$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/088BBCAE15BD11F0A1CED525C4F9AE02.roa File: 088BBCAE15BD11F0A1CED525C4F9AE02.roa (raw, json) Hash identifier: TPVp9VWOXR8oVOp+7fMuRvb11VEEdHgj+iQi4wf2KDI= Subject key identifier: 4C:8B:45:68:60:52:E9:43:B5:BB:50:CF:03:62:B2:9A:5A:32:2E:F9 Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Certificate serial: 0B2C Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/088BBCAE15BD11F0A1CED525C4F9AE02.roa Signing time: Thu 10 Apr 2025 03:36:49 +0000 ROA not before: Thu 10 Apr 2025 03:36:49 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 139771 IP address blocks: 103.134.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2860 (0xb2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Validity Not Before: Apr 10 03:36:49 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67f73cd0-bf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:e2:2c:b0:34:98:21:62:6f:b4:5b:ed:20: 36:78:76:79:61:6d:b8:a5:03:b7:54:99:50:d8:18: eb:b3:fa:0e:30:71:b1:40:5a:8c:79:30:dd:fb:63: b0:a2:eb:73:66:7f:5f:9d:36:3d:03:b8:8c:c3:4f: 4e:f7:b5:a0:be:c0:98:2a:58:36:97:f9:72:f9:8c: e2:41:dd:a7:b1:15:d4:9f:7e:26:43:18:8a:a5:94: fe:57:56:a2:0b:b8:fd:0f:fb:45:97:df:29:a9:6a: ad:c2:f0:c7:fb:ba:9b:08:21:ec:9e:1e:22:57:23: 66:55:7c:4f:9b:c7:64:c8:d6:c2:e3:3d:5e:40:ff: 41:72:0e:0e:6a:04:35:48:af:f6:3f:65:f6:01:66: ce:cd:de:e9:0a:78:1b:40:6c:23:3a:5b:16:63:26: 99:e1:fa:b5:ff:b3:e4:73:70:85:31:60:ec:a8:19: 88:84:80:f3:5a:3e:b9:7b:3d:ba:16:bb:46:e5:01: 3d:e8:1a:82:80:46:bf:50:2d:ef:95:93:3b:b0:ca: c3:6b:4b:1a:a3:74:9d:45:90:e3:21:9e:5b:81:a5: 8d:4f:b1:90:bf:07:e7:c9:4c:6c:2e:84:75:ab:e2: 54:a6:75:82:b8:92:15:2c:09:98:02:93:40:8b:fd: 94:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8B:45:68:60:52:E9:43:B5:BB:50:CF:03:62:B2:9A:5A:32:2E:F9 X509v3 Authority Key Identifier: keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/088BBCAE15BD11F0A1CED525C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.241.0/24 Signature Algorithm: sha256WithRSAEncryption 88:4a:56:81:0d:f6:27:9f:a7:f8:f4:73:f8:45:42:f2:1f:5c: 05:37:6e:97:04:b7:9e:3d:44:5a:a1:9c:33:a0:9e:29:e2:3b: 74:57:6f:32:61:db:98:20:55:40:79:fe:23:40:3b:c8:11:28: c8:1d:b5:e0:f2:09:58:a2:c4:aa:d2:63:cf:59:7c:44:c5:f9: 28:ea:4c:68:9b:73:dd:b8:80:cf:a9:08:1e:36:a7:c2:e3:fe: d3:59:17:9c:1a:38:16:02:79:06:8d:8d:e6:44:bc:58:63:5a: d6:7d:bf:2b:09:34:df:31:2c:ef:d8:a7:23:03:95:d2:5f:a7: 21:c8:dd:f0:8e:4d:c9:e2:3d:f2:e4:2b:fc:4f:83:ab:75:18: b6:0f:5b:bb:83:64:bb:38:c6:4e:23:89:f1:3c:5d:cb:75:c8: a2:38:44:54:48:11:ee:71:a1:df:32:44:ec:6b:84:71:ca:35: 3b:dd:2e:fb:80:48:06:63:ad:90:e1:aa:d8:30:63:52:2e:18: 76:62:8c:12:97:07:de:4b:18:5a:df:77:e5:dc:be:67:3e:e0: 59:f6:18:68:1b:66:64:9b:64:bc:f8:45:bf:82:2d:c6:ab:28: 61:5f:1b:e4:31:cf:8d:27:0d:83:84:4d:45:78:be:0f:b4:17: a5:68:fc:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTAxMTAvBgNVBAUTKDJDMUM5NzEyMDBBQUM2OEVBODQ1RUMwRkREODdFQzhD NTAxMkYyOUMwHhcNMjUwNDEwMDMzNjQ5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y3M2NkMC1iZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBTiLLA0mCFib7Rb7SA2eHZ5YW24pQO3VJlQ2Bjrs/oOMHGxQFqMeTDd+2Ow outzZn9fnTY9A7iMw09O97WgvsCYKlg2l/ly+YziQd2nsRXUn34mQxiKpZT+V1ai C7j9D/tFl98pqWqtwvDH+7qbCCHsnh4iVyNmVXxPm8dkyNbC4z1eQP9Bcg4OagQ1 SK/2P2X2AWbOzd7pCngbQGwjOlsWYyaZ4fq1/7Pkc3CFMWDsqBmIhIDzWj65ez26 FrtG5QE96BqCgEa/UC3vlZM7sMrDa0sao3SdRZDjIZ5bgaWNT7GQvwfnyUxsLoR1 q+JUpnWCuJIVLAmYApNAi/2U5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFEyLRWhg UulDtbtQzwNisppaMi75MB8GA1UdIwQYMBaAFCwclxIAqsaOqEXsD92H7IxQEvKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5MC9CRUY0NTkwMjNG NkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhvNm9SZXdQM1lmc2pGQVM4 cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCeVhFZ0NxeG82b1Jld1AzWWZzakZBUzhwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzUyOTAvQkVGNDU5MDIzRjZCMTFFQUI3QjlDNTZFQzRGOUFFMDIvMDg4QkJDQUUx NUJEMTFGMEExQ0VENTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnhvEwDQYJKoZIhvcNAQELBQADggEBAIhKVoEN9iefp/j0 c/hFQvIfXAU3bpcEt549RFqhnDOgniniO3RXbzJh25ggVUB5/iNAO8gRKMgdteDy CViixKrSY89ZfETF+SjqTGibc924gM+pCB42p8Lj/tNZF5waOBYCeQaNjeZEvFhj WtZ9vysJNN8xLO/YpyMDldJfpyHI3fCOTcniPfLkK/xPg6t1GLYPW7uDZLs4xk4j ifE8Xct1yKI4RFRIEe5xod8yROxrhHHKNTvdLvuASAZjrZDhqtgwY1IuGHZijBKX B95LGFrfd+Xcvmc+4Fn2GGgbZmSbZLz4Rb+CLcarKGFfG+Qxz40nDYOETUV4vg+0 F6Vo/Fk= -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:11 2025 by rpki-client