$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/1F8D757623B811E9971D8168C4F9AE02.roa File: 1F8D757623B811E9971D8168C4F9AE02.roa (raw, json) Hash identifier: EGwNt3ye+JZB2ATROMeS/SxXvTNPBGs0hQuYVVL6cZA= Subject key identifier: 22:A5:FD:F7:D2:8C:DA:AE:E4:E9:AF:6D:49:CE:93:57:A8:E3:58:74 Certificate issuer: /CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F Certificate serial: 10B1 Authority key identifier: 60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/1F8D757623B811E9971D8168C4F9AE02.roa Signing time: Mon 31 Mar 2025 17:46:16 +0000 ROA not before: Mon 31 Mar 2025 17:46:16 +0000 ROA not after: Fri 01 Aug 2025 00:00:00 +0000 asID: 138549 IP address blocks: 103.132.220.0/22 maxlen: 22 103.132.220.0/23 maxlen: 23 103.132.220.0/24 maxlen: 24 103.132.221.0/24 maxlen: 24 103.132.222.0/23 maxlen: 23 103.132.222.0/24 maxlen: 24 103.132.223.0/24 maxlen: 24 2404:40c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4273 (0x10b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D31 Validity Not Before: Mar 31 17:46:16 2025 GMT Not After : Aug 1 00:00:00 2025 GMT Subject: CN=67ead4e8-4efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:31:6a:3b:f6:82:39:4c:a0:b9:b4:a5:1a:8f: c7:0a:58:5f:6b:4e:1b:f9:7e:19:76:06:68:b7:bd: ef:64:a4:cc:52:0d:bd:e3:60:f0:42:d0:2d:fb:fe: 11:a0:19:cb:2c:c9:f5:be:55:12:bd:4a:d4:dd:33: 39:a0:76:62:69:cc:35:e1:7f:cd:88:47:5d:99:77: d8:ae:80:c8:6f:e9:6d:51:50:60:95:de:a1:ab:2a: 49:ca:10:b1:1a:fb:11:af:30:4b:3f:32:a4:86:42: 7d:49:50:d1:b4:15:76:6b:25:f9:2a:55:1e:1a:d4: 2c:df:49:8d:06:fa:68:78:be:6e:9d:ea:25:6d:1f: ce:d5:1e:cd:bf:82:d1:79:70:28:65:03:8c:6c:0c: 95:e8:e6:9b:63:47:99:e6:55:57:79:18:7d:2c:93: 0e:fb:4f:20:28:fc:23:2c:3f:93:78:f6:a6:25:e1: 72:ee:31:24:5f:81:8b:b9:f7:a1:a1:5c:db:eb:88: 28:74:30:ea:93:06:22:11:dc:72:c6:bd:eb:ed:5d: 3c:04:28:d6:3e:5e:bd:6e:38:b4:08:64:75:fd:82: 63:62:ef:e9:bf:ed:c5:69:63:96:9b:95:05:a0:67: 5d:28:94:20:8a:e8:c7:76:80:35:dc:38:f1:67:61: c8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A5:FD:F7:D2:8C:DA:AE:E4:E9:AF:6D:49:CE:93:57:A8:E3:58:74 X509v3 Authority Key Identifier: keyid:60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/1F8D757623B811E9971D8168C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.220.0/22 IPv6: 2404:40c0::/32 Signature Algorithm: sha256WithRSAEncryption 58:18:39:0d:e8:a6:3a:ca:1c:38:55:db:bc:19:21:f8:07:65: 64:e4:2f:85:37:e2:a0:7c:0b:c6:ae:81:2b:d4:5e:15:99:8e: 