$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/B72206B4554B11E791BA5861C4F9AE02.roa File: B72206B4554B11E791BA5861C4F9AE02.roa (raw, json) Hash identifier: Si+Xx28szHe9Iv7W1YtcZoNp90VlP5RP91wUGl6kx/U= Subject key identifier: C4:5D:86:D9:39:EC:C9:61:C7:B3:4F:2B:9B:7A:BA:3E:5B:C9:67:8E Certificate issuer: /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Certificate serial: 2198 Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/B72206B4554B11E791BA5861C4F9AE02.roa Signing time: Tue 18 Feb 2025 16:13:15 +0000 ROA not before: Tue 18 Feb 2025 16:13:15 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 135036 IP address blocks: 45.250.68.0/22 maxlen: 22 45.250.68.0/24 maxlen: 24 45.250.69.0/24 maxlen: 24 45.250.70.0/24 maxlen: 24 45.250.71.0/24 maxlen: 24 103.206.208.0/22 maxlen: 22 103.206.208.0/24 maxlen: 24 103.206.209.0/24 maxlen: 24 103.206.210.0/24 maxlen: 24 103.206.211.0/24 maxlen: 24 2404:4480::/32 maxlen: 32 2404:4480:1000::/48 maxlen: 48 2404:4480:1001::/48 maxlen: 48 2404:4480:1002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8600 (0x2198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126F2B Validity Not Before: Feb 18 16:13:15 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67b4b19b-cc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:3c:6e:5d:c2:08:32:b1:97:4f:a8:4b:ad: 09:46:09:29:30:07:47:77:34:1e:97:84:4c:c8:27: fc:f9:b4:76:fe:35:69:8d:54:9e:4b:49:72:e4:64: 51:a8:50:29:d7:c6:c3:43:e2:e1:ed:5a:89:05:ac: b0:f9:b8:32:dd:c6:de:a6:52:81:b8:8b:0a:0a:be: 16:95:32:65:63:a5:e3:92:6e:4a:96:99:d0:86:c1: 6b:84:76:05:07:23:b9:2a:ab:73:54:78:06:3a:08: 80:f4:71:52:6b:23:c3:cc:9c:a4:9d:65:26:99:af: af:e2:89:28:59:f7:a8:cb:5f:2a:c4:35:a6:e7:7f: 70:02:15:32:d6:0f:1d:ef:36:f2:22:a1:ff:63:d0: 37:c5:78:23:28:ae:21:7b:9e:b9:06:ad:84:2a:40: 20:56:62:3e:71:31:a2:1b:8a:28:83:7d:f3:82:84: c4:9e:26:5c:0f:71:5f:cf:19:a0:59:62:21:86:8c: b3:8d:40:82:cc:66:e5:77:03:25:4a:cd:55:b9:51: 6c:60:80:c6:d9:0b:f9:1d:bc:09:64:bb:c2:a7:8e: cd:04:cd:f5:65:9a:99:cf:19:1e:92:0c:f1:8d:53: e4:a0:71:9c:80:ab:b3:17:31:58:e3:1b:16:2d:d9: 45:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5D:86:D9:39:EC:C9:61:C7:B3:4F:2B:9B:7A:BA:3E:5B:C9:67:8E X509v3 Authority Key Identifier: keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/B72206B4554B11E791BA5861C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.250.68.0/22 103.206.208.0/22 IPv6: 2404:4480::/32 Signature Algorithm: sha256WithRSAEncryption 