$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/F650791EF01411ED9210D060C4F9AE02.roa File: F650791EF01411ED9210D060C4F9AE02.roa (raw, json) Hash identifier: 4IZfBEYxdxWId8yUiHx63z7AlPcjMCqr2gmuQDYBUpU= Subject key identifier: CE:A6:0A:EF:C8:B2:78:D6:C6:F7:3E:1D:B2:CA:41:D4:CA:90:57:06 Certificate issuer: /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72 Certificate serial: 0552 Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/F650791EF01411ED9210D060C4F9AE02.roa Signing time: Tue 08 Apr 2025 23:34:09 +0000 ROA not before: Tue 08 Apr 2025 23:34:09 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 209854 IP address blocks: 103.210.244.0/24 maxlen: 24 103.210.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1362 (0x552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153CE9, serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72 Validity Not Before: Apr 8 23:34:09 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f5b271-d26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:c4:a0:b6:0a:06:e1:56:6e:6a:6a:da:b2: 50:25:13:e5:99:21:24:4b:f8:51:69:0c:89:0a:b1: 61:3d:82:90:33:b2:5c:88:7e:88:b3:60:a0:bc:38: 1e:a6:17:7d:13:c9:ff:59:f2:05:f4:d0:21:61:98: 00:c7:20:3f:43:df:eb:f5:a6:a1:cf:86:10:f4:a6: eb:b5:03:22:6f:56:2b:46:84:9d:41:fc:74:58:22: cf:b3:4a:94:68:ee:ef:4a:d0:9f:36:38:fb:ec:87: fe:7f:c9:e2:67:b0:61:45:fb:2b:7b:fc:e4:e0:df: c5:c5:e9:bc:e3:72:e7:6c:96:ee:1a:8e:e4:06:01: 8d:58:24:df:d2:4c:6d:e4:d9:38:a2:b8:d8:ce:b1: 5e:00:2a:97:7f:5b:23:bd:80:f1:3c:e1:1a:b8:b3: 49:d2:9a:62:d7:d2:30:6b:ec:27:32:85:5f:7f:9b: ce:53:be:ca:a1:fa:c5:e8:ab:a6:08:29:e6:19:ae: de:c4:60:41:ce:8e:16:83:87:8a:55:92:d3:c8:18: e2:34:46:b6:59:13:1e:2f:28:05:0e:c7:7b:f8:dc: 12:fa:85:22:53:95:94:5a:e8:2a:5f:d4:92:b9:09: 78:77:38:5c:09:20:43:da:01:68:13:f7:bd:d6:a0: e1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A6:0A:EF:C8:B2:78:D6:C6:F7:3E:1D:B2:CA:41:D4:CA:90:57:06 X509v3 Authority Key Identifier: keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/F650791EF01411ED9210D060C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.210.244.0/23 Signature Algorithm: sha256WithRSAEncryption 52:b5:db:66:1e:b6:76:69:60:59:65:1f:5f:f9:29:a7:67:b1: 60:92:cd:03:b5:f8:34:81:8e:d7:8c:e4:34:7d:c1:3c:e1:e5: d1:60:4a:e7:2e:25:f2:e1:59:57:01:28:18:99:95:c9:33:5e: ec:cb:46:88:ea:ca:bb:c6:68:6c:6a:3f:f8:db:67:1e:bc:19: 25:58:89:3b:32:f1:c1:7b:af:57:a7:d8:d2:93:2d:40:36:c9: b2:70:05:5b:da:4c:b5:dc:0e:23:42:d6:db:f8:1b:e9:b5:53: 20:a0:29:d2:b6:52:86:fc:31:a3:64:31:d0:0f:15:e8:9a:69: 31:31:ea:3c:9c:01:cf:4c:7d:94:2e:0c:40:71:d4:eb:89:ff: ea:3a:64:96:a0:42:80:fd:d9:95:3f:da:03:98:e0:5c:26:3a: d2:9e:6d:74:72:fd:b7:db:ea:60:b7:62:f5:67:86:aa:a0:8f: 2a:09:60:5f:b5:02:c1:1a:01:15:32:ba:bd:d9:1d:68:3f:8b: a3:09:65:01:a7:58:17:47:85:23:98:3e:d6:37:90:5c:76:12: ee:80:b2:99:09:7b:08:41:7b:2f:e0:5f:ba:2c:6a:99:92:01: ad:c6:a9:44:db:19:0f:31:fd:fa:7b:d4:f3:cb:98:12:e5:fd: c8:3f:ab:19 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDRTkxMTAvBgNVBAUTKEUwOTk2MTE1NTA4QTNBRDU5OTE1REJBQkNDQjY5NkRC QTBCNENDNzIwHhcNMjUwNDA4MjMzNDA5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y1YjI3MS1kMjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxa7EoLYKBuFWbmpq2rJQJRPlmSEkS/hRaQyJCrFhPYKQM7JciH6Is2CgvDge phd9E8n/WfIF9NAhYZgAxyA/Q9/r9aahz4YQ9KbrtQMib1YrRoSdQfx0WCLPs0qU aO7vStCfNjj77If+f8niZ7BhRfsre/zk4N/Fxem843LnbJbuGo7kBgGNWCTf0kxt 5Nk4orjYzrFeACqXf1sjvYDxPOEauLNJ0ppi19Iwa+wnMoVff5vOU77KofrF6Kum CCnmGa7exGBBzo4Wg4eKVZLTyBjiNEa2WRMeLygFDsd7+NwS+oUiU5WUWugqX9SS uQl4dzhcCSBD2gFoE/e91qDh5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFM6mCu/I snjWxvc+HbLKQdTKkFcGMB8GA1UdIwQYMBaAFOCZYRVQijrVmRXbq8y2ltugtMxy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0NFOS8wQUIxRDM5NkY1 MTUxMUVCOUVGRTA3NTBDNEY5QUUwMi80SmxoRlZDS090V1pGZHVyekxhVzI2QzB6 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKbGhGVkNLT3RXWkZkdXJ6TGFXMjZDMHpISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTNDRTkvMEFCMUQzOTZGNTE1MTFFQjlFRkUwNzUwQzRGOUFFMDIvRjY1MDc5MUVG MDE0MTFFRDkyMTBEMDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn0vQwDQYJKoZIhvcNAQELBQADggEBAFK122YetnZpYFll H1/5KadnsWCSzQO1+DSBjteM5DR9wTzh5dFgSucuJfLhWVcBKBiZlckzXuzLRojq yrvGaGxqP/jbZx68GSVYiTsy8cF7r1en2NKTLUA2ybJwBVvaTLXcDiNC1tv4G+m1 UyCgKdK2Uob8MaNkMdAPFeiaaTEx6jycAc9MfZQuDEBx1OuJ/+o6ZJagQoD92ZU/ 2gOY4FwmOtKebXRy/bfb6mC3YvVnhqqgjyoJYF+1AsEaARUyur3ZHWg/i6MJZQGn WBdHhSOYPtY3kFx2Eu6AspkJewhBey/gX7osapmSAa3GqUTbGQ8x/fp71PPLmBLl /cg/qxk= -----END CERTIFICATE-----Generated at Sat Apr 26 12:34:46 2025 by rpki-client