$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/BA310DEC23B611E98E5E6062C4F9AE02.roa File: BA310DEC23B611E98E5E6062C4F9AE02.roa (raw, json) Hash identifier: rL0eA9WxxXy7qJR0cFKLjwuUGHn478UB0XIva7x35CY= Subject key identifier: D4:EC:F9:30:D0:CF:EF:19:FC:7D:D5:96:26:EF:70:12:9D:12:F4:9B Certificate issuer: /CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F Certificate serial: 10B2 Authority key identifier: 60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/BA310DEC23B611E98E5E6062C4F9AE02.roa Signing time: Mon 31 Mar 2025 17:46:18 +0000 ROA not before: Mon 31 Mar 2025 17:46:18 +0000 ROA not after: Fri 01 Aug 2025 00:00:00 +0000 asID: 58689 IP address blocks: 103.132.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 17:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4274 (0x10b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D31 Validity Not Before: Mar 31 17:46:18 2025 GMT Not After : Aug 1 00:00:00 2025 GMT Subject: CN=67ead4e9-6b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e4:4b:63:47:de:e9:99:76:47:29:d7:c9:e0: c8:1e:3f:24:c5:8c:78:13:19:31:50:37:f5:a2:ea: 24:ce:66:27:c2:10:4e:99:0c:d7:4e:cd:ef:e2:0c: cb:1a:df:e7:86:6b:94:4c:cf:08:73:1d:a1:11:4e: 23:82:04:30:2f:5d:e6:cc:4d:2f:9f:8f:03:7c:4c: 11:06:76:cf:b8:26:f3:a0:22:e1:0e:44:4c:ec:96: 81:d9:61:52:73:3e:c1:3b:15:3e:f8:8a:41:7f:6d: ad:60:cb:49:7f:f5:50:70:ac:d2:a7:8f:86:3f:f5: 5a:54:de:6a:3d:43:f1:4d:a8:d2:ae:32:47:ff:0e: 7d:ad:91:9d:d8:e8:a3:a4:9b:49:bd:4c:a0:77:75: 6c:1f:01:d2:84:a0:b6:fe:5d:fc:1b:ba:f0:7d:41: 3f:1c:b8:d0:e9:f8:58:76:11:7e:27:e4:ac:b3:8e: fb:86:df:0b:37:40:53:18:91:a4:bf:99:20:7f:75: af:90:0a:d4:10:1d:e9:e3:1c:b8:f8:03:54:5d:2a: 92:dc:4f:2e:42:d8:c8:2d:db:26:ce:59:2e:6e:34: 53:f6:28:30:5a:b8:78:f9:de:28:3c:a9:f6:6d:d4: 72:8e:57:01:92:36:f2:92:18:fb:1f:53:af:97:0a: 88:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EC:F9:30:D0:CF:EF:19:FC:7D:D5:96:26:EF:70:12:9D:12:F4:9B X509v3 Authority Key Identifier: keyid:60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/BA310DEC23B611E98E5E6062C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.220.0/24 Signature Algorithm: sha256WithRSAEncryption 90:ba:03:64:2e:77:7d:cd:e2:c2:17:d1:7c:05:04:f7:f8:35: 31:ef:0f:7b:94:f4:eb:a7:28:8a:d9:23:59:08:88:1e:dc:49: 98:93:d2:75:ad:d8:30:00:05:43:fd:23:90:6f:06:c4:86:ae: 9c:ec:41:4a:dd:45:07:63:68:0f:d5:af:b4:47:15:05:52:63: f4:9b:23:9d:65:e4:7f:88:68:19:4e:a9:d9:48:c5:10:44:76: a7:db:99:8c:58:89:29:b8:17:96:22:8b:9e:f8:62:3a:7c:c2: 78:b1:69:7f:22:b9:52:80:d8:84:9f:17:8a:d7:86:b9:aa:8f: f2:ee:b4:a2:b4:00:b3:a7:a6:54:47:7d:9a:b4:e7:7b:7d:ff: ec:b8:39:9e:eb:db:46:19:56:67:97:13:ba:88:9b:d9:9e:66: 74:83:45:ec:45:80:17:4d:64:fb:2a:a2:06:21:1a:80:18:70: 04:49:dc:c2:21:3a:41:95:f4:c2:c4:28:d5:f1:4e:41:0a:0e: 9b:9b:d3:b0:3a:cd:68:36:c5:10:44:be:3f:94:3b:f7:9a:18: 97:50:8b:d9:3e:9b:b1:52:f6:93:99:7f:d2:3e:f7:05:b4:78: 23:60:7f:d0:8f:0c:a5:05:42:31:e1:2b:80:c9:64:10:d2:da: 95:d1:cf:2d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICELIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFEMzExMTAvBgNVBAUTKDYwRDEzMTgzRDM5REU2OTU2NTYwMjMxRTdFMDMxN0U2 OUNCQzZDMEYwHhcNMjUwMzMxMTc0NjE4WhcNMjUwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhZDRlOS02YjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzORLY0fe6Zl2RynXyeDIHj8kxYx4ExkxUDf1ouokzmYnwhBOmQzXTs3v4gzL Gt/nhmuUTM8Icx2hEU4jggQwL13mzE0vn48DfEwRBnbPuCbzoCLhDkRM7JaB2WFS cz7BOxU++IpBf22tYMtJf/VQcKzSp4+GP/VaVN5qPUPxTajSrjJH/w59rZGd2Oij pJtJvUygd3VsHwHShKC2/l38G7rwfUE/HLjQ6fhYdhF+J+Sss477ht8LN0BTGJGk v5kgf3WvkArUEB3p4xy4+ANUXSqS3E8uQtjILdsmzlkubjRT9igwWrh4+d4oPKn2 bdRyjlcBkjbykhj7H1OvlwqIWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNTs+TDQ z+8Z/H3VlibvcBKdEvSbMB8GA1UdIwQYMBaAFGDRMYPTneaVZWAjHn4DF+acvGwP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQzMS82NUVGMjk2QTIz MTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVwVmxZQ01lZmdNWDVweThi QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lORXhnOU9kNXBWbFlDTWVmZ01YNXB5OGJBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzFEMzEvNjVFRjI5NkEyMzEzMTFFOUEyOUJCMTc0QzRGOUFFMDIvQkEzMTBERUMy M0I2MTFFOThFNUU2MDYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnhNwwDQYJKoZIhvcNAQELBQADggEBAJC6A2Qud33N4sIX 0XwFBPf4NTHvD3uU9OunKIrZI1kIiB7cSZiT0nWt2DAABUP9I5BvBsSGrpzsQUrd RQdjaA/Vr7RHFQVSY/SbI51l5H+IaBlOqdlIxRBEdqfbmYxYiSm4F5Yii574Yjp8 wnixaX8iuVKA2ISfF4rXhrmqj/LutKK0ALOnplRHfZq053t9/+y4OZ7r20YZVmeX E7qIm9meZnSDRexFgBdNZPsqogYhGoAYcARJ3MIhOkGV9MLEKNXxTkEKDpub07A6 zWg2xRBEvj+UO/eaGJdQi9k+m7FS9pOZf9I+9wW0eCNgf9CPDKUFQjHhK4DJZBDS 2pXRzy0= -----END CERTIFICATE-----Generated at Mon Apr 7 01:24:56 2025 by rpki-client