$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/7BF0DB503ECF11EEA6759B55C4F9AE02.roa File: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (raw, json) Hash identifier: CrfveQoqOhRCPxQazR6Rs3pm4eRMhY2PEiNU6IjJdl8= Subject key identifier: A0:35:12:D5:B3:12:5E:59:73:C8:96:FB:68:D4:57:C6:5E:07:9B:DC Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Certificate serial: 09E6 Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/7BF0DB503ECF11EEA6759B55C4F9AE02.roa Signing time: Tue 04 Feb 2025 19:48:50 +0000 ROA not before: Tue 04 Feb 2025 19:48:50 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 131471 IP address blocks: 103.148.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2534 (0x9e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BA6 Validity Not Before: Feb 4 19:48:50 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a26f22-7040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:73:e8:ba:44:52:cb:44:ed:9a:6d:26:e8:92: 6e:0a:6b:e8:da:64:8c:83:1d:02:41:18:4a:3a:e8: 66:39:b7:f7:27:72:65:a1:87:87:12:03:10:bb:c7: 7f:5a:37:b7:6f:8e:0a:92:bb:cb:8a:1f:9f:c5:35: 31:72:ef:8c:23:88:56:84:18:b9:db:fc:ff:f0:b8: f5:7f:0a:48:fe:4c:d5:e4:62:a6:81:cf:43:3e:92: 7a:1c:d2:33:a1:48:5a:6c:42:3d:42:bf:76:85:ba: 24:03:04:32:84:7c:f2:85:4b:af:9a:43:34:e5:68: 85:f8:ab:54:9b:44:22:7a:4f:3f:69:b0:15:61:ce: ea:85:68:a9:e2:91:5b:ab:76:aa:34:a2:28:7c:a8: 46:f4:7e:41:f1:d4:0b:66:62:0c:76:0d:22:07:dc: 4b:ba:29:d1:15:06:0f:e5:5f:38:82:c2:c8:3c:be: f3:eb:57:bd:61:40:ee:73:61:f2:10:5d:b0:80:19: 12:fc:cc:a8:f4:91:05:79:5a:58:df:d7:a6:67:db: af:33:2e:b2:3e:1f:df:5c:0b:d2:cc:a8:20:a2:b4: e1:35:61:c9:e9:32:50:e6:61:f2:3c:cd:f2:bd:8b: 62:36:a0:bc:c1:a8:44:a8:ff:d5:30:92:9a:2b:61: f6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:35:12:D5:B3:12:5E:59:73:C8:96:FB:68:D4:57:C6:5E:07:9B:DC X509v3 Authority Key Identifier: keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/7BF0DB503ECF11EEA6759B55C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.128.0/24 Signature Algorithm: sha256WithRSAEncryption 47:84:9e:6c:59:a4:9f:8e:97:8b:61:99:0f:55:7c:3b:e4:1d: c0:db:e9:4f:37:19:8f:22:db:8e:31:d1:45:e3:c3:ab:d7:ed: c7:63:3a:1c:33:d7:c9:e1:99:16:a6:ce:51:14:34:d7:d5:dd: c8:46:b6:b8:16:42:86:a5:05:66:bc:c9:c7:df:9d:85:2e:f8: 66:be:f0:2b:47:95:15:45:d9:2e:21:2b:f4:a3:7e:c7:59:f9: 90:5a:e3:c9:6e:a9:94:38:02:95:7f:d7:ef:ae:eb:25:ba:a5: 38:57:d7:48:65:ef:e6:21:0e:0d:2f:20:66:f8:b0:f4:c0:d8: a3:34:b8:6e:34:c8:96:63:eb:29:85:eb:99:cf:7c:4c:91:b7: ae:3b:57:ae:04:e2:15:02:dc:ee:07:3c:43:13:54:82:a0:35: 3d:4f:ef:33:1d:fb:b5:85:4d:f1:07:8b:ff:06:9c:06:b7:c2: de:e0:fb:b3:e3:a3:12:dd:22:58:92:1a:71:9d:46:a1:a0:c8: ec:20:60:b9:3f:a0:fb:0f:7b:e3:c4:62:91:f9:ae:7a:12:1f: bd:c0:25:4c:57:64:8f:c4:5a:37:19:5f:84:5e:52:30:57:5d: e3:da:80:08:1e:20:e6:28:86:4d:69:2e:8e:9d:5b:41:0d:f8: 3c:d9:fe:63 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCQTYxMTAvBgNVBAUTKEI0Qjg1NThCRUM1NDM2MjBGRTZFQTkyRkVCQzVFOEE5 MjcyMTRDMzkwHhcNMjUwMjA0MTk0ODUwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyNmYyMi03MDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3PoukRSy0Ttmm0m6JJuCmvo2mSMgx0CQRhKOuhmObf3J3JloYeHEgMQu8d/ Wje3b44KkrvLih+fxTUxcu+MI4hWhBi52/z/8Lj1fwpI/kzV5GKmgc9DPpJ6HNIz oUhabEI9Qr92hbokAwQyhHzyhUuvmkM05WiF+KtUm0Qiek8/abAVYc7qhWip4pFb q3aqNKIofKhG9H5B8dQLZmIMdg0iB9xLuinRFQYP5V84gsLIPL7z61e9YUDuc2Hy EF2wgBkS/Myo9JEFeVpY39emZ9uvMy6yPh/fXAvSzKggorThNWHJ6TJQ5mHyPM3y vYtiNqC8wahEqP/VMJKaK2H2nwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKA1EtWz El5Zc8iW+2jUV8ZeB5vcMB8GA1UdIwQYMBaAFLS4VYvsVDYg/m6pL+vF6KknIUw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJBNi8wRjNERjQyODcx NTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5pRC1icWt2NjhYb3FTY2hU RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMaFZpLXhVTmlELWJxa3Y2OFhvcVNjaFREay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTBCQTYvMEYzREY0Mjg3MTU3MTFFQTg2NTU5RDJEQzRGOUFFMDIvN0JGMERCNTAz RUNGMTFFRUE2NzU5QjU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnlIAwDQYJKoZIhvcNAQELBQADggEBAEeEnmxZpJ+Ol4th mQ9VfDvkHcDb6U83GY8i244x0UXjw6vX7cdjOhwz18nhmRamzlEUNNfV3chGtrgW QoalBWa8ycffnYUu+Ga+8CtHlRVF2S4hK/SjfsdZ+ZBa48luqZQ4ApV/1++u6yW6 pThX10hl7+YhDg0vIGb4sPTA2KM0uG40yJZj6ymF65nPfEyRt647V64E4hUC3O4H PEMTVIKgNT1P7zMd+7WFTfEHi/8GnAa3wt7g+7PjoxLdIliSGnGdRqGgyOwgYLk/ oPsPe+PEYpH5rnoSH73AJUxXZI/EWjcZX4ReUjBXXePagAgeIOYohk1pLo6dW0EN +DzZ/mM= -----END CERTIFICATE-----Generated at Sat Apr 5 07:12:23 2025 by rpki-client