$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/AC3162143ED611EFA3523A6BC4F9AE02.roa File: AC3162143ED611EFA3523A6BC4F9AE02.roa (raw, json) Hash identifier: 68fiXxDRInABMZSnArOz5po2YH5/5mLBsvEHG5ANoNk= Subject key identifier: 70:0B:D9:59:AA:CE:FB:BD:C8:04:36:E5:E3:66:36:36:CF:7C:50:83 Certificate issuer: /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735 Certificate serial: 0542 Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/AC3162143ED611EFA3523A6BC4F9AE02.roa Signing time: Sat 17 May 2025 00:14:38 +0000 ROA not before: Sat 17 May 2025 00:14:38 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 209242 IP address blocks: 103.116.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1346 (0x542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735 Validity Not Before: May 17 00:14:38 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6827d4ee-ed65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:62:25:2f:3f:61:81:16:4d:90:53:08:12:40: 54:95:1b:fc:6f:1d:da:19:25:85:59:69:18:b3:ae: ad:72:ef:a7:e5:ae:65:ae:47:88:7e:09:71:97:31: e9:a3:b1:df:01:f5:07:f5:35:3b:16:9d:d6:92:1c: 76:97:47:b0:bf:b4:d1:45:99:96:98:ce:45:61:fa: 40:74:b3:95:78:f3:71:5f:42:26:6e:56:aa:c7:50: 7f:3d:ca:2e:3f:00:5c:27:ae:55:ad:3e:14:95:17: de:d4:2a:fa:20:b2:66:58:b7:06:66:d5:a6:a4:60: f4:10:b5:d4:e2:a1:c4:8f:87:99:4a:fa:4d:63:16: 8e:15:f9:9b:f4:1b:d9:d4:1a:db:98:36:9c:b0:d1: 89:0f:cb:02:80:23:61:e8:63:dc:77:d8:95:b8:c4: 0e:57:ff:c5:3a:77:5c:d7:44:4f:af:cf:31:32:47: e9:53:b3:d1:ff:e4:ac:d7:73:72:ab:17:0f:01:b5: 86:e2:7e:01:0f:ac:54:33:63:f8:94:c1:cb:64:a9: 23:0b:51:3d:3a:35:89:12:bd:fe:58:47:3d:9d:2f: 16:0f:37:7d:39:45:18:fe:6e:c2:66:6b:fb:0e:46: fc:44:2e:e2:2e:e4:8e:30:c6:2d:d1:47:3a:f2:4a: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0B:D9:59:AA:CE:FB:BD:C8:04:36:E5:E3:66:36:36:CF:7C:50:83 X509v3 Authority Key Identifier: keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/AC3162143ED611EFA3523A6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.7.0/24 Signature Algorithm: sha256WithRSAEncryption 03:48:15:2d:78:18:41:29:31:b3:5d:ec:3d:31:ae:3e:a8:53: df:8b:89:cf:cf:18:83:8b:0d:d8:4a:5d:a4:54:7c:f5:af:39: 64:29:e6:4b:30:86:2d:28:c6:3f:82:57:49:c5:af:1a:57:84: 83:27:19:89:4e:15:54:de:b5:ea:dd:6e:3e:59:6c:9a:e4:02: c9:cf:6c:16:80:cd:07:3b:62:45:69:50:8e:98:ae:f5:94:31: 1b:b8:71:69:3c:4f:3a:a3:c2:ca:8e:5e:52:a3:d4:80:a7:30: 4d:b8:6f:68:d0:a2:79:a0:61:80:ef:12:17:a7:55:2a:18:0f: 6f:12:a5:d5:77:a7:e8:31:e2:a4:2c:84:f8:9c:51:41:1d:e1: 79:be:12:bf:d3:1b:bd:f4:c7:3b:d8:d9:b5:8c:10:8b:06:e5: 7b:cf:47:34:7a:71:f9:ba:08:2e:ca:9d:bc:a2:dd:02:4c:ba: 32:50:f7:65:ae:ea:b9:bd:8f:1d:23:f5:01:0d:89:7d:96:41: 6e:cd:a7:4f:a5:dc:37:fe:c8:e9:59:9d:fd:2c:c1:82:36:f3: 01:85:73:be:2a:88:8f:95:cb:84:0f:a0:87:46:84:f7:7c:b1: 76:d5:8f:99:de:96:67:c4:a8:78:98:45:1c:a1:f0:e7:19:fe: 4c:28:88:3c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwMzkxMTAvBgNVBAUTKDM3NEQ5QTJDODMyRjIzNDRCREQ4Q0E0MDYzMTE3OTNG NjZENEM3MzUwHhcNMjUwNTE3MDAxNDM4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI3ZDRlZS1lZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WIlLz9hgRZNkFMIEkBUlRv8bx3aGSWFWWkYs66tcu+n5a5lrkeIfglxlzHp o7HfAfUH9TU7Fp3Wkhx2l0ewv7TRRZmWmM5FYfpAdLOVePNxX0Imblaqx1B/Pcou PwBcJ65VrT4UlRfe1Cr6ILJmWLcGZtWmpGD0ELXU4qHEj4eZSvpNYxaOFfmb9BvZ 1BrbmDacsNGJD8sCgCNh6GPcd9iVuMQOV//FOndc10RPr88xMkfpU7PR/+Ss13Ny qxcPAbWG4n4BD6xUM2P4lMHLZKkjC1E9OjWJEr3+WEc9nS8WDzd9OUUY/m7CZmv7 Dkb8RC7iLuSOMMYt0Uc68koWbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHAL2Vmq zvu9yAQ25eNmNjbPfFCDMB8GA1UdIwQYMBaAFDdNmiyDLyNEvdjKQGMReT9m1Mc1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAzOS9GQjcwREY2QUZG MjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkwUzkyTXBBWXhGNVAyYlV4 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04wMmFMSU12STBTOTJNcEFZeEY1UDJiVXh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjIwMzkvRkI3MERGNkFGRjIwMTFFQjgxNjBBQzUxQzRGOUFFMDIvQUMzMTYyMTQz RUQ2MTFFRkEzNTIzQTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABndAcwDQYJKoZIhvcNAQELBQADggEBAANIFS14GEEpMbNd 7D0xrj6oU9+Lic/PGIOLDdhKXaRUfPWvOWQp5kswhi0oxj+CV0nFrxpXhIMnGYlO FVTeterdbj5ZbJrkAsnPbBaAzQc7YkVpUI6YrvWUMRu4cWk8TzqjwsqOXlKj1ICn ME24b2jQonmgYYDvEhenVSoYD28SpdV3p+gx4qQshPicUUEd4Xm+Er/TG730xzvY 2bWMEIsG5XvPRzR6cfm6CC7Knbyi3QJMujJQ92Wu6rm9jx0j9QENiX2WQW7Np0+l 3Df+yOlZnf0swYI28wGFc74qiI+Vy4QPoIdGhPd8sXbVj5nelmfEqHiYRRyh8OcZ /kwoiDw= -----END CERTIFICATE-----Generated at Wed Jun 4 00:13:20 2025 by rpki-client