$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/1D2D34A03D9E11EF8CA60559C4F9AE02.roa File: 1D2D34A03D9E11EF8CA60559C4F9AE02.roa (raw, json) Hash identifier: 2zwYEBCQAix7IVqX6zRPULKSP5oWRoZedIrh1GfxCNM= Subject key identifier: 20:FC:8B:1C:81:2F:B7:A2:7A:57:D6:F3:4A:05:EF:B9:64:90:A2:25 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 02AD Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/1D2D34A03D9E11EF8CA60559C4F9AE02.roa Signing time: Mon 21 Apr 2025 01:26:56 +0000 ROA not before: Mon 21 Apr 2025 01:26:56 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 139646 IP address blocks: 103.40.8.0/22 maxlen: 22 103.40.10.0/23 maxlen: 23 103.180.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Apr 21 01:26:56 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68059ee0-9bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:54:eb:ab:7b:12:7d:cd:72:1d:53:f0:3d:49: df:9d:15:78:23:27:69:41:6a:aa:37:8f:4f:11:35: 8f:89:38:42:de:f9:99:20:22:6d:3f:0f:1c:72:0c: aa:13:48:24:07:44:66:2f:6c:19:ac:7d:ad:9f:64: 51:39:ce:64:99:57:1c:03:d4:19:4e:81:14:9b:9c: 47:cb:12:91:10:d8:ea:08:9d:e9:b7:d4:d4:62:1d: fc:64:d0:16:c6:54:0c:d3:fd:86:cb:f8:cc:2a:47: 08:57:68:f1:8a:12:7c:7c:80:73:72:b9:d1:63:d7: 12:c9:d6:10:09:14:d3:9b:1a:4a:0d:fe:89:56:1e: 50:b5:88:66:46:8e:f6:99:4e:66:b9:24:5d:b5:c0: 8f:d0:2f:ec:d4:b9:fd:e5:0b:9c:c7:20:8a:c9:ad: da:76:fb:37:64:9b:c2:72:f3:d2:ac:f4:61:a2:14: 82:49:ed:e6:7e:95:4d:c0:57:03:12:9b:1e:ce:6a: 5e:30:ac:b8:3d:e9:14:c7:6f:73:1f:a0:82:1e:81: 12:21:25:a2:9c:d4:93:6e:87:7d:07:6b:e8:1e:91: 39:1d:87:0e:82:2b:ce:ed:5d:03:61:ee:f5:57:d7: 8a:3c:25:80:e2:a8:02:19:ed:bb:4d:a3:11:52:18: d4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FC:8B:1C:81:2F:B7:A2:7A:57:D6:F3:4A:05:EF:B9:64:90:A2:25 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/1D2D34A03D9E11EF8CA60559C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.8.0/22 103.180.160.0/23 Signature Algorithm: sha256WithRSAEncryption 52:8e:c1:c7:de:0f:9c:98:42:cb:35:4a:39:2d:b5:9d:2c:64: ca:d5:3b:d1:19:89:c2:27:5d:96:a6:d0:19:a6:26:a5:ac:c3: 51:1e:63:8e:4e:5c:33:c6:7d:ef:9b:2d:a9:f7:dc:23:02:72: a6:04:a5:0f:28:92:d7:b5:5b:49:60:69:c5:05:49:ca:ce:3d: 77:00:bf:00:37:e2:f2:45:77:01:d7:fd:66:8c:ae:28:c4:9f: 41:5b:3b:6e:8d:61:6f:1d:5a:c3:e7:dd:e4:de:f9:55:8f:bd: 3c:02:88:ee:b6:bc:0d:69:b4:51:81:61:f4:14:cc:9c:e4:eb: 1c:e9:db:a6:bd:ea:37:39:78:f7:f4:1e:a3:9d:6a:84:63:42: 4f:05:d5:91:78:6a:f7:e7:45:69:ac:16:c7:08:8a:f2:59:7e: 33:62:fa:28:95:a1:65:47:c7:f3:ad:2f:f8:ba:75:b0:19:c3: 88:59:d0:10:cc:34:21:76:ce:a6:67:6d:63:3a:9f:7c:ad:be: d7:5e:86:ae:7c:04:ec:10:d6:c4:b5:17:c8:6b:a9:27:d9:c7: d2:56:4f:d2:ba:0e:71:26:46:ef:11:0f:db:84:25:b3:32:6b: 2a:38:5d:87:6c:2f:f7:b6:21:54:1b:5f:03:f0:7d:0d:59:03: 6f:3b:bd:1b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUwNDIxMDEyNjU2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODA1OWVlMC05YmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1Trq3sSfc1yHVPwPUnfnRV4IydpQWqqN49PETWPiThC3vmZICJtPw8ccgyq E0gkB0RmL2wZrH2tn2RROc5kmVccA9QZToEUm5xHyxKRENjqCJ3pt9TUYh38ZNAW xlQM0/2Gy/jMKkcIV2jxihJ8fIBzcrnRY9cSydYQCRTTmxpKDf6JVh5QtYhmRo72 mU5muSRdtcCP0C/s1Ln95QucxyCKya3advs3ZJvCcvPSrPRhohSCSe3mfpVNwFcD EpsezmpeMKy4PekUx29zH6CCHoESISWinNSTbod9B2voHpE5HYcOgivO7V0DYe71 V9eKPCWA4qgCGe27TaMRUhjUlQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCD8ixyB L7eielfW80oF77lkkKIlMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI5OTkvQjFDMUIwREEwMzFFMTFFRDk2RTI1NjIwQzRGOUFFMDIvMUQyRDM0QTAz RDlFMTFFRjhDQTYwNTU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnKAgDBAFntKAwDQYJKoZIhvcNAQELBQADggEBAFKOwcfe D5yYQss1SjkttZ0sZMrVO9EZicInXZam0BmmJqWsw1EeY45OXDPGfe+bLan33CMC cqYEpQ8okte1W0lgacUFScrOPXcAvwA34vJFdwHX/WaMrijEn0FbO26NYW8dWsPn 3eTe+VWPvTwCiO62vA1ptFGBYfQUzJzk6xzp26a96jc5ePf0HqOdaoRjQk8F1ZF4 avfnRWmsFscIivJZfjNi+iiVoWVHx/OtL/i6dbAZw4hZ0BDMNCF2zqZnbWM6n3yt vtdehq58BOwQ1sS1F8hrqSfZx9JWT9K6DnEmRu8RD9uEJbMyayo4XYdsL/e2IVQb XwPwfQ1ZA287vRs= -----END CERTIFICATE-----Generated at Sat Apr 26 09:31:23 2025 by rpki-client