$ rpki-client -vvf rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/9FAB1ADC65C111EF8769DC14C4F9AE02.roa File: 9FAB1ADC65C111EF8769DC14C4F9AE02.roa (raw, json) Hash identifier: WiTy8cm0FJ/aEESc91vlgZl0JT8P/pFPtZ2Ry9TBveA= Subject key identifier: B0:D5:6F:C6:1D:64:9F:5F:A5:7F:24:B2:BD:29:BC:DC:6A:5C:B3:BD Certificate issuer: /CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4 Certificate serial: 06D9 Authority key identifier: 3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/9FAB1ADC65C111EF8769DC14C4F9AE02.roa Signing time: Tue 04 Mar 2025 23:11:21 +0000 ROA not before: Tue 04 Mar 2025 23:11:21 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137426 IP address blocks: 103.108.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1753 (0x6d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911980F Validity Not Before: Mar 4 23:11:21 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c78899-48ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e9:8d:1c:cd:7e:3a:7f:d4:80:9c:0c:c0:97: 92:ba:05:8c:eb:f2:5e:97:e2:61:d8:2d:0b:68:22: a3:42:01:33:fc:ef:07:a1:be:b6:27:03:9b:f7:49: 5a:42:8d:50:d8:ed:43:5c:36:57:90:12:2e:01:55: f5:80:f7:b3:33:5a:49:78:b0:86:26:5b:16:fc:65: 12:4e:f2:20:4c:78:11:a8:ab:23:6c:e3:7c:d2:9f: 8f:7d:c8:1f:e6:e8:38:43:1c:b9:65:29:1f:e4:3b: 57:88:b4:ef:07:84:9d:ac:7f:30:7b:25:fe:33:bd: 23:00:92:8f:1f:b0:f6:9e:fd:30:c2:2e:fe:5f:3a: a7:2b:29:b6:d2:58:2b:8c:41:fe:f3:32:f7:52:59: c9:c1:5e:f4:be:a7:63:5a:6d:4f:ec:5b:70:32:5e: 78:b0:8f:da:e9:af:81:02:84:6f:ae:4d:e9:80:22: cd:bf:f0:71:86:b6:32:5e:c3:c0:9d:56:72:3f:39: 6a:a9:dd:69:ab:80:76:b7:ab:56:b5:6f:ef:d3:f3: 33:1e:d8:15:84:a3:23:f5:a2:8b:dd:b3:af:2a:a1: 6e:99:5e:4a:f8:97:9e:bb:b4:48:15:35:f1:5f:ad: c6:7e:44:d7:8d:8b:fc:06:da:d8:52:79:dc:84:de: 8f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D5:6F:C6:1D:64:9F:5F:A5:7F:24:B2:BD:29:BC:DC:6A:5C:B3:BD X509v3 Authority Key Identifier: keyid:3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/9FAB1ADC65C111EF8769DC14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.108.68.0/22 Signature Algorithm: sha256WithRSAEncryption 23:c1:26:ea:bb:9a:36:0f:b3:3e:bf:97:fd:60:ff:a0:81:7b: 1c:52:8c:97:30:91:80:76:d7:5a:32:83:18:40:8a:07:e8:9f: 07:4e:46:8b:b4:b7:50:e9:be:4d:e7:b1:fb:51:c6:61:75:95: 21:36:2a:87:fa:62:21:05:f2:b0:42:68:af:6f:59:d2:88:4e: 38:6c:c6:0c:8e:c1:18:01:f9:75:23:8d:1c:e5:8a:9c:1d:ab: 4a:26:d9:27:ed:1d:59:34:fe:54:71:9b:b2:61:aa:ac:31:97: 5f:fd:64:d0:59:f6:47:fc:76:be:f2:86:ed:2c:89:82:54:f0: c4:15:94:c9:24:53:09:0d:c0:25:2c:e7:f8:83:c4:ee:f9:53: 62:48:0a:31:c4:5e:c9:98:b6:9c:4c:6c:8b:d7:c1:52:60:36: 1f:20:c4:48:39:af:bd:2b:7a:be:71:57:47:3d:27:19:13:e9: 76:37:19:c5:58:a6:be:80:eb:9b:62:18:b4:b0:41:12:a6:ff: 19:bc:3c:53:85:22:ce:fa:fd:64:89:99:a5:ce:44:73:49:1f: 15:21:1c:4f:e0:77:3e:e7:43:5e:f9:fb:16:22:19:60:f7:97: bf:83:21:84:23:0a:6c:72:75:d5:be:7c:c7:9a:83:e6:7b:b7: ce:ac:be:49 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk4MEYxMTAvBgNVBAUTKDNCQzZCMzIxRkQ3QjYwQzU2MEYxNUQ3RDI0Q0FDNUEz Mzc0NDBGQjQwHhcNMjUwMzA0MjMxMTIxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3ODg5OS00OGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOmNHM1+On/UgJwMwJeSugWM6/Jel+Jh2C0LaCKjQgEz/O8Hob62JwOb90la Qo1Q2O1DXDZXkBIuAVX1gPezM1pJeLCGJlsW/GUSTvIgTHgRqKsjbON80p+Pfcgf 5ug4Qxy5ZSkf5DtXiLTvB4SdrH8weyX+M70jAJKPH7D2nv0wwi7+XzqnKym20lgr jEH+8zL3UlnJwV70vqdjWm1P7FtwMl54sI/a6a+BAoRvrk3pgCLNv/BxhrYyXsPA nVZyPzlqqd1pq4B2t6tWtW/v0/MzHtgVhKMj9aKL3bOvKqFumV5K+Jeeu7RIFTXx X63GfkTXjYv8BtrYUnnchN6P/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLDVb8Yd ZJ9fpX8ksr0pvNxqXLO9MB8GA1UdIwQYMBaAFDvGsyH9e2DFYPFdfSTKxaM3RA+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTgwRi8xNjYxN0Q2QzQ4 MzIxMUVCODc1NDMxMUFDNEY5QUUwMi9POGF6SWYxN1lNVmc4VjE5Sk1yRm96ZEVE N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL084YXpJZjE3WU1WZzhWMTlKTXJGb3pkRUQ3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTk4MEYvMTY2MTdENkM0ODMyMTFFQjg3NTQzMTFBQzRGOUFFMDIvOUZBQjFBREM2 NUMxMTFFRjg3NjlEQzE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnbEQwDQYJKoZIhvcNAQELBQADggEBACPBJuq7mjYPsz6/ l/1g/6CBexxSjJcwkYB211oygxhAigfonwdORou0t1Dpvk3nsftRxmF1lSE2Kof6 YiEF8rBCaK9vWdKITjhsxgyOwRgB+XUjjRzlipwdq0om2SftHVk0/lRxm7Jhqqwx l1/9ZNBZ9kf8dr7yhu0siYJU8MQVlMkkUwkNwCUs5/iDxO75U2JICjHEXsmYtpxM bIvXwVJgNh8gxEg5r70rer5xV0c9JxkT6XY3GcVYpr6A65tiGLSwQRKm/xm8PFOF Is76/WSJmaXORHNJHxUhHE/gdz7nQ175+xYiGWD3l7+DIYQjCmxyddW+fMeag+Z7 t86svkk= -----END CERTIFICATE-----Generated at Sat Apr 5 03:58:00 2025 by rpki-client