$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/0EF0E842839E11EEA1892A12C4F9AE02.roa File: 0EF0E842839E11EEA1892A12C4F9AE02.roa (raw, json) Hash identifier: /52qTFp6aiRpt+ltl9ngfv+TFAUotZNWt2Dzg7OlohE= Subject key identifier: 27:75:D2:B2:A4:87:0F:2F:9F:4A:3C:76:15:CC:73:10:23:BC:2F:79 Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Certificate serial: 0CAE Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/0EF0E842839E11EEA1892A12C4F9AE02.roa Signing time: Mon 31 Mar 2025 18:18:02 +0000 ROA not before: Mon 31 Mar 2025 18:18:02 +0000 ROA not after: Fri 01 Aug 2025 00:00:00 +0000 asID: 135341 IP address blocks: 103.134.126.0/24 maxlen: 24 103.134.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 18:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3246 (0xcae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Validity Not Before: Mar 31 18:18:02 2025 GMT Not After : Aug 1 00:00:00 2025 GMT Subject: CN=67eadc5a-6260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a7:3c:22:f6:08:93:fc:e9:5c:98:dc:f0:8d: 2a:3e:4a:fa:f6:6b:1d:03:8b:3b:2c:e2:9f:1e:fe: 11:ff:da:72:53:5c:8c:24:ef:d9:da:0f:9e:41:f3: c4:9e:7c:2e:ab:7d:8f:71:6f:44:0e:86:2a:d2:d7: 03:ce:90:1c:c2:e9:5d:c8:9c:a0:25:e6:36:57:19: 11:9a:3d:b0:f3:70:37:8e:83:bb:59:4b:ab:88:75: b6:18:90:1a:b1:8b:68:d5:9c:88:c8:20:d4:bf:77: 80:40:a5:1f:df:c8:f2:3c:97:b1:84:5b:bd:11:87: 41:5d:57:15:66:7b:32:20:2e:48:d2:ec:35:ec:38: 6b:1c:85:ca:1c:0b:ff:e7:1b:fc:1c:ed:08:a6:74: 14:8e:06:ab:89:9b:4d:e0:e9:c2:8c:ad:84:e8:7c: 08:e2:61:1d:a5:61:d1:33:bd:18:e3:2b:97:91:33: c7:2a:61:5a:0f:cc:63:b1:fa:fc:e1:9b:52:af:58: 7f:42:4a:04:04:99:93:46:b2:c9:18:9e:7d:3a:c3: 6e:60:7b:6f:5c:52:36:d7:82:2c:68:73:62:18:26: 6d:93:fc:a8:aa:7c:3b:c2:5b:3d:d4:17:94:e8:49: 87:9d:81:45:7f:fb:c5:17:8a:6b:93:86:eb:72:d0: 0f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:75:D2:B2:A4:87:0F:2F:9F:4A:3C:76:15:CC:73:10:23:BC:2F:79 X509v3 Authority Key Identifier: keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/0EF0E842839E11EEA1892A12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.126.0/23 Signature Algorithm: sha256WithRSAEncryption 27:1f:72:08:87:ed:01:0c:7c:fc:c1:84:a5:0e:11:c2:7e:8a: 2e:ea:4a:3f:85:9d:bd:a1:d0:71:44:29:28:60:c3:69:9f:0e: 3b:83:38:11:ce:29:fe:06:3c:33:96:39:b2:05:0f:68:93:1c: 97:52:0e:49:41:65:03:d7:af:d3:19:3f:24:81:48:8f:02:fb: 54:e4:f3:b5:f3:72:f3:4a:98:47:4f:fa:ea:56:9e:17:1f:00: 68:dd:f1:0c:2e:12:8f:5e:7c:1f:b2:d7:c9:22:4a:32:48:55: e5:61:a7:7a:f0:1f:09:63:d0:d0:bd:42:27:5e:86:36:a7:dc: c0:13:5e:41:c0:3d:7d:35:98:de:bf:b7:53:67:df:b7:d7:3d: 08:d4:bf:10:ff:aa:67:ac:c2:15:2b:d6:23:af:1a:f8:6a:92: 41:6f:e0:6b:8d:44:30:00:52:61:5a:1d:6f:ba:e2:fb:53:26: 2a:6f:b7:89:db:3a:2c:cd:1b:74:c1:b7:ba:02:3a:14:71:60: 4d:07:81:98:60:c4:38:ad:78:09:bb:03:00:8a:75:ea:95:87: 92:28:70:ca:91:21:eb:bc:a6:91:29:aa:ff:1c:b6:28:03:43: be:d2:02:d8:74:73:3b:8d:83:6b:b9:d1:3a:ef:eb:03:14:85: f5:4e:01:da -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1 RUY0ODkwODgwHhcNMjUwMzMxMTgxODAyWhcNMjUwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhZGM1YS02MjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26c8IvYIk/zpXJjc8I0qPkr69msdA4s7LOKfHv4R/9pyU1yMJO/Z2g+eQfPE nnwuq32PcW9EDoYq0tcDzpAcwuldyJygJeY2VxkRmj2w83A3joO7WUuriHW2GJAa sYto1ZyIyCDUv3eAQKUf38jyPJexhFu9EYdBXVcVZnsyIC5I0uw17DhrHIXKHAv/ 5xv8HO0IpnQUjgariZtN4OnCjK2E6HwI4mEdpWHRM70Y4yuXkTPHKmFaD8xjsfr8 4ZtSr1h/QkoEBJmTRrLJGJ59OsNuYHtvXFI214IsaHNiGCZtk/yoqnw7wls91BeU 6EmHnYFFf/vFF4prk4brctAPewIDAQABo4IClTCCApEwHQYDVR0OBBYEFCd10rKk hw8vn0o8dhXMcxAjvC95MB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2 NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjQyQTAvQ0E3RDExNjJGNjc2MTFFOTkwQkFBMjIyQzRGOUFFMDIvMEVGMEU4NDI4 MzlFMTFFRUExODkyQTEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnhn4wDQYJKoZIhvcNAQELBQADggEBACcfcgiH7QEMfPzB hKUOEcJ+ii7qSj+Fnb2h0HFEKShgw2mfDjuDOBHOKf4GPDOWObIFD2iTHJdSDklB ZQPXr9MZPySBSI8C+1Tk87XzcvNKmEdP+upWnhcfAGjd8QwuEo9efB+y18kiSjJI VeVhp3rwHwlj0NC9Qidehjan3MATXkHAPX01mN6/t1Nn37fXPQjUvxD/qmeswhUr 1iOvGvhqkkFv4GuNRDAAUmFaHW+64vtTJipvt4nbOizNG3TBt7oCOhRxYE0HgZhg xDiteAm7AwCKdeqVh5IocMqRIeu8ppEpqv8ctigDQ77SAth0czuNg2u50Trv6wMU hfVOAdo= -----END CERTIFICATE-----Generated at Fri Apr 18 09:32:46 2025 by rpki-client