$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/4E76D152B51411ECB8632A19C4F9AE02.roa File: 4E76D152B51411ECB8632A19C4F9AE02.roa (raw, json) Hash identifier: Iq1q/5U8Q7NJj1JuDsY8yHtDH6GQIcf5u5P+dqJrsNo= Subject key identifier: 71:0A:7A:8A:79:2F:C3:A4:57:DD:5D:34:89:60:88:F2:50:82:45:A1 Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Certificate serial: 0650 Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/4E76D152B51411ECB8632A19C4F9AE02.roa Signing time: Sat 31 May 2025 23:12:41 +0000 ROA not before: Sat 31 May 2025 23:12:41 +0000 ROA not after: Wed 01 Oct 2025 00:00:00 +0000 asID: 142063 IP address blocks: 103.166.102.0/24 maxlen: 24 103.166.103.0/24 maxlen: 24 2001:df1:b340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 23:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1616 (0x650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Validity Not Before: May 31 23:12:41 2025 GMT Not After : Oct 1 00:00:00 2025 GMT Subject: CN=683b8ce8-87e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3c:cb:df:fd:5e:16:10:e9:cf:25:70:e6:f6: f3:df:4c:7e:ad:a7:6a:88:68:90:6a:d7:59:34:ba: 83:20:ed:19:06:fb:5d:27:cc:e0:e8:87:94:f5:49: 62:b4:64:94:a4:31:58:64:03:55:31:73:f4:e4:aa: cc:32:cc:3f:4e:df:d4:b6:ae:fa:8a:e0:4f:c1:18: 60:5f:13:fd:18:22:a5:45:86:6f:6b:a3:16:51:04: 48:93:ab:4b:ab:17:ac:49:0b:59:72:08:a3:a1:3e: 54:3e:fa:26:53:20:4d:25:1d:f5:63:0a:21:d7:24: c9:ae:4c:fe:af:4c:17:14:61:5e:98:a7:42:c6:ec: d6:02:c9:ed:cf:a8:be:90:cf:92:0c:da:eb:c0:2e: 58:0d:34:a3:5c:58:5e:b9:9f:43:04:24:23:c4:1a: 19:40:b0:31:3b:99:f8:16:38:b2:3c:4c:80:70:c0: d9:95:dd:42:92:91:b4:0e:39:86:6c:50:e7:dc:39: 88:4d:8e:5c:11:41:c2:81:b1:e0:a9:dc:1c:47:c2: 78:ec:0a:84:5b:8e:33:d7:64:91:b3:43:7b:9a:b6: 05:65:fa:b5:e9:91:71:1a:95:6c:08:6c:41:63:43: a8:f9:f9:75:27:04:67:8b:a5:9a:76:7e:ca:46:1a: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0A:7A:8A:79:2F:C3:A4:57:DD:5D:34:89:60:88:F2:50:82:45:A1 X509v3 Authority Key Identifier: keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/4E76D152B51411ECB8632A19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.102.0/23 IPv6: 2001:df1:b340::/48 Signature Algorithm: sha256WithRSAEncryption 1d:66:fe:0b:1c:a3:4b:22:dd:53:0c:2e:50:8b:68:97:5e:ef: 85:c3:5c:32:de:23:b0:c8:bf:ee:18:12:2c:f6:c5:e0:6b:d2: 3b:80:30:5f:29:a5:e2:c5:8f:01:67:8c:d4:58:0a:89:bf:7d: 7a:41:fc:66:40:fb:af:60:96:d2:a1:fc:bf:de:5c:96:cb:4f: 71:81:43:ff:27:3b:d1:41:ad:5b:7e:f3:5c:29:a2:e0:10:e9: b0:ec:0c:d9:74:5d:14:b9:64:aa:a0:6e:62:12:16:9a:60:81: 41:57:ee:3e:90:5f:1b:7c:cc:fa:b7:9d:fe:bc:cf:62:80:7c: 79:1a:7d:e5:c6:07:d4:cb:70:69:2e:c7:a1:01:02:7d:ee:fa: 6a:5e:8f:9d:c5:17:22:b6:a4:56:82:84:aa:75:cd:1b:c6:a1: 2a:cd:dc:5c:4f:36:f4:d6:5b:c1:c3:ba:68:18:6f:3a:7f:58: 20:b7:aa:70:f8:f1:6a:75:45:5e:99:7a:9d:35:64:52:e9:c0: 8b:e5:91:d8:bd:73:9d:5c:13:19:64:de:e1:86:76:0b:7c:5f: 35:9c:67:70:c7:f8:ea:20:c8:83:79:a3:b4:06:eb:08:5d:5a: 5b:78:5b:e1:27:d1:62:7c:c2:3a:4a:6c:3e:f0:58:2e:e5:24: a2:4b:ee:4d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEwNjcxMTAvBgNVBAUTKEIyQzQ3QzJFM0Q0RkM3RURDOTlBRTIwRTQ2QjE3NEIx MEEwMzc1RjYwHhcNMjUwNTMxMjMxMjQxWhcNMjUxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNiOGNlOC04N2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7DzL3/1eFhDpzyVw5vbz30x+radqiGiQatdZNLqDIO0ZBvtdJ8zg6IeU9Uli tGSUpDFYZANVMXP05KrMMsw/Tt/Utq76iuBPwRhgXxP9GCKlRYZva6MWUQRIk6tL qxesSQtZcgijoT5UPvomUyBNJR31Ywoh1yTJrkz+r0wXFGFemKdCxuzWAsntz6i+ kM+SDNrrwC5YDTSjXFheuZ9DBCQjxBoZQLAxO5n4FjiyPEyAcMDZld1CkpG0DjmG bFDn3DmITY5cEUHCgbHgqdwcR8J47AqEW44z12SRs0N7mrYFZfq16ZFxGpVsCGxB Y0Oo+fl1JwRni6Wadn7KRhqfewIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHEKeop5 L8OkV91dNIlgiPJQgkWhMB8GA1UdIwQYMBaAFLLEfC49T8ftyZriDkaxdLEKA3X2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTA2Ny84REQwMEY1NkE2 QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgtM0ptdUlPUnJGMHNRb0Rk ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NzUjhMajFQeC0zSm11SU9SckYwc1FvRGRmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzEwNjcvOEREMDBGNTZBNkFEMTFFQjgyN0ZDMTFDQzRGOUFFMDIvNEU3NkQxNTJC NTE0MTFFQ0I4NjMyQTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnpmYwDwQCAAIwCQMHACABDfGzQDANBgkqhkiG9w0BAQsF AAOCAQEAHWb+CxyjSyLdUwwuUItol17vhcNcMt4jsMi/7hgSLPbF4GvSO4AwXyml 4sWPAWeM1FgKib99ekH8ZkD7r2CW0qH8v95clstPcYFD/yc70UGtW37zXCmi4BDp sOwM2XRdFLlkqqBuYhIWmmCBQVfuPpBfG3zM+red/rzPYoB8eRp95cYH1MtwaS7H oQECfe76al6PncUXIrakVoKEqnXNG8ahKs3cXE829NZbwcO6aBhvOn9YILeqcPjx anVFXpl6nTVkUunAi+WR2L1znVwTGWTe4YZ2C3xfNZxncMf46iDIg3mjtAbrCF1a W3hb4SfRYnzCOkpsPvBYLuUkokvuTQ== -----END CERTIFICATE-----Generated at Mon Jun 2 05:46:22 2025 by rpki-client