$ rpki-client -vvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/F09C691AEBB511ECA410BF6DC4F9AE02.roa File: F09C691AEBB511ECA410BF6DC4F9AE02.roa (raw, json) Hash identifier: 3t64o2UXNsxTNPIx1fcvAHHTrkMYu5vuFZ50YkMkLZI= Subject key identifier: 71:BA:27:D3:32:1A:C4:E5:12:19:C9:39:2A:70:FA:7E:D8:2C:7F:9D Certificate issuer: /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15 Certificate serial: 02C5 Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/F09C691AEBB511ECA410BF6DC4F9AE02.roa Signing time: Fri 11 Apr 2025 01:36:44 +0000 ROA not before: Fri 11 Apr 2025 01:36:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 18188 IP address blocks: 103.134.13.0/24 maxlen: 24 202.125.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15 Validity Not Before: Apr 11 01:36:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f8722b-172f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:5e:81:e7:21:bd:b1:dc:fc:7a:9a:77:95: d8:e6:4f:f7:79:57:7a:fd:a7:94:a6:bd:bc:11:a0: 96:f9:a7:ae:58:d0:e4:36:92:bd:31:89:e3:42:ab: d3:be:9e:d2:a5:7c:3d:85:d5:83:28:bc:4b:05:9a: 6f:f2:be:6a:e2:2e:90:70:40:d9:96:fa:ae:90:8c: 40:91:ed:9a:48:44:33:eb:62:e8:65:6d:01:e6:a4: 1d:6e:83:f3:2d:41:fb:a7:ed:a2:44:22:37:7d:ac: b7:c1:67:75:80:21:d0:4c:d6:33:13:42:b2:fa:a4: ee:2f:fa:96:58:d3:9f:93:1e:b0:57:26:29:47:5a: 1d:3e:c0:19:11:a5:82:f6:d3:e8:51:03:a2:4f:66: eb:ba:2f:54:a7:dc:6c:2b:83:2f:08:f0:ee:ac:d3: f8:d0:69:50:f2:ab:ed:88:7f:2b:6d:54:22:4c:a9: af:35:e6:a4:1d:db:11:0b:6f:77:84:f1:05:f2:74: 5a:2b:07:55:87:8f:a2:92:7f:8c:f7:d0:a1:fd:14: 5d:3e:d9:c0:27:77:0c:f4:53:40:fe:08:ab:07:de: 82:a4:23:ad:e2:1d:6d:ec:3a:ee:b2:eb:53:b1:54: a6:e6:39:2c:5b:0b:2e:76:d6:2a:68:4a:cb:f7:b7: 3a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BA:27:D3:32:1A:C4:E5:12:19:C9:39:2A:70:FA:7E:D8:2C:7F:9D X509v3 Authority Key Identifier: keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/F09C691AEBB511ECA410BF6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.13.0/24 202.125.102.0/24 Signature Algorithm: sha256WithRSAEncryption 89:98:74:1a:34:47:c0:27:57:39:2e:12:ff:b8:b0:5f:63:8d: e2:e1:75:2e:87:4d:47:17:24:56:13:a2:fc:93:01:ed:45:09: 06:cb:94:16:b6:97:c0:43:d1:e4:65:46:57:1f:44:58:eb:1b: eb:e7:7c:ae:87:e0:6f:60:63:89:87:10:f0:bb:d1:3e:52:fe: 24:bf:1a:59:f4:15:61:e7:28:1f:67:ec:a4:7f:22:9b:cc:56: 9c:7b:43:46:18:d3:55:28:f4:d2:e4:d1:b3:1e:a2:96:b7:fa: 98:54:46:1e:8e:e9:4d:1f:da:31:c5:52:37:6c:20:d1:16:b3: bc:40:33:19:84:55:d1:38:81:0c:66:4f:b5:c5:d1:97:f2:54: f3:f0:2b:fa:14:4b:ec:e5:05:14:1f:18:6f:14:97:cf:12:d7: 86:78:67:d1:51:9a:12:43:78:ac:26:3d:3a:2e:a8:9d:77:6a: b6:53:3d:12:fa:21:71:98:f7:79:c9:cb:d9:5c:26:af:46:b5: cf:c3:c0:d4:9f:56:e2:69:29:fb:95:07:a0:23:c6:e7:16:07: d5:33:f8:22:c2:0a:7f:57:17:85:15:01:55:41:82:ed:72:8d: 56:8c:99:8f:b3:54:cb:c7:6a:63:4d:e2:23:77:44:f7:4a:23: 90:19:8e:61 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZDODQxMTAvBgNVBAUTKDI5NjYyRjUxM0EyNTRGMERCNUYwN0RCNTgxOUZCRUFF NDBGN0JGMTUwHhcNMjUwNDExMDEzNjQ0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y4NzIyYi0xNzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpRegechvbHc/Hqad5XY5k/3eVd6/aeUpr28EaCW+aeuWNDkNpK9MYnjQqvT vp7SpXw9hdWDKLxLBZpv8r5q4i6QcEDZlvqukIxAke2aSEQz62LoZW0B5qQdboPz LUH7p+2iRCI3fay3wWd1gCHQTNYzE0Ky+qTuL/qWWNOfkx6wVyYpR1odPsAZEaWC 9tPoUQOiT2brui9Up9xsK4MvCPDurNP40GlQ8qvtiH8rbVQiTKmvNeakHdsRC293 hPEF8nRaKwdVh4+ikn+M99Ch/RRdPtnAJ3cM9FNA/girB96CpCOt4h1t7DrusutT sVSm5jksWwsudtYqaErL97c6rwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHG6J9My GsTlEhnJOSpw+n7YLH+dMB8GA1UdIwQYMBaAFClmL1E6JU8NtfB9tYGfvq5A978V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkM4NC8yQTlCQjAyNkVC QjExMUVDODZERTM1NjVDNEY5QUUwMi9LV1l2VVRvbFR3MjE4SDIxZ1otLXJrRDN2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXWXZVVG9sVHcyMThIMjFnWi0tcmtEM3Z4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZDODQvMkE5QkIwMjZFQkIxMTFFQzg2REUzNTY1QzRGOUFFMDIvRjA5QzY5MUFF QkI1MTFFQ0E0MTBCRjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnhg0DBADKfWYwDQYJKoZIhvcNAQELBQADggEBAImYdBo0 R8AnVzkuEv+4sF9jjeLhdS6HTUcXJFYTovyTAe1FCQbLlBa2l8BD0eRlRlcfRFjr G+vnfK6H4G9gY4mHEPC70T5S/iS/Gln0FWHnKB9n7KR/IpvMVpx7Q0YY01Uo9NLk 0bMeopa3+phURh6O6U0f2jHFUjdsINEWs7xAMxmEVdE4gQxmT7XF0ZfyVPPwK/oU S+zlBRQfGG8Ul88S14Z4Z9FRmhJDeKwmPTouqJ13arZTPRL6IXGY93nJy9lcJq9G tc/DwNSfVuJpKfuVB6AjxucWB9Uz+CLCCn9XF4UVAVVBgu1yjVaMmY+zVMvHamNN 4iN3RPdKI5AZjmE= -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:26 2025 by rpki-client