$ rpki-client -vvf rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/45A44C4CBDCE11EFA998797CC4F9AE02.roa File: 45A44C4CBDCE11EFA998797CC4F9AE02.roa (raw, json) Hash identifier: uF3ApeX12An5gPwPWJ0xuIUZ7U4GMw4TciK6PWiK5sI= Subject key identifier: 40:F6:11:C6:08:CC:93:6E:FC:2D:91:AF:9B:E2:CC:BE:5D:66:D4:45 Certificate issuer: /CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F Certificate serial: 0711 Authority key identifier: E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/45A44C4CBDCE11EFA998797CC4F9AE02.roa Signing time: Sat 15 Feb 2025 10:26:22 +0000 ROA not before: Sat 15 Feb 2025 10:26:22 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 137580 IP address blocks: 103.154.12.0/24 maxlen: 24 103.154.13.0/24 maxlen: 24 2001:df1:ffc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1809 (0x711) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187856, serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F Validity Not Before: Feb 15 10:26:22 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67b06bce-7149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:15:6b:6c:a5:bc:cd:42:5e:af:c3:6d:f1: 06:f6:52:86:b7:b3:0a:bd:3b:82:15:3d:7d:78:26: 5e:d4:b8:c0:4b:51:b9:a1:30:16:b3:30:b9:c2:53: 6d:39:d2:6b:9e:3e:fe:86:d4:56:48:a8:46:d8:be: 56:a3:e7:a7:32:db:5a:9f:34:c1:21:6d:36:6b:0f: 6d:b0:8a:3a:2e:8d:02:5b:e1:83:df:f0:c3:bc:12: 9b:b3:2b:e2:42:99:f4:44:87:b0:ad:9a:b2:50:ae: 57:04:54:fd:67:7e:f0:d6:74:7c:46:c5:fc:ae:15: c2:96:91:80:d5:ca:10:b2:b7:b3:e2:b1:02:fb:f4: 7f:7d:e2:7c:42:c1:42:b8:48:3d:bf:43:72:0b:fa: f7:b4:bb:5c:f5:a4:4b:3d:65:b2:ef:c3:8b:8d:8a: 8f:50:61:b4:60:15:07:c7:0e:f5:e1:82:b8:89:79: 7c:2a:cf:90:ef:fe:7d:38:7d:8c:c6:00:0c:36:c2: 9d:e9:a6:1c:76:21:fc:20:0e:cf:2d:bf:f2:4c:88: 12:e0:d3:90:34:78:9c:f0:0f:b6:dc:1f:5f:08:5d: 7a:d4:94:08:97:43:f1:1d:08:88:ed:87:76:8f:31: 80:2e:0d:03:7c:ed:09:7a:0e:9f:8d:64:52:0e:e6: 9b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F6:11:C6:08:CC:93:6E:FC:2D:91:AF:9B:E2:CC:BE:5D:66:D4:45 X509v3 Authority Key Identifier: keyid:E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/45A44C4CBDCE11EFA998797CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.12.0/23 IPv6: 2001:df1:ffc0::/48 Signature Algorithm: sha256WithRSAEncryption a4:0c:e3:7d:2e:8f:58:14:3d:67:e4:ae:d3:c5:c8:74:b7:03: de:12:a3:12:2e:6c:69:7b:2c:9d:17:57:5f:32:cf:d5:49:c6: 47:34:a8:ef:0e:d7:07:af:5f:e4:69:88:0e:dd:00:66:a5:c3: 03:2c:72:ab:2d:1d:df:a8:ca:bb:54:c8:4e:19:db:d4:66:65: 6b:ea:e2:a9:8f:b7:04:4e:7c:ef:a7:6d:2a:2c:71:07:1a:13: df:ca:5a:79:6a:19:b7:27:ab:23:81:7f:a7:b3:bc:b1:66:58: de:1c:42:88:a6:26:67:76:d6:70:41:24:97:be:42:a2:09:b8: 18:66:8f:6f:bf:0c:5b:9d:d1:a1:1f:62:d2:cf:64:ee:f0:87: 3f:fb:fc:f0:d6:0f:56:c3:0f:cc:63:65:5a:70:b8:f2:0d:da: 3d:b9:95:a7:d6:01:a0:8e:46:47:23:47:bf:06:8f:5d:69:a7: 2c:37:fe:93:d0:66:00:90:92:a7:d7:23:7c:de:8a:e4:ca:92: cb:99:cf:c7:e6:a4:db:e2:34:38:a5:84:76:05:aa:b8:eb:71: 97:33:a5:9e:24:3a:14:eb:a0:70:1c:a4:96:0f:57:4c:09:c2: 04:c3:4d:e4:75:d0:59:1e:b1:2b:a2:d4:eb:9d:bf:c7:47:a4: c3:84:df:a3 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4NTYxMTAvBgNVBAUTKEU4REE1QkYwMUM3OTQzRjFBRUMyNDg2MTBDNUM0RDFC RTQ0QjcwNEYwHhcNMjUwMjE1MTAyNjIyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2IwNmJjZS03MTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxMVa2ylvM1CXq/DbfEG9lKGt7MKvTuCFT19eCZe1LjAS1G5oTAWszC5wlNt OdJrnj7+htRWSKhG2L5Wo+enMttanzTBIW02aw9tsIo6Lo0CW+GD3/DDvBKbsyvi Qpn0RIewrZqyUK5XBFT9Z37w1nR8RsX8rhXClpGA1coQsrez4rEC+/R/feJ8QsFC uEg9v0NyC/r3tLtc9aRLPWWy78OLjYqPUGG0YBUHxw714YK4iXl8Ks+Q7/59OH2M xgAMNsKd6aYcdiH8IA7PLb/yTIgS4NOQNHic8A+23B9fCF161JQIl0PxHQiI7Yd2 jzGALg0DfO0Jeg6fjWRSDuab/QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFED2EcYI zJNu/C2Rr5vizL5dZtRFMB8GA1UdIwQYMBaAFOjaW/AceUPxrsJIYQxcTRvkS3BP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Nzg1Ni85MUNDMzE1MjM3 OUYxMUVCQjMzMTYxMzVDNEY5QUUwMi82TnBiOEJ4NVFfR3V3a2hoREZ4TkctUkxj RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOcGI4Qng1UV9HdXdraGhERnhORy1STGNFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc4NTYvOTFDQzMxNTIzNzlGMTFFQkIzMzE2MTM1QzRGOUFFMDIvNDVBNDRDNENC RENFMTFFRkE5OTg3OTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmgwwDwQCAAIwCQMHACABDfH/wDANBgkqhkiG9w0BAQsF AAOCAQEApAzjfS6PWBQ9Z+Su08XIdLcD3hKjEi5saXssnRdXXzLP1UnGRzSo7w7X B69f5GmIDt0AZqXDAyxyqy0d36jKu1TIThnb1GZla+riqY+3BE5876dtKixxBxoT 38paeWoZtyerI4F/p7O8sWZY3hxCiKYmZ3bWcEEkl75Cogm4GGaPb78MW53RoR9i 0s9k7vCHP/v88NYPVsMPzGNlWnC48g3aPbmVp9YBoI5GRyNHvwaPXWmnLDf+k9Bm AJCSp9cjfN6K5MqSy5nPx+ak2+I0OKWEdgWquOtxlzOlniQ6FOugcByklg9XTAnC BMNN5HXQWR6xK6LU652/x0ekw4Tfow== -----END CERTIFICATE-----Generated at Sat Apr 26 09:34:10 2025 by rpki-client