$ rpki-client -vvf rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/3576AA9EFC2311EE8CA4916BC4F9AE02.roa File: 3576AA9EFC2311EE8CA4916BC4F9AE02.roa (raw, json) Hash identifier: WQlYoqC8qKshcL6PJ06tlHSItXOoVAyYYKQZo33lSFI= Subject key identifier: 4D:70:FF:19:19:75:C6:4B:B9:DF:BE:2E:B0:40:E5:3F:D7:12:7C:1E Certificate issuer: /CN=A9149987/serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A Certificate serial: B1 Authority key identifier: B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/3576AA9EFC2311EE8CA4916BC4F9AE02.roa Signing time: Wed 19 Mar 2025 05:21:56 +0000 ROA not before: Wed 19 Mar 2025 05:21:56 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132528 IP address blocks: 103.73.108.0/22 maxlen: 22 2406:f780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149987 Validity Not Before: Mar 19 05:21:56 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67da5474-dc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:f2:df:c2:dd:96:0e:f8:7f:6d:65:09:9d: 9c:20:36:8e:20:90:44:a1:32:f2:55:39:91:fd:9e: 22:09:20:5d:17:c6:65:2e:08:14:3e:66:28:4d:91: cc:04:59:eb:dc:ff:e0:06:ab:25:8a:cf:44:50:ab: 56:26:3b:16:61:f5:c7:20:4b:32:ed:b4:e5:ce:ab: 8c:00:1c:01:fd:7d:0d:79:2c:ed:86:81:e2:00:a4: 8e:f2:3f:61:f4:f7:3e:cc:51:b1:9f:af:f3:98:e6: 33:15:e4:a2:67:19:bf:dc:e0:8e:e1:6b:2d:ef:f2: ba:d2:0c:ec:b5:35:93:7a:2b:e9:e5:b8:2e:a3:3b: be:19:bf:12:45:8c:86:a8:79:d6:fa:a4:35:a2:72: a8:95:53:9a:0e:03:39:ba:63:90:23:32:c9:a1:89: dd:fa:d4:f4:4c:5b:3f:ad:09:ec:e9:d3:0a:6c:05: 15:91:15:a0:6d:f6:62:2a:2a:1c:9c:23:01:28:35: d0:20:90:83:a7:e9:38:a8:ba:01:43:28:48:58:a2: 01:2d:ed:bf:5a:e8:8d:38:aa:7d:48:7d:bb:f7:3e: 4f:83:ec:c5:e1:77:c7:d5:4e:58:42:67:0a:a7:11: 21:1d:5e:7f:22:99:1b:58:70:0b:4b:97:bc:87:6f: 1b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:70:FF:19:19:75:C6:4B:B9:DF:BE:2E:B0:40:E5:3F:D7:12:7C:1E X509v3 Authority Key Identifier: keyid:B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/3576AA9EFC2311EE8CA4916BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.108.0/22 IPv6: 2406:f780::/32 Signature Algorithm: sha256WithRSAEncryption 2e:af:23:da:43:c4:45:e1:13:28:26:3b:6c:ef:3b:b2:59:d3: 53:45:63:c0:b0:2e:2f:85:69:58:60:58:e0:f7:23:d8:6d:01: a5:2c:4a:d2:7f:09:e8:32:7e:a4:90:94:4f:0a:b1:10:eb:47: 75:91:fb:b7:93:0b:4c:b8:a7:d0:d6:1c:d5:50:67:04:0d:a2: bf:11:68:4f:6f:6c:ef:ab:11:1e:33:7e:18:f0:bb:b9:f6:0b: 31:d4:c0:c4:37:23:83:91:45:a8:53:aa:2f:93:1c:0f:a0:a3: 1a:a0:51:52:dd:5f:e4:ce:cc:c5:5a:91:55:31:ec:6f:88:68: d2:6e:11:c5:dc:14:ae:97:d3:57:89:24:39:fa:06:78:cb:cf: 93:5c:e2:e7:05:7c:54:d8:4e:be:6e:4c:50:10:ce:22:2b:36: d5:d2:8b:76:3a:27:88:17:e5:a1:b7:4a:27:0a:12:25:6a:11: 24:7b:e5:e4:65:aa:fa:2f:f9:d6:0c:a1:a2:15:46:71:b3:b6: 4a:3b:bd:d2:1e:c0:26:2e:a1:e3:1a:e6:cf:14:08:ef:bb:f0: 86:96:a5:8a:57:f7:19:d9:ea:1e:66:e9:09:7a:50:87:82:38: da:a4:fb:95:07:30:b3:58:90:c2:a1:c9:06:0c:b7:51:f0:30: ab:b4:fc:7e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5ODcxMTAvBgNVBAUTKEIwNjFCQzQ4QTE0NDEwMDBBQkVCOEM0NDhBMDlGMTk1 RjkxMzlFMUEwHhcNMjUwMzE5MDUyMTU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RhNTQ3NC1kYzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNHy38Ldlg74f21lCZ2cIDaOIJBEoTLyVTmR/Z4iCSBdF8ZlLggUPmYoTZHM BFnr3P/gBqslis9EUKtWJjsWYfXHIEsy7bTlzquMABwB/X0NeSzthoHiAKSO8j9h 9Pc+zFGxn6/zmOYzFeSiZxm/3OCO4Wst7/K60gzstTWTeivp5bguozu+Gb8SRYyG qHnW+qQ1onKolVOaDgM5umOQIzLJoYnd+tT0TFs/rQns6dMKbAUVkRWgbfZiKioc nCMBKDXQIJCDp+k4qLoBQyhIWKIBLe2/WuiNOKp9SH279z5Pg+zF4XfH1U5YQmcK pxEhHV5/IpkbWHALS5e8h28bHQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFE1w/xkZ dcZLud++LrBA5T/XEnweMB8GA1UdIwQYMBaAFLBhvEihRBAAq+uMRIoJ8ZX5E54a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTk4Ny9GMEZBNEZBNkZD MjIxMUVFOEJCRkVDNkFDNEY5QUUwMi9zR0c4U0tGRUVBQ3I2NHhFaWdueGxma1Ru aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHRzhTS0ZFRUFDcjY0eEVpZ254bGZrVG5oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDk5ODcvRjBGQTRGQTZGQzIyMTFFRThCQkZFQzZBQzRGOUFFMDIvMzU3NkFBOUVG QzIzMTFFRThDQTQ5MTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnSWwwDQQCAAIwBwMFACQG94AwDQYJKoZIhvcNAQELBQAD ggEBAC6vI9pDxEXhEygmO2zvO7JZ01NFY8CwLi+FaVhgWOD3I9htAaUsStJ/Cegy fqSQlE8KsRDrR3WR+7eTC0y4p9DWHNVQZwQNor8RaE9vbO+rER4zfhjwu7n2CzHU wMQ3I4ORRahTqi+THA+goxqgUVLdX+TOzMVakVUx7G+IaNJuEcXcFK6X01eJJDn6 BnjLz5Nc4ucFfFTYTr5uTFAQziIrNtXSi3Y6J4gX5aG3SicKEiVqESR75eRlqvov +dYMoaIVRnGztko7vdIewCYuoeMa5s8UCO+78IaWpYpX9xnZ6h5m6Ql6UIeCONqk +5UHMLNYkMKhyQYMt1HwMKu0/H4= -----END CERTIFICATE-----Generated at Sat Apr 5 02:20:44 2025 by rpki-client