$ rpki-client -vvf rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/695DB5289D9D11EC958A216AC4F9AE02.roa File: 695DB5289D9D11EC958A216AC4F9AE02.roa (raw, json) Hash identifier: c9fr6KD/Ih6e5aCRy3Bruof+Va6iYKpCGv8u+/ETzK0= Subject key identifier: EB:BC:B0:F6:BD:4F:C4:1F:75:2C:3C:02:2A:49:5A:6E:B2:ED:7D:E1 Certificate issuer: /CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Certificate serial: 037C Authority key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/695DB5289D9D11EC958A216AC4F9AE02.roa Signing time: Wed 19 Mar 2025 00:45:56 +0000 ROA not before: Wed 19 Mar 2025 00:45:56 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9297 IP address blocks: 103.182.168.0/23 maxlen: 23 2001:df0:7ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156DB4 Validity Not Before: Mar 19 00:45:56 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67da13c3-eb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3c:9b:5a:4d:36:f1:a4:dc:f2:c5:3e:49:73: 05:3a:4c:14:ac:07:e4:11:7f:8c:37:ee:7f:41:24: 72:fa:bc:e3:a1:71:aa:b5:6a:0d:4c:df:e3:a7:18: 96:6a:09:6e:02:ee:c6:72:02:3c:dc:06:4b:03:6d: 42:df:b9:24:e6:5d:4b:e2:79:00:12:20:e6:6c:91: ac:ea:3e:e4:30:4b:59:8c:34:bf:bd:7a:44:a7:2d: 76:cc:d1:1e:e5:3a:d7:5a:98:85:dd:b9:c0:36:af: b3:ae:ad:d6:95:1f:c3:df:b0:c0:9a:6b:ac:74:49: f3:f5:93:05:03:62:e2:76:ae:68:0b:dd:24:ee:f6: cb:28:e6:8d:9c:9b:8d:51:25:ed:e8:ea:77:c7:04: 87:49:d7:86:90:1f:0e:5b:90:7a:64:59:78:e9:48: 4b:d1:fa:ae:1f:94:03:97:27:cd:91:4a:bb:12:db: 91:04:37:76:c6:00:5f:c3:9a:a9:65:b1:32:20:1f: 39:86:fc:f3:de:86:c7:eb:07:f4:cf:dd:d1:b5:3a: d4:e0:78:31:90:c5:1a:d0:96:19:df:2d:73:7c:5c: 02:9f:8e:8b:9a:16:a7:c3:ee:0c:86:08:ce:9e:80: e4:94:e9:d4:12:23:ef:84:da:65:f1:35:42:21:4b: 38:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BC:B0:F6:BD:4F:C4:1F:75:2C:3C:02:2A:49:5A:6E:B2:ED:7D:E1 X509v3 Authority Key Identifier: keyid:F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/695DB5289D9D11EC958A216AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.168.0/23 IPv6: 2001:df0:7ec0::/48 Signature Algorithm: sha256WithRSAEncryption 59:09:1d:38:57:33:13:93:77:dc:c9:3c:a2:d7:bf:1a:44:9c: aa:2a:27:b4:d9:e7:fb:77:6d:e2:ce:4f:4d:10:c1:ca:cf:0e: d5:6e:78:f7:83:e1:cb:c0:25:20:8d:2b:25:70:a9:d0:0a:d6: 54:7e:db:6e:f1:cb:4b:c1:32:c7:79:ed:4c:b3:9d:0c:dd:86: f0:ab:6e:08:ed:a7:fc:cf:2a:82:08:b0:73:a1:ef:99:fb:8d: f6:e1:99:59:5e:21:10:ed:d1:a5:a0:e7:f1:bd:3f:e2:cc:d5: ba:07:c5:68:e6:aa:6e:88:ba:2f:f6:70:8a:e7:61:30:fb:42: 30:8c:ca:d0:30:ff:f4:7b:32:38:1c:47:09:93:05:84:c2:60: 57:80:69:c5:ec:39:56:70:15:c2:7e:57:c2:33:34:8c:d9:18: 93:21:ba:11:dd:72:54:46:fb:cc:06:52:60:f3:24:52:92:b0: f4:db:df:fd:8f:56:4c:79:40:48:23:23:16:21:48:15:f5:9a: 8c:c7:35:d1:6a:f4:1f:30:3d:50:2e:eb:3b:c2:a2:dd:c4:e9: 30:7e:18:39:ff:82:80:39:28:3f:17:fe:e7:4d:3c:01:ef:1e: 0b:bf:a0:f3:fa:6f:4c:15:ab:c9:de:86:e6:78:23:84:60:28: 0d:32:fa:16 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZEQjQxMTAvBgNVBAUTKEYyRDEyNkYxNDIwODZBMjZFM0M1ODRBNzBBQjNFNTI3 QjMwMzgxODIwHhcNMjUwMzE5MDA0NTU2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RhMTNjMy1lYjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6jybWk028aTc8sU+SXMFOkwUrAfkEX+MN+5/QSRy+rzjoXGqtWoNTN/jpxiW agluAu7GcgI83AZLA21C37kk5l1L4nkAEiDmbJGs6j7kMEtZjDS/vXpEpy12zNEe 5TrXWpiF3bnANq+zrq3WlR/D37DAmmusdEnz9ZMFA2Lidq5oC90k7vbLKOaNnJuN USXt6Op3xwSHSdeGkB8OW5B6ZFl46UhL0fquH5QDlyfNkUq7EtuRBDd2xgBfw5qp ZbEyIB85hvzz3obH6wf0z93RtTrU4HgxkMUa0JYZ3y1zfFwCn46Lmhanw+4MhgjO noDklOnUEiPvhNpl8TVCIUs4GwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOu8sPa9 T8QfdSw8AipJWm6y7X3hMB8GA1UdIwQYMBaAFPLRJvFCCGom48WEpwqz5SezA4GC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkRCNC9FODREQjk4QTlE OUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFpYmp4WVNuQ3JQbEo3TURn WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh0RW04VUlJYWlianhZU25DclBsSjdNRGdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTZEQjQvRTg0REI5OEE5RDlBMTFFQ0JBOTI4RjQ1QzRGOUFFMDIvNjk1REI1Mjg5 RDlEMTFFQzk1OEEyMTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFntqgwDwQCAAIwCQMHACABDfB+wDANBgkqhkiG9w0BAQsF AAOCAQEAWQkdOFczE5N33Mk8ote/GkScqiontNnn+3dt4s5PTRDBys8O1W5494Ph y8AlII0rJXCp0ArWVH7bbvHLS8Eyx3ntTLOdDN2G8KtuCO2n/M8qggiwc6HvmfuN 9uGZWV4hEO3RpaDn8b0/4szVugfFaOaqboi6L/ZwiudhMPtCMIzK0DD/9HsyOBxH CZMFhMJgV4Bpxew5VnAVwn5XwjM0jNkYkyG6Ed1yVEb7zAZSYPMkUpKw9Nvf/Y9W THlASCMjFiFIFfWajMc10Wr0HzA9UC7rO8Ki3cTpMH4YOf+CgDkoPxf+5008Ae8e C7+g8/pvTBWryd6G5ngjhGAoDTL6Fg== -----END CERTIFICATE-----Generated at Sat Apr 5 03:55:01 2025 by rpki-client