$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/D9B56C8A7AB211EB99DAFE83C4F9AE02.roa File: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (raw, json) Hash identifier: F8NUI5IF7FjRVcKD/tqhJ5Q4QNzh0QGai7XMrRHjkus= Subject key identifier: D5:58:5B:5A:F2:22:EF:01:8F:2A:80:BB:AA:97:A3:E9:76:9D:D3:5D Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Certificate serial: 08AB Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/D9B56C8A7AB211EB99DAFE83C4F9AE02.roa Signing time: Wed 26 Mar 2025 17:26:38 +0000 ROA not before: Wed 26 Mar 2025 17:26:38 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136215 IP address blocks: 103.49.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Validity Not Before: Mar 26 17:26:38 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e438ce-78a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6f:96:6f:14:0d:02:5f:ce:eb:76:e0:e4:55: 05:c2:7d:bb:ce:4d:72:3f:21:78:81:d7:a1:b5:61: d4:4b:78:80:b6:c3:bc:23:9d:cf:50:7b:9e:b7:4e: 8f:63:6e:dc:c2:a8:09:81:ef:51:fd:13:c2:b9:f0: 3d:b2:4a:10:92:47:cc:cf:40:bb:de:22:8a:53:50: 34:f7:f9:9a:5f:10:23:2b:f3:46:ad:b1:ad:b8:de: a1:9b:f7:4e:fd:88:29:4c:b0:f2:90:8b:f6:8e:61: ac:09:e3:3e:db:6c:ae:59:dc:dd:a6:b0:fc:6a:92: 71:23:50:05:0a:40:73:f6:3a:63:d3:30:4b:9b:38: 8e:ed:5c:cc:65:17:65:31:9a:a9:79:91:31:c3:20: 91:14:ac:f1:3f:25:37:a6:f6:5b:fb:1a:ff:f9:ba: 08:f0:e6:b9:33:1f:22:a8:4f:82:72:e2:25:b0:31: f1:ed:34:fc:a4:48:37:ec:0c:25:6f:d1:ea:db:7a: 2d:c4:c1:5e:50:15:d8:d3:29:67:93:3a:6a:86:6a: 07:09:9b:76:a3:03:55:0d:48:fe:41:2a:df:1e:bd: 92:41:3d:1d:c3:ee:e2:17:d4:64:34:e5:b0:b4:61: 42:01:fc:3e:6b:cd:b0:3a:53:26:34:79:de:48:2f: 92:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:58:5B:5A:F2:22:EF:01:8F:2A:80:BB:AA:97:A3:E9:76:9D:D3:5D X509v3 Authority Key Identifier: keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/D9B56C8A7AB211EB99DAFE83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.49.201.0/24 Signature Algorithm: sha256WithRSAEncryption 14:3a:69:81:d3:25:07:37:44:09:29:a0:55:e0:d2:4b:7c:02: ce:3b:68:01:7d:21:ce:4a:61:02:d5:bc:a2:89:fa:a0:ff:41: 9d:78:c7:0e:66:44:00:79:7f:fe:54:18:9e:1a:b5:b3:be:66: 80:c4:2b:d5:06:e1:3d:bc:35:96:e2:eb:0f:43:de:55:f8:38: 7c:dd:c9:22:49:5a:3f:10:f9:16:e7:0c:4e:2c:e3:27:f8:6e: 36:dd:aa:44:65:c5:af:08:46:e5:bf:4b:54:66:80:7b:ce:08: 6d:89:2c:7d:91:f2:a6:e6:79:a1:39:e5:5b:37:e3:55:81:d3: 6b:87:fc:d7:5e:31:d9:be:d1:3f:97:ce:2b:05:e2:c1:62:d6: 26:1b:a2:3f:d0:fa:84:62:0a:be:ea:0c:f0:99:55:03:2d:88: 89:bc:80:df:db:e3:8c:2d:c6:9d:00:0a:45:2d:52:7e:96:c1: 75:59:d7:21:02:90:0d:d5:6f:1e:2c:59:b7:5b:7b:f8:22:76: 35:54:53:38:87:79:27:87:2f:91:08:b3:fe:41:1b:c8:d9:ae: a9:57:55:f1:48:29:6c:13:0a:cb:3e:26:68:69:27:4b:cf:a1: cb:69:70:09:0e:3e:88:a7:5a:03:fd:59:9e:70:df:3e:d8:6f: 61:3c:f6:d1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKDUzMjk3MDBCNEREREFEOUUzRkNEQzMyNzNGNEQxOEQz RTMwNDVEQzAwHhcNMjUwMzI2MTcyNjM4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0MzhjZS03OGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzW+WbxQNAl/O63bg5FUFwn27zk1yPyF4gdehtWHUS3iAtsO8I53PUHuet06P Y27cwqgJge9R/RPCufA9skoQkkfMz0C73iKKU1A09/maXxAjK/NGrbGtuN6hm/dO /YgpTLDykIv2jmGsCeM+22yuWdzdprD8apJxI1AFCkBz9jpj0zBLmziO7VzMZRdl MZqpeZExwyCRFKzxPyU3pvZb+xr/+boI8Oa5Mx8iqE+CcuIlsDHx7TT8pEg37Awl b9Hq23otxMFeUBXY0ylnkzpqhmoHCZt2owNVDUj+QSrfHr2SQT0dw+7iF9RkNOWw tGFCAfw+a82wOlMmNHneSC+SJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNVYW1ry Iu8BjyqAu6qXo+l2ndNdMB8GA1UdIwQYMBaAFFMpcAtN3a2eP83DJz9NGNPjBF3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJaNF96Y01uUDAwWTAtTUVY Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5bHdDMDNkclo0X3pjTW5QMDBZMC1NRVhjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNCMDkvM0IzNjdCQ0UzM0I3MTFFOUFEMEY1ODdBQzRGOUFFMDIvRDlCNTZDOEE3 QUIyMTFFQjk5REFGRTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnMckwDQYJKoZIhvcNAQELBQADggEBABQ6aYHTJQc3RAkp oFXg0kt8As47aAF9Ic5KYQLVvKKJ+qD/QZ14xw5mRAB5f/5UGJ4atbO+ZoDEK9UG 4T28NZbi6w9D3lX4OHzdySJJWj8Q+RbnDE4s4yf4bjbdqkRlxa8IRuW/S1RmgHvO CG2JLH2R8qbmeaE55Vs341WB02uH/NdeMdm+0T+XzisF4sFi1iYboj/Q+oRiCr7q DPCZVQMtiIm8gN/b44wtxp0ACkUtUn6WwXVZ1yECkA3Vbx4sWbdbe/gidjVUUziH eSeHL5EIs/5BG8jZrqlXVfFIKWwTCss+JmhpJ0vPoctpcAkOPoinWgP9WZ5w3z7Y b2E89tE= -----END CERTIFICATE-----Generated at Sat Apr 26 09:08:07 2025 by rpki-client