38:b5:94:54:87:78:50:44:1b:05:26:93:1a:94:4d:9a:15:23: 4b:2a:8b:5f:6d:35:79:67:d4:d9:98:8a:13:61:03:00:f2:2d: 49:8f:6a:b2:ee:53:c2:1b:f0:bf:c0:de:05:87:a9:d5:9c:85: d5:d8:89:68:39:c6:ee:fd:31:30:46:f7:c9:2d:4b:c8:45:e9: de:b3:13:07:05:a5:29:35:cb:04:0f:a0:50:46:93:0d:bb:35: 72:4d:13:ff:87:b7:e3:8e:cf:d5:c9:29:89:00:86:8d:5a:5e: 1a:27:83:05:0b:9b:93:6a:4c:ee:0d:cb:dc:81:6e:4b:4c:6f: be:22:f2:eb:2b:dd:dd:90:45:ae:72:53:13:94:f6:71:de:55: ee:06:98:2b:52:ef:16:40:f5:89:08:0c:a6:40:5c:ed:e6:5c: 61:8a:88:c1:54:32:9f:9d:5d:e7:97:66:7b:54:33:97:fc:e8: db:56:dc:43:c4:fc:d3:0b:4c:5c:30:5e:3b:40:8e:b9:ae:c3: 6d:e8:ea:8e:e2:cd:ab:6c:b2:ee:a1:c3:fe:85:71:a4:18:43: 98:c1:c1:44:b9:9b:87:c6:a1:a5:cd:45:15:bf:5a:af:ba:ec: 2f:44:ed:4f:b2:98:23:06:54:7d:3c:11:e2:a6:4a:13:22:ee: c3:03:ff:a3 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICIZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZGMkIxMTAvBgNVBAUTKEUxODJGOTkzNjk1MkM0MjY5RDY3MERBNTc1MkRFQ0M4 NjgyMzRGMUIwHhcNMjUwMjE4MTYxMzE1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I0YjE5Yi1jYzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEA8bl3CCDKxl0+oS60JRgkpMAdHdzQel4RMyCf8+bR2/jVpjVSeS0ly5GRR qFAp18bDQ+Lh7VqJBayw+bgy3cbeplKBuIsKCr4WlTJlY6Xjkm5KlpnQhsFrhHYF ByO5KqtzVHgGOgiA9HFSayPDzJyknWUmma+v4okoWfeoy18qxDWm539wAhUy1g8d 7zbyIqH/Y9A3xXgjKK4he565Bq2EKkAgVmI+cTGiG4oog33zgoTEniZcD3Ffzxmg WWIhhoyzjUCCzGbldwMlSs1VuVFsYIDG2Qv5HbwJZLvCp47NBM31ZZqZzxkekgzx jVPkoHGcgKuzFzFY4xsWLdlFwwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMRdhtk5 7Mlhx7NPK5t6uj5byWeOMB8GA1UdIwQYMBaAFOGC+ZNpUsQmnWcNpXUt7MhoI08b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkYyQi85MEZBREVFQ0Q1 Q0QxMUU1QUE0MjZFNDBDNEY5QUUwMi80WUw1azJsU3hDYWRadzJsZFMzc3lHZ2pU eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTDVrMmxTeENhZFp3MmxkUzNzeUdnalR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjZGMkIvOTBGQURFRUNENUNEMTFFNUFBNDI2RTQwQzRGOUFFMDIvQjcyMjA2QjQ1 NTRCMTFFNzkxQkE1ODYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIt+kQDBAJnztAwDQQCAAIwBwMFACQERIAwDQYJKoZIhvcN AQELBQADggEBADi1lFSHeFBEGwUmkxqUTZoVI0sqi19tNXln1NmYihNhAwDyLUmP arLuU8Ib8L/A3gWHqdWchdXYiWg5xu79MTBG98ktS8hF6d6zEwcFpSk1ywQPoFBG kw27NXJNE/+Ht+OOz9XJKYkAho1aXhongwULm5NqTO4Ny9yBbktMb74i8usr3d2Q Ra5yUxOU9nHeVe4GmCtS7xZA9YkIDKZAXO3mXGGKiMFUMp+dXeeXZntUM5f86NtW 3EPE/NMLTFwwXjtAjrmuw23o6o7izatssu6hw/6FcaQYQ5jBwUS5m4fGoaXNRRW/ Wq+67C9E7U+ymCMGVH08EeKmShMi7sMD/6M= -----END CERTIFICATE-----Generated at Sat Apr 5 01:55:08 2025 by rpki-client