$ rpki-client -vvf rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/DDE8240A36F611F097430C68C4F9AE02.roa File: DDE8240A36F611F097430C68C4F9AE02.roa (raw, json) Hash identifier: TpjwMD+dqJixBuqgxvVLCVAc6jIgyX31yP3mwyaBDDU= Subject key identifier: F7:E2:BC:88:EE:1F:7C:25:1A:1B:38:FD:D0:51:A8:CA:72:18:DE:3C Certificate issuer: /CN=A9119F89/serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820 Certificate serial: 0694 Authority key identifier: 55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/DDE8240A36F611F097430C68C4F9AE02.roa Signing time: Thu 22 May 2025 10:23:56 +0000 ROA not before: Thu 22 May 2025 10:23:56 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 51847 IP address blocks: 103.137.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 22:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119F89, serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820 Validity Not Before: May 22 10:23:56 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682efb3c-e128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d2:75:e8:cb:9a:cf:78:61:74:9a:14:91:33: 89:c6:41:94:61:cb:11:62:aa:46:e9:9b:2f:e4:ed: 6b:43:43:01:76:7c:df:a2:83:df:60:f4:99:56:72: a5:0a:f0:a0:ae:6e:99:53:0a:9f:61:9c:44:99:e6: 0c:10:8d:db:2e:73:52:2b:57:59:0e:cd:75:70:26: 73:1d:37:0b:c0:59:05:74:90:c5:96:1e:73:90:43: b8:4a:a7:9f:6b:29:39:a6:68:e1:14:ec:77:19:2e: 92:ab:ce:c3:8e:fb:2f:d3:83:29:4c:d1:56:8f:a1: 57:82:8f:6b:8a:58:f0:5e:13:8f:64:e8:c4:0e:60: 64:63:95:12:dd:98:08:f7:f4:32:41:46:fd:85:fe: bf:2c:03:58:b4:b1:4a:bf:a7:51:42:38:3c:cd:f9: b0:89:f2:91:8a:43:10:25:66:13:c6:73:a6:41:e6: 58:0a:62:a0:46:b4:39:cd:48:87:2f:49:dc:b5:96: 95:9e:c2:0c:d6:e1:29:79:0b:a6:cd:9f:38:cc:7b: 05:7d:91:1f:a8:5e:c9:c4:e7:d8:5b:48:9d:3c:db: 7d:74:62:86:bd:92:78:6f:d7:c7:d3:c5:dd:03:b7: 9c:b6:b1:13:5b:29:0a:9c:06:b1:28:da:9a:57:f3: b7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E2:BC:88:EE:1F:7C:25:1A:1B:38:FD:D0:51:A8:CA:72:18:DE:3C X509v3 Authority Key Identifier: keyid:55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/DDE8240A36F611F097430C68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.215.0/24 Signature Algorithm: sha256WithRSAEncryption 17:d7:64:ba:dd:48:c6:67:60:38:f7:20:34:4a:fc:de:19:07: e0:63:6d:c7:8c:0e:1b:69:91:54:23:45:f8:7e:a6:a7:8d:d8: e3:ac:72:c8:1a:7e:30:10:9f:91:9b:d7:aa:0a:b5:69:c5:ba: 87:bf:fe:96:41:f1:e3:46:67:62:40:42:7e:c0:f7:26:90:ee: 90:81:08:f1:4c:dd:dd:df:44:0d:a3:76:4e:83:6e:53:b1:82: fd:a2:78:56:8d:74:d8:9d:9b:1d:f6:18:9a:06:35:85:0a:e4: f2:55:62:04:ce:bf:15:24:56:ff:0d:6c:d8:cf:1c:4a:eb:a2: 79:11:70:3a:68:1e:88:1c:a1:23:68:a8:2d:50:30:84:ca:18: f2:54:dd:50:26:6c:ed:d5:e7:bb:2a:ed:b5:03:8a:08:6a:2e: 85:5d:d0:45:da:c1:93:e8:87:c0:9c:8e:58:07:8c:64:19:29: 48:7e:e1:b0:81:25:73:9e:34:66:b7:18:0f:6f:df:8a:a1:69: d0:94:a4:29:af:e4:13:2b:f2:c9:5c:52:10:11:0a:6d:9f:36: 2e:1e:b7:4d:99:56:ff:e8:52:38:27:17:5a:b9:a1:32:ef:72: fd:86:4c:63:08:39:a2:5c:e6:b5:8f:7e:87:4f:48:dc:50:10: fb:21:a8:eb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlGODkxMTAvBgNVBAUTKDU1MDg4QTMxNUJDQjUwOThCRUVGNjY1QUE5Q0JERkQz MkEyMDU4MjAwHhcNMjUwNTIyMTAyMzU2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJlZmIzYy1lMTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tJ16Muaz3hhdJoUkTOJxkGUYcsRYqpG6Zsv5O1rQ0MBdnzfooPfYPSZVnKl CvCgrm6ZUwqfYZxEmeYMEI3bLnNSK1dZDs11cCZzHTcLwFkFdJDFlh5zkEO4Sqef ayk5pmjhFOx3GS6Sq87Djvsv04MpTNFWj6FXgo9riljwXhOPZOjEDmBkY5US3ZgI 9/QyQUb9hf6/LANYtLFKv6dRQjg8zfmwifKRikMQJWYTxnOmQeZYCmKgRrQ5zUiH L0nctZaVnsIM1uEpeQumzZ84zHsFfZEfqF7JxOfYW0idPNt9dGKGvZJ4b9fH08Xd A7ectrETWykKnAaxKNqaV/O3tQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPfivIju H3wlGhs4/dBRqMpyGN48MB8GA1UdIwQYMBaAFFUIijFby1CYvu9mWqnL39MqIFgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUY4OS9EMzVBQTVBQTdC RTExMUVCOEZGNUY3NTJDNEY5QUUwMi9WUWlLTVZ2TFVKaS03MlphcWN2ZjB5b2dX Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZRaUtNVnZMVUppLTcyWmFxY3ZmMHlvZ1dDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTlGODkvRDM1QUE1QUE3QkUxMTFFQjhGRjVGNzUyQzRGOUFFMDIvRERFODI0MEEz NkY2MTFGMDk3NDMwQzY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnidcwDQYJKoZIhvcNAQELBQADggEBABfXZLrdSMZnYDj3 IDRK/N4ZB+BjbceMDhtpkVQjRfh+pqeN2OOscsgafjAQn5Gb16oKtWnFuoe//pZB 8eNGZ2JAQn7A9yaQ7pCBCPFM3d3fRA2jdk6DblOxgv2ieFaNdNidmx32GJoGNYUK 5PJVYgTOvxUkVv8NbNjPHErronkRcDpoHogcoSNoqC1QMITKGPJU3VAmbO3V57sq 7bUDighqLoVd0EXawZPoh8CcjlgHjGQZKUh+4bCBJXOeNGa3GA9v34qhadCUpCmv 5BMr8slcUhARCm2fNi4et02ZVv/oUjgnF1q5oTLvcv2GTGMIOaJc5rWPfodPSNxQ EPshqOs= -----END CERTIFICATE-----Generated at Thu Jun 5 19:19:31 2025 by rpki-client