$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/803C622E9B9111EDBC921164C4F9AE02.roa File: 803C622E9B9111EDBC921164C4F9AE02.roa (raw, json) Hash identifier: cOk9WkbMtekpbvbpWoDS8UUpnz2Yuo9L3yfei4T7i14= Subject key identifier: E5:4E:ED:9A:59:71:F9:A7:D8:FE:8D:AD:05:01:01:A5:0F:0B:06:53 Certificate issuer: /CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A Certificate serial: 09C1 Authority key identifier: 51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/803C622E9B9111EDBC921164C4F9AE02.roa Signing time: Sat 08 Jun 2024 21:17:24 +0000 ROA not before: Sat 08 Jun 2024 21:17:24 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 58598 IP address blocks: 103.9.88.0/22 maxlen: 22 103.9.88.0/24 maxlen: 24 103.9.89.0/24 maxlen: 24 103.9.90.0/24 maxlen: 24 103.9.91.0/24 maxlen: 24 2403:d700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 19:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2497 (0x9c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EAD0, serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A Validity Not Before: Jun 8 21:17:24 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6664ca64-9da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:91:71:cd:dc:b7:55:88:b2:30:70:4e:80:7c: 00:e9:c3:c0:b3:02:81:67:5b:83:45:70:25:d2:2d: 50:19:d4:17:1d:35:f9:37:af:70:f8:79:fb:ff:56: 76:48:33:e0:26:b5:3e:08:a1:a7:ac:61:ef:2b:97: 7c:6c:50:65:ff:91:d5:73:38:ff:7d:1f:34:9d:35: dc:4d:1b:34:66:43:f2:6a:21:ba:06:20:28:fe:d2: 76:37:34:90:12:88:15:c4:60:80:f5:72:3b:16:e5: 1e:f5:9d:72:30:33:e6:87:23:79:c5:a1:ef:e2:68: 11:82:6e:8a:f0:65:95:44:74:d9:f8:09:2b:33:45: d4:0a:19:ef:00:b1:07:ba:b9:f0:b1:8a:76:00:e5: b2:4a:9c:4c:cb:7d:f0:b5:49:8e:5f:68:f0:cc:55: 3f:58:25:f8:0b:4f:e0:5b:65:9e:f6:ba:e1:05:65: f8:07:be:84:6f:d1:3d:98:33:a5:82:ca:cf:7b:69: d5:aa:3a:f9:a1:5b:83:db:89:2a:04:c6:bb:2c:5b: 17:06:da:13:eb:a1:39:4d:18:17:89:90:61:bd:cb: 1b:fb:aa:6d:27:da:db:10:4b:54:fe:49:f4:ad:50: 48:2f:d8:e5:8d:b1:3d:e9:da:0f:f3:b1:9b:b8:37: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4E:ED:9A:59:71:F9:A7:D8:FE:8D:AD:05:01:01:A5:0F:0B:06:53 X509v3 Authority Key Identifier: keyid:51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/803C622E9B9111EDBC921164C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.9.88.0/22 IPv6: 2403:d700::/32 Signature Algorithm: sha256WithRSAEncryption b4:5b:0d:3c:6d:67:e6:3c:28:41:ad:11:42:e8:00:ec:53:d0: 1f:52:8e:5e:dd:f9:07:d6:77:1c:b8:91:8f:01:50:e9:5f:36: 32:85:74:55:e0:09:5a:f3:73:c1:ce:d2:b2:14:64:e8:f7:d6: ef:a9:6a:fe:64:28:be:0e:65:1d:39:d3:9d:85:2a:f2:35:69: 5b:31:65:5d:1e:f8:6d:34:da:2c:44:dc:66:4b:be:66:0d:1c: c2:d3:1e:9b:8b:95:07:70:14:0a:a0:d5:d3:53:fe:18:c6:9c: 78:a1:92:2c:67:01:fd:a3:24:23:95:d3:bd:63:b8:95:7e:66: 72:5d:67:97:07:22:e6:d3:eb:9a:6c:60:e1:58:5b:01:77:ed: 69:ca:eb:eb:dc:6d:42:03:31:de:db:f6:38:6e:bf:a5:2c:17: d9:43:54:7b:ac:ed:da:c8:0d:a6:be:c7:b7:22:20:40:a7:2b: f9:1a:df:8a:5d:85:b1:e6:b5:5e:ab:bd:54:ba:27:b7:8b:92: c7:73:da:4f:57:cb:52:a8:c8:86:50:c5:23:f8:aa:cd:19:54: dc:45:ef:26:6b:46:b2:b7:55:5c:ee:fa:43:f9:b4:a1:2b:19: 28:d7:5f:5b:fe:4b:f8:cc:1f:6c:ce:f0:d8:85:1c:12:d6:92: 02:a2:1d:56 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBRDAxMTAvBgNVBAUTKDUxNjI5QkVCODBGQkRGOTRFRDlBNjQzRkQ3OEM4MURB NzNCNkJBMUEwHhcNMjQwNjA4MjExNzI0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjY0Y2E2NC05ZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JFxzdy3VYiyMHBOgHwA6cPAswKBZ1uDRXAl0i1QGdQXHTX5N69w+Hn7/1Z2 SDPgJrU+CKGnrGHvK5d8bFBl/5HVczj/fR80nTXcTRs0ZkPyaiG6BiAo/tJ2NzSQ EogVxGCA9XI7FuUe9Z1yMDPmhyN5xaHv4mgRgm6K8GWVRHTZ+AkrM0XUChnvALEH urnwsYp2AOWySpxMy33wtUmOX2jwzFU/WCX4C0/gW2We9rrhBWX4B76Eb9E9mDOl gsrPe2nVqjr5oVuD24kqBMa7LFsXBtoT66E5TRgXiZBhvcsb+6ptJ9rbEEtU/kn0 rVBIL9jljbE96doP87GbuDcmqQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOVO7ZpZ cfmn2P6NrQUBAaUPCwZTMB8GA1UdIwQYMBaAFFFim+uA+9+U7ZpkP9eMgdpztroa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUFEMC8yMUZBNUIwNjYx RUUxMUVBOTI1RDYyMjVDNEY5QUUwMi9VV0tiNjRENzM1VHRtbVFfMTR5QjJuTzJ1 aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VXS2I2NEQ3MzVUdG1tUV8xNHlCMm5PMnVoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVBRDAvMjFGQTVCMDY2MUVFMTFFQTkyNUQ2MjI1QzRGOUFFMDIvODAzQzYyMkU5 QjkxMTFFREJDOTIxMTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnCVgwDQQCAAIwBwMFACQD1wAwDQYJKoZIhvcNAQELBQAD ggEBALRbDTxtZ+Y8KEGtEULoAOxT0B9Sjl7d+QfWdxy4kY8BUOlfNjKFdFXgCVrz c8HO0rIUZOj31u+pav5kKL4OZR05052FKvI1aVsxZV0e+G002ixE3GZLvmYNHMLT HpuLlQdwFAqg1dNT/hjGnHihkixnAf2jJCOV071juJV+ZnJdZ5cHIubT65psYOFY WwF37WnK6+vcbUIDMd7b9jhuv6UsF9lDVHus7drIDaa+x7ciIECnK/ka34pdhbHm tV6rvVS6J7eLksdz2k9Xy1KoyIZQxSP4qs0ZVNxF7yZrRrK3VVzu+kP5tKErGSjX X1v+S/jMH2zO8NiFHBLWkgKiHVY= -----END CERTIFICATE-----Generated at Thu Jun 12 13:20:09 2025 by rpki-client