$ rpki-client -vvf rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/D490B9E456BE11EAA979861EC4F9AE02.roa File: D490B9E456BE11EAA979861EC4F9AE02.roa (raw, json) Hash identifier: WqlB3AyhDDJWUItXT29SZAzjz5ieM7KBaQAcsyIppRw= Subject key identifier: 1A:E3:9E:CD:DE:82:E6:A9:44:A1:A1:71:24:AD:6E:F2:17:F1:47:0F Certificate issuer: /CN=A9177B64/serialNumber=06E8EB2E1CC1730F2B726F4F000844C3453FAA59 Certificate serial: 0A97 Authority key identifier: 06:E8:EB:2E:1C:C1:73:0F:2B:72:6F:4F:00:08:44:C3:45:3F:AA:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BujrLhzBcw8rcm9PAAhEw0U_qlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/D490B9E456BE11EAA979861EC4F9AE02.roa Signing time: Wed 02 Apr 2025 19:50:19 +0000 ROA not before: Wed 02 Apr 2025 19:50:18 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 133192 IP address blocks: 103.85.28.0/24 maxlen: 24 103.85.29.0/24 maxlen: 24 103.85.30.0/24 maxlen: 24 103.85.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/BujrLhzBcw8rcm9PAAhEw0U_qlk.crl rsync://rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/BujrLhzBcw8rcm9PAAhEw0U_qlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BujrLhzBcw8rcm9PAAhEw0U_qlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2711 (0xa97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177B64, serialNumber=06E8EB2E1CC1730F2B726F4F000844C3453FAA59 Validity Not Before: Apr 2 19:50:18 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ed94fa-b3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:44:38:09:bf:aa:76:2c:9c:76:94:f2:da:62: 48:5e:aa:74:33:f8:58:d3:79:9c:1e:c8:2b:67:70: c4:aa:a9:3e:74:83:f9:4c:c0:da:51:f8:7d:0e:4a: d5:6c:7a:ef:9e:57:83:c2:75:09:26:fb:54:81:d6: 7a:a0:fe:ba:e6:37:6e:00:c6:41:fa:7f:e2:29:44: 0e:23:64:9e:d6:18:5f:ed:3d:32:a8:12:dc:b4:56: 00:7b:56:7a:f1:4f:91:95:bc:55:4a:90:ab:2b:89: 3e:48:9e:cd:17:16:16:6e:61:74:22:9c:b5:4b:8c: 1f:81:fb:d4:bd:64:40:6a:c1:1d:88:d5:7b:09:36: 6d:f5:32:f6:09:31:ce:6b:05:52:70:04:ab:8d:01: 48:5b:27:d1:a4:af:5e:c8:be:78:27:78:39:a3:62: 5c:ff:58:c2:03:4e:a3:22:f9:97:8f:41:91:da:05: cf:cb:f2:9c:6f:ea:5c:1e:53:9e:c9:d4:38:56:3b: b3:e9:ce:5a:87:05:69:e0:c0:88:b9:f2:cf:db:33: 6b:30:87:c1:f9:16:ff:13:f7:f1:13:0e:e6:6d:9e: a7:e9:96:6d:de:d7:f8:10:07:45:b5:23:97:c9:ce: c4:d2:c3:97:24:8c:61:dc:da:43:66:c8:0e:87:ba: 83:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E3:9E:CD:DE:82:E6:A9:44:A1:A1:71:24:AD:6E:F2:17:F1:47:0F X509v3 Authority Key Identifier: