$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/4AD97410632C11EE96048122C4F9AE02.roa File: 4AD97410632C11EE96048122C4F9AE02.roa (raw, json) Hash identifier: EHmZXLxVsief8zLb3cKkbfGcRs3h6H923HKwEbsQt7I= Subject key identifier: 84:C8:AA:C8:90:4A:59:F4:09:6D:F7:7E:CF:7A:A2:E1:C9:B5:28:CE Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0C96 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/4AD97410632C11EE96048122C4F9AE02.roa Signing time: Mon 31 Mar 2025 18:18:13 +0000 ROA not before: Mon 31 Mar 2025 18:18:13 +0000 ROA not after: Fri 01 Aug 2025 00:00:00 +0000 asID: 150774 IP address blocks: 103.135.138.0/24 maxlen: 24 103.135.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3222 (0xc96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06 Validity Not Before: Mar 31 18:18:13 2025 GMT Not After : Aug 1 00:00:00 2025 GMT Subject: CN=67eadc65-eb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:74:38:fd:db:60:78:25:c7:34:89:16:c3: b3:aa:9d:05:3a:08:e5:cd:55:60:ef:6f:3c:34:05: f5:f9:8d:62:15:55:c6:7d:47:81:a0:51:76:cc:db: 78:d6:e6:8f:3c:9e:0f:4d:22:e9:07:74:1c:36:ee: d7:dc:92:06:d9:a0:7c:e8:bf:75:bc:fe:55:1e:85: d9:2a:d3:08:5c:bc:ba:c1:c6:a2:6e:cd:06:dd:8a: 6d:9a:ad:4e:12:f0:1c:e8:ee:2a:06:ac:50:d2:fa: 77:0f:d8:3f:2d:a6:c3:82:76:22:d2:a4:83:ad:9a: 8e:28:8b:28:83:c7:ca:4e:dc:33:11:d2:ea:e8:20: 1e:28:a1:e2:bc:b5:6f:16:a8:9d:b9:04:8e:6d:5a: 0d:f5:dc:4b:e8:1c:15:f5:aa:8e:14:08:db:29:00: 10:36:f6:fd:d1:04:bd:72:cd:82:b2:d3:a5:7d:95: 8a:29:dd:18:01:8c:c6:0d:f3:28:6f:98:10:d6:34: 09:77:71:bf:6f:11:bd:39:4d:2f:fe:73:28:13:c8: aa:4e:9b:5b:32:ce:ce:c0:ac:a7:3a:4a:e6:85:fc: 3e:96:77:6a:61:cb:1b:4f:1f:ea:0a:96:ee:81:96: 12:6f:81:cb:43:54:a3:86:dc:6d:8f:f8:c3:84:8b: ef:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C8:AA:C8:90:4A:59:F4:09:6D:F7:7E:CF:7A:A2:E1:C9:B5:28:CE X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/4AD97410632C11EE96048122C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.138.0/23 Signature Algorithm: sha256WithRSAEncryption f5:d5:b9:dc:ae:6a:37:ca:a9:59:3c:c4:0b:3a:55:71:fd:b8: 36:47:8d:81:72:93:22:a0:b3:7e:fe:05:ab:41:a5:c2:cc:ce: be:3f:c7:3e:e7:74:06:55:28:09:5f:ab:64:95:4e:26:c5:7e: 41:a6:5e:55:45:08:55:ea:47:c6:68:58:2a:42:13:4c:44:e9: 41:6b:86:17:bf:32:51:1a:30:c2:60:89:01:9c:b0:88:4d:61: ed:2c:5b:25:17:c7:e4:40:4c:c2:f1:20:cf:93:1c:fd:7f:00: 97:00:bc:82:ed:b6:e0:df:0a:7e:01:4a:23:95:c8:cf:b6:aa: 86:93:71:72:b8:d5:e5:0b:97:9b:13:fa:77:6a:a2:9a:19:7c: 8c:5a:e9:0b:7c:ee:20:ca:d0:66:de:c7:57:f8:e7:af:dd:23: 10:03:3f:3b:88:33:da:58:78:db:9e:9b:7f:ad:b2:7f:f9:0f: 29:a7:2c:93:cd:35:0f:64:36:53:d9:87:ac:c7:d3:68:aa:5a: f3:23:86:56:88:eb:88:30:58:6a:00:ce:3b:5b:73:ad:04:63: 39:b9:c5:32:a8:0d:f1:f7:74:83:09:bd:f3:0d:33:40:dd:e7: 0c:4e:18:19:19:98:aa:d5:a0:0f:da:ca:8c:59:c8:44:d9:60: 3f:93:3b:fa -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjUwMzMxMTgxODEzWhcNMjUwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhZGM2NS1lYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysd0OP3bYHglxzSJFsOzqp0FOgjlzVVg7288NAX1+Y1iFVXGfUeBoFF2zNt4 1uaPPJ4PTSLpB3QcNu7X3JIG2aB86L91vP5VHoXZKtMIXLy6wcaibs0G3Yptmq1O EvAc6O4qBqxQ0vp3D9g/LabDgnYi0qSDrZqOKIsog8fKTtwzEdLq6CAeKKHivLVv FqiduQSObVoN9dxL6BwV9aqOFAjbKQAQNvb90QS9cs2CstOlfZWKKd0YAYzGDfMo b5gQ1jQJd3G/bxG9OU0v/nMoE8iqTptbMs7OwKynOkrmhfw+lndqYcsbTx/qCpbu gZYSb4HLQ1Sjhtxtj/jDhIvvNwIDAQABo4IClTCCApEwHQYDVR0OBBYEFITIqsiQ Sln0CW33fs96ouHJtSjOMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODhBMDYvODAxQ0E1ODRGNjdGMTFFOUFBM0U3MDNEQzRGOUFFMDIvNEFEOTc0MTA2 MzJDMTFFRTk2MDQ4MTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnh4owDQYJKoZIhvcNAQELBQADggEBAPXVudyuajfKqVk8 xAs6VXH9uDZHjYFykyKgs37+BatBpcLMzr4/xz7ndAZVKAlfq2SVTibFfkGmXlVF CFXqR8ZoWCpCE0xE6UFrhhe/MlEaMMJgiQGcsIhNYe0sWyUXx+RATMLxIM+THP1/ AJcAvILttuDfCn4BSiOVyM+2qoaTcXK41eULl5sT+ndqopoZfIxa6Qt87iDK0Gbe x1f456/dIxADPzuIM9pYeNuem3+tsn/5DymnLJPNNQ9kNlPZh6zH02iqWvMjhlaI 64gwWGoAzjtbc60EYzm5xTKoDfH3dIMJvfMNM0Dd5wxOGBkZmKrVoA/ayoxZyETZ YD+TO/o= -----END CERTIFICATE-----Generated at Sun Apr 6 15:23:03 2025 by rpki-client