$ rpki-client -vvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/9A1481AAB2F411EF9B46DC64C4F9AE02.roa File: 9A1481AAB2F411EF9B46DC64C4F9AE02.roa (raw, json) Hash identifier: Add7F0lhUmSvXDEdaWnBa/fqtGzEQ9y//LGpbHGkCZc= Subject key identifier: D6:A2:FC:53:0E:D0:E1:BE:47:68:DB:7B:DB:5D:1D:7F:1B:74:10:80 Certificate issuer: /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25 Certificate serial: 0D2F Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/9A1481AAB2F411EF9B46DC64C4F9AE02.roa Signing time: Fri 10 Jan 2025 18:06:47 +0000 ROA not before: Fri 10 Jan 2025 18:06:47 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 136156 IP address blocks: 103.82.8.0/23 maxlen: 24 103.82.10.0/23 maxlen: 24 202.52.40.0/24 maxlen: 24 203.4.187.0/24 maxlen: 24 2402:d3c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 17:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3375 (0xd2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D30A, serialNumber=EB811B1488B20F12664E648A82624A3050689F25 Validity Not Before: Jan 10 18:06:47 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=678161b7-43e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:97:25:10:52:09:41:a5:1d:f0:30:c3:25:76: ca:e7:66:64:fe:69:cd:84:7d:4d:d6:2d:5f:3f:99: 80:9c:a8:f0:0a:ac:9f:50:e0:f5:7c:6c:1e:d5:a5: 78:22:8d:a8:bc:1e:05:5a:ef:88:ba:fc:47:be:e9: 78:99:d3:61:5b:54:43:f9:16:13:d3:5e:6e:a4:1c: bc:34:ae:ff:97:8a:64:ef:3e:a9:1c:15:0c:c0:e3: 72:12:53:f5:6b:48:3e:d5:22:03:29:60:cc:cd:2e: d7:6f:88:46:48:d5:8a:1c:b6:33:ef:fa:94:43:2a: 9f:59:64:a8:e4:b7:cd:19:4f:6c:38:e0:3c:21:f7: 9e:79:72:d4:f3:e3:1f:c0:39:25:4f:c2:4c:d7:90: f5:16:f5:dd:19:8b:d3:5f:53:f0:13:97:2f:09:f1: 02:02:22:8f:67:e3:54:64:0d:82:df:6b:48:ac:80: 0e:b3:12:12:40:c2:bf:5d:c7:3b:cf:65:a1:ce:ac: a5:a8:e5:1f:eb:07:e7:f8:e2:89:85:ce:ff:e5:aa: 72:1d:97:7c:a8:87:fe:20:a2:7d:e1:88:94:3f:25: c9:f2:a8:1a:95:3c:4a:49:e3:93:0b:b6:1b:b5:db: 23:d9:1e:2d:4a:94:42:b3:be:77:31:23:2c:12:ba: c7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A2:FC:53:0E:D0:E1:BE:47:68:DB:7B:DB:5D:1D:7F:1B:74:10:80 X509v3 Authority Key Identifier: keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/9A1481AAB2F411EF9B46DC64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.82.8.0/22 202.52.40.0/24 203.4.187.0/24 IPv6: 2402:d3c0::/32 Signature Algorithm: sha256WithRSAEncryption 88:fd:0e:ed:5a:13:1f:1e:b4:90:a5:ff:83:a1:8b:df:b9:86: