$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/26415376FF1F11EFA2518D1DC4F9AE02.roa File: 26415376FF1F11EFA2518D1DC4F9AE02.roa (raw, json) Hash identifier: gQX7OSTub4TsycRsSPtY1SumNIgxN2m1zvCdq+ryKy8= Subject key identifier: 92:B0:8E:20:F9:97:E1:A2:85:90:1E:07:C4:A6:49:D1:DE:50:7B:3A Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Certificate serial: 04 Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/26415376FF1F11EFA2518D1DC4F9AE02.roa Signing time: Wed 12 Mar 2025 08:51:12 +0000 ROA not before: Wed 12 Mar 2025 08:51:12 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 138590 IP address blocks: 103.134.0.0/22 maxlen: 24 2404:5840:1::/48 maxlen: 48 2404:5840:2::/48 maxlen: 48 2404:5840:3::/48 maxlen: 48 2404:5840:4::/48 maxlen: 48 2404:5840:5::/48 maxlen: 48 2404:5840:6::/48 maxlen: 48 2404:5840:7::/48 maxlen: 48 2404:5840:8::/48 maxlen: 48 2404:5840:12::/48 maxlen: 48 2404:5840:13::/48 maxlen: 48 2404:5840:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197488 Validity Not Before: Mar 12 08:51:12 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67d14b00-ccce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:01:30:e7:10:7e:13:ee:e3:e2:d5:51:fa: 3f:02:82:d8:38:4b:2f:16:7c:47:73:76:8f:c5:c4: cc:c3:66:d5:25:4d:9c:81:4f:ba:a1:73:5d:b1:dc: 97:2d:e2:d2:52:79:a2:b0:70:9f:1c:27:88:7f:2a: 2b:98:2d:ed:24:36:8a:61:cb:e6:d2:9c:fc:61:ea: df:08:36:65:2c:48:b0:cf:9c:fb:6e:c2:d9:46:4d: 96:5f:9c:ca:a7:03:57:4d:32:f1:0e:37:9d:16:1b: cf:6a:26:00:a3:eb:1e:c3:da:29:f6:96:ed:6c:eb: 8f:62:fa:3f:0d:56:aa:18:a8:87:bf:d5:7d:85:1d: 04:40:97:9f:21:f6:02:bc:07:0f:f7:01:8c:62:69: a0:c2:42:ca:bf:22:1c:f0:b9:36:e0:15:07:41:0c: eb:50:d6:0a:a3:cc:84:7b:03:b1:3d:12:1e:e1:a3: f2:09:7b:d7:00:5d:74:1b:a4:12:d5:50:fd:82:35: 56:6b:2d:8c:7f:bf:58:32:ec:c1:b5:d4:97:cf:cf: 02:4d:03:81:2c:6a:4c:6d:fd:82:5d:59:fb:bc:88: f5:7e:86:90:57:3f:93:8a:d2:c8:d0:0a:0e:50:59: 70:23:31:3b:1d:75:03:40:00:69:10:2c:8a:3e:0f: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B0:8E:20:F9:97:E1:A2:85:90:1E:07:C4:A6:49:D1:DE:50:7B:3A X509v3 Authority Key Identifier: keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/26415376FF1F11EFA2518D1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.0.0/22 IPv6: 2404:5840:1::-2404:5840:8:ffff:ffff:ffff:ffff:ffff 2404:5840:12::-2404:5840:14:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6a:7f:36:f6:93:22:17:8b:a5:9b:33:af:e4:29:cc:30:f3:59: 