$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/F5BCC96EF7EA11EF917C0251C4F9AE02.roa File: F5BCC96EF7EA11EF917C0251C4F9AE02.roa (raw, json) Hash identifier: +AyhAJzE/gLMKmNRb1SVHFe/1nuNSQ2YfQc67BMH3Nc= Subject key identifier: 9C:17:38:B4:74:D0:1F:7B:18:CA:D9:A7:FD:B6:42:7E:87:7D:59:E1 Certificate issuer: /CN=A918FCB4/serialNumber=B2FF65FA961914A45B89BE512D33653089D6FFB2 Certificate serial: 02 Authority key identifier: B2:FF:65:FA:96:19:14:A4:5B:89:BE:51:2D:33:65:30:89:D6:FF:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sv9l-pYZFKRbib5RLTNlMInW_7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/F5BCC96EF7EA11EF917C0251C4F9AE02.roa Signing time: Mon 03 Mar 2025 04:49:59 +0000 ROA not before: Mon 03 Mar 2025 04:49:59 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 137491 IP address blocks: 103.154.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.crl rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sv9l-pYZFKRbib5RLTNlMInW_7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCB4 Validity Not Before: Mar 3 04:49:59 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67c534f7-0051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:aa:46:ed:a7:fa:b5:c7:ce:af:f1:f5:49: c7:83:1f:4c:0e:5c:c7:22:01:6b:82:64:69:75:6d: 61:ed:72:d3:1c:fa:67:fc:e7:0e:af:23:e2:01:62: 6e:09:df:f4:43:50:d2:8b:ee:6d:ad:28:84:64:00: 9e:47:d6:b0:fd:21:06:3e:71:7f:11:11:75:96:bd: 57:64:cf:18:54:ee:fb:1d:b6:35:12:c2:de:32:ac: 76:cd:83:80:cf:89:d6:a6:ec:b3:f2:b5:32:ca:6f: 51:07:17:8e:df:76:25:a3:8b:14:26:35:d4:dd:97: e3:2f:5d:8d:42:1b:29:b1:f1:24:95:d4:a2:0b:f9: 63:b3:14:9b:80:c6:96:90:ec:8e:3d:31:3d:76:75: a2:d6:d6:35:f0:11:36:eb:55:b9:98:32:b3:25:b4: 63:ee:ec:13:bd:5f:b5:56:ba:c4:51:30:6e:fa:4d: dd:db:28:32:7c:7f:c5:e6:95:b9:4d:bb:da:9a:11: 9b:c2:f4:e5:10:86:1c:a3:95:5f:7a:ef:49:a4:54: e8:7a:dd:09:5a:de:1a:19:52:22:22:37:64:3f:5d: 27:61:d9:ab:a3:86:90:11:18:07:c9:1d:4f:cb:33: d3:21:34:bf:69:87:2b:1f:2a:85:c5:9c:50:90:5a: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:17:38:B4:74:D0:1F:7B:18:CA:D9:A7:FD:B6:42:7E:87:7D:59:E1 X509v3 Authority Key Identifier: keyid:B2:FF:65:FA:96:19:14:A4:5B:89:BE:51:2D:33:65:30:89:D6:FF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sv9l-pYZFKRbib5RLTNlMInW_7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/F5BCC96EF7EA11EF917C0251C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.236.0/23 Signature Algorithm: