$ rpki-client -vvf rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa File: 31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa (raw, json) Hash identifier: uuBWBt4HEhDV8CjrNo2I7XyyiDQqCjSA8yzYrddp5CM= Subject key identifier: 91:9E:74:F8:1E:72:06:8F:F9:7B:1C:2B:3F:B6:9E:31:E5:C5:01:54 Certificate issuer: /CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Certificate serial: 0732 Authority key identifier: 0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa Signing time: Sat 31 May 2025 22:29:53 +0000 ROA not before: Sat 31 May 2025 22:29:53 +0000 ROA not after: Wed 01 Oct 2025 00:00:00 +0000 asID: 141457 IP address blocks: 103.159.236.0/23 maxlen: 23 2406:ddc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1842 (0x732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123193, serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Validity Not Before: May 31 22:29:53 2025 GMT Not After : Oct 1 00:00:00 2025 GMT Subject: CN=683b82e0-1fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ab:d5:8c:c0:b7:4f:c8:65:ba:b4:54:86:9e: a5:a8:91:4b:dd:fd:e8:4d:c5:2b:1e:1b:09:c2:b6: 88:ea:34:54:da:16:1e:a0:2d:07:ae:c9:29:6c:a6: fe:39:a4:93:2e:62:01:21:21:b6:8c:9b:7d:d8:06: 55:d8:89:ba:62:fb:30:0b:5d:55:3a:5f:00:62:a1: 8d:b5:a3:ba:a6:03:f7:c4:5f:5a:81:ac:ea:54:61: 8b:8c:27:c1:9f:38:c1:49:f6:6a:ac:3d:64:98:77: bb:7a:89:e2:da:c9:1c:15:9c:2f:53:90:e3:d1:56: e1:29:a5:f4:34:42:9b:8a:cd:79:b9:e2:82:73:43: 6f:4a:d2:16:c3:57:65:5d:f0:30:0e:1e:27:3d:9b: 6a:d7:03:b9:70:34:1c:64:cb:8e:49:48:72:54:b9: 50:7b:48:1c:e6:c5:ea:bc:78:9c:f9:da:8d:cf:5a: 0b:a5:45:6d:e2:09:94:25:70:d8:58:3b:a1:1f:9b: 2a:0d:48:e2:67:3f:02:cd:d0:8e:80:4a:91:96:32: 00:41:40:0d:cb:0a:7c:cf:57:2b:ca:c5:0f:ae:be: d1:2d:d3:51:bb:75:2f:5c:e5:7c:6f:0d:2b:4e:d4: b9:48:aa:0c:ca:ec:a3:73:72:ac:ef:26:d4:43:f2: 6c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9E:74:F8:1E:72:06:8F:F9:7B:1C:2B:3F:B6:9E:31:E5:C5:01:54 X509v3 Authority Key Identifier: keyid:0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.236.0/23 IPv6: 2406:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption 46:eb:8e:02:fe:98:13:46:ba:ff:19:bb:75:a9:6f:ba:6a:77: 58:f8:16:bf:9f:0d:9c:9e:7e:c0:d1:f5:4e:16:36:a3:68:12: 5e:a6:18:db:16:73:d4:9e:2a:49:a8:55:28:1f:40:25:15:81: f4:d0:df:a1:4d:13:6f:05:5a:ff:8b:b4:96:b3:8f:ec:34:51: 5f:fa:0f:fd:7c:c3:72:10:72:0a:87:d4:32:ae:e9:fc:6c:93: b4:9a:70:11:08:25:4c:2a:31:42:df:27:05:5b:8a:9a:b0:f6: 79:b6:ff:23:0f:d8:8a:9f:b4:29:97:75:c0:09:34:f8:33:5e: d7:92:03:89:6f:fc:6f:51:cb:86:da:4c:1d:5b:07:16:57:4f: 82:e4:d6:44:95:f8:3b:f7:2a:de:98:a5:6a:44:3f:c1:ff:c3: 37:6e:b7:47:de:ab:9f:b2:b7:2e:73:08:f4:76:d0:c4:5f:4f: f0:23:57:a5:c2:1d:af:36:1d:e8:5c:4b:16:fd:9b:2f:88:34: 7b:3d:ba:5c:ae:b6:b9:d9:e0:33:cc:21:8b:5f:4c:ff:e1:8d: df:d5:59:07:60:ee:30:af:bf:47:68:4e:eb:e7:41:62:cd:0d: 5a:07:ce:89:44:40:0d:03:a4:de:8c:7a:c6:0d:6d:67:69:8b: 60:79:7d:c3 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMxOTMxMTAvBgNVBAUTKDBCQkNGREU3Njg2NzVCOTk0RjJBMjMxMTRDMzUxNDEy MjAxNTU1QjgwHhcNMjUwNTMxMjIyOTUzWhcNMjUxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNiODJlMC0xZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qvVjMC3T8hlurRUhp6lqJFL3f3oTcUrHhsJwraI6jRU2hYeoC0HrskpbKb+ OaSTLmIBISG2jJt92AZV2Im6YvswC11VOl8AYqGNtaO6pgP3xF9agazqVGGLjCfB nzjBSfZqrD1kmHe7eoni2skcFZwvU5Dj0VbhKaX0NEKbis15ueKCc0NvStIWw1dl XfAwDh4nPZtq1wO5cDQcZMuOSUhyVLlQe0gc5sXqvHic+dqNz1oLpUVt4gmUJXDY WDuhH5sqDUjiZz8CzdCOgEqRljIAQUANywp8z1crysUPrr7RLdNRu3UvXOV8bw0r TtS5SKoMyuyjc3Ks7ybUQ/Js8wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJGedPge cgaP+XscKz+2njHlxQFUMB8GA1UdIwQYMBaAFAu8/edoZ1uZTyojEUw1FBIgFVW4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE5My9DQThBNEIzQzM5 RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1bFBLaU1SVERVVUVpQVZW YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3ejk1MmhuVzVsUEtpTVJURFVVRWlBVlZiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjMxOTMvQ0E4QTRCM0MzOUQ5MTFFQkE3ODFGQTU3QzRGOUFFMDIvMzFCRjBDNDhE OERFMTFFREJBQ0VFRTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnn+wwDQQCAAIwBwMFACQG3cAwDQYJKoZIhvcNAQELBQAD ggEBAEbrjgL+mBNGuv8Zu3Wpb7pqd1j4Fr+fDZyefsDR9U4WNqNoEl6mGNsWc9Se KkmoVSgfQCUVgfTQ36FNE28FWv+LtJazj+w0UV/6D/18w3IQcgqH1DKu6fxsk7Sa cBEIJUwqMULfJwVbipqw9nm2/yMP2IqftCmXdcAJNPgzXteSA4lv/G9Ry4baTB1b BxZXT4Lk1kSV+Dv3Kt6YpWpEP8H/wzdut0feq5+yty5zCPR20MRfT/AjV6XCHa82 HehcSxb9my+INHs9ulyutrnZ4DPMIYtfTP/hjd/VWQdg7jCvv0doTuvnQWLNDVoH zolEQA0DpN6MesYNbWdpi2B5fcM= -----END CERTIFICATE-----Generated at Mon Jun 2 07:11:32 2025 by rpki-client