75:ef:ed:44:e9:fc:6f:da:32:d3:e6:fb:b7:58:62:eb:74:ab: fb:3e:36:cb:94:d6:c8:98:c8:66:a5:23:2f:81:b7:7c:99:1f: a6:23:0d:55:94:a6:5f:b1:77:a4:34:ed:97:54:90:73:23:19: 93:1c:59:07:84:52:ec:20:e5:b1:84:fe:a9:66:ec:ed:37:44: c2:ef:ed:fd:c0:40:1f:06:58:47:13:a6:90:c7:64:ec:43:71: d6:7d:d5:74:b1:fd:c7:04:2d:78:02:2d:bd:9d:c4:4b:07:8f: 79:20:02:2d:1e:22:d6:7c:3e:29:6f:30:2b:db:c3:60:72:2d: 44:c3:2e:58:4f:ab:11:4d:1d:b8:e8:5a:e6:d6:02:66:14:af: 21:79:dc:b9:4d:c9:30:7a:0b:f1:c2:05:c9:74:ca:77:14:68: 25:89:75:f3:1f:42:a8:39:9a:f6:31:f2:a0:03:9b:02:86:fe: a9:6d:c3:22:f3:92:8a:53:a9:76:cb:a2:1b:f6:40:ca:15:b6: a6:74:96:b6:1f:29:b0:28:2d:f4:f1:07:16:2d:b1:6e:cd:c0: a9:a3:ba:15:35:e0:1b:a7:c2:64:51:ab:57:80:23:92:23:00: 42:ca:92:a8 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzQ4ODExMC8GA1UEBRMoQ0Q0MURCQzE4OTc4REQzODRENEY1QzhGOEY5NkI0MEU3 MURFRTY0MTAeFw0yNTAzMTIwODUxMTJaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZDE0YjAwLWNjY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx4gEw5xB+E+7j4tVR+j8Cgtg4Sy8WfEdzdo/FxMzDZtUlTZyBT7qhc12x3Jct 4tJSeaKwcJ8cJ4h/KiuYLe0kNophy+bSnPxh6t8INmUsSLDPnPtuwtlGTZZfnMqn A1dNMvEON50WG89qJgCj6x7D2in2lu1s649i+j8NVqoYqIe/1X2FHQRAl58h9gK8 Bw/3AYxiaaDCQsq/IhzwuTbgFQdBDOtQ1gqjzIR7A7E9Eh7ho/IJe9cAXXQbpBLV UP2CNVZrLYx/v1gy7MG11JfPzwJNA4Esakxt/YJdWfu8iPV+hpBXP5OK0sjQCg5Q WXAjMTsddQNAAGkQLIo+D3KvAgMBAAGjggLFMIICwTAdBgNVHQ4EFgQUkrCOIPmX 4aKFkB4HxKZJ0d5QezowHwYDVR0jBBgwFoAUzUHbwYl43ThNT1yPj5a0DnHe5kEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NDg4Lzc5MDNBQkJDRkYx MTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1RoTlQxeVBqNWEwRG5IZTVr RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelVIYndZbDQzVGhOVDF5UGo1YTBEbkhlNWtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzQ4OC83OTAzQUJCQ0ZGMTExMUVGQTE4RUI5NjBDNEY5QUUwMi8yNjQxNTM3NkZG MUYxMUVGQTI1MThEMURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBPBggrBgEFBQcBBwEB/wRA MD4wDAQCAAEwBgMEAmeGADAuBAIAAjAoMBIDBwAkBFhAAAEDBwAkBFhAAAgwEgMH ASQEWEAAEgMHACQEWEAAFDANBgkqhkiG9w0BAQsFAAOCAQEAan829pMiF4ulmzOv 5CnMMPNZde/tROn8b9oy0+b7t1hi63Sr+z42y5TWyJjIZqUjL4G3fJkfpiMNVZSm X7F3pDTtl1SQcyMZkxxZB4RS7CDlsYT+qWbs7TdEwu/t/cBAHwZYRxOmkMdk7ENx 1n3VdLH9xwQteAItvZ3ESwePeSACLR4i1nw+KW8wK9vDYHItRMMuWE+rEU0duOha 5tYCZhSvIXncuU3JMHoL8cIFyXTKdxRoJYl18x9CqDma9jHyoAObAob+qW3DIvOS ilOpdsuiG/ZAyhW2pnSWth8psCgt9PEHFi2xbs3AqaO6FTXgG6fCZFGrV4AjkiMA QsqSqA== -----END CERTIFICATE-----Generated at Sat Apr 5 06:14:02 2025 by rpki-client