$ rpki-client -vvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/1ED5B13E30C111ECBB5A4116C4F9AE02.roa File: 1ED5B13E30C111ECBB5A4116C4F9AE02.roa (raw, json) Hash identifier: d+I2TT/gxlfU8DW6Z3DvHejEqX3GL44iDJ8/ajMHeYc= Subject key identifier: 8D:F7:2C:88:9A:9B:E3:A8:F9:41:C8:4B:2C:7E:47:E1:AD:A2:FF:5A Certificate issuer: /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9 Certificate serial: 10A2 Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/1ED5B13E30C111ECBB5A4116C4F9AE02.roa Signing time: Mon 31 Mar 2025 17:46:25 +0000 ROA not before: Mon 31 Mar 2025 17:46:25 +0000 ROA not after: Fri 01 Aug 2025 00:00:00 +0000 asID: 137491 IP address blocks: 103.134.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4258 (0x10a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919608D Validity Not Before: Mar 31 17:46:25 2025 GMT Not After : Aug 1 00:00:00 2025 GMT Subject: CN=67ead4f1-7fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:03:cf:1d:f7:9d:70:12:5c:f1:4f:ef:8a:77: 48:d0:ac:01:d5:62:60:bf:d0:27:ef:ad:46:0b:18: 4d:fa:6d:dd:5c:c4:07:a3:e0:e8:4b:c0:0b:de:d9: 96:cd:75:05:a7:7d:91:be:66:6c:f6:ac:2b:e6:23: 4f:c4:b7:dd:3a:e3:f8:04:0c:65:9e:c8:1a:25:56: f9:89:38:d4:0a:7a:d7:d8:f7:14:d1:0e:af:fa:c9: 0f:dd:69:5f:52:a8:f8:67:6b:b5:9b:82:08:6a:3b: ed:20:53:79:eb:60:65:65:d2:56:12:d4:6c:58:2b: 10:4d:be:5d:2f:07:fe:bd:66:18:71:d1:bb:d5:a7: d9:12:2c:4f:2b:36:c2:ea:17:01:79:02:ca:17:bc: 29:e0:56:f2:8a:c4:ab:fb:2e:f9:fa:48:6f:fd:85: e0:6b:d4:4f:95:3a:76:a1:6b:03:de:7f:a3:50:d9: a2:e9:f4:5a:39:e8:a5:81:66:d6:cd:19:ed:af:40: 2e:a4:36:34:db:e1:69:8d:c9:64:ba:10:f3:6e:df: dd:b6:86:bc:85:95:ce:0d:c4:ce:cc:94:15:e5:b9: 27:af:0b:c6:27:ed:63:3e:82:f8:8c:7b:bc:79:bc: 3d:f6:f9:c3:1b:8f:36:40:10:00:08:ea:c1:9c:e9: e8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F7:2C:88:9A:9B:E3:A8:F9:41:C8:4B:2C:7E:47:E1:AD:A2:FF:5A X509v3 Authority Key Identifier: keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/1ED5B13E30C111ECBB5A4116C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.38.0/23 Signature Algorithm: sha256WithRSAEncryption c0:a3:73:4f:33:46:77:74:a6:57:18:1f:f1:63:62:9e:6b:7f: c4:12:33:ce:1b:82:7a:1b:c5:3a:7b:c7:57:01:57:64:d4:d9: dc:7a:ed:c0:8b:fe:a2:3a:e7:89:db:03:86:40:ce:e5:68:86: 33:e5:14:4e:86:41:59:b8:38:f6:da:2f:8f:ac:7c:b8:46:5b: 98:c7:cd:b5:29:84:2e:f7:81:10:4a:58:e1:ed:0c:b8:7c:41: a4:81:a2:93:0a:0e:7c:a6:e2:20:16:cc:6a:c8:5d:08:30:fa: bb:92:99:2c:8e:78:e4:9f:78:ac:6a:50:ad:4e:5a:37:51:eb: 04:5d:13:39:cf:c5:8f:92:72:cb:fe:a3:be:13:96:88:68:34: 00:51:c8:27:ce:32:f9:32:6f:d1:eb:6c:8b:3d:4f:27:e1:fc: 2f:46:b8:15:02:e1:e5:0c:60:42:4c:7d:4a:ac:2f:8d:1f:8d: ec:39:7a:cf:4a:82:c0:cd:b5:10:0c:fc:e1:3d:e7:2b:2d:75: 82:2e:3d:b1:ac:0c:13:d4:cc:3c:5a:c6:97:15:61:13:c1:9c: 16:93:ac:74:90:9f:f3:4e:5a:fa:82:85:c4:92:6f:18:a2:e2: c8:94:2f:6a:96:62:15:c9:5e:52:8d:cd:5b:83:95:31:ab:b2: 83:69:10:4e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYwOEQxMTAvBgNVBAUTKEQyRDgwODA0OUE0NkVENzk3QzIxRjlGNjAyNTIzNDU2 NDYzMUIzRjkwHhcNMjUwMzMxMTc0NjI1WhcNMjUwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhZDRmMS03ZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAPPHfedcBJc8U/vindI0KwB1WJgv9An761GCxhN+m3dXMQHo+DoS8AL3tmW zXUFp32RvmZs9qwr5iNPxLfdOuP4BAxlnsgaJVb5iTjUCnrX2PcU0Q6v+skP3Wlf Uqj4Z2u1m4IIajvtIFN562BlZdJWEtRsWCsQTb5dLwf+vWYYcdG71afZEixPKzbC 6hcBeQLKF7wp4FbyisSr+y75+khv/YXga9RPlTp2oWsD3n+jUNmi6fRaOeilgWbW zRntr0AupDY02+FpjclkuhDzbt/dtoa8hZXODcTOzJQV5bknrwvGJ+1jPoL4jHu8 ebw99vnDG482QBAACOrBnOnotQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI33LIia m+Oo+UHISyx+R+Gtov9aMB8GA1UdIwQYMBaAFNLYCASaRu15fCH59gJSNFZGMbP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjA4RC84MTA3M0EzMDI4 NzcxMUU5OTQyMUM4NENDNEY5QUUwMi8wdGdJQkpwRzdYbDhJZm4yQWxJMFZrWXhz X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB0Z0lCSnBHN1hsOElmbjJBbEkwVmtZeHNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTYwOEQvODEwNzNBMzAyODc3MTFFOTk0MjFDODRDQzRGOUFFMDIvMUVENUIxM0Uz MEMxMTFFQ0JCNUE0MTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnhiYwDQYJKoZIhvcNAQELBQADggEBAMCjc08zRnd0plcY H/FjYp5rf8QSM84bgnobxTp7x1cBV2TU2dx67cCL/qI654nbA4ZAzuVohjPlFE6G QVm4OPbaL4+sfLhGW5jHzbUphC73gRBKWOHtDLh8QaSBopMKDnym4iAWzGrIXQgw +ruSmSyOeOSfeKxqUK1OWjdR6wRdEznPxY+Scsv+o74TlohoNABRyCfOMvkyb9Hr bIs9Tyfh/C9GuBUC4eUMYEJMfUqsL40fjew5es9KgsDNtRAM/OE95ystdYIuPbGs DBPUzDxaxpcVYRPBnBaTrHSQn/NOWvqChcSSbxii4siUL2qWYhXJXlKNzVuDlTGr soNpEE4= -----END CERTIFICATE-----Generated at Sat Apr 5 07:16:44 2025 by rpki-client