sha256WithRSAEncryption 20:40:45:c2:51:9b:4a:58:e9:68:ae:3b:8b:3d:11:60:0d:04: 42:5f:7b:b6:11:63:dc:76:fd:ac:67:c3:d9:31:66:87:4a:81: 4c:35:e1:24:69:c4:68:b7:79:e6:3c:31:22:26:ee:8c:11:18: e8:b7:e7:79:71:b8:c1:69:e9:9d:be:d7:15:3c:86:a5:eb:c4: d9:f7:e1:a9:4a:63:2c:ad:a0:f6:e4:ff:14:63:6d:65:8a:81: 16:56:a8:57:0f:bd:e1:87:f5:1a:b8:69:43:1d:6d:22:a7:ca: e7:c1:a9:fe:d5:35:8a:1f:71:d8:9d:da:69:de:14:85:ce:2b: 46:2c:d4:b1:17:e1:82:9b:04:b0:b2:1d:fe:cd:2a:20:39:73: 9b:9a:bd:9a:e5:52:64:6e:38:79:bb:e3:fc:21:85:cf:b6:8d: c7:2d:f0:38:3e:b1:40:84:98:f2:37:58:cd:a9:fe:41:0d:71: 7e:bf:bd:80:3d:91:c6:ab:9b:6d:40:a2:ea:f7:d7:29:03:53: 68:76:c3:83:6e:68:62:a3:8e:7d:f7:ab:dd:0e:6b:03:97:7a: 9a:5d:89:e0:f2:8e:e7:e1:0a:ef:94:d8:7a:54:1c:9a:a2:10: ad:2e:b3:04:30:20:32:ec:e5:b8:47:1c:a4:b3:1b:f7:ba:44: f7:c8:bc:66 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RkNCNDExMC8GA1UEBRMoQjJGRjY1RkE5NjE5MTRBNDVCODlCRTUxMkQzMzY1MzA4 OUQ2RkZCMjAeFw0yNTAzMDMwNDQ5NTlaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzUzNGY3LTAwNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8IKpG7af6tcfOr/H1SceDH0wOXMciAWuCZGl1bWHtctMc+mf85w6vI+IBYm4J 3/RDUNKL7m2tKIRkAJ5H1rD9IQY+cX8REXWWvVdkzxhU7vsdtjUSwt4yrHbNg4DP idam7LPytTLKb1EHF47fdiWjixQmNdTdl+MvXY1CGymx8SSV1KIL+WOzFJuAxpaQ 7I49MT12daLW1jXwETbrVbmYMrMltGPu7BO9X7VWusRRMG76Td3bKDJ8f8XmlblN u9qaEZvC9OUQhhyjlV9670mkVOh63Qla3hoZUiIiN2Q/XSdh2aujhpARGAfJHU/L M9MhNL9physfKoXFnFCQWiyrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUnBc4tHTQ H3sYytmn/bZCfod9WeEwHwYDVR0jBBgwFoAUsv9l+pYZFKRbib5RLTNlMInW/7Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGQ0I0LzNBN0FEM0IyRTM4 NjExRUE5RkEyM0EzNkM0RjlBRTAyL3N2OWwtcFlaRktSYmliNVJMVE5sTUluV183 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3Y5bC1wWVpGS1JiaWI1UkxUTmxNSW5XXzdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkNCNC8zQTdBRDNCMkUzODYxMUVBOUZBMjNBMzZDNEY5QUUwMi9GNUJDQzk2RUY3 RUExMUVGOTE3QzAyNTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWea7DANBgkqhkiG9w0BAQsFAAOCAQEAIEBFwlGbSljpaK47 iz0RYA0EQl97thFj3Hb9rGfD2TFmh0qBTDXhJGnEaLd55jwxIibujBEY6LfneXG4 wWnpnb7XFTyGpevE2ffhqUpjLK2g9uT/FGNtZYqBFlaoVw+94Yf1GrhpQx1tIqfK 58Gp/tU1ih9x2J3aad4Uhc4rRizUsRfhgpsEsLId/s0qIDlzm5q9muVSZG44ebvj /CGFz7aNxy3wOD6xQISY8jdYzan+QQ1xfr+9gD2RxqubbUCi6vfXKQNTaHbDg25o YqOOffer3Q5rA5d6ml2J4PKO5+EK75TYelQcmqIQrS6zBDAgMuzluEccpLMb97pE 98i8Zg== -----END CERTIFICATE-----Generated at Sat Apr 5 07:18:23 2025 by rpki-client