$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/22D8137A51A711EBAAAB6410C4F9AE02.roa File: 22D8137A51A711EBAAAB6410C4F9AE02.roa (raw, json) Hash identifier: W1YtTgfcUQgVCMN18bivEJ+sBWqdB/GL1VhO0Gs0eBo= Subject key identifier: EA:3D:8A:9A:19:E7:8E:28:6C:69:B3:FD:9C:A3:2B:34:02:74:8C:37 Certificate issuer: /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Certificate serial: 06B4 Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/22D8137A51A711EBAAAB6410C4F9AE02.roa Signing time: Tue 04 Mar 2025 23:41:07 +0000 ROA not before: Tue 04 Mar 2025 23:41:07 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 132372 IP address blocks: 103.161.132.0/24 maxlen: 24 103.161.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1716 (0x6b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A6C, serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Validity Not Before: Mar 4 23:41:07 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c78f93-e9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:2b:cf:c1:da:5a:90:b7:fb:4f:e7:c2:02: 03:39:64:06:5b:d9:e6:fe:6f:89:e8:3e:4b:1d:2d: 3c:0c:09:58:bc:8b:e0:9c:7f:44:e6:a5:62:c6:a4: 07:b1:21:fd:ed:82:7f:8d:fe:9e:5b:01:d7:e7:14: 52:f4:38:c6:49:80:33:b4:a8:df:14:8a:e4:be:bd: 0e:2b:b6:61:cf:9a:55:b6:7b:ce:7c:03:2a:19:f6: ff:7f:65:7b:3a:f0:01:39:14:76:81:df:b5:6b:ae: 5e:b8:cc:4d:f0:b5:99:9c:7b:21:70:bf:a8:83:ed: 4f:e8:30:ac:36:ec:97:ff:48:7a:75:27:bf:71:de: ad:4e:2d:9d:66:ff:d8:d0:b7:a7:33:f2:8b:45:2e: 81:1f:cf:4a:2c:4b:78:8b:28:24:28:13:97:98:a6: c1:8e:e0:ab:e5:91:0a:cb:5a:34:b4:40:9f:da:02: 31:8e:73:f5:cb:20:72:73:43:f9:61:fc:76:35:3a: 77:cd:20:16:23:e2:12:71:80:17:6e:39:bf:d2:5f: d6:d7:b8:4a:a5:00:16:22:51:e1:30:32:9b:cb:8c: 92:92:39:92:92:b7:d7:77:a7:c0:07:ab:a9:99:83: 46:ec:b0:2a:72:38:b7:78:45:bc:f0:c8:3c:f7:35: 27:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3D:8A:9A:19:E7:8E:28:6C:69:B3:FD:9C:A3:2B:34:02:74:8C:37 X509v3 Authority Key Identifier: keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/22D8137A51A711EBAAAB6410C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.132.0/23 Signature Algorithm: sha256WithRSAEncryption 36:65:7d:d3:b6:60:f5:18:da:3b:29:0b:25:16:10:93:b1:b0: 13:2f:32:58:04:13:50:16:b8:e2:15:f2:1d:ac:76:15:0e:c9: 6a:34:8b:99:d3:aa:4f:c5:07:3f:de:f4:bf:6f:9d:41:30:84: 10:fb:e7:63:bd:15:27:7c:e5:98:ae:66:37:7b:3e:e0:ec:ae: f8:db:d9:1f:48:18:a8:df:43:ad:41:0f:0a:8b:e7:db:96:31: f9:06:79:92:8f:ad:45:f2:3f:e8:e8:7f:ea:83:40:e6:81:dc: 1c:76:07:a5:e2:7d:c7:d8:bc:e6:08:51:4f:5f:6a:e7:e3:e6: c5:48:46:41:c6:08:a1:a6:ec:c2:17:9a:ca:8d:ec:c4:1b:39: 24:93:32:7b:d0:c7:3b:3b:85:ec:6e:3c:d3:6a:b9:aa:86:1f: 26:83:30:6b:12:7c:52:49:68:47:94:93:4a:d0:6a:82:45:35: 74:a8:0e:8f:4c:c7:9f:6f:f8:9b:5a:0b:ff:e3:5e:b8:bc:18: db:a9:00:55:80:8a:0a:07:ea:aa:6a:f5:1c:f0:69:a4:73:90: b4:5b:c1:fe:9a:44:b3:a9:3c:a4:9c:c9:59:fa:84:08:8f:73: 3b:01:e0:ae:ef:9a:5a:5d:f4:d8:92:25:fc:24:7b:84:3a:02: ab:14:37:28 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBNkMxMTAvBgNVBAUTKDhEMTZGRDBFMjVGQjg5NkUyNkZBNzM0QUJDOTg0Q0U0 QjQ2OThERDMwHhcNMjUwMzA0MjM0MTA3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3OGY5My1lOWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKkrz8HaWpC3+0/nwgIDOWQGW9nm/m+J6D5LHS08DAlYvIvgnH9E5qVixqQH sSH97YJ/jf6eWwHX5xRS9DjGSYAztKjfFIrkvr0OK7Zhz5pVtnvOfAMqGfb/f2V7 OvABORR2gd+1a65euMxN8LWZnHshcL+og+1P6DCsNuyX/0h6dSe/cd6tTi2dZv/Y 0LenM/KLRS6BH89KLEt4iygkKBOXmKbBjuCr5ZEKy1o0tECf2gIxjnP1yyByc0P5 Yfx2NTp3zSAWI+IScYAXbjm/0l/W17hKpQAWIlHhMDKby4ySkjmSkrfXd6fAB6up mYNG7LAqcji3eEW88Mg89zUncwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOo9ipoZ 544obGmz/ZyjKzQCdIw3MB8GA1UdIwQYMBaAFI0W/Q4l+4luJvpzSryYTOS0aY3T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUE2Qy8zQjg0OTNCNDUx QTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lXNG0tbk5LdkpoTTVMUnBq ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSYjlEaVg3aVc0bS1uTkt2SmhNNUxScGpkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlBNkMvM0I4NDkzQjQ1MUE1MTFFQkI0QUYwNDBFQzRGOUFFMDIvMjJEODEzN0E1 MUE3MTFFQkFBQUI2NDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnoYQwDQYJKoZIhvcNAQELBQADggEBADZlfdO2YPUY2jsp CyUWEJOxsBMvMlgEE1AWuOIV8h2sdhUOyWo0i5nTqk/FBz/e9L9vnUEwhBD752O9 FSd85ZiuZjd7PuDsrvjb2R9IGKjfQ61BDwqL59uWMfkGeZKPrUXyP+jof+qDQOaB 3Bx2B6XifcfYvOYIUU9faufj5sVIRkHGCKGm7MIXmsqN7MQbOSSTMnvQxzs7hexu PNNquaqGHyaDMGsSfFJJaEeUk0rQaoJFNXSoDo9Mx59v+JtaC//jXri8GNupAFWA igoH6qpq9RzwaaRzkLRbwf6aRLOpPKScyVn6hAiPczsB4K7vmlpd9NiSJfwke4Q6 AqsUNyg= -----END CERTIFICATE-----Generated at Sat Apr 26 09:24:29 2025 by rpki-client