$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/48DBC234F4DB11EFAC0A7D1AC4F9AE02.roa File: 48DBC234F4DB11EFAC0A7D1AC4F9AE02.roa (raw, json) Hash identifier: MMIkwa2VF05y1vJp43/649+EQByZjCMwwH+3GumiKxU= Subject key identifier: 72:42:95:59:C4:69:33:4C:C6:0B:31:63:56:CF:F9:91:1F:2D:A9:97 Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Certificate serial: 030E Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/48DBC234F4DB11EFAC0A7D1AC4F9AE02.roa Signing time: Thu 27 Feb 2025 07:20:27 +0000 ROA not before: Thu 27 Feb 2025 07:20:27 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153494 IP address blocks: 45.122.138.0/24 maxlen: 24 103.63.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 782 (0x30e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E08 Validity Not Before: Feb 27 07:20:27 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67c0123b-2f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cc:6f:9c:19:b9:11:ca:52:7e:32:55:f1:ae: d4:50:1a:19:ba:40:fb:3d:60:dc:81:e6:24:a7:12: 39:fa:30:76:f1:80:9e:62:bf:ee:f8:9b:1d:6d:d2: b2:f6:96:92:aa:11:7e:a5:85:e2:12:39:5f:fa:28: 81:f9:8b:65:f5:9e:5c:0b:8c:19:21:8f:42:4f:ca: 1c:46:aa:87:f3:07:73:c5:22:67:3c:30:f7:d0:5b: 66:84:28:4e:35:46:df:01:e9:ba:d4:7f:cb:d0:ea: 03:7a:61:f4:09:72:03:9e:61:50:c4:53:61:d5:6f: 21:43:26:29:97:5a:dc:61:02:02:a9:ab:d0:2b:45: af:27:e8:68:75:2d:b5:6f:68:88:b7:ef:ae:61:97: b8:ba:c9:2f:1f:5b:dc:75:49:5b:df:cd:62:de:ab: 57:11:12:1f:ac:07:5e:22:fd:bb:a6:63:2c:aa:c1: fd:22:2c:ed:02:be:a4:9b:05:4e:73:d0:2b:64:2a: 6a:42:85:f0:b4:f5:26:fc:2c:e0:54:49:38:c9:9d: 87:bc:e4:ac:90:d8:c9:7a:74:08:1f:e1:ad:17:a9: a9:b9:81:3b:33:91:be:10:97:67:e7:d5:18:1d:ab: 1a:ce:f5:2b:ff:27:f0:46:4b:14:18:72:24:5b:92: 21:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:42:95:59:C4:69:33:4C:C6:0B:31:63:56:CF:F9:91:1F:2D:A9:97 X509v3 Authority Key Identifier: keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/48DBC234F4DB11EFAC0A7D1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.122.138.0/24 103.63.4.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:d2:56:a5:39:fe:db:64:ba:ad:f8:59:d8:06:5f:65:d8:56: 69:87:0c:a6:c7:b4:62:24:05:c3:38:02:93:b0:ce:ff:71:b6: 33:71:84:c0:77:1b:42:3d:f6:58:b1:0a:51:2a:8d:97:21:9f: 9e:70:e8:f8:6d:2e:25:7a:c0:ed:a3:75:2c:55:51:f8:01:bc: 29:27:ab:13:d3:91:13:84:4a:b5:bb:56:f5:f7:5d:63:00:32: 3a:e5:75:da:1f:d0:0b:24:ef:16:4f:d1:0c:d0:07:e3:c9:b5: 85:36:7a:19:57:b6:10:84:fc:6e:da:40:79:d3:d0:d4:a1:b4: e5:dc:56:20:9d:1e:c0:35:9c:e8:04:0e:14:9b:c4:78:1c:cf: be:55:82:5f:10:26:58:96:88:fe:b7:5f:0e:83:62:3a:13:c8: 6d:f0:af:92:3f:53:9f:97:f3:fc:28:7c:d9:89:e6:55:5d:dd: b3:d4:ce:d9:5f:fd:0e:41:a6:4f:e6:dd:e1:3d:18:bd:52:eb: 0d:b1:1b:e0:96:ef:62:e6:48:4d:af:21:ff:f4:39:69:07:27: 67:5d:16:64:56:09:f0:47:35:3f:b9:f9:06:10:fb:c6:dc:5b: 74:52:1d:53:1d:30:6a:64:ce:a9:74:9e:eb:ad:df:57:58:52: 4d:a1:4f:83 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB NUNDNzcyQzAwHhcNMjUwMjI3MDcyMDI3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MwMTIzYi0yZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsxvnBm5EcpSfjJV8a7UUBoZukD7PWDcgeYkpxI5+jB28YCeYr/u+JsdbdKy 9paSqhF+pYXiEjlf+iiB+Ytl9Z5cC4wZIY9CT8ocRqqH8wdzxSJnPDD30FtmhChO NUbfAem61H/L0OoDemH0CXIDnmFQxFNh1W8hQyYpl1rcYQICqavQK0WvJ+hodS21 b2iIt++uYZe4uskvH1vcdUlb381i3qtXERIfrAdeIv27pmMsqsH9IiztAr6kmwVO c9ArZCpqQoXwtPUm/CzgVEk4yZ2HvOSskNjJenQIH+GtF6mpuYE7M5G+EJdn59UY HasazvUr/yfwRksUGHIkW5IhpQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHJClVnE aTNMxgsxY1bP+ZEfLamXMB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2 MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFFMDgvOUVDNjMxRUNDNjA5MTFFQ0I0NjBFQzU3QzRGOUFFMDIvNDhEQkMyMzRG NERCMTFFRkFDMEE3RDFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAteooDBAJnPwQwDQYJKoZIhvcNAQELBQADggEBAH3SVqU5 /ttkuq34WdgGX2XYVmmHDKbHtGIkBcM4ApOwzv9xtjNxhMB3G0I99lixClEqjZch n55w6PhtLiV6wO2jdSxVUfgBvCknqxPTkROESrW7VvX3XWMAMjrlddof0Ask7xZP 0QzQB+PJtYU2ehlXthCE/G7aQHnT0NShtOXcViCdHsA1nOgEDhSbxHgcz75Vgl8Q JliWiP63Xw6DYjoTyG3wr5I/U5+X8/wofNmJ5lVd3bPUztlf/Q5Bpk/m3eE9GL1S 6w2xG+CW72LmSE2vIf/0OWkHJ2ddFmRWCfBHNT+5+QYQ+8bcW3RSHVMdMGpkzql0 nuut31dYUk2hT4M= -----END CERTIFICATE-----Generated at Sat Apr 5 19:47:21 2025 by rpki-client