$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/9C1DF7FC434311ECBE4BAA38C4F9AE02.roa File: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (raw, json) Hash identifier: NzsKwICfagzX9T3AahXgeWsHOEBVdu2eB1iizPCz1SA= Subject key identifier: 86:88:9F:68:73:D5:F7:85:45:77:76:F1:3F:4E:C7:37:84:0D:36:41 Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Certificate serial: 1939 Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/9C1DF7FC434311ECBE4BAA38C4F9AE02.roa Signing time: Thu 24 Apr 2025 16:44:31 +0000 ROA not before: Thu 24 Apr 2025 16:44:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132712 IP address blocks: 43.243.196.0/22 maxlen: 24 103.24.28.0/22 maxlen: 24 2406:a900::/32 maxlen: 32 2406:a900:103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6457 (0x1939) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Validity Not Before: Apr 24 16:44:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680a6a6f-ec86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f4:16:f0:4b:14:42:98:d0:d5:1b:31:4d:12: 4b:22:cb:76:50:23:3d:e7:64:ab:34:14:ac:ff:56: 75:83:8c:af:6d:9d:1e:78:6e:4e:5a:4b:4c:5a:a8: 02:26:35:ce:49:1f:bb:cb:ef:05:fa:40:2d:67:9f: fb:52:9f:12:4a:34:e2:1f:1d:86:8b:e4:9e:68:b5: 03:e2:80:78:bf:b3:23:8a:d9:34:1c:01:28:bf:15: 78:eb:31:6c:49:06:34:c3:a4:e8:48:b4:32:72:1a: ee:00:7b:f3:6c:ef:d0:be:6c:9e:f1:af:75:85:22: 95:97:19:4b:3d:c7:9e:e9:32:88:da:70:3e:58:17: de:04:27:ea:08:4c:7d:02:e8:e8:31:99:b2:29:4a: 36:dc:33:19:fb:1c:e2:2f:df:b9:33:c8:1f:f2:cb: f3:a5:94:10:28:13:6d:42:da:59:2a:c9:8c:3b:bc: e2:7e:b5:31:79:cf:d6:61:86:4f:14:b4:84:ad:2c: d1:fe:67:c4:31:5c:0c:d6:91:09:71:b3:0a:22:9e: 71:ae:3b:fe:10:ff:b8:a8:42:33:1c:e1:23:a6:b2: 01:6d:c2:b2:4d:75:4b:c8:e3:e3:52:41:d5:ec:2c: 15:62:aa:fd:0e:e5:5d:ee:12:5d:a2:f6:34:50:d4: b6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:88:9F:68:73:D5:F7:85:45:77:76:F1:3F:4E:C7:37:84:0D:36:41 X509v3 Authority Key Identifier: keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/9C1DF7FC434311ECBE4BAA38C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.196.0/22 103.24.28.0/22 IPv6: 2406:a900::/32 Signature Algorithm: sha256WithRSAEncryption 8d:1d:82:15:0f:28:f1:34:83:39:ac:9e:4f:fd:b6:e5:90:d9: c4:76:a6:90:66:f2:f2:21:02:ca:2a:c7:e6:f5:1f:d9:27:5c: d9:78:71:e5:77:15:65:86:9d:d6:11:c5:8c:7d:45:91:b2:a9: e6:ab:cc:dc:38:b5:8a:b8:f6:b4:93:1a:d9:f4:88:a9:e5:e8: 81:9a:70:b2:9a:24:f2:88:0b:af:64:e8:f5:f1:e9:46:91:d1: cf:23:ae:50:8e:8f:cb:a0:ca:00:5a:4c:97:9b:f2:ad:58:0b: 64:28:8d:99:16:02:4e:34:38:1c:c4:17:14:a6:00:13:9b:34: 9f:8a:ad:86:24:af:b6:47:ae:97:7d:f3:2d:c3:2e:7e:49:7a: b6:74:28:d2:52:0b:e2:d3:35:23:c3:8c:b9:01:ff:06:87:5a: 02:64:84:01:16:7f:fe:46:b6:6a:19:79:2f:5e:17:9f:20:49: 5f:11:14:d1:be:3a:f9:47:ad:17:4d:89:dd:ea:07:e5:79:1f: d8:db:46:08:fb:b7:e0:f1:a4:ed:76:0c:af:c0:53:b7:59:4c: a8:60:33:48:22:a2:da:3b:8a:af:1c:0c:44:7c:10:ff:79:99: 7b:a9:42:cc:6b:83:70:22:ad:5b:b7:0e:55:e7:17:33:64:4d: b9:c2:31:1f -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICGTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDFDNjJEQzFEODBDQkFCMDMwMzUzRTFGNTc0QjM2MDAx OThGQjZCNzEwHhcNMjUwNDI0MTY0NDMxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhNmE2Zi1lYzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPQW8EsUQpjQ1RsxTRJLIst2UCM952SrNBSs/1Z1g4yvbZ0eeG5OWktMWqgC JjXOSR+7y+8F+kAtZ5/7Up8SSjTiHx2Gi+SeaLUD4oB4v7Mjitk0HAEovxV46zFs SQY0w6ToSLQychruAHvzbO/Qvmye8a91hSKVlxlLPcee6TKI2nA+WBfeBCfqCEx9 AujoMZmyKUo23DMZ+xziL9+5M8gf8svzpZQQKBNtQtpZKsmMO7zifrUxec/WYYZP FLSErSzR/mfEMVwM1pEJcbMKIp5xrjv+EP+4qEIzHOEjprIBbcKyTXVLyOPjUkHV 7CwVYqr9DuVd7hJdovY0UNS2GwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFIaIn2hz 1feFRXd28T9OxzeEDTZBMB8GA1UdIwQYMBaAFBxi3B2Ay6sDA1Ph9XSzYAGY+2tx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GRkZFQzExQTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3TURVLUgxZExOZ0Faajdh M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hHTGNIWURMcXdNRFUtSDFkTE5nQVpqN2EzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkVEMTgvRkZGRUMxMUE3QUY4MTFFNzg5OEE2RjJFQzRGOUFFMDIvOUMxREY3RkM0 MzQzMTFFQ0JFNEJBQTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr88QDBAJnGBwwDQQCAAIwBwMFACQGqQAwDQYJKoZIhvcN AQELBQADggEBAI0dghUPKPE0gzmsnk/9tuWQ2cR2ppBm8vIhAsoqx+b1H9knXNl4 ceV3FWWGndYRxYx9RZGyqearzNw4tYq49rSTGtn0iKnl6IGacLKaJPKIC69k6PXx 6UaR0c8jrlCOj8ugygBaTJeb8q1YC2QojZkWAk40OBzEFxSmABObNJ+KrYYkr7ZH rpd98y3DLn5JerZ0KNJSC+LTNSPDjLkB/waHWgJkhAEWf/5GtmoZeS9eF58gSV8R FNG+OvlHrRdNid3qB+V5H9jbRgj7t+DxpO12DK/AU7dZTKhgM0gioto7iq8cDER8 EP95mXupQsxrg3AirVu3DlXnFzNkTbnCMR8= -----END CERTIFICATE-----Generated at Sat Apr 26 13:00:37 2025 by rpki-client