$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa File: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (raw, json) Hash identifier: FgvpUN85rtr+i1GuoDsaGwxZYbJ7H8djnKwJKhetLt8= Subject key identifier: 2A:13:5F:7C:B1:69:26:1E:74:FC:82:80:FE:E3:17:1B:8E:A7:9C:23 Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Certificate serial: 0D00 Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa Signing time: Sun 16 Mar 2025 18:08:25 +0000 ROA not before: Sun 16 Mar 2025 18:08:25 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137453 IP address blocks: 103.109.93.0/24 maxlen: 24 103.109.94.0/24 maxlen: 24 144.48.151.0/24 maxlen: 24 2404:4c0:a::/48 maxlen: 48 2404:4c0:b::/48 maxlen: 48 2404:4c0:c::/48 maxlen: 48 2404:4c0:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3328 (0xd00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Validity Not Before: Mar 16 18:08:25 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67d71399-b309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:f4:91:8c:c5:d1:eb:92:00:da:8a:91:85: 7a:43:9d:a5:af:8a:5f:12:3c:d6:40:34:88:4b:1a: 35:1d:d2:f3:35:94:95:4e:20:6a:68:32:08:d0:13: 24:d1:b6:d3:b3:61:96:d5:94:bb:c4:d0:82:45:f0: ec:45:30:f2:af:94:40:d1:a2:c4:c2:1d:8b:98:79: f8:fb:b6:24:8d:cb:5e:ae:15:36:51:c2:a4:f2:e8: 1a:11:c2:64:da:94:3b:fc:26:c4:cc:76:90:25:41: b2:fd:01:f2:f7:f9:d4:33:d8:f8:be:b5:a3:60:82: fc:71:4f:69:31:96:cc:c9:e5:7b:0e:f2:72:c2:19: 31:fd:5f:04:b8:3a:48:38:c9:81:a6:61:a5:2b:e7: 12:fb:b5:fb:6e:6c:f2:62:bc:2c:35:6d:94:2b:21: 87:74:ea:29:ce:2c:85:6f:d1:a9:b1:58:59:83:f1: 05:eb:02:89:46:66:75:77:c8:44:26:57:ad:e3:a3: f5:d6:f5:ab:97:64:02:41:8e:d3:73:2b:82:fa:92: 3f:d4:56:39:68:c3:ab:54:89:ff:9e:92:3b:8d:6f: 0e:61:c7:47:a9:ac:36:e3:5f:86:f8:e7:c1:dc:2a: 55:8c:2d:2c:bf:48:4a:25:64:b9:df:5a:8e:6a:c0: 2f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:13:5F:7C:B1:69:26:1E:74:FC:82:80:FE:E3:17:1B:8E:A7:9C:23 X509v3 Authority Key Identifier: keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.109.93.0-103.109.94.255 144.48.151.0/24 IPv6: 2404:4c0:a::-2404:4c0:d:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7b:ab:25:10:dd:07:94:7c:5d:e9:a4:97:bf:d7:46:b9:04:1d: 35:29:f0:ba:cd:c5:e3:2d:fd:b1:f8:47:c8:ed:79:7b:dc:9c: 6f:f0:c6:11:e9:5a:49:7a:c6:55:b1:64:6d:e5:03:4f:97:8e: 94:57:57:29:dc:f2:46:e2:8e:22:ec:fa:b4:78:16:51:24:fd: 29:d0:f1:ad:a8:62:9b:d6:d7:87:9c:11:6e:a9:7d:ce:6b:b7: a8:e6:78:2c:c1:60:a6:eb:8c:18:1c:c8:08:0f:ad:55:c8:99: d6:85:1c:2d:d1:77:92:93:b3:e8:09:79:4e:f0:b3:ac:fb:a7: 60:e9:1a:17:27:41:4f:02:0a:af:c1:aa:0a:af:d8:23:15:30: ed:db:8a:bc:bd:12:11:eb:a4:f1:83:94:2c:3e:e8:8d:9e:8e: d2:4e:72:df:ca:f1:b7:bc:86:a6:fb:6f:d5:6c:4b:9d:62:a5: 77:38:8c:97:92:69:16:b8:b8:dc:5c:40:49:c2:c8:4a:63:a2: 1d:2e:21:c7:78:72:58:48:ba:1e:41:9a:d4:6c:9b:74:00:5e: 46:34:2c:19:26:82:18:0c:18:b7:fd:a8:01:8c:ea:d4:27:b2: c7:2f:87:55:4e:cc:f8:48:fe:e1:09:f9:51:da:33:69:46:c7: e0:0a:53:3e -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNkQxMTAvBgNVBAUTKEZEMDZCMTUwODU1N0Y2NUY2OENDQkEzQzIwM0VDQUFE MDc1REQxOUIwHhcNMjUwMzE2MTgwODI1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q3MTM5OS1iMzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzv0kYzF0euSANqKkYV6Q52lr4pfEjzWQDSISxo1HdLzNZSVTiBqaDII0BMk 0bbTs2GW1ZS7xNCCRfDsRTDyr5RA0aLEwh2LmHn4+7YkjcterhU2UcKk8ugaEcJk 2pQ7/CbEzHaQJUGy/QHy9/nUM9j4vrWjYIL8cU9pMZbMyeV7DvJywhkx/V8EuDpI OMmBpmGlK+cS+7X7bmzyYrwsNW2UKyGHdOopziyFb9GpsVhZg/EF6wKJRmZ1d8hE Jlet46P11vWrl2QCQY7TcyuC+pI/1FY5aMOrVIn/npI7jW8OYcdHqaw241+G+OfB 3CpVjC0sv0hKJWS531qOasAvrwIDAQABo4ICvzCCArswHQYDVR0OBBYEFCoTX3yx aSYedPyCgP7jFxuOp5wjMB8GA1UdIwQYMBaAFP0GsVCFV/ZfaMy6PCA+yq0HXdGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY2RC85QTVCMUE5RUY2 NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDlsOW96TG84SUQ3S3JRZGQw WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19RYXhVSVZYOWw5b3pMbzhJRDdLclFkZDBacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODhGNkQvOUE1QjFBOUVGNjZBMTFFOUJGNTA2OTdBQzRGOUFFMDIvQkE0QjZFRjJG RkM2MTFFRUJFQzJBOTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MBoEAgABMBQwDAMEAGdtXQMEAGdtXgMEAJAwlzAaBAIAAjAUMBIDBwEkBATA AAoDBwEkBATAAAwwDQYJKoZIhvcNAQELBQADggEBAHurJRDdB5R8Xemkl7/XRrkE HTUp8LrNxeMt/bH4R8jteXvcnG/wxhHpWkl6xlWxZG3lA0+XjpRXVync8kbijiLs +rR4FlEk/SnQ8a2oYpvW14ecEW6pfc5rt6jmeCzBYKbrjBgcyAgPrVXImdaFHC3R d5KTs+gJeU7ws6z7p2DpGhcnQU8CCq/Bqgqv2CMVMO3biry9EhHrpPGDlCw+6I2e jtJOct/K8be8hqb7b9VsS51ipXc4jJeSaRa4uNxcQEnCyEpjoh0uIcd4clhIuh5B mtRsm3QAXkY0LBkmghgMGLf9qAGM6tQnsscvh1VOzPhI/uEJ+VHaM2lGx+AKUz4= -----END CERTIFICATE-----Generated at Sat Apr 26 08:21:26 2025 by rpki-client