$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/C1171FCAB1B111ECBA7F614FC4F9AE02.roa File: C1171FCAB1B111ECBA7F614FC4F9AE02.roa (raw, json) Hash identifier: 5pc4Fgf96yhJHg1dXqyOkvTiTCFOmyYqtcguriQDwlE= Subject key identifier: F7:E3:BB:6E:E1:98:05:91:B1:7F:C0:F4:E7:B4:C0:72:0A:83:1A:DA Certificate issuer: /CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Certificate serial: 07EF Authority key identifier: 9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/C1171FCAB1B111ECBA7F614FC4F9AE02.roa Signing time: Fri 28 Mar 2025 21:52:23 +0000 ROA not before: Fri 28 Mar 2025 21:52:23 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 138574 IP address blocks: 103.133.134.0/23 maxlen: 23 103.133.134.0/24 maxlen: 24 103.133.135.0/24 maxlen: 24 2001:df7:e480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2031 (0x7ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D34, serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Validity Not Before: Mar 28 21:52:23 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67e71a17-883b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:d4:bc:ea:3f:20:45:68:b4:f2:e5:49:4f: ce:eb:ca:2b:eb:b7:ce:95:0f:06:23:cf:76:53:2d: d2:9e:f3:0f:d1:49:27:4a:35:39:0d:86:90:bb:2b: 1f:2a:80:a8:98:aa:d9:36:23:48:46:39:01:8f:56: 8f:e2:b1:1b:97:cc:c1:99:0c:e6:90:fd:b7:1b:83: 9d:3f:e0:76:32:37:c5:b7:b1:45:be:3c:55:b4:cd: 7d:7f:16:ce:52:45:8d:3d:8c:ca:32:5b:8c:50:59: 10:26:3c:03:bc:b2:41:47:4c:c2:12:d5:04:3c:35: 9d:ef:44:9a:4e:15:23:ef:6a:b6:bc:1d:93:fd:d1: 4b:2a:6b:8f:e6:ae:b5:a7:a3:60:e4:fd:af:06:db: d0:76:9a:85:64:ac:78:14:51:f3:59:4b:1f:30:48: b6:f4:d1:5d:05:23:9f:fe:76:1f:cd:7a:87:64:93: e5:2d:73:9c:9d:b4:5a:82:4d:dc:2a:e3:0a:49:01: b9:c5:ac:6b:07:15:e2:46:87:a7:4b:32:99:76:49: b2:49:0f:5c:5c:56:33:a8:1d:ce:79:e3:21:b4:06: ba:f9:5f:77:4e:1d:93:94:72:45:5c:df:e2:63:82: db:b1:0f:c6:d1:6e:5a:3c:ef:15:9c:cc:73:e4:a8: b8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E3:BB:6E:E1:98:05:91:B1:7F:C0:F4:E7:B4:C0:72:0A:83:1A:DA X509v3 Authority Key Identifier: keyid:9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/C1171FCAB1B111ECBA7F614FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.134.0/23 IPv6: 2001:df7:e480::/48 Signature Algorithm: sha256WithRSAEncryption 85:e8:d4:e0:90:05:0e:56:f7:28:51:81:04:83:da:9c:ff:87: f2:d7:a9:1d:bd:95:ff:1c:b1:a2:d3:1a:bf:4a:f4:90:bb:71: ce:17:10:eb:44:19:ea:7f:73:bf:c5:3d:fa:0a:82:97:c0:d7: 2a:cc:34:a4:0d:1d:b4:be:b7:7d:63:c9:46:96:d5:7f:0e:64: 9d:0e:66:a5:98:f5:c0:ef:cc:fb:43:b9:e7:f7:aa:69:47:0c: a4:23:3d:68:a2:07:f6:b7:15:95:69:76:a0:5c:8e:70:9c:da: 4e:f6:7a:c8:2a:a9:3b:fc:6b:f2:bd:9a:1f:10:83:47:32:5a: 5b:af:4b:89:6b:4a:56:dd:81:88:01:00:02:30:02:9a:d6:29: 5d:d0:1a:0c:19:01:42:69:21:c9:4e:c2:96:7f:47:43:ce:30: 32:1f:c5:d2:d9:75:07:7d:8a:d4:6b:db:8e:62:48:2c:b5:14: b6:94:ae:05:84:d5:32:e2:d6:a1:27:de:42:94:36:8d:0f:3d: b1:8f:12:f7:de:b5:01:2c:c6:83:02:3a:53:a9:fc:05:ad:97: 67:bd:c9:0c:92:b6:fb:2e:e2:af:e2:31:ad:38:27:8e:e1:f7: 3e:7b:da:52:6a:0c:67:4d:43:17:92:db:e7:45:e2:8a:d6:91: ef:91:6f:6b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVEMzQxMTAvBgNVBAUTKDlFQzEyMTZEMjU2NDE2NDAzQ0I1QzUzRTczNDU1MzBG ODMyNzJDREQwHhcNMjUwMzI4MjE1MjIzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2U3MWExNy04ODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwzUvOo/IEVotPLlSU/O68or67fOlQ8GI892Uy3SnvMP0UknSjU5DYaQuysf KoComKrZNiNIRjkBj1aP4rEbl8zBmQzmkP23G4OdP+B2MjfFt7FFvjxVtM19fxbO UkWNPYzKMluMUFkQJjwDvLJBR0zCEtUEPDWd70SaThUj72q2vB2T/dFLKmuP5q61 p6Ng5P2vBtvQdpqFZKx4FFHzWUsfMEi29NFdBSOf/nYfzXqHZJPlLXOcnbRagk3c KuMKSQG5xaxrBxXiRoenSzKZdkmySQ9cXFYzqB3OeeMhtAa6+V93Th2TlHJFXN/i Y4LbsQ/G0W5aPO8VnMxz5Ki49QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPfju27h mAWRsX/A9Oe0wHIKgxraMB8GA1UdIwQYMBaAFJ7BIW0lZBZAPLXFPnNFUw+DJyzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQzNC9EQkE4Nzg1OEU2 QTAxMUVBQTg1NDRCNDNDNEY5QUUwMi9uc0VoYlNWa0ZrQTh0Y1UtYzBWVEQ0TW5M TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zRWhiU1ZrRmtBOHRjVS1jMFZURDRNbkxOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVEMzQvREJBODc4NThFNkEwMTFFQUE4NTQ0QjQzQzRGOUFFMDIvQzExNzFGQ0FC MUIxMTFFQ0JBN0Y2MTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnhYYwDwQCAAIwCQMHACABDffkgDANBgkqhkiG9w0BAQsF AAOCAQEAhejU4JAFDlb3KFGBBIPanP+H8tepHb2V/xyxotMav0r0kLtxzhcQ60QZ 6n9zv8U9+gqCl8DXKsw0pA0dtL63fWPJRpbVfw5knQ5mpZj1wO/M+0O55/eqaUcM pCM9aKIH9rcVlWl2oFyOcJzaTvZ6yCqpO/xr8r2aHxCDRzJaW69LiWtKVt2BiAEA AjACmtYpXdAaDBkBQmkhyU7Cln9HQ84wMh/F0tl1B32K1GvbjmJILLUUtpSuBYTV MuLWoSfeQpQ2jQ89sY8S9961ASzGgwI6U6n8Ba2XZ73JDJK2+y7ir+IxrTgnjuH3 PnvaUmoMZ01DF5Lb50XiitaR75Fvaw== -----END CERTIFICATE-----Generated at Sat Apr 26 08:31:02 2025 by rpki-client