$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/E761FB80118C11F0B9B8B26AC4F9AE02.roa File: E761FB80118C11F0B9B8B26AC4F9AE02.roa (raw, json) Hash identifier: o9D4v703UX2wAAqZ2wSaRsbmC0WO9w7I4BcM4Td9Ank= Subject key identifier: C6:C0:A8:15:82:E6:E6:B4:19:22:78:99:A7:56:60:22:FA:3C:6C:1E Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Certificate serial: 017F Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/E761FB80118C11F0B9B8B26AC4F9AE02.roa Signing time: Fri 04 Apr 2025 19:42:13 +0000 ROA not before: Fri 04 Apr 2025 19:42:13 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 149994 IP address blocks: 103.121.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B0D Validity Not Before: Apr 4 19:42:13 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67f03614-34ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:c6:e8:8d:a5:55:d4:62:c7:b3:0e:81:09: 75:bf:50:25:d3:9a:f6:a0:79:65:38:53:6c:f0:47: 6b:e9:8b:45:51:b3:85:20:b3:d2:c1:06:ad:d4:ba: dc:17:e3:b0:bf:88:cc:86:9f:d9:6f:29:22:f6:ac: 79:2e:5c:6d:00:77:22:09:29:c2:fe:a6:02:6b:aa: 22:ee:a3:24:01:70:53:16:b3:79:6a:04:20:d1:31: 95:70:a8:af:fd:1e:64:a3:f0:8e:7d:c4:eb:a5:7e: f7:9a:a2:5c:06:2d:1a:44:34:37:1b:b1:f3:2b:83: bc:ec:00:b7:f7:18:56:ef:94:ac:ba:d6:6d:b6:4d: 24:b1:f6:ee:e9:4e:a1:ca:6e:54:ec:e9:97:a7:df: 2e:b3:ab:62:f5:6e:ac:17:b1:a0:98:1b:86:ca:ec: 36:bf:1f:db:0c:ea:0b:88:d3:7d:ee:70:4e:93:51: a9:3f:1e:f5:b2:28:b8:30:cd:a5:5b:95:cd:e1:64: cb:57:6b:d1:43:ce:3e:3b:d5:7f:a0:b4:32:56:92: d4:33:1c:7e:7f:46:f9:0a:54:a7:b8:52:19:44:6d: f5:64:1a:ce:50:6e:05:4c:51:f1:f4:47:d1:ec:71: 38:d4:1d:29:1a:1b:33:27:ec:17:e4:10:0c:9d:c4: 45:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C0:A8:15:82:E6:E6:B4:19:22:78:99:A7:56:60:22:FA:3C:6C:1E X509v3 Authority Key Identifier: keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/E761FB80118C11F0B9B8B26AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.185.0/24 Signature Algorithm: sha256WithRSAEncryption 24:98:c5:51:d2:a2:c4:fe:22:47:8e:58:98:20:de:18:87:9a: e9:ba:0a:a5:27:73:42:eb:2e:3a:6b:7b:c7:29:67:21:ed:ab: 21:44:18:02:f2:90:0a:92:fd:eb:74:37:d0:e2:29:9d:90:ad: bf:d4:f7:8d:2c:a9:76:6c:3a:13:a8:85:75:6e:52:18:99:ba: 3b:0e:51:85:c2:e2:21:4e:24:b1:93:db:94:fc:94:99:f4:27: f8:e4:c0:64:fc:7a:c4:14:75:59:a9:1d:76:56:45:fd:d3:ec: de:cb:15:b9:02:0b:21:8e:5e:09:e4:88:0b:95:d7:bf:ac:9a: b1:d8:d6:27:e7:30:c3:a1:98:82:c6:6b:3c:c4:37:2a:70:96: 27:8e:dd:a0:cb:86:12:e8:19:07:e5:55:bc:64:2f:80:5b:b8: 5d:b7:4e:4b:32:17:ba:b7:5b:d0:25:58:80:a3:97:ae:8e:bd: 8f:4b:86:e8:ca:7f:c8:74:9a:34:af:ca:c8:e0:c9:9e:16:c1: 25:28:2d:93:4d:24:63:f9:4e:fe:21:e2:d4:70:63:0c:5a:29: 0f:16:8a:9c:ef:f4:23:58:98:5c:ec:e1:15:6b:60:c1:4a:ff: ad:49:27:33:92:05:36:9f:95:cd:b9:db:66:ea:26:b0:d8:4f: 29:d6:9a:61 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF MkZCMzFDMTgwHhcNMjUwNDA0MTk0MjEzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YwMzYxNC0zNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMjG6I2lVdRix7MOgQl1v1Al05r2oHllOFNs8Edr6YtFUbOFILPSwQat1Lrc F+Owv4jMhp/Zbyki9qx5LlxtAHciCSnC/qYCa6oi7qMkAXBTFrN5agQg0TGVcKiv /R5ko/COfcTrpX73mqJcBi0aRDQ3G7HzK4O87AC39xhW75SsutZttk0ksfbu6U6h ym5U7OmXp98us6ti9W6sF7GgmBuGyuw2vx/bDOoLiNN97nBOk1GpPx71sii4MM2l W5XN4WTLV2vRQ84+O9V/oLQyVpLUMxx+f0b5ClSnuFIZRG31ZBrOUG4FTFHx9EfR 7HE41B0pGhszJ+wX5BAMncRF5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMbAqBWC 5ua0GSJ4madWYCL6PGweMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1 MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjJCMEQvOTA5Qjc5RjBFNTJCMTFFREIyRUI2NTg1QzRGOUFFMDIvRTc2MUZCODAx MThDMTFGMEI5QjhCMjZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnebkwDQYJKoZIhvcNAQELBQADggEBACSYxVHSosT+IkeO WJgg3hiHmum6CqUnc0LrLjpre8cpZyHtqyFEGALykAqS/et0N9DiKZ2Qrb/U940s qXZsOhOohXVuUhiZujsOUYXC4iFOJLGT25T8lJn0J/jkwGT8esQUdVmpHXZWRf3T 7N7LFbkCCyGOXgnkiAuV17+smrHY1ifnMMOhmILGazzENypwlieO3aDLhhLoGQfl VbxkL4BbuF23TksyF7q3W9AlWICjl66OvY9LhujKf8h0mjSvysjgyZ4WwSUoLZNN JGP5Tv4h4tRwYwxaKQ8Wipzv9CNYmFzs4RVrYMFK/61JJzOSBTaflc2522bqJrDY TynWmmE= -----END CERTIFICATE-----Generated at Sun Apr 6 01:36:19 2025 by rpki-client