$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/1D171A58C76211EC95B63648C4F9AE02.roa File: 1D171A58C76211EC95B63648C4F9AE02.roa (raw, json) Hash identifier: u3mehOty6gVz9qRridn7xauePsp938KB+uM0lLKTBHU= Subject key identifier: 68:99:12:22:57:FF:46:48:00:87:09:49:C2:71:47:92:BC:08:D0:75 Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Certificate serial: 033B Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/1D171A58C76211EC95B63648C4F9AE02.roa Signing time: Wed 19 Feb 2025 02:54:19 +0000 ROA not before: Wed 19 Feb 2025 02:54:19 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136237 IP address blocks: 103.84.136.0/22 maxlen: 24 2400:a040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 827 (0x33b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193339, serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Validity Not Before: Feb 19 02:54:19 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67b547da-4d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:77:a1:1b:60:19:8d:4a:23:21:19:be:15: b4:3a:27:30:0c:5a:5d:fc:0a:ff:22:6a:5e:f4:65: 2c:82:43:a1:24:9a:ff:f8:c0:85:e4:d5:eb:2a:77: 62:b1:34:7f:26:c1:83:b7:06:14:cf:5c:7f:55:63: 41:ce:5b:eb:b7:3f:f2:4c:b0:8c:78:ff:31:4d:8f: a0:5f:48:51:74:7c:35:fb:4a:19:00:a4:be:39:de: 5e:d1:0d:cf:cb:99:ef:42:d1:62:8e:9e:be:49:f6: 7e:d8:f9:0b:92:cf:19:fb:60:5d:2a:04:c3:81:9a: 4f:7d:eb:ce:8d:46:c2:c8:5f:79:de:68:94:2f:ec: 89:be:28:80:2f:f0:96:8d:9b:0e:20:5b:fa:60:ff: 10:40:2b:8e:35:8a:1c:0c:6f:ee:b9:7a:d8:aa:6d: 2f:6a:60:f7:c7:ca:7c:d9:66:06:cf:db:0d:e7:d6: d6:4b:1c:6e:9d:cc:e7:5a:56:40:ea:01:fe:95:a2: 77:5f:ac:a9:2e:40:2b:4f:3b:75:1d:9a:7f:f2:21: a2:77:72:43:99:2e:fa:83:01:00:e2:7a:65:44:1c: 15:d6:a7:f3:3e:ea:fc:4c:b9:42:62:29:f1:d5:94: ad:32:f4:58:5d:aa:7c:6d:73:a7:5d:3f:03:85:d9: fb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:99:12:22:57:FF:46:48:00:87:09:49:C2:71:47:92:BC:08:D0:75 X509v3 Authority Key Identifier: keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/1D171A58C76211EC95B63648C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.136.0/22 IPv6: 2400:a040::/32 Signature Algorithm: sha256WithRSAEncryption 27:0b:1a:b2:ab:a3:d9:d8:d5:43:fe:72:18:6b:e7:07:fe:2a: 68:40:1b:5c:89:2a:f8:32:a3:5c:6b:2a:9a:e9:ee:e3:03:53: 40:ce:2b:91:fa:f1:dc:53:ec:05:b9:25:fe:45:8d:8a:3d:07: fb:46:39:fa:26:98:e0:a8:1a:30:20:31:07:45:aa:47:52:1a: 8b:07:a6:1c:4b:fb:31:b4:d9:a3:04:52:05:77:c4:39:a1:1a: 6a:13:90:e9:92:5e:34:b1:36:2e:88:0c:5e:30:e0:70:d9:f0: 00:98:75:a6:76:d8:50:57:91:1a:69:f0:45:d5:ff:7a:1f:d2: a9:a9:15:ca:c5:17:eb:10:3f:24:ac:be:2c:5d:42:00:29:a8: 98:9b:26:29:ee:94:da:ad:69:46:18:3c:f7:2e:77:d2:bc:6c: 97:76:de:e9:0d:12:7e:3e:69:1b:89:83:9d:54:47:5c:78:ba: 8e:d2:8b:42:ab:89:ac:76:2f:e0:90:79:92:a1:7e:a0:83:2a: 4a:eb:dc:fe:07:dd:bb:b7:f6:db:c7:20:36:ea:13:be:8f:32: 75:6d:9a:06:fa:23:d0:3b:7a:95:6b:d5:d0:c5:d4:6d:75:c6: eb:36:6a:4b:75:b5:44:9c:f8:49:8e:af:95:61:23:61:df:12: 71:50:6a:f2 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzMzkxMTAvBgNVBAUTKDg3MkU1QUI1MzlCRTQzODU3NDAzRDRGNUQ0NUE1NDcy QkIyMDdBNkQwHhcNMjUwMjE5MDI1NDE5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I1NDdkYS00ZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCd3oRtgGY1KIyEZvhW0OicwDFpd/Ar/Impe9GUsgkOhJJr/+MCF5NXrKndi sTR/JsGDtwYUz1x/VWNBzlvrtz/yTLCMeP8xTY+gX0hRdHw1+0oZAKS+Od5e0Q3P y5nvQtFijp6+SfZ+2PkLks8Z+2BdKgTDgZpPfevOjUbCyF953miUL+yJviiAL/CW jZsOIFv6YP8QQCuONYocDG/uuXrYqm0vamD3x8p82WYGz9sN59bWSxxuncznWlZA 6gH+laJ3X6ypLkArTzt1HZp/8iGid3JDmS76gwEA4nplRBwV1qfzPur8TLlCYinx 1ZStMvRYXap8bXOnXT8Dhdn7HwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGiZEiJX /0ZIAIcJScJxR5K8CNB1MB8GA1UdIwQYMBaAFIcuWrU5vkOFdAPU9dRaVHK7IHpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzMzOS80NTI2Nzk3MEIy RkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0VjBBOVQxMUZwVWNyc2dl bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2VtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTMzMzkvNDUyNjc5NzBCMkZBMTFFQ0I1NzRDRTdGQzRGOUFFMDIvMUQxNzFBNThD NzYyMTFFQzk1QjYzNjQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnVIgwDQQCAAIwBwMFACQAoEAwDQYJKoZIhvcNAQELBQAD ggEBACcLGrKro9nY1UP+chhr5wf+KmhAG1yJKvgyo1xrKprp7uMDU0DOK5H68dxT 7AW5Jf5FjYo9B/tGOfommOCoGjAgMQdFqkdSGosHphxL+zG02aMEUgV3xDmhGmoT kOmSXjSxNi6IDF4w4HDZ8ACYdaZ22FBXkRpp8EXV/3of0qmpFcrFF+sQPySsvixd QgApqJibJinulNqtaUYYPPcud9K8bJd23ukNEn4+aRuJg51UR1x4uo7Si0Kriax2 L+CQeZKhfqCDKkrr3P4H3bu39tvHIDbqE76PMnVtmgb6I9A7epVr1dDF1G11xus2 akt1tUSc+EmOr5VhI2HfEnFQavI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:25 2025 by rpki-client