$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/4E2825FA45FF11F0A3585B3BC4F9AE02.roa File: 4E2825FA45FF11F0A3585B3BC4F9AE02.roa (raw, json) Hash identifier: I14tAkanqoFouLVzcRpLSZ6N3GY3ekbVlv42ouCU2FE= Subject key identifier: 42:5F:16:E2:B8:C5:6F:07:B3:F0:77:BB:E2:83:8A:66:2F:76:22:3F Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Certificate serial: 0292 Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/4E2825FA45FF11F0A3585B3BC4F9AE02.roa Signing time: Tue 10 Jun 2025 13:32:08 +0000 ROA not before: Tue 10 Jun 2025 13:32:08 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 212238 IP address blocks: 103.69.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Validity Not Before: Jun 10 13:32:08 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=684833d8-4ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:d2:f8:6d:9e:dd:58:69:14:00:7e:0a:4c: b0:1a:1f:60:87:13:05:06:8e:9e:67:9a:3a:94:b1: fb:6d:80:77:42:9a:51:de:68:13:e6:51:1e:48:1d: 7f:4a:d9:3e:7f:96:6a:0e:3e:27:6a:5b:48:8d:44: 19:75:2f:2f:76:c4:5b:be:85:ae:77:b5:e5:8f:db: b9:ed:1d:4d:0e:58:59:6d:8e:9d:15:aa:8b:8d:d6: 57:0a:d3:8c:31:27:d3:38:0a:31:1d:be:3f:ac:8c: f0:a0:95:ae:70:ac:a0:42:8f:c6:74:3f:a5:3d:b4: 3f:97:66:e4:6a:f0:64:28:2d:20:c1:4c:a5:17:8b: c7:28:3b:48:f0:13:9b:34:4c:32:11:97:9f:5b:15: 79:16:64:fb:25:76:b4:d4:0f:b5:95:4a:94:45:74: 0c:74:30:38:aa:cc:47:56:da:9a:3e:db:36:bc:50: f3:de:65:1d:de:b3:89:56:c3:cf:3f:1f:ef:c5:d1: 56:30:4a:f3:4e:d4:81:c4:75:86:e9:9e:ea:72:3e: f4:51:2a:c0:fa:15:68:d5:2c:d1:a3:da:e5:a9:68: 10:50:72:d2:bb:96:cc:30:94:78:51:7f:1c:28:8d: c3:28:d5:02:c0:4a:56:05:e7:bd:69:55:88:c1:f5: 63:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5F:16:E2:B8:C5:6F:07:B3:F0:77:BB:E2:83:8A:66:2F:76:22:3F X509v3 Authority Key Identifier: keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/4E2825FA45FF11F0A3585B3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.69.3.0/24 Signature Algorithm: sha256WithRSAEncryption 24:79:51:7b:b4:22:bc:30:9a:99:e5:bc:82:24:ef:1c:85:27: 58:59:50:79:72:1f:1a:a2:be:74:85:fa:7c:27:27:4a:ad:ce: 9d:50:b6:e9:02:28:a5:99:e5:ec:d3:fd:76:7d:09:a9:70:9c: 79:b6:f7:95:f8:ee:ca:43:1b:4c:2c:d7:0d:a7:b6:e1:15:ac: 91:e2:3e:50:1c:e2:38:10:be:23:79:d7:9a:53:f4:ef:e8:10: df:66:1f:b0:ab:64:57:30:22:01:17:c9:12:07:03:a8:f7:5a: ee:4a:f5:d9:81:21:65:86:71:fd:e6:9e:05:b1:d1:c7:a8:24: 8a:4d:a6:d6:88:9b:b5:06:48:77:be:d8:61:6e:17:6e:bd:77: 85:86:75:2a:9b:82:5b:d5:84:65:e8:37:87:f7:5d:f1:cc:3a: e9:9d:bf:73:ff:5b:80:fb:61:21:18:6c:2f:c7:6e:c5:bd:2c: 2d:fc:0e:3f:e8:40:b1:18:01:1e:90:45:81:dd:40:6a:bb:2f: 63:44:58:15:45:9b:60:b7:54:8f:74:e0:74:4f:de:f3:6e:42: 3b:02:59:97:1d:46:61:b3:0b:d2:d1:b6:12:11:d7:56:79:d3: 21:ef:68:d1:b0:d3:16:1f:62:b1:9b:50:58:d3:4c:2b:b6:fd: 6e:03:3e:d3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdGN0UxMTAvBgNVBAUTKDFBNjgyOTQxRjg3ODlDNENFQTNDQzMzQjYzNzNFNDk0 NzYzMEJDODQwHhcNMjUwNjEwMTMzMjA4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ4MzNkOC00ZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2jS+G2e3VhpFAB+CkywGh9ghxMFBo6eZ5o6lLH7bYB3QppR3mgT5lEeSB1/ Stk+f5ZqDj4naltIjUQZdS8vdsRbvoWud7Xlj9u57R1NDlhZbY6dFaqLjdZXCtOM MSfTOAoxHb4/rIzwoJWucKygQo/GdD+lPbQ/l2bkavBkKC0gwUylF4vHKDtI8BOb NEwyEZefWxV5FmT7JXa01A+1lUqURXQMdDA4qsxHVtqaPts2vFDz3mUd3rOJVsPP Px/vxdFWMErzTtSBxHWG6Z7qcj70USrA+hVo1SzRo9rlqWgQUHLSu5bMMJR4UX8c KI3DKNUCwEpWBee9aVWIwfVjgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEJfFuK4 xW8Hs/B3u+KDimYvdiI/MB8GA1UdIwQYMBaAFBpoKUH4eJxM6jzDO2Nz5JR2MLyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0Y3RS9DNzYzQjVFMDEw RTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5FenFQTU03WTNQa2xIWXd2 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtZ3BRZmg0bkV6cVBNTTdZM1BrbEhZd3ZJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODdGN0UvQzc2M0I1RTAxMEU5MTFFRDg1Q0NFQTM3QzRGOUFFMDIvNEUyODI1RkE0 NUZGMTFGMEEzNTg1QjNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnRQMwDQYJKoZIhvcNAQELBQADggEBACR5UXu0Irwwmpnl vIIk7xyFJ1hZUHlyHxqivnSF+nwnJ0qtzp1QtukCKKWZ5ezT/XZ9CalwnHm295X4 7spDG0ws1w2ntuEVrJHiPlAc4jgQviN515pT9O/oEN9mH7CrZFcwIgEXyRIHA6j3 Wu5K9dmBIWWGcf3mngWx0ceoJIpNptaIm7UGSHe+2GFuF269d4WGdSqbglvVhGXo N4f3XfHMOumdv3P/W4D7YSEYbC/HbsW9LC38Dj/oQLEYAR6QRYHdQGq7L2NEWBVF m2C3VI904HRP3vNuQjsCWZcdRmGzC9LRthIR11Z50yHvaNGw0xYfYrGbUFjTTCu2 /W4DPtM= -----END CERTIFICATE-----Generated at Sat Jun 14 17:57:26 2025 by rpki-client