$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/5B102332845711EEB3DC4A5EC4F9AE02.roa File: 5B102332845711EEB3DC4A5EC4F9AE02.roa (raw, json) Hash identifier: ziUiMds6NJgi8TDHiQaMAYIvEJIsNCMspTIFgHdhreo= Subject key identifier: 32:6F:06:D0:06:1E:51:61:E4:E5:22:0F:06:8A:1B:CD:BE:DB:EF:50 Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2DC0 Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/5B102332845711EEB3DC4A5EC4F9AE02.roa Signing time: Wed 22 Jan 2025 15:52:00 +0000 ROA not before: Wed 22 Jan 2025 15:51:59 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 133201 IP address blocks: 103.255.44.0/22 maxlen: 22 103.255.44.0/24 maxlen: 24 103.255.45.0/24 maxlen: 24 103.255.46.0/24 maxlen: 24 103.255.47.0/24 maxlen: 24 202.61.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11712 (0x2dc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021 Validity Not Before: Jan 22 15:51:59 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6791141f-7a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:17:ab:b0:9a:ba:9a:72:a0:26:00:d8:ef: d5:01:3a:42:53:a8:83:34:f4:e5:31:8d:cc:06:e5: 0a:01:4b:4b:a7:18:b3:a0:d6:b4:bc:4f:ea:4a:39: 42:03:09:32:ff:b0:20:6c:17:30:78:6a:32:e5:b7: cc:40:23:25:a6:30:30:f9:21:f8:11:ee:55:43:8d: 95:60:2e:2c:ed:07:44:0e:89:81:1d:94:d5:9e:76: 95:db:e6:8e:06:71:15:2e:c5:da:04:2b:51:ac:df: db:ac:58:bf:d8:46:23:07:ba:44:70:75:6d:90:ff: a7:6d:2b:39:b7:99:45:aa:63:b5:9c:76:ca:c9:4d: 29:03:9c:e4:37:c3:44:99:fe:0d:c0:ec:6e:26:38: a2:cb:dc:2d:a4:13:f4:6d:62:29:2f:57:36:d9:0e: 9c:8a:c6:af:75:b1:a8:d2:6c:70:35:6f:a7:03:22: cd:cc:76:a3:4f:3a:f2:4b:69:86:5f:a1:8d:89:76: d9:fe:9a:59:8e:dd:0c:ad:6e:2f:ad:3b:bc:e1:12: 1d:88:4e:10:0e:ad:97:0c:df:b2:2e:d1:bc:d4:33: 98:22:96:09:83:1e:d4:1b:dd:30:3c:18:89:8a:49: 9b:ea:43:44:9b:26:ff:db:e3:66:e1:a4:bd:5d:af: 16:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6F:06:D0:06:1E:51:61:E4:E5:22:0F:06:8A:1B:CD:BE:DB:EF:50 X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/5B102332845711EEB3DC4A5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.255.44.0/22 202.61.84.0/22 Signature Algorithm: sha256WithRSAEncryption 22:9e:5f:45:8b:03:db:51:72:d9:65:66:a0:4b:f5:f5:10:fe: d2:9d:8f:d6:7d:fd:16:ab:00:60:12:45:e5:44:85:c3:67:98: 95:99:76:50:55:d7:15:c6:55:89:45:73:58:26:87:fe:84:5c: 4d:fc:99:39:8d:8b:48:ee:0f:06:4a:bf:4a:61:a5:11:2b:2e: da:76:b4:2e:79:68:19:18:e2:10:ea:5a:d4:a9:e2:24:43:7a: a7:bc:fd:d4:96:dc:b0:f9:16:6d:d4:dd:f2:d4:35:5e:8c:16: 55:a0:d4:f8:74:61:97:3a:78:3f:1b:54:63:a4:8d:07:c0:29: eb:a3:3a:57:87:56:51:c4:ea:8d:eb:9b:7a:d4:ca:c5:f3:51: 3c:84:0b:1c:f6:b6:5e:ec:fb:11:0a:56:57:9c:32:a7:b5:a3: 45:2b:2c:6b:89:35:ae:20:bc:96:9b:8e:e6:18:96:51:b3:08: db:60:5d:b2:a2:9e:c0:b3:8a:cc:9e:67:65:bb:0c:66:bd:1d: eb:be:99:ba:de:e1:8a:7d:7c:52:5a:28:fe:2c:b9:07:24:4d: 9a:8b:4b:3f:36:d1:df:66:b7:35:53:a4:5c:6e:3a:78:84:d4: 17:91:20:f4:71:a4:c5:6a:e6:a1:48:79:02:da:24:5d:07:ec: 43:0b:fa:61 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICLcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjUwMTIyMTU1MTU5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkxMTQxZi03YTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnwXq7CauppyoCYA2O/VATpCU6iDNPTlMY3MBuUKAUtLpxizoNa0vE/qSjlC Awky/7AgbBcweGoy5bfMQCMlpjAw+SH4Ee5VQ42VYC4s7QdEDomBHZTVnnaV2+aO BnEVLsXaBCtRrN/brFi/2EYjB7pEcHVtkP+nbSs5t5lFqmO1nHbKyU0pA5zkN8NE mf4NwOxuJjiiy9wtpBP0bWIpL1c22Q6cisavdbGo0mxwNW+nAyLNzHajTzryS2mG X6GNiXbZ/ppZjt0MrW4vrTu84RIdiE4QDq2XDN+yLtG81DOYIpYJgx7UG90wPBiJ ikmb6kNEmyb/2+Nm4aS9Xa8W/wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDJvBtAG HlFh5OUiDwaKG82+2+9QMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTYwMjEvRDk4NzYxRDQ2OTJFMTFFMzg4QzgyNTJFNTkxMUVBMzIvNUIxMDIzMzI4 NDU3MTFFRUIzREM0QTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn/ywDBALKPVQwDQYJKoZIhvcNAQELBQADggEBACKeX0WL A9tRctllZqBL9fUQ/tKdj9Z9/RarAGASReVEhcNnmJWZdlBV1xXGVYlFc1gmh/6E XE38mTmNi0juDwZKv0phpRErLtp2tC55aBkY4hDqWtSp4iRDeqe8/dSW3LD5Fm3U 3fLUNV6MFlWg1Ph0YZc6eD8bVGOkjQfAKeujOleHVlHE6o3rm3rUysXzUTyECxz2 tl7s+xEKVlecMqe1o0UrLGuJNa4gvJabjuYYllGzCNtgXbKinsCzisyeZ2W7DGa9 Heu+mbre4Yp9fFJaKP4suQckTZqLSz820d9mtzVTpFxuOniE1BeRIPRxpMVq5qFI eQLaJF0H7EML+mE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:48:48 2025 by rpki-client