$ rpki-client -vvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/9A826D9059D611EF814F004DC4F9AE02.roa File: 9A826D9059D611EF814F004DC4F9AE02.roa (raw, json) Hash identifier: 3aT0muq2AP76fHDV6M45dsCuBJOlUCEA5kwKeP8ww7o= Subject key identifier: 9C:6E:64:A4:55:D3:0A:EE:42:D1:2E:65:34:1B:8E:35:BD:E2:31:39 Certificate issuer: /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940 Certificate serial: 8A Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/9A826D9059D611EF814F004DC4F9AE02.roa Signing time: Thu 17 Apr 2025 05:44:39 +0000 ROA not before: Thu 17 Apr 2025 05:44:39 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 135065 IP address blocks: 103.208.36.0/22 maxlen: 22 103.208.36.0/24 maxlen: 24 103.208.37.0/24 maxlen: 24 103.208.38.0/24 maxlen: 24 103.208.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F7F0, serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940 Validity Not Before: Apr 17 05:44:39 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=68009547-eb1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6b:7c:23:d0:51:57:76:e2:9c:f5:47:b9:f1: 24:2a:23:56:57:80:4d:c3:17:56:fa:2c:be:4c:bc: 7a:3e:b0:a2:59:5c:05:6b:8a:2e:f7:76:b6:37:d9: db:91:65:f2:92:b6:bd:74:05:96:55:15:c9:ef:9a: 58:25:1d:3b:fc:6c:23:74:72:f4:75:ae:10:31:25: 20:5c:46:21:21:d5:2d:60:da:de:70:e8:29:b7:56: 71:af:3a:c8:cf:c7:f4:a5:21:d7:c5:d9:a8:e2:45: 35:7c:81:a3:9f:34:bf:da:dd:3a:83:74:48:f7:55: 36:3b:3f:6e:bf:2c:6a:5e:09:68:4d:77:65:58:ae: 82:dd:6a:72:d9:5f:3b:3e:0b:c2:cc:8e:43:b3:8c: 91:90:df:77:5f:02:32:3a:10:96:6f:9a:a7:b2:23: ad:ff:ba:68:c2:30:31:a1:cf:11:eb:2d:00:d0:25: 93:82:0b:e3:d4:f5:bf:23:61:91:33:86:13:8a:4f: 71:56:e0:48:56:a7:69:50:99:b4:00:86:38:23:3e: 65:e4:87:f1:56:99:21:83:d8:28:ba:40:d1:52:cd: db:10:45:be:3f:9c:4d:51:3c:26:25:b0:49:ea:cb: ec:80:51:35:38:8e:c3:23:61:f5:fc:94:07:b0:9c: e5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6E:64:A4:55:D3:0A:EE:42:D1:2E:65:34:1B:8E:35:BD:E2:31:39 X509v3 Authority Key Identifier: keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/9A826D9059D611EF814F004DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.208.36.0/22 Signature Algorithm: sha256WithRSAEncryption 01:c9:1e:50:6f:85:1a:66:85:d0:8e:34:45:98:52:e6:94:f6: 5e:6f:26:76:43:fe:cb:f8:c4:f0:32:e3:c0:af:69:43:e9:9c: 37:39:a8:f6:a0:bd:62:b9:ec:7b:31:cf:c2:b3:b5:a3:6d:bc: 9b:15:ff:4d:b2:f1:c6:fd:8e:c0:39:b8:62:21:ee:ec:47:33: 58:29:1b:c5:83:d6:4a:0b:5f:7f:a7:d5:d3:e4:ae:3e:d3:fc: 5b:eb:6a:8b:6d:60:9a:ea:fc:15:36:73:ac:96:35:9b:91:32: bb:23:2e:7a:83:5d:d4:35:69:b2:98:44:fd:2e:11:80:8a:f0: e8:1d:92:ce:57:85:16:17:4b:06:a2:c7:b5:b9:a1:f6:6b:c8: 9b:7f:af:f4:b3:08:01:ef:62:17:28:5e:83:72:b1:3e:04:26: 22:6a:7c:31:81:22:1c:e1:09:23:3d:0a:24:2b:b6:eb:41:48: 39:94:a4:67:fe:dd:59:dd:4e:8d:8a:74:68:5f:4b:47:2e:93: 05:b6:31:54:6c:dd:b9:8e:bf:b3:ce:b1:6e:78:85:ba:9e:4e: 1f:41:b9:1b:0f:55:39:f0:9c:b0:a7:b5:58:a8:8a:ea:35:5c: ad:f4:26:c3:0f:da:a2:12:3e:14:13:57:f7:c9:b8:5d:08:6f: 2d:9f:72:4b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY3RjAxMTAvBgNVBAUTKDYxMUNCNTU2Qzg3QkMwNDlBNUE0M0VCMUYyOTcxMDdF RkYxQjc5NDAwHhcNMjUwNDE3MDU0NDM5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAwOTU0Ny1lYjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6mt8I9BRV3binPVHufEkKiNWV4BNwxdW+iy+TLx6PrCiWVwFa4ou93a2N9nb kWXykra9dAWWVRXJ75pYJR07/GwjdHL0da4QMSUgXEYhIdUtYNrecOgpt1ZxrzrI z8f0pSHXxdmo4kU1fIGjnzS/2t06g3RI91U2Oz9uvyxqXgloTXdlWK6C3Wpy2V87 PgvCzI5Ds4yRkN93XwIyOhCWb5qnsiOt/7powjAxoc8R6y0A0CWTggvj1PW/I2GR M4YTik9xVuBIVqdpUJm0AIY4Iz5l5IfxVpkhg9goukDRUs3bEEW+P5xNUTwmJbBJ 6svsgFE1OI7DI2H1/JQHsJzlkwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJxuZKRV 0wruQtEuZTQbjjW94jE5MB8GA1UdIwQYMBaAFGEctVbIe8BJpaQ+sfKXEH7/G3lA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjdGMC9DNzRFQjY5QTU5 RDUxMUVGODNEMjhCNEJDNEY5QUUwMi9ZUnkxVnNoN3dFbWxwRDZ4OHBjUWZ2OGJl VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSeTFWc2g3d0VtbHBENng4cGNRZnY4YmVVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEY3RjAvQzc0RUI2OUE1OUQ1MTFFRjgzRDI4QjRCQzRGOUFFMDIvOUE4MjZEOTA1 OUQ2MTFFRjgxNEYwMDREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn0CQwDQYJKoZIhvcNAQELBQADggEBAAHJHlBvhRpmhdCO NEWYUuaU9l5vJnZD/sv4xPAy48CvaUPpnDc5qPagvWK57Hsxz8KztaNtvJsV/02y 8cb9jsA5uGIh7uxHM1gpG8WD1koLX3+n1dPkrj7T/FvraottYJrq/BU2c6yWNZuR MrsjLnqDXdQ1abKYRP0uEYCK8Ogdks5XhRYXSwaix7W5ofZryJt/r/SzCAHvYhco XoNysT4EJiJqfDGBIhzhCSM9CiQrtutBSDmUpGf+3VndTo2KdGhfS0cukwW2MVRs 3bmOv7POsW54hbqeTh9BuRsPVTnwnLCntVioiuo1XK30JsMP2qISPhQTV/fJuF0I by2fcks= -----END CERTIFICATE-----Generated at Sat Apr 26 07:41:08 2025 by rpki-client