$ rpki-client -vvf rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/F67BB6E890AB11ECAB81252FC4F9AE02.roa File: F67BB6E890AB11ECAB81252FC4F9AE02.roa (raw, json) Hash identifier: 8Epzk8V6Z85r/XJDHr0k0X83+N9uAww9RtIo3M+lRdE= Subject key identifier: 01:FA:58:15:9F:A8:59:F2:A9:88:9F:12:29:0F:A9:7F:9D:15:6D:98 Certificate issuer: /CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96 Certificate serial: 039C Authority key identifier: A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/F67BB6E890AB11ECAB81252FC4F9AE02.roa Signing time: Tue 01 Apr 2025 01:26:48 +0000 ROA not before: Tue 01 Apr 2025 01:26:48 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 148968 IP address blocks: 103.182.40.0/23 maxlen: 24 2400:5be0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146BA1 Validity Not Before: Apr 1 01:26:48 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67eb40d8-2d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fb:4d:04:cf:ea:e6:7c:f9:e6:e6:dd:c5:13: c4:e0:ff:45:21:98:47:fc:cd:a4:b3:57:00:db:34: 9d:2c:82:a7:d9:8e:df:79:6c:a7:83:a2:56:ad:0d: d4:ca:2f:7f:b3:9a:8a:1a:c3:5a:c4:88:4d:df:27: ec:16:fe:87:df:02:29:6d:62:7c:7d:37:0c:68:dd: 14:34:f5:c2:8f:25:40:fb:ad:70:5e:b3:7a:df:e9: 84:bd:66:ca:7f:d3:e1:a3:e9:55:7d:2d:ee:df:6f: 63:b2:be:b0:3c:2d:79:98:39:44:8c:67:57:72:90: 1f:92:3c:f8:22:89:f9:ff:32:53:06:d6:fd:47:a6: ea:85:d2:d3:28:e5:7c:ad:55:91:e9:ff:1b:c3:e8: 69:aa:31:79:94:1c:9c:fa:e7:3b:10:bc:1b:33:bb: 82:84:cd:5d:f8:49:f4:00:97:6a:37:b6:ae:24:12: 0d:e3:8d:7f:a7:41:2b:eb:43:ac:1f:f3:d8:64:63: 37:c7:8a:2a:ae:35:c6:49:0a:3f:5e:a8:18:14:69: 1e:34:47:20:b4:97:86:2f:73:a9:ec:6a:24:e1:74: c4:a9:a5:95:45:6b:dd:bc:92:f3:ca:02:b5:58:7c: 9f:e4:c4:83:4d:71:0c:18:6b:16:b3:15:15:b0:fe: ae:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FA:58:15:9F:A8:59:F2:A9:88:9F:12:29:0F:A9:7F:9D:15:6D:98 X509v3 Authority Key Identifier: keyid:A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/F67BB6E890AB11ECAB81252FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.40.0/23 IPv6: 2400:5be0::/32 Signature Algorithm: sha256WithRSAEncryption 8f:eb:bf:c4:67:ed:51:fa:ed:2f:c3:e6:5d:d7:69:b2:98:1c: e8:61:8e:b1:6c:ca:99:95:49:93:7e:70:48:ae:ed:6d:f0:3e: 87:46:e8:db:48:86:36:88:67:66:02:c0:1a:dc:1a:50:74:63: 34:a7:7c:50:d8:19:0d:e0:e1:a8:b1:10:ea:92:d0:c1:6f:07: 88:b6:fb:f8:b3:ed:71:ee:71:bb:df:c6:3d:d9:58:1f:0c:f7: ea:84:47:cd:32:2e:45:ba:78:d9:d7:a3:78:ce:e2:e6:4e:61: ef:e4:ff:2e:06:07:9c:b8:f4:50:53:57:bf:be:0f:1b:ba:2c: 08:71:f1:56:0f:f4:b0:d0:6f:7c:bf:4a:4f:d4:55:10:a3:0f: 42:a2:5a:6b:f5:6a:38:00:60:81:5b:ff:d5:f9:e1:3d:38:f3: 44:5a:b0:59:a2:e3:c1:ad:0a:83:d9:0d:15:e7:86:5f:f1:c6: 22:c6:7b:73:e2:58:da:4b:90:a7:3e:07:b1:61:0a:7b:1a:d8: 09:3e:33:01:c6:59:65:b2:97:57:15:89:86:85:d7:ea:71:73: 41:b4:f9:6d:2e:c6:82:a5:e8:d1:22:1e:73:60:b4:52:d3:f3: 01:c4:50:e7:95:1a:10:7a:70:44:b1:ed:c0:68:73:4e:f2:f9: ca:29:e4:df -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCQTExMTAvBgNVBAUTKEE1NjExNDY5RDI5RTdCRDNDODVEMzE4MEI3MjczMkVB QUI3QUZCOTYwHhcNMjUwNDAxMDEyNjQ4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ViNDBkOC0yZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ftNBM/q5nz55ubdxRPE4P9FIZhH/M2ks1cA2zSdLIKn2Y7feWyng6JWrQ3U yi9/s5qKGsNaxIhN3yfsFv6H3wIpbWJ8fTcMaN0UNPXCjyVA+61wXrN63+mEvWbK f9Pho+lVfS3u329jsr6wPC15mDlEjGdXcpAfkjz4Ion5/zJTBtb9R6bqhdLTKOV8 rVWR6f8bw+hpqjF5lByc+uc7ELwbM7uChM1d+En0AJdqN7auJBIN441/p0Er60Os H/PYZGM3x4oqrjXGSQo/XqgYFGkeNEcgtJeGL3Op7Gok4XTEqaWVRWvdvJLzygK1 WHyf5MSDTXEMGGsWsxUVsP6uoQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAH6WBWf qFnyqYifEikPqX+dFW2YMB8GA1UdIwQYMBaAFKVhFGnSnnvTyF0xgLcnMuqrevuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkJBMS82M0I0RUE5ODkw QTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5UElYVEdBdHljeTZxdDYt NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXRVVhZEtlZTlQSVhUR0F0eWN5NnF0Ni01WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZCQTEvNjNCNEVBOTg5MEE5MTFFQzk3NjVCMjJEQzRGOUFFMDIvRjY3QkI2RTg5 MEFCMTFFQ0FCODEyNTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFntigwDQQCAAIwBwMFACQAW+AwDQYJKoZIhvcNAQELBQAD ggEBAI/rv8Rn7VH67S/D5l3XabKYHOhhjrFsypmVSZN+cEiu7W3wPodG6NtIhjaI Z2YCwBrcGlB0YzSnfFDYGQ3g4aixEOqS0MFvB4i2+/iz7XHucbvfxj3ZWB8M9+qE R80yLkW6eNnXo3jO4uZOYe/k/y4GB5y49FBTV7++Dxu6LAhx8VYP9LDQb3y/Sk/U VRCjD0KiWmv1ajgAYIFb/9X54T0480RasFmi48GtCoPZDRXnhl/xxiLGe3PiWNpL kKc+B7FhCnsa2Ak+MwHGWWWyl1cViYaF1+pxc0G0+W0uxoKl6NEiHnNgtFLT8wHE UOeVGhB6cESx7cBoc07y+cop5N8= -----END CERTIFICATE-----Generated at Sun Apr 6 10:16:28 2025 by rpki-client