$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DD70B00CA17B11EAB16F4954C4F9AE02.roa File: DD70B00CA17B11EAB16F4954C4F9AE02.roa (raw, json) Hash identifier: x1/GarElcr5O6iE+sqK2ug/fRIYXIcradGA+fv5pzss= Subject key identifier: B3:35:DA:E9:FE:22:96:D8:EA:5F:EF:14:47:2E:A9:8C:7B:96:01:89 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 091A Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DD70B00CA17B11EAB16F4954C4F9AE02.roa Signing time: Wed 26 Mar 2025 18:27:01 +0000 ROA not before: Wed 26 Mar 2025 18:27:01 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 62660 IP address blocks: 45.250.72.0/22 maxlen: 24 103.226.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2330 (0x91a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08 Validity Not Before: Mar 26 18:27:01 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e446f5-8ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:f8:32:9a:9b:0a:d9:04:11:7d:41:41:c7: 82:17:27:25:1f:f1:ba:8c:34:fa:dd:c7:bd:21:dd: b0:fd:12:c7:70:76:10:64:de:d6:3c:e8:b7:01:6d: 81:da:96:79:9d:f7:a4:de:6e:24:8f:c0:5c:7e:e3: 0d:87:60:78:02:d0:3a:87:ac:85:70:1a:03:18:12: 27:c7:c6:01:cb:3f:3e:96:8e:f2:e8:04:1e:c4:47: 9b:c6:cd:49:d6:09:25:eb:c7:43:79:4b:c1:b2:36: 98:54:a5:40:23:30:6d:cb:42:bd:19:8a:26:73:34: cc:48:6f:50:f3:c0:1f:e2:e2:5a:f1:87:2c:a7:10: a9:f7:a1:98:81:e4:a6:ca:5a:67:c0:ba:2f:b9:bd: 81:a9:99:7f:7a:da:eb:ca:62:fe:da:dd:b1:30:44: 4d:b2:aa:16:74:3d:b0:af:8a:0f:b2:83:69:50:28: aa:74:81:08:d7:6e:75:a9:5f:d6:28:ea:d0:7d:1f: 15:32:24:2b:51:51:65:c2:20:97:16:e8:f5:da:13: 52:14:84:b2:89:16:f4:15:8a:67:d2:5b:44:ba:32: d1:3a:b9:ee:65:87:75:98:9c:da:8b:7e:f1:88:2a: a0:4c:89:35:d6:c9:b6:dc:c8:af:7b:94:da:e9:ef: 19:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:35:DA:E9:FE:22:96:D8:EA:5F:EF:14:47:2E:A9:8C:7B:96:01:89 X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DD70B00CA17B11EAB16F4954C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.250.72.0/22 103.226.68.0/22 Signature Algorithm: sha256WithRSAEncryption c4:b5:86:06:01:ce:76:a3:2f:4a:0a:85:ad:5b:d3:53:3f:88: dc:8e:af:bc:00:b4:25:65:1f:d5:cc:47:af:d8:2b:74:17:fb: 35:04:cd:4b:dd:2c:e0:f7:ff:48:04:e4:20:22:d3:65:a6:96: ef:b6:40:f6:87:f9:ac:76:4e:2d:be:b3:d7:c8:bc:a1:f0:2f: 38:b5:c5:75:8d:78:31:9b:bf:28:8b:ee:92:9b:3a:72:80:12: ab:db:58:bf:27:90:c8:c0:ca:d8:02:fc:00:6a:da:c8:a9:a4: 10:9b:1a:cd:66:80:3c:55:56:5d:2e:32:4d:df:78:0c:66:0c: f3:f7:56:6b:11:76:7c:57:ac:1f:a1:95:41:61:49:74:fb:47: 3e:5b:40:59:86:c3:73:42:15:85:30:03:6f:46:c0:56:ea:04: 7a:3b:38:44:59:48:4f:f6:72:59:9b:2c:5e:5e:f1:70:36:97: 30:b4:a9:e0:40:07:32:48:73:22:e6:2a:8c:64:f9:b5:d7:26: ef:dd:db:2c:6c:74:af:99:8f:8d:b9:65:a1:b2:5e:08:84:a7: b2:9a:4a:7f:f2:4a:8f:ff:08:10:67:60:07:b1:2f:3a:5b:fa: d9:64:f0:51:d4:80:b2:61:08:cd:17:fc:26:bf:9f:85:38:b8: 44:3a:ef:ad -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjUwMzI2MTgyNzAxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0NDZmNS04YmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpT4MpqbCtkEEX1BQceCFyclH/G6jDT63ce9Id2w/RLHcHYQZN7WPOi3AW2B 2pZ5nfek3m4kj8BcfuMNh2B4AtA6h6yFcBoDGBInx8YByz8+lo7y6AQexEebxs1J 1gkl68dDeUvBsjaYVKVAIzBty0K9GYomczTMSG9Q88Af4uJa8YcspxCp96GYgeSm ylpnwLovub2BqZl/etrrymL+2t2xMERNsqoWdD2wr4oPsoNpUCiqdIEI1251qV/W KOrQfR8VMiQrUVFlwiCXFuj12hNSFISyiRb0FYpn0ltEujLROrnuZYd1mJzai37x iCqgTIk11sm23Mive5Ta6e8ZpwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLM12un+ IpbY6l/vFEcuqYx7lgGJMB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThGMDgvNUIxN0Y2RDIwN0QwMTFFQUE0ODQ4NjQ0QzRGOUFFMDIvREQ3MEIwMENB MTdCMTFFQUIxNkY0OTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIt+kgDBAJn4kQwDQYJKoZIhvcNAQELBQADggEBAMS1hgYB znajL0oKha1b01M/iNyOr7wAtCVlH9XMR6/YK3QX+zUEzUvdLOD3/0gE5CAi02Wm lu+2QPaH+ax2Ti2+s9fIvKHwLzi1xXWNeDGbvyiL7pKbOnKAEqvbWL8nkMjAytgC /ABq2sippBCbGs1mgDxVVl0uMk3feAxmDPP3VmsRdnxXrB+hlUFhSXT7Rz5bQFmG w3NCFYUwA29GwFbqBHo7OERZSE/2clmbLF5e8XA2lzC0qeBABzJIcyLmKoxk+bXX Ju/d2yxsdK+Zj425ZaGyXgiEp7KaSn/ySo//CBBnYAexLzpb+tlk8FHUgLJhCM0X /Ca/n4U4uEQ6760= -----END CERTIFICATE-----Generated at Sun Apr 6 00:40:02 2025 by rpki-client