$ rpki-client -vvf rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/4E0503CA7F3F11ECBB0EA972C4F9AE02.roa File: 4E0503CA7F3F11ECBB0EA972C4F9AE02.roa (raw, json) Hash identifier: zGO+SfCUiN93pLbUpzCLUs56wrah6tVni3k+tYi9qSM= Subject key identifier: 65:FE:F2:64:E5:3C:73:87:85:A3:13:E5:2D:8B:A9:C1:4B:12:F7:DB Certificate issuer: /CN=A9132D93/serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5 Certificate serial: 03B9 Authority key identifier: 90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/4E0503CA7F3F11ECBB0EA972C4F9AE02.roa Signing time: Sat 01 Mar 2025 02:34:49 +0000 ROA not before: Sat 01 Mar 2025 02:34:49 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 141004 IP address blocks: 103.180.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132D93 Validity Not Before: Mar 1 02:34:49 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c27249-390a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:31:6b:66:b1:e5:14:2e:c6:c9:a8:6a:bc: f0:1f:40:85:49:26:9b:b9:55:11:a6:67:3b:18:22: 2f:4b:28:ec:b2:c8:ae:88:f1:e1:ef:a0:9b:56:d4: 2a:9b:4e:17:69:b2:7f:31:09:86:f1:07:59:ab:75: fa:1b:af:8d:b2:85:c6:2c:4d:bb:48:f4:e0:d8:84: 2e:9a:8c:c5:a6:d1:12:56:3b:27:fd:cd:33:dc:22: f4:4c:08:01:b4:f4:99:85:80:ba:cb:c8:ca:33:dc: 60:60:c5:6e:32:dc:9e:25:3a:71:ca:97:9c:6f:dd: c5:10:fd:b8:8e:c7:3e:5e:2e:f1:c7:c4:05:43:8b: e0:3e:01:3c:ed:1f:44:b7:b2:c4:1e:fd:8b:99:fa: 3d:fb:23:c7:88:a0:68:ed:4a:7b:23:02:2b:67:23: 09:58:58:58:90:22:70:45:fd:3f:24:80:1e:8b:36: 49:42:33:17:75:f5:c9:43:24:b5:9f:d3:11:39:05: 30:f3:82:82:33:39:bf:fd:eb:77:10:cf:0d:37:12: dc:d7:63:3d:1a:4c:37:61:ae:77:4c:bc:02:7b:dd: e1:b0:f2:b2:a9:63:3f:72:6a:b9:f3:e1:f1:8e:70: e3:a5:78:a9:20:96:d4:a8:ec:3e:46:ad:1b:79:cb: 48:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FE:F2:64:E5:3C:73:87:85:A3:13:E5:2D:8B:A9:C1:4B:12:F7:DB X509v3 Authority Key Identifier: keyid:90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/4E0503CA7F3F11ECBB0EA972C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.180.120.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:6e:21:08:fb:16:36:e2:0b:e9:cb:cd:9d:5d:fe:84:05:47: 99:cb:73:23:5d:91:ac:26:58:e0:43:a4:71:72:65:2a:4b:5c: c6:1a:dd:ef:34:11:33:39:1d:c2:74:44:58:57:04:10:a7:90: 4f:b7:ff:bc:41:82:75:0b:ce:c8:f1:4d:68:f4:96:76:89:19: 52:9e:2f:3a:e4:f4:38:13:65:b9:b3:e7:06:6b:e2:97:b4:de: 0f:b5:24:43:11:2f:3c:67:95:07:bd:dd:1c:41:97:5d:44:ab: 36:32:3f:88:63:af:a5:03:11:a5:53:70:5e:01:3c:e5:86:af: 66:4b:d3:5a:f9:40:ab:f2:41:08:9a:fd:b4:d9:f7:6e:7b:9a: cd:6f:0a:82:a3:05:18:3c:dd:4a:87:57:8f:0a:a6:a3:ea:ee: da:9b:8f:ba:fa:27:3d:11:9f:ea:5d:ca:6b:93:8b:a3:37:e3: 99:01:60:98:ba:fc:2c:fa:bd:40:97:17:27:52:1c:f4:49:21: 36:05:d4:ab:a0:c0:85:16:25:3b:e2:14:b5:3b:81:e4:07:1c: 69:ac:26:03:cd:d9:26:9d:2b:7b:a9:62:80:80:cb:f5:3f:37: 27:79:26:02:cb:5e:17:19:68:01:3c:f2:f0:49:a9:a8:3b:57: 94:3e:c9:b7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJEOTMxMTAvBgNVBAUTKDkwMUY5ODkxRkJGN0YyN0Q0MTZBMUVFMDZCMzFCMDE2 NUFBRTFEQzUwHhcNMjUwMzAxMDIzNDQ5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyNzI0OS0zOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvUxa2ax5RQuxsmoarzwH0CFSSabuVURpmc7GCIvSyjsssiuiPHh76CbVtQq m04XabJ/MQmG8QdZq3X6G6+NsoXGLE27SPTg2IQumozFptESVjsn/c0z3CL0TAgB tPSZhYC6y8jKM9xgYMVuMtyeJTpxypecb93FEP24jsc+Xi7xx8QFQ4vgPgE87R9E t7LEHv2Lmfo9+yPHiKBo7Up7IwIrZyMJWFhYkCJwRf0/JIAeizZJQjMXdfXJQyS1 n9MROQUw84KCMzm//et3EM8NNxLc12M9Gkw3Ya53TLwCe93hsPKyqWM/cmq58+Hx jnDjpXipIJbUqOw+Rq0bectIBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGX+8mTl PHOHhaMT5S2LqcFLEvfbMB8GA1UdIwQYMBaAFJAfmJH79/J9QWoe4GsxsBZarh3F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkQ5My8wRjg3NEE3NDdG M0QxMUVDOEExRENDNzFDNEY5QUUwMi9rQi1Za2Z2MzhuMUJhaDdnYXpHd0ZscXVI Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tCLVlrZnYzOG4xQmFoN2dhekd3RmxxdUhjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzJEOTMvMEY4NzRBNzQ3RjNEMTFFQzhBMURDQzcxQzRGOUFFMDIvNEUwNTAzQ0E3 RjNGMTFFQ0JCMEVBOTcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFntHgwDQYJKoZIhvcNAQELBQADggEBAD1uIQj7FjbiC+nL zZ1d/oQFR5nLcyNdkawmWOBDpHFyZSpLXMYa3e80ETM5HcJ0RFhXBBCnkE+3/7xB gnULzsjxTWj0lnaJGVKeLzrk9DgTZbmz5wZr4pe03g+1JEMRLzxnlQe93RxBl11E qzYyP4hjr6UDEaVTcF4BPOWGr2ZL01r5QKvyQQia/bTZ9257ms1vCoKjBRg83UqH V48KpqPq7tqbj7r6Jz0Rn+pdymuTi6M345kBYJi6/Cz6vUCXFydSHPRJITYF1Kug wIUWJTviFLU7geQHHGmsJgPN2SadK3upYoCAy/U/Nyd5JgLLXhcZaAE88vBJqag7 V5Q+ybc= -----END CERTIFICATE-----Generated at Sat Apr 5 06:14:04 2025 by rpki-client