG9w0BAQsFAAOCAQEAAIEWcgn9rYGF46Bk QoQveLK42OOS19FJauFiGBPuOXHhRu7tD3kc7lFWUUlcuJ0GfoBqtrzFzH4Tukn8 MvPqeHbLQTxouyM3RNc1Os0qCazkT3yjwn+rP/WezPCkhDRQnAgXLZWLBFg91K3t 5RAeWj7IpDVH2itdIkPmIT1KzV07GOpnni2mDMuqPxYgrnDrJrc/JFgltoRy6ODn tamrj9wgKm5XsjgE+y4FK6IBEscnqVaIgoh+LM8J0fHOtcomtm7pRXFneUsP202o IunOpB9Y6M8f7y1YmtSEA2H+LyTGEI3lOsf9wAfbu5/mPpT8koHhZoZ2sDSZMPxl gYd2QQ== -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:50 2025 by rpki-client