$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/DC41F9C4214411EEBC685C79C4F9AE02.roa File: DC41F9C4214411EEBC685C79C4F9AE02.roa (raw, json) Hash identifier: EII0j0htPqZRd+8Muval63G6bvgUY1532bbGJQef7wo= Subject key identifier: 34:8E:9D:60:B5:C0:4B:D3:F7:1B:78:50:B2:DD:5D:92:09:57:88:83 Certificate issuer: /CN=A9150733/serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C Certificate serial: 014A Authority key identifier: 76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/DC41F9C4214411EEBC685C79C4F9AE02.roa Signing time: Wed 02 Apr 2025 19:19:28 +0000 ROA not before: Wed 02 Apr 2025 19:19:28 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138622 IP address blocks: 103.134.226.0/23 maxlen: 23 103.134.226.0/24 maxlen: 24 103.134.227.0/24 maxlen: 24 2001:df5:8280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150733 Validity Not Before: Apr 2 19:19:28 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ed8dc0-af7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e8:84:7b:08:67:28:e0:8e:bb:08:49:68:60: 89:a3:1c:62:23:2e:0f:db:f6:a9:c0:02:f5:78:51: 5b:bc:4d:db:b0:be:26:51:16:3b:59:f3:78:06:08: 43:38:c6:0d:75:51:a3:fe:de:0e:66:9b:b1:eb:67: 37:f2:82:fa:e0:08:4a:19:97:5e:6e:e6:72:ea:15: 5a:01:11:53:05:c5:81:b7:57:5b:76:9c:76:6c:a1: d7:87:81:e1:f6:3c:b4:6d:a0:59:d8:f0:e4:a3:c1: 22:b8:95:49:74:f9:01:14:cb:68:2f:22:d2:a1:5f: c7:93:12:61:79:c8:91:22:17:f1:38:6a:0c:de:58: 67:4f:72:6a:50:7d:20:5d:df:21:7a:78:f7:5f:c1: 4c:10:84:d4:e5:4c:72:b1:49:fd:49:64:c6:bb:04: fe:a9:43:d3:10:71:37:b6:72:46:d6:6b:45:77:4d: 36:a5:20:35:40:7b:af:db:ad:82:73:40:0f:7d:3d: d9:64:56:ee:96:28:ed:7c:32:67:4d:28:08:19:03: a1:7d:62:49:9f:57:18:c1:7a:55:b3:66:a7:11:e2: 19:0e:e3:7d:7a:0a:80:9a:9c:73:d5:e1:ef:8d:47: fa:19:06:d2:fe:8e:e4:fd:1f:32:cf:f6:b7:6e:1c: ef:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8E:9D:60:B5:C0:4B:D3:F7:1B:78:50:B2:DD:5D:92:09:57:88:83 X509v3 Authority Key Identifier: keyid:76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/DC41F9C4214411EEBC685C79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.226.0/23 IPv6: 2001:df5:8280::/48 Signature Algorithm: sha256WithRSAEncryption 39:b9:ab:76:bb:d5:ac:a4:ca:24:78:56:da:52:c3:bc:2f:50: 5a:b0:15:44:98:ef:b6:5f:e3:b4:cf:27:39:62:21:5f:fa:40: 96:96:b6:9a:29:a0:28:29:a6:44:bb:ea:5c:bd:fa:59:1b:3b: cc:78:17:42:08:c7:a2:bb:e3:da:04:93:3e:73:bd:30:72:71: c1:0f:21:b1:34:e7:ef:81:fe:51:ea:f6:08:12:1d:e1:b7:56: 45:29:db:84:d6:93:13:db:be:b8:13:81:02:f7:40:cc:b8:99: 5f:f3:81:8a:78:9e:be:ee:18:5b:01:3a:89:69:90:80:0d:60: 04:67:01:fd:03:ed:1c:0a:f2:3c:2b:c0:18:b2:c0:65:99:a1: 8d:83:af:01:1b:25:44:bf:f7:85:7b:ca:ee:31:86:09:d5:3b: 8a:af:f0:f6:f5:f7:fe:01:9e:6e:50:53:74:03:fd:04:1c:2c: 28:e5:cc:53:df:a3:b9:7a:10:83:d0:44:66:0f:42:c7:0e:b2: 4f:10:3f:8c:f1:02:28:bf:c5:28:f3:5f:e4:5e:b9:1d:08:92: 80:33:e7:ad:79:e5:9a:04:84:31:b5:b9:9a:bc:6d:2c:76:42: 32:a3:46:d2:53:35:fd:77:57:77:ab:da:d5:0e:ea:86:0d:e3: 80:5e:83:06 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA3MzMxMTAvBgNVBAUTKDc2OUQ0NEQ5QjQxQ0JCQ0ZDNTM2NzEzQjlCOTUyOEY2 Q0FCODdDNUMwHhcNMjUwNDAyMTkxOTI4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkOGRjMC1hZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuiEewhnKOCOuwhJaGCJoxxiIy4P2/apwAL1eFFbvE3bsL4mURY7WfN4BghD OMYNdVGj/t4OZpux62c38oL64AhKGZdebuZy6hVaARFTBcWBt1dbdpx2bKHXh4Hh 9jy0baBZ2PDko8EiuJVJdPkBFMtoLyLSoV/HkxJheciRIhfxOGoM3lhnT3JqUH0g Xd8henj3X8FMEITU5UxysUn9SWTGuwT+qUPTEHE3tnJG1mtFd002pSA1QHuv262C c0APfT3ZZFbulijtfDJnTSgIGQOhfWJJn1cYwXpVs2anEeIZDuN9egqAmpxz1eHv jUf6GQbS/o7k/R8yz/a3bhzv8QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDSOnWC1 wEvT9xt4ULLdXZIJV4iDMB8GA1UdIwQYMBaAFHadRNm0HLvPxTZxO5uVKPbKuHxc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDczMy8yMTc4NjhDRTNE QjUxMUVBQTY0OTEzMTJDNEY5QUUwMi9kcDFFMmJRY3U4X0ZObkU3bTVVbzlzcTRm RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RwMUUyYlFjdThfRk5uRTdtNVVvOXNxNGZGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTA3MzMvMjE3ODY4Q0UzREI1MTFFQUE2NDkxMzEyQzRGOUFFMDIvREM0MUY5QzQy MTQ0MTFFRUJDNjg1Qzc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnhuIwDwQCAAIwCQMHACABDfWCgDANBgkqhkiG9w0BAQsF AAOCAQEAObmrdrvVrKTKJHhW2lLDvC9QWrAVRJjvtl/jtM8nOWIhX/pAlpa2mimg KCmmRLvqXL36WRs7zHgXQgjHorvj2gSTPnO9MHJxwQ8hsTTn74H+Uer2CBId4bdW RSnbhNaTE9u+uBOBAvdAzLiZX/OBinievu4YWwE6iWmQgA1gBGcB/QPtHAryPCvA GLLAZZmhjYOvARslRL/3hXvK7jGGCdU7iq/w9vX3/gGeblBTdAP9BBwsKOXMU9+j uXoQg9BEZg9Cxw6yTxA/jPECKL/FKPNf5F65HQiSgDPnrXnlmgSEMbW5mrxtLHZC MqNG0lM1/XdXd6va1Q7qhg3jgF6DBg== -----END CERTIFICATE-----Generated at Sat Apr 5 22:08:46 2025 by rpki-client