b0:44:fb:d4:2a:a7:ce:95:89:bd:f7:96:1c:f5:58:c2:4b:1a: be:64:ad:a3:df:9b:4b:e0:33:d4:48:25:ac:75:41:bd:56:ea: b3:34:11:ae:1c:12:53:22:5d:8a:c2:1a:15:a0:22:62:c9:34: 29:a1:99:c1:17:da:e3:60:c0:1d:de:c7:31:c4:8a:65:47:c2: 73:2e:d4:0e:8d:9a:62:75:03:07:94:19:7d:8a:74:ad:6f:45: ec:62:4d:c0:b1:76:7c:ab:b2:7f:44:28:ae:38:c3:51:3b:f1: 4b:98:c3:06:d7:a1:9b:1f:de:17:6c:dd:16:33:87:8d:08:c1: a4:bb:45:4f:d8:17:11:5e:7b:18:5c:fc:f8:0f:83:df:45:6a: 23:dd:9d:0f:8c:7c:86:91:5e:d2:fa:6b:68:e2:18:36:26:b3: 6d:49:6e:0b:91:d2:79:b9:1b:e4:93:7e:5e:03:5b:43:1f:1b: db:9b:8b:b9:f9:a4:14:42:34:d6:36:13:97:07:4c:0c:0e:dc: 1b:35:ea:6a:51:e8:57:b7:00:00:32:2b:be:ce:6d:2e:51:51: 74:53:6a:56:66:58:f3:5a:ae:30:4c:24:b5:e9:8e:2e:3b:cd: a0:1b:de:a4 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICDS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzMEExMTAvBgNVBAUTKEVCODExQjE0ODhCMjBGMTI2NjRFNjQ4QTgyNjI0QTMw NTA2ODlGMjUwHhcNMjUwMTEwMTgwNjQ3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzgxNjFiNy00M2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pclEFIJQaUd8DDDJXbK52Zk/mnNhH1N1i1fP5mAnKjwCqyfUOD1fGwe1aV4 Io2ovB4FWu+IuvxHvul4mdNhW1RD+RYT015upBy8NK7/l4pk7z6pHBUMwONyElP1 a0g+1SIDKWDMzS7Xb4hGSNWKHLYz7/qUQyqfWWSo5LfNGU9sOOA8IfeeeXLU8+Mf wDklT8JM15D1FvXdGYvTX1PwE5cvCfECAiKPZ+NUZA2C32tIrIAOsxISQMK/Xcc7 z2WhzqylqOUf6wfn+OKJhc7/5apyHZd8qIf+IKJ94YiUPyXJ8qgalTxKSeOTC7Yb tdsj2R4tSpRCs753MSMsErrHGQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFNai/FMO 0OG+R2jbe9tdHX8bdBCAMB8GA1UdIwQYMBaAFOuBGxSIsg8SZk5kioJiSjBQaJ8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDMwQS9CODU0MjRGOEQ0 OTgxMUU5Qjk0NzQ3MzhDNEY5QUUwMi82NEViRklpeUR4Sm1UbVNLZ21KS01GQm9u eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0RWJGSWl5RHhKbVRtU0tnbUpLTUZCb255VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0QzMEEvQjg1NDI0RjhENDk4MTFFOUI5NDc0NzM4QzRGOUFFMDIvOUExNDgxQUFC MkY0MTFFRjlCNDZEQzY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnUggDBADKNCgDBADLBLswDQQCAAIwBwMFACQC08AwDQYJ KoZIhvcNAQELBQADggEBAIj9Du1aEx8etJCl/4Ohi9+5hrBE+9Qqp86Vib33lhz1 WMJLGr5kraPfm0vgM9RIJax1Qb1W6rM0Ea4cElMiXYrCGhWgImLJNCmhmcEX2uNg wB3exzHEimVHwnMu1A6NmmJ1AweUGX2KdK1vRexiTcCxdnyrsn9EKK44w1E78UuY wwbXoZsf3hds3RYzh40IwaS7RU/YFxFeexhc/PgPg99FaiPdnQ+MfIaRXtL6a2ji GDYms21JbguR0nm5G+STfl4DW0MfG9ubi7n5pBRCNNY2E5cHTAwO3Bs16mpR6Fe3 AAAyK77ObS5RUXRTalZmWPNarjBMJLXpji47zaAb3qQ= -----END CERTIFICATE-----Generated at Fri Apr 18 16:49:23 2025 by rpki-client