keyid:06:E8:EB:2E:1C:C1:73:0F:2B:72:6F:4F:00:08:44:C3:45:3F:AA:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/BujrLhzBcw8rcm9PAAhEw0U_qlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BujrLhzBcw8rcm9PAAhEw0U_qlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/D490B9E456BE11EAA979861EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.28.0/22 Signature Algorithm: sha256WithRSAEncryption 08:8d:b8:d2:bb:e2:89:d5:06:05:e1:ff:c1:bc:5e:96:41:3a: f6:13:9e:75:b4:f4:4f:cc:d5:5d:66:94:f2:c4:77:b3:90:e0: e2:b0:6e:e3:4e:4a:24:05:f1:0d:e8:72:d9:34:ff:bc:a6:ff: c6:9f:17:52:d7:7f:72:48:49:8e:25:80:45:e0:0e:cd:85:4d: b2:c0:30:93:77:c1:de:5c:17:7c:2d:7d:ff:63:f4:0b:15:2f: 19:b5:3a:38:b3:44:ec:0a:a1:2f:c2:70:7d:f3:73:ae:48:b4: f6:8e:2d:4c:91:b4:63:8e:97:ed:48:0f:3b:c4:4f:57:48:b0: 89:51:a3:0c:84:98:93:71:2b:1e:6e:ef:21:a1:96:46:5c:cf: f2:ce:b9:60:17:f7:85:d5:bf:6e:00:23:ae:49:60:02:71:57: ef:90:57:b8:bb:93:a0:b8:e0:16:e4:8a:0d:5a:28:8e:ac:82: 71:33:eb:37:72:01:0f:ed:ae:94:ef:c0:da:14:5c:24:47:73: fb:0d:e7:89:d3:36:96:bd:41:ac:93:f0:e9:8b:d9:c2:af:2b: 4d:d7:50:cc:72:63:4e:b4:1f:d0:08:87:a8:47:8a:41:45:f8: 14:ac:4f:be:ee:7d:5a:a8:97:0f:52:41:a9:f3:02:fa:25:85: 32:04:87:3e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdCNjQxMTAvBgNVBAUTKDA2RThFQjJFMUNDMTczMEYyQjcyNkY0RjAwMDg0NEMz NDUzRkFBNTkwHhcNMjUwNDAyMTk1MDE4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkOTRmYS1iM2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkQ4Cb+qdiycdpTy2mJIXqp0M/hY03mcHsgrZ3DEqqk+dIP5TMDaUfh9DkrV bHrvnleDwnUJJvtUgdZ6oP665jduAMZB+n/iKUQOI2Se1hhf7T0yqBLctFYAe1Z6 8U+RlbxVSpCrK4k+SJ7NFxYWbmF0Ipy1S4wfgfvUvWRAasEdiNV7CTZt9TL2CTHO awVScASrjQFIWyfRpK9eyL54J3g5o2Jc/1jCA06jIvmXj0GR2gXPy/Kcb+pcHlOe ydQ4Vjuz6c5ahwVp4MCIufLP2zNrMIfB+Rb/E/fxEw7mbZ6n6ZZt3tf4EAdFtSOX yc7E0sOXJIxh3NpDZsgOh7qDhQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBrjns3e guapRKGhcSStbvIX8UcPMB8GA1UdIwQYMBaAFAbo6y4cwXMPK3JvTwAIRMNFP6pZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0I2NC9BQkY5Nzk2ODU2 QkQxMUVBQTUwM0Q2MUNDNEY5QUUwMi9CdWpyTGh6QmN3OHJjbTlQQUFoRXcwVV9x bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J1anJMaHpCY3c4cmNtOVBBQWhFdzBVX3Fsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzdCNjQvQUJGOTc5Njg1NkJEMTFFQUE1MDNENjFDQzRGOUFFMDIvRDQ5MEI5RTQ1 NkJFMTFFQUE5Nzk4NjFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnVRwwDQYJKoZIhvcNAQELBQADggEBAAiNuNK74onVBgXh /8G8XpZBOvYTnnW09E/M1V1mlPLEd7OQ4OKwbuNOSiQF8Q3octk0/7ym/8afF1LX f3JISY4lgEXgDs2FTbLAMJN3wd5cF3wtff9j9AsVLxm1OjizROwKoS/CcH3zc65I tPaOLUyRtGOOl+1IDzvET1dIsIlRowyEmJNxKx5u7yGhlkZcz/LOuWAX94XVv24A I65JYAJxV++QV7i7k6C44Bbkig1aKI6sgnEz6zdyAQ/trpTvwNoUXCRHc/sN54nT Npa9QayT8OmL2cKvK03XUMxyY060H9AIh6hHikFF+BSsT77ufVqolw9SQanzAvol hTIEhz4= -----END CERTIFICATE-----Generated at Sat Apr 26 08:17:31 2025 by rpki-client