58:2d:cd:b6:c6:fb:dd:eb:21:e1:22:35:65:14:de:40:5e:6d: b1:cf:70:5c:cd:68:6f:ac:0b:c5:47:e6:a9:d1:aa:25:44:fb: 84:90:08:52:cd:f2:fe:4c:e2:b6:5a:56:7e:85:b8:34:5a:fa: 00:f9:48:07:24:c4:96:21:6a:f1:5d:2e:bf:3e:06:c5:73:08: 68:35:54:4f:3d:e3:6f:be:3f:f5:f2:96:40:4c:da:2e:40:70: 9b:91:68:a8:7f:bd:55:89:8b:fa:4b:26:8f:ca:be:8c:22:88: 72:fd:1f:97:ac:2a:4c:da:25:9a:a6:02:23:e1:98:85:f8:eb: e7:49:b5:51:f3:aa:a3:bb:f6:6c:3d:9b:f1:d9:56:a7:57:92: 5f:3a:8c:33:a2:e3:83:00:3d:8e:43:22:e0:c3:0b:ff:c2:0f: 83:c3:bd:2d:1a:f1:c3:0c:c9:c6:1e:66:74:07:57:f1:01:da: bf:ae:8d:a9:a1:21:64:d3:70:d9:18:99:fc:4c:e9:74:53:c4: 3e:2a:cc:92:05:8a:3a:d3:5c:33:b4:6f:d5:2a:11:c7:8b:8f: c7:0f:cf:c2 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICELEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFEMzExMTAvBgNVBAUTKDYwRDEzMTgzRDM5REU2OTU2NTYwMjMxRTdFMDMxN0U2 OUNCQzZDMEYwHhcNMjUwMzMxMTc0NjE2WhcNMjUwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhZDRlOC00ZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzFqO/aCOUygubSlGo/HClhfa04b+X4ZdgZot73vZKTMUg2942DwQtAt+/4R oBnLLMn1vlUSvUrU3TM5oHZiacw14X/NiEddmXfYroDIb+ltUVBgld6hqypJyhCx GvsRrzBLPzKkhkJ9SVDRtBV2ayX5KlUeGtQs30mNBvpoeL5uneolbR/O1R7Nv4LR eXAoZQOMbAyV6OabY0eZ5lVXeRh9LJMO+08gKPwjLD+TePamJeFy7jEkX4GLufeh oVzb64godDDqkwYiEdxyxr3r7V08BCjWPl69bji0CGR1/YJjYu/pv+3FaWOWm5UF oGddKJQgiujHdoA13DjxZ2HIWwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCKl/ffS jNqu5OmvbUnOk1eo41h0MB8GA1UdIwQYMBaAFGDRMYPTneaVZWAjHn4DF+acvGwP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQzMS82NUVGMjk2QTIz MTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVwVmxZQ01lZmdNWDVweThi QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lORXhnOU9kNXBWbFlDTWVmZ01YNXB5OGJBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzFEMzEvNjVFRjI5NkEyMzEzMTFFOUEyOUJCMTc0QzRGOUFFMDIvMUY4RDc1NzYy M0I4MTFFOTk3MUQ4MTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnhNwwDQQCAAIwBwMFACQEQMAwDQYJKoZIhvcNAQELBQAD ggEBAFgYOQ3opjrKHDhV27wZIfgHZWTkL4U34qB8C8augSvUXhWZjlgtzbbG+93r IeEiNWUU3kBebbHPcFzNaG+sC8VH5qnRqiVE+4SQCFLN8v5M4rZaVn6FuDRa+gD5 SAckxJYhavFdLr8+BsVzCGg1VE8942++P/XylkBM2i5AcJuRaKh/vVWJi/pLJo/K vowiiHL9H5esKkzaJZqmAiPhmIX46+dJtVHzqqO79mw9m/HZVqdXkl86jDOi44MA PY5DIuDDC//CD4PDvS0a8cMMycYeZnQHV/EB2r+ujamhIWTTcNkYmfxM6XRTxD4q zJIFijrTXDO0b9UqEceLj8cPz8I= -----END CERTIFICATE-----Generated at Sun Apr 6 14:22:49 2025 by rpki-client