$ rpki-client -vvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/2F43EE7278CC11EAB69DAC75C4F9AE02.roa File: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (raw, json) Hash identifier: vryPQgJZ9HPQvb4c/vnzkdnAafqVRFouOd+j23S6sMU= Subject key identifier: 17:5E:6B:58:D0:5C:26:CB:40:BC:62:A9:D1:7D:EB:9D:E5:D4:12:15 Certificate issuer: /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Certificate serial: 09E9 Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/2F43EE7278CC11EAB69DAC75C4F9AE02.roa Signing time: Sun 30 Mar 2025 19:50:12 +0000 ROA not before: Sun 30 Mar 2025 19:50:12 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 18109 IP address blocks: 103.86.196.0/22 maxlen: 24 119.148.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2537 (0x9e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Validity Not Before: Mar 30 19:50:12 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e9a073-f052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3d:b1:8a:ff:3b:45:57:38:d1:de:2b:ab:55: 92:fc:d3:03:ff:25:55:1f:03:30:2b:62:bf:bb:25: e0:7b:a6:31:e4:a8:c9:6c:28:93:8a:3e:d6:d2:84: 34:8d:1a:04:15:d4:36:33:d3:61:53:5d:81:9b:5a: 09:98:d4:e8:43:c4:c6:35:ab:8a:a7:38:97:c9:16: 52:de:20:5b:99:bb:5c:16:93:f7:c9:af:52:85:82: 6f:1c:f6:0e:10:2f:3d:de:4c:36:89:f6:5f:b8:23: fc:7b:c7:39:76:89:6c:e3:a2:51:f0:14:e9:b3:8f: d4:00:26:be:cc:af:0a:c3:25:6c:bc:9b:51:c5:1f: 86:ac:78:55:27:e2:01:df:3b:63:7a:0e:ac:06:42: d0:97:61:1d:f2:bb:5d:64:9c:79:93:2d:9e:a8:90: d6:ee:cb:f0:e2:88:e1:02:5f:19:d3:48:62:07:6f: 5b:95:05:6b:83:0d:19:8c:9a:50:75:8e:0a:0e:c0: 79:ec:f6:7f:8f:29:99:9c:c0:49:4d:8e:c6:51:2d: aa:5c:a2:c4:74:cc:e9:53:2d:66:82:46:35:31:fd: 79:53:3f:15:4b:18:88:00:d0:8e:7a:13:5c:cc:d1: 13:cd:f7:67:60:ab:9c:c8:7e:98:95:62:70:16:65: cd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5E:6B:58:D0:5C:26:CB:40:BC:62:A9:D1:7D:EB:9D:E5:D4:12:15 X509v3 Authority Key Identifier: keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/2F43EE7278CC11EAB69DAC75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.196.0/22 119.148.100.0/22 Signature Algorithm: sha256WithRSAEncryption 69:7e:6f:51:4d:9a:d8:2c:3c:af:19:c8:e2:f7:7d:a4:99:a9: db:f1:7f:b0:67:40:53:ab:ef:3c:01:43:d6:4a:ee:86:6d:9c: 87:4c:f0:f5:69:0b:d4:01:d1:b8:7b:47:cd:b0:45:de:33:93: d8:d4:27:c5:3e:92:8d:5b:a0:9f:0b:7c:d4:18:33:29:13:5a: cf:43:dd:b5:0e:1a:a5:fd:37:67:5b:ba:bd:32:c6:b4:7f:2f: 34:f1:05:83:66:b1:d5:5a:bc:56:25:37:51:f7:8b:14:47:5c: 24:b7:fb:5c:a9:de:9a:a4:6b:46:f4:11:13:68:08:90:4f:ff: 69:bb:8b:15:b4:44:6a:23:76:d1:89:0c:64:de:31:a8:27:5c: 54:44:0d:8c:2f:0b:36:90:d9:f2:09:57:64:d5:83:cc:c8:d0: 25:15:f8:ca:61:66:3f:f8:28:be:ac:2b:a0:ba:01:6f:46:7d: 8a:73:73:89:2b:3c:95:6b:e4:9b:02:91:5b:b6:81:b7:25:6b: 3e:d5:f3:7b:43:e9:42:65:a5:92:18:b4:7a:c6:11:70:7d:8f: 02:3a:03:4e:6f:4d:34:17:90:48:00:b0:06:a2:c2:c8:dc:dd: 94:ed:93:4e:d4:a7:d5:1b:a7:a1:ed:02:92:07:96:18:78:1c: 59:f1:65:09 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyNjcxMTAvBgNVBAUTKDM4RkIwNkFGNjQ5RjQwMEY1MTM5OTQ5MzVCRURGN0U0 OTI3MEM4QUEwHhcNMjUwMzMwMTk1MDEyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U5YTA3My1mMDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoj2xiv87RVc40d4rq1WS/NMD/yVVHwMwK2K/uyXge6Yx5KjJbCiTij7W0oQ0 jRoEFdQ2M9NhU12Bm1oJmNToQ8TGNauKpziXyRZS3iBbmbtcFpP3ya9ShYJvHPYO EC893kw2ifZfuCP8e8c5dols46JR8BTps4/UACa+zK8KwyVsvJtRxR+GrHhVJ+IB 3ztjeg6sBkLQl2Ed8rtdZJx5ky2eqJDW7svw4ojhAl8Z00hiB29blQVrgw0ZjJpQ dY4KDsB57PZ/jymZnMBJTY7GUS2qXKLEdMzpUy1mgkY1Mf15Uz8VSxiIANCOehNc zNETzfdnYKucyH6YlWJwFmXNfwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBdea1jQ XCbLQLxiqdF9653l1BIVMB8GA1UdIwQYMBaAFDj7Bq9kn0APUTmUk1vt9+SScMiq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODI2Ny8wMkM4NkVBQTc4 Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFBOVJPWlNUVy0zMzVKSnd5 S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Qc0dyMlNmUUE5Uk9aU1RXLTMzNUpKd3lLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTgyNjcvMDJDODZFQUE3OENCMTFFQTgyMEQ3Mjc0QzRGOUFFMDIvMkY0M0VFNzI3 OENDMTFFQUI2OURBQzc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnVsQDBAJ3lGQwDQYJKoZIhvcNAQELBQADggEBAGl+b1FN mtgsPK8ZyOL3faSZqdvxf7BnQFOr7zwBQ9ZK7oZtnIdM8PVpC9QB0bh7R82wRd4z k9jUJ8U+ko1boJ8LfNQYMykTWs9D3bUOGqX9N2dbur0yxrR/LzTxBYNmsdVavFYl N1H3ixRHXCS3+1yp3pqka0b0ERNoCJBP/2m7ixW0RGojdtGJDGTeMagnXFREDYwv CzaQ2fIJV2TVg8zI0CUV+MphZj/4KL6sK6C6AW9GfYpzc4krPJVr5JsCkVu2gbcl az7V83tD6UJlpZIYtHrGEXB9jwI6A05vTTQXkEgAsAaiwsjc3ZTtk07Up9Ubp6Ht ApIHlhh4HFnxZQk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:07:48 2025 by rpki-client