$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/2965791E5F4011ED9361C246C4F9AE02.roa File: 2965791E5F4011ED9361C246C4F9AE02.roa (raw, json) Hash identifier: giH1vIhIIPvv5hJDOK02Raj/lgCr3oz3hTTRlbexHIs= Subject key identifier: 90:2D:FE:64:13:DE:80:0D:DB:5E:9A:B3:41:5C:48:77:97:5E:BE:E2 Certificate issuer: /CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Certificate serial: 01AD Authority key identifier: 06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/2965791E5F4011ED9361C246C4F9AE02.roa Signing time: Fri 31 Jan 2025 02:46:08 +0000 ROA not before: Fri 31 Jan 2025 02:46:08 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 136780 IP address blocks: 43.239.206.0/23 maxlen: 24 103.105.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 02:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C93 Validity Not Before: Jan 31 02:46:08 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=679c3970-2968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:59:82:54:fe:17:41:4f:8d:b7:1b:47:db:e7: b9:fa:d7:1a:55:6e:10:d1:23:4d:83:9d:46:46:e6: 6c:6b:c2:ed:75:22:1e:3f:df:dd:3a:b3:26:91:a1: 21:42:de:2a:8c:0f:43:6b:4a:77:2c:ea:71:48:a2: e2:91:b8:f7:69:17:77:4d:6e:7c:6e:fa:2e:e7:19: 9e:39:06:7b:6b:1f:a3:01:d0:f7:71:c9:c2:c2:f0: 99:70:d7:6e:be:d3:2c:36:31:98:17:9e:a3:3c:92: d7:98:56:c5:aa:f0:ce:c2:ea:d8:f8:11:54:b9:84: 6c:1f:ca:84:87:65:5b:8a:f1:e0:75:28:54:93:94: ee:59:89:c4:94:4c:b7:1e:2b:b6:7a:cc:2a:49:1c: c4:fc:ef:ed:f2:76:da:ff:2c:ac:8d:d0:79:54:cf: 5a:02:d7:75:92:33:6d:23:46:06:c3:e8:f8:2a:a8: 59:fe:a6:d4:13:7c:9b:02:81:35:13:4a:db:c5:ad: d8:cf:04:74:0b:95:f2:d0:40:6c:ad:f3:7f:50:0a: 5b:91:9c:0e:be:d6:07:ff:50:9d:a9:c9:27:52:57: fa:84:c9:98:dc:14:6e:ed:ea:4a:99:b0:0b:8e:84: 0f:1e:b5:ca:d8:1c:02:2f:8d:3f:97:38:57:b0:64: 44:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2D:FE:64:13:DE:80:0D:DB:5E:9A:B3:41:5C:48:77:97:5E:BE:E2 X509v3 Authority Key Identifier: keyid:06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/2965791E5F4011ED9361C246C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.206.0/23 103.105.172.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:97:09:7e:23:b7:7b:ae:fc:22:d1:05:59:ad:ae:87:57:17: 08:a2:7e:e5:32:af:76:71:7b:ef:1b:6c:5c:93:a7:70:87:09: 3c:01:0e:c4:32:ad:b5:4f:bc:67:c6:06:91:e9:d0:4b:72:6e: 06:62:00:b8:3c:79:49:34:91:6e:58:4e:5e:d0:dd:74:68:54: 41:4d:8c:e3:0d:0c:c5:65:8c:4b:d0:3a:5e:65:75:21:1a:2e: d8:5e:c5:5b:2d:8c:61:12:f3:e9:37:7f:da:24:b6:a6:1e:b0: f6:da:b2:7c:12:6c:62:ec:68:a1:00:17:13:27:d7:1a:d5:77: 6f:a8:38:47:07:c7:91:c8:7b:19:a1:43:85:66:ff:ee:dd:ef: fa:99:5a:5b:16:32:d6:5f:43:2a:a1:38:c6:4c:09:be:01:9a: a3:8c:ea:ae:1a:6e:9d:d6:70:f6:9b:c6:56:3d:f1:8d:e0:6e: 7c:e6:44:8e:74:ed:5f:c2:5b:0b:6a:f7:65:e4:a3:a0:86:11: ec:9e:31:48:49:56:7a:82:20:97:bd:c8:31:8e:00:e7:2f:60: 15:3d:3d:3d:03:77:69:36:d4:ae:eb:ee:c8:3c:e2:76:b2:1b: 14:51:05:35:10:a5:41:d4:1e:17:65:f1:81:33:5c:09:b4:c9: 0a:7b:b3:06 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDOTMxMTAvBgNVBAUTKDA2Q0I3NjYyMTk2RjY0NEVERUM5RENGQkQ4Nzk5QjhD NzNFMzk3MDkwHhcNMjUwMTMxMDI0NjA4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzljMzk3MC0yOTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFmCVP4XQU+NtxtH2+e5+tcaVW4Q0SNNg51GRuZsa8LtdSIeP9/dOrMmkaEh Qt4qjA9Da0p3LOpxSKLikbj3aRd3TW58bvou5xmeOQZ7ax+jAdD3ccnCwvCZcNdu vtMsNjGYF56jPJLXmFbFqvDOwurY+BFUuYRsH8qEh2VbivHgdShUk5TuWYnElEy3 Hiu2eswqSRzE/O/t8nba/yysjdB5VM9aAtd1kjNtI0YGw+j4KqhZ/qbUE3ybAoE1 E0rbxa3YzwR0C5Xy0EBsrfN/UApbkZwOvtYH/1CdqcknUlf6hMmY3BRu7epKmbAL joQPHrXK2BwCL40/lzhXsGRElQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJAt/mQT 3oAN216as0FcSHeXXr7iMB8GA1UdIwQYMBaAFAbLdmIZb2RO3snc+9h5m4xz45cJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0M5My80MDIxQTRFNjVG MjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpFN2V5ZHo3MkhtYmpIUGps d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzdDJZaGx2WkU3ZXlkejcySG1iakhQamx3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjdDOTMvNDAyMUE0RTY1RjI0MTFFREI4MEMxOTIxQzRGOUFFMDIvMjk2NTc5MUU1 RjQwMTFFRDkzNjFDMjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEr784DBAJnaawwDQYJKoZIhvcNAQELBQADggEBAB2XCX4j t3uu/CLRBVmtrodXFwiifuUyr3Zxe+8bbFyTp3CHCTwBDsQyrbVPvGfGBpHp0Ety bgZiALg8eUk0kW5YTl7Q3XRoVEFNjOMNDMVljEvQOl5ldSEaLthexVstjGES8+k3 f9oktqYesPbasnwSbGLsaKEAFxMn1xrVd2+oOEcHx5HIexmhQ4Vm/+7d7/qZWlsW MtZfQyqhOMZMCb4BmqOM6q4abp3WcPabxlY98Y3gbnzmRI507V/CWwtq92Xko6CG EeyeMUhJVnqCIJe9yDGOAOcvYBU9PT0Dd2k21K7r7sg84nayGxRRBTUQpUHUHhdl 8YEzXAm0yQp7swY= -----END CERTIFICATE-----Generated at Sat Apr 12 09:14:13 2025 by rpki-client