$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/357D722C67D911EEA787145FC4F9AE02.roa File: 357D722C67D911EEA787145FC4F9AE02.roa (raw, json) Hash identifier: 7I2IqOR2xiPyGuWyUJiiPfmupUfqm37Gh46DwQEOptk= Subject key identifier: 1D:42:75:27:AC:2D:41:D1:28:5E:A1:1A:92:1D:16:D6:12:98:BC:FD Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0C5F Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/357D722C67D911EEA787145FC4F9AE02.roa Signing time: Wed 16 Apr 2025 18:27:37 +0000 ROA not before: Wed 16 Apr 2025 18:27:37 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 137263 IP address blocks: 103.135.240.0/22 maxlen: 22 103.135.240.0/23 maxlen: 23 103.135.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3167 (0xc5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: Apr 16 18:27:37 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67fff699-6f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:14:33:b4:6f:3c:9f:ee:35:59:b5:9d:ca: f2:ec:f3:84:52:e7:20:78:05:25:a4:a4:b7:a4:40: 02:d5:af:23:f9:2e:f8:c0:82:76:10:02:2c:7b:f9: 12:74:cc:c4:99:44:55:ba:f9:04:58:14:68:66:cb: 55:e9:75:87:38:af:af:cc:a5:e4:00:f5:99:a4:9c: 1c:72:a1:93:f7:c2:3e:2c:df:7d:7a:a3:d0:f2:c4: 9c:24:69:bd:10:54:04:76:7e:f7:27:0a:b8:d6:30: 48:49:6e:1d:91:b9:4b:26:70:09:b9:80:a7:15:6e: b5:71:71:0e:4b:91:69:04:44:25:6a:9d:9a:66:34: 72:11:aa:07:fe:71:92:a9:b6:e8:fc:9a:d3:18:d2: 9b:9e:c5:e7:5e:1a:42:67:60:b5:6e:54:2c:9d:d4: 66:ba:8d:e1:9e:40:62:42:8c:2b:98:1b:95:33:13: ac:d3:a2:d5:e2:1c:61:4c:69:86:f5:a9:14:05:31: c8:e6:8d:cd:c7:ca:3b:8f:b4:e6:a9:dc:04:24:89: 5c:33:31:56:b6:3e:a1:cb:d9:2c:99:29:8c:53:85: 67:98:c5:0e:18:cf:7a:b2:50:ad:38:56:ef:96:7e: 1d:5e:c2:11:54:a4:e9:6a:13:76:bf:48:58:53:b2: 9b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:42:75:27:AC:2D:41:D1:28:5E:A1:1A:92:1D:16:D6:12:98:BC:FD X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/357D722C67D911EEA787145FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.240.0/22 Signature Algorithm: sha256WithRSAEncryption 40:8c:4d:fa:48:43:ae:58:f7:b8:cf:3e:07:03:4b:ee:f9:cd: 93:fc:bd:8d:27:53:c1:5d:47:a7:c1:f5:68:f4:76:aa:ad:7f: fd:e6:25:0b:6a:86:15:68:f1:99:ea:23:3c:04:d7:af:49:bc: e0:02:80:34:98:3e:21:f5:2a:d5:a9:f5:89:8b:f6:43:15:73: e0:86:58:97:15:dc:a9:a7:d7:7c:78:91:a2:8c:5c:79:be:f4: cd:61:97:55:85:13:bc:92:10:87:44:11:80:5d:d9:d0:a8:f9: 31:63:8d:bc:04:96:ef:33:27:13:58:56:7c:fb:e7:81:ab:9c: 37:9a:87:67:6b:0c:f5:5d:d1:66:60:cf:fd:0e:4c:1f:36:0c: 0c:2c:17:d5:4b:42:fc:d6:df:61:05:ee:da:89:eb:48:a9:74: 7f:d3:f5:5e:2d:5f:29:17:d7:26:38:eb:6d:49:21:d2:04:50: 05:68:7d:eb:fb:54:c3:aa:f2:e2:a1:ff:ad:43:34:24:27:41: cb:6e:1c:2a:d5:b6:71:4e:d5:87:9d:83:a7:a6:9e:36:eb:18: 12:99:24:4d:7e:89:8b:2f:2b:d8:24:d7:8e:d9:29:19:de:37: cb:b5:49:33:88:d9:76:4c:d6:df:fb:d5:e3:85:76:fd:99:0c: 6c:2d:01:c2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjUwNDE2MTgyNzM3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZmZjY5OS02ZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnYUM7RvPJ/uNVm1ncry7POEUucgeAUlpKS3pEAC1a8j+S74wIJ2EAIse/kS dMzEmURVuvkEWBRoZstV6XWHOK+vzKXkAPWZpJwccqGT98I+LN99eqPQ8sScJGm9 EFQEdn73Jwq41jBISW4dkblLJnAJuYCnFW61cXEOS5FpBEQlap2aZjRyEaoH/nGS qbbo/JrTGNKbnsXnXhpCZ2C1blQsndRmuo3hnkBiQowrmBuVMxOs06LV4hxhTGmG 9akUBTHI5o3Nx8o7j7TmqdwEJIlcMzFWtj6hy9ksmSmMU4VnmMUOGM96slCtOFbv ln4dXsIRVKTpahN2v0hYU7KblwIDAQABo4IClTCCApEwHQYDVR0OBBYEFB1CdSes LUHRKF6hGpIdFtYSmLz9MB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUZFNzcvN0I5MDk1NTRGQkFBMTFFOTg5QUQ4MTQwQzRGOUFFMDIvMzU3RDcyMkM2 N0Q5MTFFRUE3ODcxNDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnh/AwDQYJKoZIhvcNAQELBQADggEBAECMTfpIQ65Y97jP PgcDS+75zZP8vY0nU8FdR6fB9Wj0dqqtf/3mJQtqhhVo8ZnqIzwE169JvOACgDSY PiH1KtWp9YmL9kMVc+CGWJcV3Kmn13x4kaKMXHm+9M1hl1WFE7ySEIdEEYBd2dCo +TFjjbwElu8zJxNYVnz754GrnDeah2drDPVd0WZgz/0OTB82DAwsF9VLQvzW32EF 7tqJ60ipdH/T9V4tXykX1yY4621JIdIEUAVofev7VMOq8uKh/61DNCQnQctuHCrV tnFO1Yedg6emnjbrGBKZJE1+iYsvK9gk147ZKRneN8u1STOI2XZM1t/71eOFdv2Z DGwtAcI= -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:42 2025 by rpki-client