$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/445C8236B69311EC9650A57CC4F9AE02.roa File: 445C8236B69311EC9650A57CC4F9AE02.roa (raw, json) Hash identifier: /iDRAphVdSgU2e36vGmGSufKHFaLvSp39p6b7uKMJro= Subject key identifier: 58:D8:E9:A1:27:6A:FB:ED:2F:9F:D4:CA:77:17:4A:2D:4B:94:53:D7 Certificate issuer: /CN=A9131B38/serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2 Certificate serial: 03AD Authority key identifier: FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/445C8236B69311EC9650A57CC4F9AE02.roa Signing time: Tue 21 Jan 2025 00:33:59 +0000 ROA not before: Tue 21 Jan 2025 00:33:59 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 133766 IP address blocks: 103.180.52.0/23 maxlen: 23 103.180.52.0/24 maxlen: 24 103.180.53.0/24 maxlen: 24 2001:df0:5740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131B38 Validity Not Before: Jan 21 00:33:59 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=678eeb77-a296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:3c:c2:5d:17:49:6d:2d:15:f2:5a:c7:d0: fb:58:ee:0d:48:15:2a:e1:58:77:cf:bf:4c:8d:04: 89:70:a1:5f:8e:3e:40:be:2d:db:33:02:3d:b4:8b: 7c:a3:89:cf:e4:83:79:b0:ca:1b:7d:27:19:a7:c8: 22:9f:47:00:9c:28:74:60:82:87:28:a8:d8:d5:54: aa:ac:8b:86:da:e6:d2:5d:5f:5e:d9:93:ae:ec:dc: 46:7f:77:f8:1a:ec:88:00:67:ad:4b:f1:5c:8a:66: 16:7a:82:3d:32:72:56:f3:f7:b1:87:4b:ce:a0:7d: 38:c9:67:a6:43:22:4d:67:04:20:d5:31:2c:0f:da: 4a:c6:ba:bc:21:08:b5:e6:a0:44:64:1e:6b:3d:95: 4d:70:98:74:ac:30:51:98:42:da:f4:b5:f8:5f:17: c2:75:3e:5d:26:ef:24:76:b9:5d:0e:9b:b4:ba:7a: 60:d0:7b:8f:97:3e:77:09:63:3f:71:08:0c:e7:d7: 97:2b:c7:ac:e2:03:bd:25:a7:90:0c:ed:7c:51:98: e9:92:5a:fa:da:74:4b:e2:61:80:77:ce:df:70:fe: 85:e5:6f:dc:64:5c:4b:b5:63:24:5f:e8:10:cd:65: cd:9d:bc:a4:3c:97:c5:1a:fd:11:c6:99:c8:eb:46: 01:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D8:E9:A1:27:6A:FB:ED:2F:9F:D4:CA:77:17:4A:2D:4B:94:53:D7 X509v3 Authority Key Identifier: keyid:FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/445C8236B69311EC9650A57CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.180.52.0/23 IPv6: 2001:df0:5740::/48 Signature Algorithm: sha256WithRSAEncryption 09:e2:41:de:6f:86:cb:df:e9:69:09:86:fe:04:41:8c:9c:57: fc:a2:b3:4f:8a:4e:e1:4e:15:6a:c5:e4:ae:64:8c:99:3e:8b: 54:ca:e0:64:e6:4b:f4:67:b3:47:5c:1d:e5:80:d7:79:16:55: 2a:2a:a1:dd:b4:e6:e1:b2:ad:64:ba:e2:98:e0:eb:98:04:85: e7:5c:45:9d:5a:8f:29:a9:bb:ce:05:a5:9d:49:c0:12:0e:5c: ec:86:8d:00:c5:70:ce:68:ce:be:fd:55:0b:c2:9a:63:c9:ae: 76:a3:86:f9:f9:d0:3d:a7:36:ff:59:79:ea:c4:4a:96:69:c6: 3e:ca:95:20:49:3e:db:fd:48:8a:bb:3b:27:5e:3f:f5:93:6a: 57:f3:99:17:b4:1e:48:bb:23:65:24:68:0b:7d:6f:90:ab:4a: 96:da:1b:c6:0d:bb:94:b1:1c:5d:e6:91:fd:58:21:ed:df:8d: 20:36:03:52:19:8a:75:26:e7:67:35:2e:c1:e4:9a:24:8a:75: 0f:65:5f:db:c1:70:f3:9b:e6:2f:bf:da:4d:d7:10:d9:32:bd: 87:6c:52:62:50:c0:1d:16:4f:e7:ea:2b:36:ff:bf:58:a8:2e: 13:f4:b4:6e:1c:91:e9:83:2d:73:bd:3a:f0:33:88:a1:98:ba: 45:2c:81:a8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFCMzgxMTAvBgNVBAUTKEZBNTlCMjZFQzY1OTc4MDBDMzU3OURENzA3M0ZBNEI2 ODVBN0MyRDIwHhcNMjUwMTIxMDAzMzU5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhlZWI3Ny1hMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjQ8wl0XSW0tFfJax9D7WO4NSBUq4Vh3z79MjQSJcKFfjj5Avi3bMwI9tIt8 o4nP5IN5sMobfScZp8gin0cAnCh0YIKHKKjY1VSqrIuG2ubSXV9e2ZOu7NxGf3f4 GuyIAGetS/FcimYWeoI9MnJW8/exh0vOoH04yWemQyJNZwQg1TEsD9pKxrq8IQi1 5qBEZB5rPZVNcJh0rDBRmELa9LX4XxfCdT5dJu8kdrldDpu0unpg0HuPlz53CWM/ cQgM59eXK8es4gO9JaeQDO18UZjpklr62nRL4mGAd87fcP6F5W/cZFxLtWMkX+gQ zWXNnbykPJfFGv0RxpnI60YB6QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFjY6aEn avvtL5/UyncXSi1LlFPXMB8GA1UdIwQYMBaAFPpZsm7GWXgAw1ed1wc/pLaFp8LS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUIzOC8yREY1NDQ1NDdE MEIxMUVDQkEyMzk0MzNDNEY5QUUwMi8tbG15YnNaWmVBRERWNTNYQnota3RvV253 dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1sbXlic1paZUFERFY1M1hCei1rdG9Xbnd0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzFCMzgvMkRGNTQ0NTQ3RDBCMTFFQ0JBMjM5NDMzQzRGOUFFMDIvNDQ1QzgyMzZC NjkzMTFFQzk2NTBBNTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFntDQwDwQCAAIwCQMHACABDfBXQDANBgkqhkiG9w0BAQsF AAOCAQEACeJB3m+Gy9/paQmG/gRBjJxX/KKzT4pO4U4VasXkrmSMmT6LVMrgZOZL 9GezR1wd5YDXeRZVKiqh3bTm4bKtZLrimODrmASF51xFnVqPKam7zgWlnUnAEg5c 7IaNAMVwzmjOvv1VC8KaY8mudqOG+fnQPac2/1l56sRKlmnGPsqVIEk+2/1Iirs7 J14/9ZNqV/OZF7QeSLsjZSRoC31vkKtKltobxg27lLEcXeaR/Vgh7d+NIDYDUhmK dSbnZzUuweSaJIp1D2Vf28Fw85vmL7/aTdcQ2TK9h2xSYlDAHRZP5+orNv+/WKgu E/S0bhyR6YMtc7068DOIoZi6RSyBqA== -----END CERTIFICATE-----Generated at Sat Apr 5 07:18:46 2025 by rpki-client