$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/0D09F1969E4F11EA9EACCE25C4F9AE02.roa File: 0D09F1969E4F11EA9EACCE25C4F9AE02.roa (raw, json) Hash identifier: dtNfz/Keg7w+1A/MihzHZVUhq163+ywM42QNcaI/10Y= Subject key identifier: BE:C7:71:D8:9A:1D:C7:78:F2:97:20:4D:7E:5C:9D:18:B3:89:AA:55 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0A1C Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/0D09F1969E4F11EA9EACCE25C4F9AE02.roa Signing time: Wed 26 Mar 2025 20:30:37 +0000 ROA not before: Wed 26 Mar 2025 20:30:37 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 17540 IP address blocks: 203.83.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2588 (0xa1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172 Validity Not Before: Mar 26 20:30:37 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e463ed-34c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:b0:cf:e5:4b:44:95:20:c7:4f:11:f5:46: 5e:73:63:77:49:24:7b:0b:eb:61:46:77:43:f0:3c: bf:2a:92:c6:be:04:32:8f:33:22:4d:3c:5a:eb:07: 2b:8c:95:61:79:6e:a4:49:b6:d7:4e:ab:c6:ee:82: ca:b7:bc:11:e8:2d:6e:b1:a6:aa:45:7d:b7:2d:ad: 22:63:12:71:ce:fe:00:0b:34:06:be:b9:be:13:c6: 35:ad:bf:83:82:ef:82:0b:05:a3:8f:ae:2c:3d:e4: ac:da:e3:f2:44:1e:6b:23:02:59:00:1c:83:d7:e6: 14:8f:7a:35:d3:ba:54:b1:b9:1a:2f:2e:56:15:2d: 37:82:52:ae:84:f7:14:d4:78:8c:26:3f:d9:6d:8b: 4c:e3:41:96:44:65:26:3f:6c:23:6b:d1:d9:a9:25: 53:a6:fe:a9:12:3d:f0:27:9a:c9:86:c5:dd:83:54: 56:57:9a:a2:ca:fb:56:08:5f:2e:8b:54:9b:b0:57: af:ea:fa:a5:63:b2:45:ba:dd:e6:02:24:93:34:3f: 7f:10:5c:e4:b0:c7:03:40:a4:23:22:60:dc:ec:17: 5b:d3:63:51:df:dc:f1:e3:4f:60:e5:4d:7d:7d:a0: 01:c5:65:cf:35:e6:02:97:79:98:18:68:88:df:d9: 38:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C7:71:D8:9A:1D:C7:78:F2:97:20:4D:7E:5C:9D:18:B3:89:AA:55 X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/0D09F1969E4F11EA9EACCE25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.83.127.0/24 Signature Algorithm: sha256WithRSAEncryption 90:08:90:5a:bf:ff:1b:32:09:5e:e9:fa:08:2e:f6:9b:98:0c: 9c:be:86:94:06:d4:d9:8e:c4:41:bf:18:c3:58:51:4b:63:bb: c5:42:ce:fd:35:82:fc:67:85:c7:42:6a:f9:4e:36:fc:61:86: 7e:31:48:2d:23:42:61:0d:63:26:32:36:66:ba:ae:b8:98:30: 3b:11:72:8d:65:4d:7e:e2:e3:de:49:e1:d2:49:ec:e9:c9:76: 70:9e:91:20:26:b0:42:1c:ae:e4:21:86:bc:f7:d5:95:86:34: 0f:43:29:f6:e5:05:09:ae:73:4d:47:e2:69:90:2d:f7:ff:8e: b0:de:46:42:c1:1f:9b:94:62:ac:dd:97:de:c4:aa:6d:18:3e: f7:dc:0f:d2:a0:7c:c2:05:6a:06:96:6d:bf:2c:bd:51:76:cc: 0e:16:75:fd:39:f6:bd:6a:4c:1e:11:59:5a:92:b8:be:14:2a: 35:7f:d4:48:d9:b9:9c:6c:cb:93:c4:49:e2:2a:b1:db:1b:55: e4:b1:8c:32:7e:64:10:a6:39:e4:a1:e5:b6:08:11:c1:8e:ad: 85:e8:4e:ae:99:9d:f1:41:1a:99:5e:9f:c1:0c:03:ab:48:bd: 8c:f1:f8:3e:27:72:fb:10:08:b9:ad:46:db:b9:cf:77:58:a9: 43:e5:87:18 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICChwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjUwMzI2MjAzMDM3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0NjNlZC0zNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmCwz+VLRJUgx08R9UZec2N3SSR7C+thRndD8Dy/KpLGvgQyjzMiTTxa6wcr jJVheW6kSbbXTqvG7oLKt7wR6C1usaaqRX23La0iYxJxzv4ACzQGvrm+E8Y1rb+D gu+CCwWjj64sPeSs2uPyRB5rIwJZAByD1+YUj3o107pUsbkaLy5WFS03glKuhPcU 1HiMJj/ZbYtM40GWRGUmP2wja9HZqSVTpv6pEj3wJ5rJhsXdg1RWV5qiyvtWCF8u i1SbsFev6vqlY7JFut3mAiSTND9/EFzksMcDQKQjImDc7Bdb02NR39zx409g5U19 faABxWXPNeYCl3mYGGiI39k4twIDAQABo4IClTCCApEwHQYDVR0OBBYEFL7Hcdia Hcd48pcgTX5cnRiziapVMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvMEQwOUYxOTY5 RTRGMTFFQTlFQUNDRTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLU38wDQYJKoZIhvcNAQELBQADggEBAJAIkFq//xsyCV7p +ggu9puYDJy+hpQG1NmOxEG/GMNYUUtju8VCzv01gvxnhcdCavlONvxhhn4xSC0j QmENYyYyNma6rriYMDsRco1lTX7i495J4dJJ7OnJdnCekSAmsEIcruQhhrz31ZWG NA9DKfblBQmuc01H4mmQLff/jrDeRkLBH5uUYqzdl97Eqm0YPvfcD9KgfMIFagaW bb8svVF2zA4Wdf059r1qTB4RWVqSuL4UKjV/1EjZuZxsy5PESeIqsdsbVeSxjDJ+ ZBCmOeSh5bYIEcGOrYXoTq6ZnfFBGplen8EMA6tIvYzx+D4ncvsQCLmtRtu5z3dY qUPlhxg= -----END CERTIFICATE-----Generated at Sun Apr 6 03:03:05 2025 by rpki-client