$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/76053AC29ED311EBB06C4E4DC4F9AE02.roa File: 76053AC29ED311EBB06C4E4DC4F9AE02.roa (raw, json) Hash identifier: DVBw64dsT56+0QYycGeLUBxP/l2bdU+aNtZ1EMIv6Js= Subject key identifier: 43:11:E8:CF:04:77:4E:AB:5F:B8:EB:D9:4E:F9:F9:82:4A:A1:57:74 Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Certificate serial: 0613 Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/76053AC29ED311EBB06C4E4DC4F9AE02.roa Signing time: Wed 02 Apr 2025 22:54:57 +0000 ROA not before: Wed 02 Apr 2025 22:54:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48024 IP address blocks: 103.136.124.0/22 maxlen: 23 103.136.124.0/24 maxlen: 24 103.136.125.0/24 maxlen: 24 103.136.126.0/24 maxlen: 24 103.136.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1555 (0x613) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E80, serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Validity Not Before: Apr 2 22:54:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67edc041-5606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:8a:b2:49:08:f1:98:7f:c9:d2:d6:41:78: 0c:08:0b:d2:fb:5d:68:00:d3:9b:df:52:12:0e:00: 2e:4c:29:e0:73:df:7e:67:f4:11:16:81:06:c8:b6: 97:9d:b1:e7:1a:95:10:13:43:d9:7b:a8:85:14:d0: ca:46:1e:3c:e0:87:b8:ea:dd:ab:00:f9:f6:a4:76: a2:fd:d9:38:ff:8b:d6:c4:dc:2d:a3:a2:65:7a:1a: 13:e5:f8:08:3c:36:fa:c4:b4:39:66:af:98:18:fd: fb:13:dc:bc:59:21:2d:d2:d0:15:a9:98:ea:f5:f7: 99:a1:ca:db:d7:df:0e:f7:25:c8:c1:1f:2e:fc:d3: f7:67:b3:82:b5:92:91:0e:2c:c1:f5:b4:65:87:b0: b2:63:b5:d9:09:02:ea:1b:7e:a9:b0:46:2d:9b:01: 49:16:3f:85:a9:a5:f1:8d:53:31:ac:aa:b6:fe:3f: d6:97:10:17:f0:f9:bb:ee:67:34:06:d4:d2:c4:06: 36:e6:f8:ae:17:01:c5:e6:5b:cc:d5:b7:5f:83:da: 4a:73:2a:b0:50:7b:83:5b:9e:14:e6:1f:11:99:b7: ae:cb:e6:16:05:56:0b:a7:2e:2b:96:fd:69:f4:3a: a9:52:0e:76:66:1c:66:c7:b1:7b:99:bd:6c:b5:24: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:11:E8:CF:04:77:4E:AB:5F:B8:EB:D9:4E:F9:F9:82:4A:A1:57:74 X509v3 Authority Key Identifier: keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/76053AC29ED311EBB06C4E4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.124.0/22 Signature Algorithm: sha256WithRSAEncryption be:8c:17:e8:39:3d:d4:45:c1:74:ae:c0:43:08:90:59:a0:38: 4c:52:3f:1f:6c:25:a6:ac:82:99:56:ec:c1:b9:4a:32:05:b2: 36:03:a1:ee:32:5b:2e:b9:d7:80:9c:a5:5b:fa:e0:e0:9f:42: 84:92:7b:c0:c1:a4:71:1a:6d:3f:2a:7b:9b:0b:88:f7:e5:41: fe:38:a4:78:06:c4:3c:19:60:3b:0b:c4:5f:66:ae:c7:70:80: 31:9c:13:aa:01:e7:6b:4b:bf:27:8e:f4:e5:a6:a1:44:55:ad: f0:67:83:eb:52:ad:e6:b0:ea:4b:db:1c:ae:a6:8d:66:ec:fd: 88:cd:e0:0d:97:ff:81:dd:56:ce:3d:42:2f:79:ed:c1:79:be: 57:57:60:24:94:b5:23:0a:9d:16:fb:76:95:ee:5c:6a:0b:37: 16:8d:56:e3:9c:9c:d0:42:ba:8c:be:7b:cd:cc:aa:e0:97:67: cb:42:ba:2d:ca:57:9c:18:ae:ab:20:0e:ee:1a:2d:42:9f:7d: 1c:8b:5e:fe:ae:ae:52:fd:a3:d7:64:b6:37:5d:81:9e:ce:68: 54:3a:5d:3a:1e:fd:43:77:01:f0:45:f7:de:75:aa:fe:a6:8f: fd:cc:7e:3e:26:2f:3a:e9:84:e8:17:b7:76:68:17:17:da:4a: 3a:4f:f3:f9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFODAxMTAvBgNVBAUTKDdDQjBFNTgyNTEwMUM2NjU0NDNGMkNGQUIxOUU4NEQx QTc3OTc1OTcwHhcNMjUwNDAyMjI1NDU3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkYzA0MS01NjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuT+KskkI8Zh/ydLWQXgMCAvS+11oANOb31ISDgAuTCngc99+Z/QRFoEGyLaX nbHnGpUQE0PZe6iFFNDKRh484Ie46t2rAPn2pHai/dk4/4vWxNwto6JlehoT5fgI PDb6xLQ5Zq+YGP37E9y8WSEt0tAVqZjq9feZocrb198O9yXIwR8u/NP3Z7OCtZKR DizB9bRlh7CyY7XZCQLqG36psEYtmwFJFj+FqaXxjVMxrKq2/j/WlxAX8Pm77mc0 BtTSxAY25viuFwHF5lvM1bdfg9pKcyqwUHuDW54U5h8Rmbeuy+YWBVYLpy4rlv1p 9DqpUg52Zhxmx7F7mb1stSRKFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEMR6M8E d06rX7jr2U75+YJKoVd0MB8GA1UdIwQYMBaAFHyw5YJRAcZlRD8s+rGehNGneXWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U4MC9EMjc4Q0E2NDlF NzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnhtVkVQeXo2c1o2RTBhZDVk WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMRGxnbEVCeG1WRVB5ejZzWjZFMGFkNWRaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODdFODAvRDI3OENBNjQ5RTc3MTFFQjhDMjVEQjZDQzRGOUFFMDIvNzYwNTNBQzI5 RUQzMTFFQkIwNkM0RTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJniHwwDQYJKoZIhvcNAQELBQADggEBAL6MF+g5PdRFwXSu wEMIkFmgOExSPx9sJaasgplW7MG5SjIFsjYDoe4yWy6514CcpVv64OCfQoSSe8DB pHEabT8qe5sLiPflQf44pHgGxDwZYDsLxF9mrsdwgDGcE6oB52tLvyeO9OWmoURV rfBng+tSreaw6kvbHK6mjWbs/YjN4A2X/4HdVs49Qi957cF5vldXYCSUtSMKnRb7 dpXuXGoLNxaNVuOcnNBCuoy+e83MquCXZ8tCui3KV5wYrqsgDu4aLUKffRyLXv6u rlL9o9dktjddgZ7OaFQ6XToe/UN3AfBF9951qv6mj/3Mfj4mLzrphOgXt3ZoFxfa SjpP8/k= -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:49 2025 by rpki-client