$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/99C38DDE95C311EF8BAA846AC4F9AE02.roa File: 99C38DDE95C311EF8BAA846AC4F9AE02.roa (raw, json) Hash identifier: /ELEwN23Ky7YTihMb6ZPd8NEjXrIU3aX3cmP7zRZWJo= Subject key identifier: 80:C6:2A:F8:45:18:8E:BE:EF:93:B0:C8:A2:51:76:AB:80:3A:5F:53 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 268B Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/99C38DDE95C311EF8BAA846AC4F9AE02.roa Signing time: Thu 10 Apr 2025 15:52:54 +0000 ROA not before: Thu 10 Apr 2025 15:52:54 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 134732 IP address blocks: 103.228.202.0/23 maxlen: 23 103.228.202.0/24 maxlen: 24 103.228.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9867 (0x268b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Apr 10 15:52:54 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f7e956-c282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:22:4f:15:ef:38:48:41:28:14:86:32:59:85: 1a:ce:21:8f:40:18:9a:75:d1:44:b4:d5:51:a6:aa: 36:54:87:e5:97:46:38:f8:14:4a:95:90:66:3a:27: ef:59:bc:b9:45:b8:bd:7e:85:bf:6b:2e:a4:0b:b6: a9:49:9e:92:45:5c:20:98:78:2e:3a:e9:58:c5:6c: b1:2e:c9:b5:80:25:c5:74:94:43:17:a0:ae:e3:b0: 18:32:0f:63:e5:a2:12:09:18:9e:01:20:b0:32:27: d4:e0:f0:25:94:e7:3e:61:3b:ae:be:50:6a:03:f4: 22:6b:65:df:9c:b1:a5:c3:53:ea:8e:23:4e:39:0a: b4:05:13:76:91:67:91:84:9f:61:77:14:a8:43:91: 8a:a0:ba:c6:92:07:b5:1e:10:ce:95:40:9a:08:b3: 60:fa:7a:b0:42:7b:03:ce:18:b6:49:b9:bc:56:00: a4:b4:cf:71:6e:6b:d0:72:64:7b:55:77:55:cb:26: 6d:7e:a6:e9:e7:95:0b:5d:cb:71:0b:57:bb:10:f7: 70:91:a0:c0:08:78:c2:67:21:e6:ec:21:a2:85:34: 08:46:8d:27:aa:db:cf:51:10:09:a8:d4:dd:fc:ba: 1f:40:a7:d5:49:5f:8c:fa:33:cd:e2:b8:f4:9a:39: b9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C6:2A:F8:45:18:8E:BE:EF:93:B0:C8:A2:51:76:AB:80:3A:5F:53 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/99C38DDE95C311EF8BAA846AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.228.202.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:07:b6:59:a2:0e:e9:9e:17:8a:ea:32:d3:6c:5b:2a:79:3a: f2:c4:4e:80:03:02:01:03:b1:42:f2:58:a5:38:c7:36:90:84: 7f:04:1b:8a:49:df:8a:6e:80:c1:54:ac:63:c8:66:7f:e5:93: 91:a3:b1:42:6c:32:95:8f:fc:17:35:b2:73:1d:4a:ba:f2:ec: 6d:23:36:61:e1:a5:8b:dc:45:34:a2:ac:c3:3f:9d:8e:3b:ed: 85:af:04:12:e5:02:b7:4e:ac:05:aa:59:24:bc:17:d1:d4:0e: 6c:6c:ed:3f:bd:37:e2:14:ec:e9:f0:94:6f:00:94:a1:85:75: a7:3d:a9:82:76:83:70:8d:bc:79:b2:83:4a:79:76:31:28:61: 86:dd:60:2b:3d:9c:f6:6c:be:29:34:1a:ce:f8:2b:cb:59:a8: e5:35:4c:56:de:1f:57:80:cc:d4:42:fd:38:47:85:17:04:d6: 39:c8:27:3c:cb:89:f9:0c:da:e4:34:8f:44:e7:37:ca:10:9d: df:a9:4b:0f:4b:01:b6:9a:f8:f0:ef:df:39:c7:e9:e7:e2:87: aa:d3:f7:60:b5:71:fe:f4:a3:10:d4:c3:58:19:a7:5b:ac:3a: f3:f9:39:b8:d9:5d:bf:f3:4c:30:f0:af:81:ae:27:80:d0:87: d1:66:77:03 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjUwNDEwMTU1MjU0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y3ZTk1Ni1jMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6iJPFe84SEEoFIYyWYUaziGPQBiaddFEtNVRpqo2VIfll0Y4+BRKlZBmOifv Wby5Rbi9foW/ay6kC7apSZ6SRVwgmHguOulYxWyxLsm1gCXFdJRDF6Cu47AYMg9j 5aISCRieASCwMifU4PAllOc+YTuuvlBqA/Qia2XfnLGlw1PqjiNOOQq0BRN2kWeR hJ9hdxSoQ5GKoLrGkge1HhDOlUCaCLNg+nqwQnsDzhi2Sbm8VgCktM9xbmvQcmR7 VXdVyyZtfqbp55ULXctxC1e7EPdwkaDACHjCZyHm7CGihTQIRo0nqtvPURAJqNTd /LofQKfVSV+M+jPN4rj0mjm5SQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIDGKvhF GI6+75OwyKJRdquAOl9TMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNEQjAvQjg5NUFGNzQwNTE1MTFFNThENDlBRTQyQzRGOUFFMDIvOTlDMzhEREU5 NUMzMTFFRjhCQUE4NDZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn5MowDQYJKoZIhvcNAQELBQADggEBAJsHtlmiDumeF4rq MtNsWyp5OvLEToADAgEDsULyWKU4xzaQhH8EG4pJ34pugMFUrGPIZn/lk5GjsUJs MpWP/Bc1snMdSrry7G0jNmHhpYvcRTSirMM/nY477YWvBBLlArdOrAWqWSS8F9HU Dmxs7T+9N+IU7OnwlG8AlKGFdac9qYJ2g3CNvHmyg0p5djEoYYbdYCs9nPZsvik0 Gs74K8tZqOU1TFbeH1eAzNRC/ThHhRcE1jnIJzzLifkM2uQ0j0TnN8oQnd+pSw9L Abaa+PDv3znH6efih6rT92C1cf70oxDUw1gZp1usOvP5ObjZXb/zTDDwr4GuJ4DQ h9FmdwM= -----END CERTIFICATE-----Generated at Sat Apr 26 17:09:21 2025 by rpki-client