$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/24AE273C2D1111EE85C59810C4F9AE02.roa File: 24AE273C2D1111EE85C59810C4F9AE02.roa (raw, json) Hash identifier: fJSwaqO5xx9Q9RIgs6JtYncNmKK6M8gTn37HYZrh54Y= Subject key identifier: 5C:D5:E7:87:E0:36:98:C4:6F:D0:79:1B:38:97:C1:1C:EB:C7:2C:FD Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 0541 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/24AE273C2D1111EE85C59810C4F9AE02.roa Signing time: Fri 13 Jun 2025 14:10:46 +0000 ROA not before: Fri 13 Jun 2025 14:10:46 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 211392 IP address blocks: 103.135.208.0/24 maxlen: 24 103.135.209.0/24 maxlen: 24 103.135.210.0/24 maxlen: 24 103.135.211.0/24 maxlen: 24 103.172.110.0/23 maxlen: 23 103.172.110.0/24 maxlen: 24 103.172.111.0/24 maxlen: 24 103.204.13.0/24 maxlen: 24 203.168.128.0/22 maxlen: 22 203.168.128.0/23 maxlen: 23 203.168.128.0/24 maxlen: 24 203.168.129.0/24 maxlen: 24 203.168.130.0/23 maxlen: 23 203.168.130.0/24 maxlen: 24 203.168.131.0/24 maxlen: 24 2001:df7:6e80::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Jun 13 14:10:46 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=684c3166-61c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7c:2d:67:b1:4a:c2:59:de:c7:24:5b:7a:2f: 48:8a:67:5b:b6:80:04:8c:e7:75:d1:68:4d:1c:b8: b1:68:71:0f:75:8f:24:40:e8:c3:ec:e7:6f:f2:32: 58:29:83:69:5d:8b:cc:6e:9e:ca:74:56:71:45:02: 13:2f:d1:f4:d9:17:20:1c:3c:61:1b:3b:9d:c8:7d: 94:2a:eb:5a:95:06:84:c3:ad:92:35:30:1e:71:cb: 51:aa:bd:0b:1d:17:bc:01:da:7b:7d:c1:db:24:74: 76:8f:5b:49:39:87:57:5a:8f:6b:cb:1b:6a:fb:8e: 39:8e:93:60:f4:df:81:52:32:c7:82:97:1a:f5:90: 1f:5b:0b:a6:31:b7:49:86:20:68:88:38:9f:79:aa: 94:42:36:e8:20:03:13:62:a8:f8:ee:bd:a4:c6:e6: 3f:89:c0:40:94:51:16:c0:59:dc:0f:6a:bb:95:1e: f7:c6:ff:23:29:ba:68:90:80:98:74:2e:e3:f4:77: 60:00:1b:ec:47:6e:c1:1f:41:48:a3:7f:cc:5f:0c: 3f:37:21:b6:a3:a1:dc:2c:6e:99:56:db:65:9f:53: d6:79:18:d9:88:c3:96:81:6d:3c:4f:60:5f:bd:83: ae:76:0f:85:61:a2:4a:c7:df:cd:5c:dc:80:95:cb: 5c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D5:E7:87:E0:36:98:C4:6F:D0:79:1B:38:97:C1:1C:EB:C7:2C:FD X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/24AE273C2D1111EE85C59810C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.208.0/22 103.172.110.0/23 103.204.13.0/24 203.168.128.0/22 IPv6: 2001:df7:6e80::/47 Signature Algorithm: sha256WithRSAEncryption 11:1b:9e:60:90:4d:2b:80:30:d7:05:74:78:0f:34:3e:bb:d0: e2:b1:90:cb:80:39:84:45:7a:71:28:bc:3e:10:60:14:33:58: 8a:4a:4b:ad:3d:90:a9:a6:cc:bb:b8:75:97:b6:d5:f8:86:2a: 15:3a:fa:77:a3:6b:9b:8d:4a:3d:cf:6d:b9:09:7a:12:17:c0: 63:ff:e9:df:65:29:09:91:9a:7a:7c:e0:00:4a:1c:e1:a9:10: 0d:d7:05:8c:b2:71:74:9f:ab:f6:da:26:fd:c5:f0:2a:d7:53: e4:a8:f2:9c:57:b1:50:bd:6b:fc:c3:d1:52:54:68:55:b8:0d: 05:bc:7f:cc:2f:97:c6:ed:a0:f0:66:2a:60:00:48:b4:a6:76: b9:40:14:a4:a5:9d:f7:d6:ab:14:9f:0a:fb:16:6f:dc:d2:96: fd:37:43:41:5c:56:d4:e9:50:8d:1c:cc:d8:4c:ca:fc:4a:1f: b5:c1:89:66:c8:b2:f1:08:3f:de:0e:9a:0a:ac:e2:b7:13:0b: 7c:b6:22:2b:1d:30:e2:d8:18:e7:b2:e1:d7:b1:36:62:d7:9c: da:75:8e:27:85:42:68:00:9e:dd:e0:88:f6:da:9e:15:c4:17: ed:87:f8:1b:4f:cd:de:f7:a5:f3:b3:fa:0b:3f:51:47:5a:12: fe:a6:fd:dd -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjUwNjEzMTQxMDQ2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRjMzE2Ni02MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnwtZ7FKwlnexyRbei9IimdbtoAEjOd10WhNHLixaHEPdY8kQOjD7Odv8jJY KYNpXYvMbp7KdFZxRQITL9H02RcgHDxhGzudyH2UKutalQaEw62SNTAecctRqr0L HRe8Adp7fcHbJHR2j1tJOYdXWo9ryxtq+445jpNg9N+BUjLHgpca9ZAfWwumMbdJ hiBoiDifeaqUQjboIAMTYqj47r2kxuY/icBAlFEWwFncD2q7lR73xv8jKbpokICY dC7j9HdgABvsR27BH0FIo3/MXww/NyG2o6HcLG6ZVttln1PWeRjZiMOWgW08T2Bf vYOudg+FYaJKx9/NXNyAlctciwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFFzV54fg NpjEb9B5GziXwRzrxyz9MB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVEMjUvNjdGMkIwRDgwQkQyMTFFQ0JBQTQ4MDZBQzRGOUFFMDIvMjRBRTI3M0My RDExMTFFRTg1QzU5ODEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMB4EAgABMBgDBAJnh9ADBAFnrG4DBABnzA0DBALLqIAwDwQCAAIwCQMHASAB DfdugDANBgkqhkiG9w0BAQsFAAOCAQEAERueYJBNK4Aw1wV0eA80PrvQ4rGQy4A5 hEV6cSi8PhBgFDNYikpLrT2QqabMu7h1l7bV+IYqFTr6d6Nrm41KPc9tuQl6EhfA Y//p32UpCZGaenzgAEoc4akQDdcFjLJxdJ+r9tom/cXwKtdT5KjynFexUL1r/MPR UlRoVbgNBbx/zC+Xxu2g8GYqYABItKZ2uUAUpKWd99arFJ8K+xZv3NKW/TdDQVxW 1OlQjRzM2EzK/EoftcGJZsiy8Qg/3g6aCqzitxMLfLYiKx0w4tgY57Lh17E2Ytec 2nWOJ4VCaACe3eCI9tqeFcQX7Yf4G0/N3vel87P6Cz9RR1oS/qb93Q== -----END CERTIFICATE-----Generated at Wed Jun 18 06:41:46 2025 by rpki-client