$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/D3A7743C19EA11EC9C11D95AC4F9AE02.roa File: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (raw, json) Hash identifier: JnyQcmBv8MumIf8qvh8E711qakyrMUVoNJzBwPEqLFk= Subject key identifier: 14:42:C8:85:1D:21:2D:EE:9E:F3:08:9C:EE:05:B3:BF:13:D9:50:2C Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Certificate serial: 048A Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/D3A7743C19EA11EC9C11D95AC4F9AE02.roa Signing time: Sat 05 Oct 2024 00:34:47 +0000 ROA not before: Sat 05 Oct 2024 00:34:47 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 14537 IP address blocks: 45.127.116.0/22 maxlen: 24 103.81.128.0/22 maxlen: 23 103.81.129.0/24 maxlen: 24 103.81.130.0/23 maxlen: 24 124.109.4.0/22 maxlen: 23 124.109.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1162 (0x48a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Validity Not Before: Oct 5 00:34:47 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=670089a6-fa3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:fe:bb:58:33:93:83:17:c0:f7:dc:2b:b9: 9f:42:5d:99:13:d8:75:72:3d:c4:c3:d9:9f:8f:e9: ba:f3:f5:4c:b5:f2:ec:a0:c3:b1:e8:42:d4:48:b0: 16:fb:36:8c:e0:71:27:05:bd:6b:40:d6:2f:51:ed: 34:60:55:da:7c:75:36:9f:d0:74:ce:be:96:d6:23: 1f:71:78:50:f4:cf:93:12:fe:b3:7f:a8:f2:84:c5: 05:6c:c2:35:61:27:37:4c:a5:96:57:ff:7a:b1:33: c7:c7:d4:94:8b:00:fb:fa:16:0b:80:d5:bd:9e:98: bd:49:21:ac:d5:29:2e:a4:15:8b:fa:34:02:e7:61: 3d:00:36:7d:a7:9d:e1:a4:67:1f:e0:9c:e1:ff:43: 70:63:00:22:b8:ea:87:5a:dc:97:13:89:b6:d4:ec: 5a:c4:18:68:7b:09:61:cc:91:20:f0:72:14:6c:1a: 58:ff:4f:6d:aa:a9:0c:e7:f9:c3:33:c9:86:b2:b4: 3d:f4:8d:14:25:7f:48:31:4f:49:f6:f4:6c:81:56: ad:94:92:5e:9e:b9:26:3a:4e:38:c3:de:3b:37:ec: 4f:09:37:a6:31:31:01:7a:ac:87:e6:61:e4:58:48: fc:ce:3d:9e:a4:42:8a:da:45:d7:3a:37:93:3b:58: a6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:42:C8:85:1D:21:2D:EE:9E:F3:08:9C:EE:05:B3:BF:13:D9:50:2C X509v3 Authority Key Identifier: keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/D3A7743C19EA11EC9C11D95AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.127.116.0/22 103.81.128.0/22 124.109.4.0/22 Signature Algorithm: sha256WithRSAEncryption 24:1b:55:ef:7b:7d:b2:27:a6:52:f9:ea:e7:9f:5e:73:63:e7: 9c:e5:68:89:71:fd:27:dc:22:3d:3c:65:6c:f9:8d:48:ae:77: 0b:52:2e:88:8a:67:82:83:5e:b3:08:5a:fe:12:4b:b7:50:b5: 32:82:f3:2e:93:02:a6:2d:49:18:06:d4:0c:fb:75:7d:6e:0a: 39:87:5d:1a:da:25:cb:d7:34:a5:00:10:dc:4a:66:d9:56:7d: 8b:98:7b:b7:da:07:77:c1:97:bc:c7:3a:92:b6:31:3b:9b:c6: 6a:35:8e:69:5d:d8:7a:7b:10:c2:cc:6f:85:61:5a:62:e8:a1: f6:d8:a2:15:bd:e0:64:93:51:38:50:94:5f:48:75:88:83:f3: 6f:30:cb:28:10:03:a1:0c:33:dc:b6:5e:01:c8:11:b8:4b:bd: ad:81:56:4f:08:02:ab:ce:f4:d2:23:9f:c9:6d:2f:01:06:dc: 74:54:23:20:3b:f8:48:3a:08:58:d4:19:f3:00:4b:11:f2:6c: b4:14:a8:9a:c8:6b:c7:d2:37:fc:8e:67:f8:b7:bf:9c:f0:c0: a8:16:a6:9e:f6:be:b0:1c:4b:19:56:65:fb:b0:be:32:27:c6: 6a:2e:8e:66:f1:69:64:3c:84:27:a4:a3:64:02:e9:5d:e7:7a: ac:71:22:9c -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCODAxMTAvBgNVBAUTKEE4RkMyNTlBMTAxRUFCODI2RUU4Q0JFQTJBMEJEQTVD REVDRkRBRjIwHhcNMjQxMDA1MDAzNDQ3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzAwODlhNi1mYTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYr+u1gzk4MXwPfcK7mfQl2ZE9h1cj3Ew9mfj+m68/VMtfLsoMOx6ELUSLAW +zaM4HEnBb1rQNYvUe00YFXafHU2n9B0zr6W1iMfcXhQ9M+TEv6zf6jyhMUFbMI1 YSc3TKWWV/96sTPHx9SUiwD7+hYLgNW9npi9SSGs1SkupBWL+jQC52E9ADZ9p53h pGcf4Jzh/0NwYwAiuOqHWtyXE4m21OxaxBhoewlhzJEg8HIUbBpY/09tqqkM5/nD M8mGsrQ99I0UJX9IMU9J9vRsgVatlJJenrkmOk44w947N+xPCTemMTEBeqyH5mHk WEj8zj2epEKK2kXXOjeTO1imfQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFBRCyIUd IS3unvMInO4Fs78T2VAsMB8GA1UdIwQYMBaAFKj8JZoQHquCbujL6ioL2lzez9ry MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9CODY5ODA1RTEy M0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0SnU2TXZxS2d2YVhON1Ay dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FQd2xtaEFlcTRKdTZNdnFLZ3ZhWE43UDJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODZCODAvQjg2OTgwNUUxMjNCMTFFQzhBMTM1RjQyQzRGOUFFMDIvRDNBNzc0M0Mx OUVBMTFFQzlDMTFEOTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAItf3QDBAJnUYADBAJ8bQQwDQYJKoZIhvcNAQELBQADggEB ACQbVe97fbInplL56uefXnNj55zlaIlx/SfcIj08ZWz5jUiudwtSLoiKZ4KDXrMI Wv4SS7dQtTKC8y6TAqYtSRgG1Az7dX1uCjmHXRraJcvXNKUAENxKZtlWfYuYe7fa B3fBl7zHOpK2MTubxmo1jmld2Hp7EMLMb4VhWmLoofbYohW94GSTUThQlF9IdYiD 828wyygQA6EMM9y2XgHIEbhLva2BVk8IAqvO9NIjn8ltLwEG3HRUIyA7+Eg6CFjU GfMASxHybLQUqJrIa8fSN/yOZ/i3v5zwwKgWpp72vrAcSxlWZfuwvjInxmoujmbx aWQ8hCeko2QC6V3neqxxIpw= -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:09 2025 by rpki-client