$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/0D7B74CACE1111ED8BDB217CC4F9AE02.roa File: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (raw, json) Hash identifier: XBCRIujbmqCZAO+evWS2z7S/+660XMC7RMeYNEWozlk= Subject key identifier: 4C:B3:E0:3E:D9:02:D8:69:5F:02:89:95:10:5A:FD:4C:05:62:57:E5 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0C95 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/0D7B74CACE1111ED8BDB217CC4F9AE02.roa Signing time: Mon 31 Mar 2025 18:18:13 +0000 ROA not before: Mon 31 Mar 2025 18:18:13 +0000 ROA not after: Fri 01 Aug 2025 00:00:00 +0000 asID: 150178 IP address blocks: 103.135.138.0/24 maxlen: 24 103.135.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Mar 31 18:18:13 2025 GMT Not After : Aug 1 00:00:00 2025 GMT Subject: CN=67eadc64-d17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a8:1b:94:f2:46:22:be:26:16:35:da:5b:7d: d9:eb:3c:f4:cd:9f:19:ac:d4:37:14:d8:dc:4b:45: 45:6f:7d:ac:e5:a7:e4:87:ae:83:0f:86:51:e8:53: 73:f1:1d:86:1a:f4:05:e6:ed:2f:44:62:50:ab:3f: da:d4:0d:bc:7d:53:21:25:3b:84:58:64:96:51:15: 81:21:8b:85:cb:51:64:62:8f:a6:bb:66:df:dd:9a: d7:23:a7:ef:a0:c8:78:47:d9:b9:b6:03:c7:b1:3d: 00:38:80:37:64:38:2e:b4:e3:60:f9:04:15:d9:5e: bc:ee:88:7d:25:db:f4:63:4b:02:18:66:60:bb:8c: 44:17:dc:e3:10:96:b6:ea:0f:b2:92:e0:a3:36:32: a1:ff:43:3c:8c:21:a6:81:95:80:21:2f:29:a9:d1: 59:6d:f8:5a:0f:0b:3b:f7:c5:c7:19:34:a6:a4:a5: 11:f9:6a:8f:a5:d3:b0:64:c4:54:c9:07:67:a8:e6: d8:68:6d:f2:8b:f4:c3:f5:20:ee:eb:a0:00:e8:76: 6b:40:48:d9:6f:c0:25:8e:4f:a0:8b:2b:58:db:74: dd:f5:ce:e4:9b:a5:15:db:99:5a:ad:a4:e5:fd:9c: 83:3c:4f:98:96:89:7c:1f:a3:c0:d2:05:03:bc:9a: c0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B3:E0:3E:D9:02:D8:69:5F:02:89:95:10:5A:FD:4C:05:62:57:E5 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/0D7B74CACE1111ED8BDB217CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.138.0/23 Signature Algorithm: sha256WithRSAEncryption 88:7e:7f:aa:39:31:ce:84:de:78:63:91:6e:07:61:ac:ca:32: 8f:45:11:b9:52:43:60:52:21:11:29:ce:6a:27:62:51:cb:ea: 45:7d:97:47:6c:29:16:1c:78:bf:23:26:1a:03:e2:12:75:31: 73:5f:3e:f4:07:b3:10:31:26:35:e9:9c:b4:d6:24:e9:6b:f4: 0b:03:17:9a:fd:50:49:fb:c7:fe:4d:d7:d8:58:13:55:19:bb: 40:7c:85:6e:1f:fc:b2:4e:e4:bb:75:a3:c4:3b:b2:b2:aa:e6: b6:47:1d:a4:cb:46:01:31:ed:96:b0:49:7c:47:8a:c2:1b:40: 87:31:f0:6c:3b:7b:14:b5:77:74:7e:0d:c4:a0:e1:d3:f1:58: 72:8d:c0:17:67:02:7a:7e:ae:35:29:e8:b6:16:7e:ff:b5:68: 7a:48:06:07:64:49:2e:5c:dc:cd:df:1f:2b:ab:25:67:f3:ec: 4a:ce:86:a2:c5:64:f7:ec:2d:f3:a9:1d:88:97:c2:a1:7a:e7: a1:5a:a5:9d:06:ae:fa:54:95:5b:52:85:1a:e5:ce:1e:c0:30: 28:39:f3:a8:88:59:ff:69:ce:f2:20:9c:03:67:47:22:f8:cc: 3a:7f:0a:51:3d:d0:30:e1:3e:61:6b:17:ef:ae:6d:2a:73:e1: da:31:17:e9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjUwMzMxMTgxODEzWhcNMjUwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhZGM2NC1kMTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9KgblPJGIr4mFjXaW33Z6zz0zZ8ZrNQ3FNjcS0VFb32s5afkh66DD4ZR6FNz 8R2GGvQF5u0vRGJQqz/a1A28fVMhJTuEWGSWURWBIYuFy1FkYo+mu2bf3ZrXI6fv oMh4R9m5tgPHsT0AOIA3ZDgutONg+QQV2V687oh9Jdv0Y0sCGGZgu4xEF9zjEJa2 6g+ykuCjNjKh/0M8jCGmgZWAIS8pqdFZbfhaDws798XHGTSmpKUR+WqPpdOwZMRU yQdnqObYaG3yi/TD9SDu66AA6HZrQEjZb8Aljk+giytY23Td9c7km6UV25laraTl /ZyDPE+Ylol8H6PA0gUDvJrACwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEyz4D7Z AthpXwKJlRBa/UwFYlflMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODhBMDYvODAxQ0E1ODRGNjdGMTFFOUFBM0U3MDNEQzRGOUFFMDIvMEQ3Qjc0Q0FD RTExMTFFRDhCREIyMTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnh4owDQYJKoZIhvcNAQELBQADggEBAIh+f6o5Mc6E3nhj kW4HYazKMo9FEblSQ2BSIREpzmonYlHL6kV9l0dsKRYceL8jJhoD4hJ1MXNfPvQH sxAxJjXpnLTWJOlr9AsDF5r9UEn7x/5N19hYE1UZu0B8hW4f/LJO5Lt1o8Q7srKq 5rZHHaTLRgEx7ZawSXxHisIbQIcx8Gw7exS1d3R+DcSg4dPxWHKNwBdnAnp+rjUp 6LYWfv+1aHpIBgdkSS5c3M3fHyurJWfz7ErOhqLFZPfsLfOpHYiXwqF656FapZ0G rvpUlVtShRrlzh7AMCg586iIWf9pzvIgnANnRyL4zDp/ClE90DDhPmFrF++ubSpz 4doxF+k= -----END CERTIFICATE-----Generated at Sat Apr 26 08:10:38 2025 by rpki-client